last executing test programs: 1m2.560899509s ago: executing program 1 (id=1679): r0 = syz_open_dev$sndpcmc(&(0x7f0000000600), 0x1, 0x80800) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async, rerun: 64) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) (rerun: 64) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0xc) (async, rerun: 32) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) (async, rerun: 32) write$vhost_msg_v2(r1, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) (async) write$vhost_msg_v2(r1, &(0x7f0000000a40)={0x2, 0x0, {&(0x7f00000007c0)=""/82, 0x52, 0x0, 0x3, 0x2}}, 0x48) (async, rerun: 64) write$vhost_msg_v2(r1, &(0x7f00000009c0)={0x2, 0x0, {&(0x7f0000000640)=""/248, 0xf8, 0x0, 0x1, 0x2}}, 0x48) (async, rerun: 64) write$vhost_msg_v2(r1, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/192, 0xffffffdc, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) fsopen(&(0x7f0000000000)='pstore\x00', 0x1) (async) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r4) (async) close(r4) fanotify_mark(r3, 0x400, 0x0, r4, &(0x7f0000000080)='./file0\x00') 1m2.556970733s ago: executing program 1 (id=1681): timer_create(0x6, &(0x7f0000000080)={0x0, 0x1, 0x2}, &(0x7f0000000000)=0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x5, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket(0x10, 0x1, 0x200) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x1, 0x0) r6 = fanotify_init(0x200, 0x2) fanotify_mark(r6, 0x1, 0x1010, r2, 0x0) write$binfmt_script(r5, &(0x7f00000000c0), 0xb) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$DVB_DVR_DMX_DQBUF(0xffffffffffffffff, 0xc0186f40, &(0x7f00000000c0)={0xd86, 0x5f4, 0x9, 0x2, 0x4, 0x5}) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) timer_delete(r0) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1m2.250273876s ago: executing program 1 (id=1685): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x102, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000380)={'gretap0\x00', @random="b655ba4811dd"}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000ffff2cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c0000000000002800128009000100766c616e000000001800028006000100e3008ffa1b9502001c0000001000000008000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/tcp6\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 1m2.249642909s ago: executing program 1 (id=1686): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) fadvise64(r0, 0x56, 0xe, 0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={&(0x7f0000004540)="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", &(0x7f0000003540)="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"}}, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0) read$FUSE(r1, &(0x7f0000000500)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket(0x1e, 0x1, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffff9, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r3], 0xb8}}, 0x2) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x1}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)="d3", 0x1}], 0x1) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_REQBUFS(r6, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000f00)={0xf0f003, 0x5}) dup(r6) mmap(&(0x7f0000589000/0x2000)=nil, 0x2000, 0x3000000, 0x13, r6, 0x2e33a000) landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m1.830629986s ago: executing program 1 (id=1687): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140003e86000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1m1.510973037s ago: executing program 1 (id=1691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000027000100000000000000000001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160aef070000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_int(r4, 0x1, 0x2d, 0x0, &(0x7f00000009c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) dup(r7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r11 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r11, &(0x7f00000005c0)=ANY=[@ANYBLOB='OGAIN \'C'], 0xbb) close(r11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe}, {0xffff, 0xffff}, {0x5}}}, 0x1b}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r10, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000080900020073797a30004000000900010073797a30000000400c86a135127f400df636f11e3a14f9a46e25cdce9c398b4d20afd2a46822b8c0ffda3e4a3a5e111546af6749637eb75cdd4f3ed73cc9cb5292c5b0d2fb90203e98135c0b355d6631ba317deb275faedb0f3064f099cfc2e5679f57bf431e7f0ac46fbecd5da276cac4d3de9b143e4b2cb166dba51e90208b818c6f688e99176c5f495cd4fd0000000000000009"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 1m1.412767309s ago: executing program 32 (id=1691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000027000100000000000000000001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160aef070000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_int(r4, 0x1, 0x2d, 0x0, &(0x7f00000009c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) dup(r7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r11 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r11, &(0x7f00000005c0)=ANY=[@ANYBLOB='OGAIN \'C'], 0xbb) close(r11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe}, {0xffff, 0xffff}, {0x5}}}, 0x1b}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r10, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000080900020073797a30004000000900010073797a30000000400c86a135127f400df636f11e3a14f9a46e25cdce9c398b4d20afd2a46822b8c0ffda3e4a3a5e111546af6749637eb75cdd4f3ed73cc9cb5292c5b0d2fb90203e98135c0b355d6631ba317deb275faedb0f3064f099cfc2e5679f57bf431e7f0ac46fbecd5da276cac4d3de9b143e4b2cb166dba51e90208b818c6f688e99176c5f495cd4fd0000000000000009"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 56.866644309s ago: executing program 4 (id=1692): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x90, r0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x74, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffefffffff, @default, 0x30c0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x9, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x90}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 50.730862176s ago: executing program 4 (id=1692): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x90, r0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x74, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffefffffff, @default, 0x30c0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x9, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x90}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 45.009561915s ago: executing program 4 (id=1692): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x90, r0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x74, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffefffffff, @default, 0x30c0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x9, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x90}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 600.745097ms ago: executing program 0 (id=2631): openat$kvm(0xffffffffffffff9c, 0x0, 0x54240, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) copy_file_range(r1, 0x0, r1, 0x0, 0x7, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x2, 0x7, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x4040000) 517.457641ms ago: executing program 0 (id=2632): r0 = gettid() (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') (async) r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x5, 0x2, 0x1, 0x1}) (async) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) readv(r2, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) (async, rerun: 64) r8 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) accept4(r8, 0x0, 0x0, 0x800) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r9, 0x28, 0x1, &(0x7f0000001480)=0xffffffffffff7fff, 0x8) (async) connect$vsock_stream(r9, &(0x7f0000001bc0)={0x28, 0x0, 0x2711, @hyper}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 514.748751ms ago: executing program 0 (id=2634): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@host, 0x7fff}, @hyper, 0x5, 0x3, 0xff, 0x0, 0xa, 0xea68, 0x8}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') 441.299067ms ago: executing program 2 (id=2636): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x6}) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x80000000000005, 0x5}) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x80, 0x0) read$FUSE(r1, &(0x7f0000001840)={0x2020}, 0x2020) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2a, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r4, 0x504c3}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="03002cbd70000e0000000200000008000100", @ANYRES32=r4, @ANYBLOB="0800020000000000"], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x9}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x14850) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000003ba40a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240000000000800014000000000090001007379075978b7b06457b37a30000000004c000000060a010400000000000000000100000008000b40000000000900010073797a300000000024000480200001808e000100636f6e6e6c696d69740000000c40028008000140fffffffe140000001100010000000000000000000000000a7a0abbe518caa1855dd93e115d"], 0xd4}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa000040000000000c0100002004020000a300000000000000"], 0x0) syz_emit_ethernet(0xfc, &(0x7f0000000600)={@link_local, @local, @void, {@ipv4={0x800, @igmp={{0xc, 0x4, 0x3, 0x3f, 0xee, 0x64, 0x0, 0x4, 0x2, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0x1b, 0x36, [@private=0xa010101, @rand_addr=0x64010102, @empty, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x2f}]}]}}, {0x15, 0x2e, 0x0, @private=0xa010102, "618ab20e2efeddc5051455688a514712a3f9a25f6b4694c68bcb2dd2f91fd7e622ca7d8d6a0830d5b53a177dba9d2ce6698fa99cbb45c5cf0b8506d8ae22ffd1405efbb7cd1a5aaf97f747890481d96cfc2188f45119be6d47b1a70d7b6c1210eb65b44c526c7107910be3d53a1141fd94b3840d4d74758a73d05c864059172fa5018b81628bcbe892bd4c8388d7e17b93b6e140a239a55f82e74f4befd1cee71250ef8b4e0b9430d89fcece54bd7330bd470614957d"}}}}}, 0x0) r6 = open$dir(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x40) r7 = syz_open_procfs$userns(0x0, &(0x7f0000000180)) mount_setattr(r6, &(0x7f0000000140)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x8, 0x84, 0x0, {r7}}, 0x20) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) 441.108577ms ago: executing program 0 (id=2637): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) getpeername(r1, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000500)={@local, 0x28e03ed2}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000001c0)={@local, 0x2}) r2 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x5}], 0x1c) listen(r3, 0xfffff789) r4 = accept(r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x9, @empty, 0x1}}, 0x1000, 0x2, 0x8002, 0x0, 0x2c, 0x8, 0x1}, 0x9c) fchdir(0xffffffffffffffff) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_emit_ethernet(0xfc0, &(0x7f0000003e40)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\v \x00', 0xf8a, 0x0, 0x0, @local, @local, {[@routing={0x84}], "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"}}}}}, 0x0) 388.723392ms ago: executing program 2 (id=2638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20483, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0xffff}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x44}, 0x1, 0x0, 0x1100, 0x24000810}, 0x0) 387.262246ms ago: executing program 0 (id=2639): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x101000) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000100)={0x4, 0x1, 0x43, 0x6, 0x6, 0x931, "6148364061a4708060035d927909aac7", 0x6, 0x0, 0x14, 0x6, 0x5, 0x3, 0x5}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x501043, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) 319.636847ms ago: executing program 0 (id=2642): r0 = socket(0x10, 0x803, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) sendmsg$NFT_BATCH(r0, &(0x7f0000006bc0)={0x0, 0x0, &(0x7f0000006b80)={&(0x7f0000006c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x18}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) syz_open_dev$hidraw(&(0x7f0000000280), 0x40007fff, 0x681) close_range(r1, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x200013, 0x0) 318.496208ms ago: executing program 2 (id=2643): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x1c, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(0xffffffffffffffff, 0x1) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x58) 260.508347ms ago: executing program 3 (id=2644): mount$afs(&(0x7f00000000c0)=ANY=[@ANYBLOB='#1:syz1.'], &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x14800, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d042dbd7000fcffff1f00000000", @ANYRES32=0x0, @ANYBLOB="df310600000100002400128009000100626f6e6400000000140002800500010004000000060020"], 0x44}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='hostfs\x00', 0x82, &(0x7f0000000140)='afs\x00') 259.719008ms ago: executing program 2 (id=2645): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) (async) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000080)={r5, @in={{0x2, 0x4e23, @empty}}, 0x8e2e, 0x5}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e22, 0xffff, @mcast2, 0xfff}}}, &(0x7f0000000180)=0x84) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) (async) mount$afs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xa00804, &(0x7f00000001c0)={[{@flock_openafs}]}) (async) sendmmsg$unix(r1, &(0x7f0000000140), 0x400000000000140, 0x24008050) (async) close(r1) 259.503996ms ago: executing program 2 (id=2646): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x8, 0xffff, 0x3fd, 0x0, 0xb2, 0x2, 0x6}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) (async) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x6}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={r2, 0x4}, 0x8) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x9) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x8) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) 196.337654ms ago: executing program 2 (id=2647): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x80, 0x1, 0x1, 0xe, 0x4}) close(0x3) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 191.941075ms ago: executing program 3 (id=2648): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000023c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="0001"], 0x38}}, 0x80) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000000)={r0, 0x0, 0x17, 0xfffffffffffffff7, 0xfffffffffffffffc, 0x4}) (async) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000000)={r0, 0x0, 0x17, 0xfffffffffffffff7, 0xfffffffffffffffc, 0x4}) 190.584401ms ago: executing program 3 (id=2649): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000080)={0x2a, 0x2, 0x4001}, 0xc) getpeername(r1, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000500)={@local, 0x28e03ed2}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000001c0)={@local, 0x2}) r2 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x5}], 0x1c) listen(r4, 0xfffff789) r5 = accept(r4, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x9, @empty, 0x1}}, 0x1000, 0x2, 0x8002, 0x0, 0x2c, 0x8, 0x1}, 0x9c) fchdir(r3) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_emit_ethernet(0xfc0, &(0x7f0000003e40)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\v \x00', 0xf8a, 0x0, 0x0, @local, @local, {[@routing={0x84}], "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"}}}}}, 0x0) 110.078857ms ago: executing program 3 (id=2650): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@gettaction={0x158, 0x32, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe0000}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x43a83e36}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x158}}, 0x4000010) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x8042) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x60, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x42, 0xe, {{{}, {}, @broadcast, @broadcast, @from_mac, {0x0, 0x20}}, 0x0, @random=0x2, 0x1, @void, @void, @val={0x3, 0x1, 0x6}, @void, @val={0x6, 0x2, 0x1}, @val={0x5, 0x3, {0x4, 0xab, 0x7}}, @val={0x25, 0x3, {0x0, 0x99, 0x1}}, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x81, 0xa, 0x3}}, @void, @void, @void, @void}}]]}, 0x60}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x2, 0x822f01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r4, 0x4) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 50.224772ms ago: executing program 3 (id=2651): ioctl$BSG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000080)={0x1, 0x3, 0x491}) pwritev(r0, &(0x7f00000012c0)=[{&(0x7f00000000c0)="d34fb22cf41504819fe0fe50744ecc1f063bc8bf34bbc98cc0490c2e97bf6f83c30341a269b0b87c59a1d3174d50259e31ed29cc6fbf345b661a85ba24902ae9089d3ef333b878bd", 0x48}, {&(0x7f0000000140)="e32aae203cb1cfd765c978390464705eb219cee2223734652bdc9c736a4475358a3cd4d511bdbe87aed2868870ae698192124a89b5452ae88133195ead8d5ea334910234d370eaae1f6367b9e31295952e937afff9680c162bb44a9c2e0ef372ace1cfea30cc81faf61ca5b1d8c1ac835b5ddc2908e601868f230df9baeb322a8c1d0fdfb66af2b01972726e420b5f41d9b7701323314f48354e1609d408ed889c1c00c2f950e9606663d011b82de34e3021ee33c94c6a5b234574ac72d169d39c646d70c9", 0xc5}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="92517f83238307584b021f1c5db5349b274df64add8d067b39b6c5de30b381aa27b9fb6e84b4d039927a46a25fcaa7beefb962dc606852565f48f28ca378bd3f175d65e5d079ba0e8c616157aaf15abdcb820e8ec97feee13f0dfa34dfd895700eb20d9b4111c028", 0x68}], 0x4, 0x6, 0x9) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001300), 0x202000, 0x0) ioctl$BSG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000001340)=0x2) accept$unix(r0, 0x0, &(0x7f0000001380)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x2c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200040c4}, 0xdf6bb13cee5085aa) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000014c0)={0x4, 0x4, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r2 = syz_open_dev$I2C(&(0x7f0000001500), 0x6, 0x100) syz_emit_vhci(&(0x7f0000001540)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000001580)={0xa, 0x4e23, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc}, 0x1c, &(0x7f00000025c0)=[{&(0x7f00000015c0)="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", 0x1000}], 0x1, &(0x7f0000002600)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x2b, 0xc, 0x1, 0xf8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x3b, 0x8, 0x2, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @local]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @rthdr={{0x48, 0x29, 0x39, {0xff, 0x6, 0x1, 0x8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xf84e}}, @rthdr={{0x48, 0x29, 0x39, {0x6c, 0x6, 0x2, 0x5, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast2]}}}, @tclass={{0x14, 0x29, 0x43, 0x6}}], 0x1b8}, 0x5) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000002800)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000002840)=0x1) r4 = syz_open_dev$audion(&(0x7f0000002880), 0x1000, 0xd118c0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000028c0)={0x8, 0xc, 0x0, 0x1a, 0x9}) r6 = fsopen(&(0x7f0000002900)='efs\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x18, 0x1406, 0x10, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040041}, 0x4000000) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000002a40)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f0000002a80)={0x48, 0xb, r1, 0x0, r7}) lseek(r4, 0xfffffffffffffffe, 0x3) io_uring_setup(0x15b1, &(0x7f0000002b00)={0x0, 0x3f95, 0x38402, 0x0, 0xbc, 0x0, r3}) pwritev(r0, &(0x7f0000002fc0)=[{&(0x7f0000002b80)="df1c15c5dddae869060fb86621033e3787d916dfb94cd5725d98dd9719cf0a03c0533177e386997192c9261d7388e014720548110d401823089c19ecbeb50b3c2b9729febad09fabef6d59a2e8d1de1c91988bc00d1ca5e44906580c26e1e416fb07ae43ca9ad830c2972a717ae2d4a207090fecda942729e2db2bf31cccef08f573cb46c87edd1ed3f76699be7e1d6759cf0d2490b8aa43", 0x98}, {&(0x7f0000002c40)="77a0370d958e9a7cfc04f0344be0287d3660fa5e62e3c992c30e9a9a6cd7b2e4fa21a8ee3d3f1a89ed9744566bce8b46b919f13d541bce76f0fff71199a67fdd9d9f73ab04d7a6", 0x47}, {&(0x7f0000002cc0)="309099a1fb177259369d46d2a55f2488df2ef6cf4d6c01434132f9600e76beb43e4a17cd80da0dc8721bbde7687a8a9ff57562c6886a3bdb57e9e2d931207726138b0b8de39e49cb2dd9f5dffc2f9207074604d41245f2f519ea0e900e19ec626451d654160e3518f1efa4aa235f37e4fcfaa16c16fe31eb30e0e6993f3a9a309cb46f15528f8089b1fc5b173406bb8522c002267ad8884de27a1a3e", 0x9c}, {&(0x7f0000002d80)="0377664d11bf43b25542719903d6f7707cdcdf4c902d585c0b1af541989f5fd25b045803619c0eeec5634e788e617820f12cb256bcbac904a57607ded54d0973436cb554827ce29744e1f40d7d7fcd45f9f53dad001675c460f3a226bdee628aa959c242b4835a6c9ff78ac4d22fd826ff1d4035baa346c2e3ad248969f6cbfc040505153de3711f6433757f3823d5eee86219e0af4e0a8a89fcc573", 0x9c}, {&(0x7f0000002e40)="e5f8c806fd5260fdf19fcd92fe4a7238d1b817aa5d4e3c2f689b469e792794f6de0fc501e2a1ac938fc5e6c6aae341f5361f8a5fc15b8cc991ab568acfc0bfe93d11cd6600b1247c1f34296867bfb01ff4e7050e1208f2e9a94f94b5bcaf48ace9411e9352cc", 0x66}, {&(0x7f0000002ec0)="112ef7ed208733c1dc1c9a6ee92aab0268617f9c302cd5b2401b87cfb9eacf402ee93787d924606cee01e9a10ab9a935cfa97a4a803da542baca5c75eee62c44e679180ee7e539e4076a9597", 0x4c}, {&(0x7f0000002f40)="ff6333eae98148c595c4d61310a466af33437e5bfbf6cb13f243549df012fcfbfba4ac8c185e4e2bdc173369205d38d9a7bd420f0853fbb9da979f71ddc822dd92c85370b49ac1116c333fcde76bf507247cc651e042706765dc0961ad7d30fe9c654ad269a4ef2ed50249b14b5965ae", 0x70}], 0x7, 0x10001, 0x5) eventfd2(0x50e5, 0x180001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000003140)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f6f000/0x2000)=nil, &(0x7f0000f38000/0x2000)=nil, &(0x7f0000d91000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000c0e000/0x1000)=nil, &(0x7f0000ef7000/0x2000)=nil, &(0x7f0000e92000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000003040)="570629bf9063baae3abdf3e5b81bbb710ed0d1c614be9009a371fef3993a32e7cc04917e86f82b657acd83efc76f7a26619357309b813d5b6eb8a7567360c642d4cdeebf78b84171a422a43dfdc3bb4e38bff39b559d6ff79b57fe8d21ebc05ff3251b7ad66e1d09c98926db263c7e1dc520e5555c6ffd464cf3f459abb92174bc60ee3367070a6270eccdfde1b968181eed0ecfa4fb11bf9e4c1631d89c9d93ef0ea4987c162df3437e6ceea0289235c3c2f567eb82be85c453f8b4a12d120a4677174b8e48e80b8e49507b4dc1238ec93a0de99d2042513984828d850cff25091b56b4d1b1e05db2d05fd8250fd7fb75a2b1", 0xf3, r6}, 0x68) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000031c0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r1, 0x3b88, &(0x7f0000003200)={0xc}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r3, 0x7a9, &(0x7f0000003240)={{@my=0x1, 0x6}, 0xe7, 0x5, 0x80000000, 0x6, 0x6, 0xffffffff, 0x1, 0x4}) 0s ago: executing program 3 (id=2652): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x20182, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x1000, 0x404], 0x2}, 0x10) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) socket$unix(0x1, 0x2, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) (async, rerun: 32) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) pwritev(r2, &(0x7f0000001780)=[{&(0x7f0000000000)="765d1df0b41799bb63274a587b", 0xd}, {&(0x7f0000000200)="70cc8f3d9d4a46cfb00986c136febc48c2fb9a8a3ebeb2aa7ddf11a5455344a3449c0914140cb0cb6b6ce46a5719aa56dad0234efb7f451dff7ca1e957fc2fa059da81528cf23d7bba146aba935f5ad4dc5ed35e175bd0f5f66dfa464bc8d8d128d2227786de53e8af696953c19154676b711f0f89bbcc5cac523a87f3166bb4ad090f2d6e6fb6ee4088dbfc15d584bddda9c0d293308232d52b6e308384a17085dedc48f5003dd091fe31fdfffba24fd47000c6ccfee8f3cc05d794fd", 0xbd}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="6968fcbb021eb0dcc97e7ce3202fca6a04be29ceeaf2bba3871d82ef4696e8ad10338de15fcb90a9d8b1eb9972d533a009892503d11fff990eed15a0736b1ff568acd3b56a0ad615635ed1807e2245a1775f80f939a15a7610df1247a02dd554dd086cb81361994fba571f994ad536c701fe2821f8d12f4807dc8f957b314122403be75a90e0ecef600617b3f6e5dd2b33b7f68ac18c2e46adc01188dd607a117a9cd2d0a97de198b0", 0xa9}, {&(0x7f0000001600)="03158ab87aa8e05463b6df9ccb00f0606c82a90fe5281f72b6628b74858edb7a93c8ee3160bc7c122a07b6ba138f892aa8db13a00664085def8da2560146d78217d3371926fdb554c182d6a7e5a2e7b98cf919e7ae2b44ff46876557b31fdd44117e", 0x62}, {&(0x7f0000000300)="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", 0x14e}], 0x6, 0x8001, 0x2) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="a3309a29b352173c26fb20932e2c765e25db3df065"]) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x1d, &(0x7f00000002c0)=0xc9, 0x4) (async) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) (async) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r5], 0x15) kernel console output (not intermixed with test programs): 175.589476][T10840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1599'. [ 175.627119][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 175.633160][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 175.726873][T10849] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 175.818266][T10859] comedi comedi3: comedi_config --init_data is deprecated [ 175.854237][T10865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.980685][T10875] pim6reg1: entered promiscuous mode [ 175.982369][T10875] pim6reg1: entered allmulticast mode [ 176.022185][T10881] QAT: failed to copy from user cfg_data. [ 176.173259][T10890] Failed to initialize the IGMP autojoin socket (err -2) [ 176.177874][T10891] kthread_run failed with err -4 [ 176.472017][T10911] Invalid source name [ 176.473333][T10911] UBIFS error (pid: 10911): cannot open "/dev/sg0", error -22 [ 176.488950][T10909] FAULT_INJECTION: forcing a failure. [ 176.488950][T10909] name failslab, interval 1, probability 0, space 0, times 0 [ 176.495308][T10909] CPU: 3 UID: 0 PID: 10909 Comm: syz.3.1624 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.495325][T10909] Tainted: [L]=SOFTLOCKUP [ 176.495329][T10909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.495336][T10909] Call Trace: [ 176.495340][T10909] [ 176.495345][T10909] dump_stack_lvl+0x100/0x190 [ 176.495360][T10909] should_fail_ex.cold+0x5/0xa [ 176.495376][T10909] should_failslab+0xc2/0x120 [ 176.495388][T10909] __kmalloc_cache_noprof+0x7a/0x6f0 [ 176.495403][T10909] ? vhost_task_create+0xee/0x370 [ 176.495416][T10909] ? trace_contention_end+0x122/0x170 [ 176.495431][T10909] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 176.495449][T10909] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 176.495479][T10909] vhost_task_create+0xee/0x370 [ 176.495494][T10909] ? __pfx_vhost_task_create+0x10/0x10 [ 176.495507][T10909] ? register_lock_class+0x40/0x560 [ 176.495524][T10909] ? __pfx_vhost_task_fn+0x10/0x10 [ 176.495539][T10909] ? __pfx___mutex_lock+0x10/0x10 [ 176.495554][T10909] ? kasan_quarantine_put+0x104/0x240 [ 176.495574][T10909] kvm_mmu_post_init_vm+0x1b3/0x370 [ 176.495590][T10909] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 176.495608][T10909] ? kvm_vcpu_ioctl+0x1546/0x1720 [ 176.495623][T10909] kvm_vcpu_ioctl+0x730/0x1720 [ 176.495635][T10909] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 176.495647][T10909] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 176.495661][T10909] ? do_vfs_ioctl+0x226/0x13e0 [ 176.495672][T10909] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 176.495683][T10909] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 176.495704][T10909] ? __fget_files+0x215/0x3d0 [ 176.495718][T10909] ? hook_file_ioctl_common+0x149/0x410 [ 176.495734][T10909] ? selinux_file_ioctl+0x13b/0x290 [ 176.495749][T10909] ? selinux_file_ioctl+0xb6/0x290 [ 176.495766][T10909] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 176.495778][T10909] __x64_sys_ioctl+0x18e/0x210 [ 176.495790][T10909] do_syscall_64+0x115/0x870 [ 176.495803][T10909] ? clear_bhb_loop+0x40/0x90 [ 176.495817][T10909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.495828][T10909] RIP: 0033:0x7f3f6259ce59 [ 176.495837][T10909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.495848][T10909] RSP: 002b:00007f3f607f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.495860][T10909] RAX: ffffffffffffffda RBX: 00007f3f62815fa0 RCX: 00007f3f6259ce59 [ 176.495867][T10909] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000028 [ 176.495873][T10909] RBP: 00007f3f607f6090 R08: 0000000000000000 R09: 0000000000000000 [ 176.495879][T10909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.495886][T10909] R13: 00007f3f62816038 R14: 00007f3f62815fa0 R15: 00007ffde82aaff8 [ 176.495900][T10909] [ 176.818989][T10928] tmpfs: Bad value for 'mpol' [ 177.066977][T10934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1632'. [ 177.145073][T10939] FAULT_INJECTION: forcing a failure. [ 177.145073][T10939] name failslab, interval 1, probability 0, space 0, times 0 [ 177.148928][T10939] CPU: 3 UID: 0 PID: 10939 Comm: syz.1.1634 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.148945][T10939] Tainted: [L]=SOFTLOCKUP [ 177.148949][T10939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.148955][T10939] Call Trace: [ 177.148960][T10939] [ 177.148965][T10939] dump_stack_lvl+0x100/0x190 [ 177.148981][T10939] should_fail_ex.cold+0x5/0xa [ 177.148997][T10939] should_failslab+0xc2/0x120 [ 177.149010][T10939] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 177.149027][T10939] ? copy_process+0x69a/0x7ed0 [ 177.149043][T10939] ? mark_held_locks+0x40/0x70 [ 177.149058][T10939] copy_process+0x69a/0x7ed0 [ 177.149082][T10939] ? __pfx_copy_process+0x10/0x10 [ 177.149100][T10939] ? lockdep_init_map_type+0x5c/0x250 [ 177.149128][T10939] ? lockdep_init_map_type+0x5c/0x250 [ 177.149142][T10939] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 177.149155][T10939] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 177.149172][T10939] vhost_task_create+0x1db/0x370 [ 177.149187][T10939] ? __pfx_vhost_task_create+0x10/0x10 [ 177.149200][T10939] ? register_lock_class+0x40/0x560 [ 177.149217][T10939] ? __pfx_vhost_task_fn+0x10/0x10 [ 177.149232][T10939] ? __pfx___mutex_lock+0x10/0x10 [ 177.149247][T10939] ? kasan_quarantine_put+0x104/0x240 [ 177.149267][T10939] kvm_mmu_post_init_vm+0x1b3/0x370 [ 177.149282][T10939] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 177.149298][T10939] ? kvm_vcpu_ioctl+0x1546/0x1720 [ 177.149312][T10939] kvm_vcpu_ioctl+0x730/0x1720 [ 177.149324][T10939] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 177.149336][T10939] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 177.149349][T10939] ? do_vfs_ioctl+0x226/0x13e0 [ 177.149362][T10939] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 177.149373][T10939] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 177.149394][T10939] ? __fget_files+0x215/0x3d0 [ 177.149407][T10939] ? hook_file_ioctl_common+0x149/0x410 [ 177.149422][T10939] ? selinux_file_ioctl+0x13b/0x290 [ 177.149437][T10939] ? selinux_file_ioctl+0xb6/0x290 [ 177.149454][T10939] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 177.149465][T10939] __x64_sys_ioctl+0x18e/0x210 [ 177.149478][T10939] do_syscall_64+0x115/0x870 [ 177.149495][T10939] ? clear_bhb_loop+0x40/0x90 [ 177.149509][T10939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.149520][T10939] RIP: 0033:0x7f453e79ce59 [ 177.149529][T10939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.149541][T10939] RSP: 002b:00007f453f6f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.149552][T10939] RAX: ffffffffffffffda RBX: 00007f453ea15fa0 RCX: 00007f453e79ce59 [ 177.149559][T10939] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000028 [ 177.149565][T10939] RBP: 00007f453f6f6090 R08: 0000000000000000 R09: 0000000000000000 [ 177.149572][T10939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.149578][T10939] R13: 00007f453ea16038 R14: 00007f453ea15fa0 R15: 00007ffc229086b8 [ 177.149592][T10939] [ 177.258248][ T3266] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 177.306654][T10941] netlink: 'syz.0.1635': attribute type 11 has an invalid length. [ 177.310720][T10941] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.1635'. [ 177.409237][ T3266] usb 8-1: Using ep0 maxpacket: 8 [ 177.412310][ T3266] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.416149][ T3266] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.420731][ T3266] usb 8-1: config 0 interface 0 has no altsetting 0 [ 177.422981][ T3266] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 177.425941][ T3266] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.433665][ T3266] usb 8-1: config 0 descriptor?? [ 177.824140][T10980] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1649'. [ 177.827014][T10980] veth0_to_bond: default FDB implementation only supports local addresses [ 177.843888][ T3266] mcp2221 0003:04D8:00DD.001C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 178.007557][T10993] netlink: zone id is out of range [ 178.051570][ T29] usb 8-1: USB disconnect, device number 28 [ 178.638717][T11015] netlink: 'syz.2.1662': attribute type 21 has an invalid length. [ 178.645470][T11015] 9pnet_fd: Insufficient options for proto=fd [ 178.769864][ T59] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 178.909268][ T59] usb 5-1: device descriptor read/64, error -71 [ 178.990751][ T40] kauditd_printk_skb: 156 callbacks suppressed [ 178.990763][ T40] audit: type=1400 audit(1780198813.971:864): avc: denied { create } for pid=11045 comm="syz.3.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 179.159197][ T59] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 179.299283][ T59] usb 5-1: device descriptor read/64, error -71 [ 179.391531][ T29] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 179.419459][ T59] usb usb5-port1: attempt power cycle [ 179.439702][ T40] audit: type=1400 audit(1780198814.421:865): avc: denied { watch watch_reads } for pid=11075 comm="syz.1.1681" path="pipe:[44791]" dev="pipefs" ino=44791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 179.564750][ T29] usb 8-1: config 0 has no interfaces? [ 179.569986][ T29] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 179.575526][ T29] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 179.578841][ T29] usb 8-1: Product: syz [ 179.580878][ T29] usb 8-1: Manufacturer: syz [ 179.583012][ T29] usb 8-1: SerialNumber: syz [ 179.587706][ T29] usb 8-1: config 0 descriptor?? [ 179.611774][T11089] 8021q: VLANs not supported on ip_vti0 [ 179.779229][ T59] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 179.792784][ T39] usb 8-1: USB disconnect, device number 29 [ 179.800048][ T59] usb 5-1: device descriptor read/8, error -71 [ 180.039289][ T59] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 180.059986][ T59] usb 5-1: device descriptor read/8, error -71 [ 180.180104][ T59] usb usb5-port1: unable to enumerate USB device [ 180.398742][ T40] audit: type=1400 audit(1780198815.371:866): avc: denied { execute } for pid=11102 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 180.407515][ T40] audit: type=1400 audit(1780198815.371:867): avc: denied { execute_no_trans } for pid=11102 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 180.421201][T11104] kernel profiling enabled (shift: 63) [ 180.423942][T11104] profiling shift: 63 too large [ 180.496350][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.499576][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.502845][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.505829][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.508445][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.523604][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.526815][ T5752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.533450][ T5752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.537687][ T5752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.545783][ T5752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.573194][ T40] audit: type=1400 audit(1780198815.551:868): avc: denied { listen } for pid=11117 comm="syz.3.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 180.579449][ T40] audit: type=1400 audit(1780198815.551:869): avc: denied { accept } for pid=11117 comm="syz.3.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 180.638934][T11121] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 180.724877][T11111] Failed to initialize the IGMP autojoin socket (err -2) [ 180.768064][T11137] __nla_validate_parse: 7 callbacks suppressed [ 180.768080][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'. [ 180.971346][ T40] audit: type=1400 audit(1780198815.951:870): avc: denied { write } for pid=11144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.026306][ T40] audit: type=1400 audit(1780198816.001:871): avc: denied { create } for pid=11149 comm="syz.2.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 181.042241][ T40] audit: type=1400 audit(1780198816.021:872): avc: denied { write } for pid=11148 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.092616][T11111] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.101814][T11111] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.112124][T11111] bridge_slave_0: entered allmulticast mode [ 181.114974][T11111] bridge_slave_0: entered promiscuous mode [ 181.120469][T11111] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.122821][T11111] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.126549][T11111] bridge_slave_1: entered allmulticast mode [ 181.133310][T11111] bridge_slave_1: entered promiscuous mode [ 181.227125][T11111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.243607][T11111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.306520][T11111] team0: Port device team_slave_0 added [ 181.319233][T11111] team0: Port device team_slave_1 added [ 181.321439][ T40] audit: type=1400 audit(1780198816.301:873): avc: denied { write } for pid=11167 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.366251][T11111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.377443][T11111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.388491][T11111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.394528][T11111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.396829][T11111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.406964][T11111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.477350][T11111] hsr_slave_0: entered promiscuous mode [ 181.494872][T11111] hsr_slave_1: entered promiscuous mode [ 181.500257][T11111] debugfs: 'hsr0' already exists in 'hsr' [ 181.503618][T11111] Cannot create hsr debugfs directory [ 181.733254][T11194] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1711'. [ 181.738254][T11196] fuse: Bad value for 'rootmode' [ 181.766548][T11111] netdevsim netdevsim4 netdevsim0: renamed from eth2 [ 181.776116][T11111] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 181.778961][T11111] netdevsim netdevsim4 netdevsim1: renamed from eth3 [ 181.784003][T11111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 181.789038][T11111] netdevsim netdevsim4 netdevsim2: renamed from eth4 [ 181.811465][T11111] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 181.815062][T11201] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 181.819693][T11111] netdevsim netdevsim4 netdevsim3: renamed from eth5 [ 181.830461][T11111] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 181.852826][T11210] netlink: 'syz.0.1712': attribute type 7 has an invalid length. [ 181.853402][T11204] fuse: Bad value for 'fd' [ 181.901688][T11204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1716'. [ 181.986611][T11220] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1717'. [ 181.994830][T11111] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.028028][ T792] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.030703][ T792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.051057][ T792] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.053379][ T792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.122126][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 182.136278][T11111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.397056][T11111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.469275][ T59] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 182.575513][T11111] veth0_vlan: entered promiscuous mode [ 182.579355][ T5752] Bluetooth: hci1: command tx timeout [ 182.585083][T11111] veth1_vlan: entered promiscuous mode [ 182.619518][ T59] usb 8-1: Using ep0 maxpacket: 8 [ 182.624642][ T59] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.628821][ T59] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.634086][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 182.636282][ T59] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 182.639013][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.643398][T11111] veth0_macvtap: entered promiscuous mode [ 182.645947][ T59] usb 8-1: config 0 descriptor?? [ 182.651977][T11111] veth1_macvtap: entered promiscuous mode [ 182.657341][T11253] overlayfs: failed to resolve './file1': -2 [ 182.660974][T11253] overlayfs: failed to resolve './file1': -2 [ 182.663644][T11253] overlayfs: failed to resolve './file1': -2 [ 182.667422][T11253] overlayfs: failed to resolve './file1': -2 [ 182.670102][T11253] overlayfs: failed to resolve './file1': -2 [ 182.676235][T11253] overlayfs: failed to resolve './file1': -2 [ 182.678509][T11253] overlayfs: failed to resolve './file1': -2 [ 182.682502][T11253] overlayfs: failed to resolve './file1': -2 [ 182.684361][T11111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.687639][T11253] overlayfs: failed to resolve './file1': -2 [ 182.688905][T11111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.692370][T11253] overlayfs: failed to resolve './file1': -2 [ 182.694292][T11111] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 182.699659][T11253] overlayfs: failed to resolve './file1': -2 [ 182.706886][T11253] overlayfs: failed to resolve './file1': -2 [ 182.712771][T11111] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 182.712873][T11253] overlayfs: failed to resolve './file1': -2 [ 182.721100][T11253] overlayfs: failed to resolve './file1': -2 [ 182.723471][T11111] wireguard: wg0: Could not create IPv4 socket [ 182.724619][T11253] overlayfs: failed to resolve './file1': -2 [ 182.726958][T11111] wireguard: wg1: Could not create IPv4 socket [ 182.731434][T11111] wireguard: wg2: Could not create IPv4 socket [ 182.731452][T11253] overlayfs: failed to resolve './file1': -2 [ 182.740221][T11253] overlayfs: failed to resolve './file1': -2 [ 182.748605][T11253] overlayfs: failed to resolve './file1': -2 [ 182.752454][T11253] overlayfs: failed to resolve './file1': -2 [ 182.757338][T11253] overlayfs: failed to resolve './file1': -2 [ 182.760925][T11253] overlayfs: failed to resolve './file1': -2 [ 182.764268][T11253] overlayfs: failed to resolve './file1': -2 [ 182.768212][T11253] overlayfs: failed to resolve './file1': -2 [ 182.776935][T11253] overlayfs: failed to resolve './file1': -2 [ 182.780414][T11253] overlayfs: failed to resolve './file1': -2 [ 182.785857][T11253] overlayfs: failed to resolve './file1': -2 [ 182.789024][T11253] overlayfs: failed to resolve './file1': -2 [ 182.797049][T11253] overlayfs: failed to resolve './file1': -2 [ 182.802212][T11253] overlayfs: failed to resolve './file1': -2 [ 182.813096][T11253] overlayfs: failed to resolve './file1': -2 [ 182.819990][T11253] overlayfs: failed to resolve './file1': -2 [ 182.823836][T11253] overlayfs: failed to resolve './file1': -2 [ 182.832960][T11253] overlayfs: failed to resolve './file1': -2 [ 182.838184][T11253] overlayfs: failed to resolve './file1': -2 [ 182.847879][T11253] overlayfs: failed to resolve './file1': -2 [ 182.854568][T11253] overlayfs: failed to resolve './file1': -2 [ 182.858133][T11253] overlayfs: failed to resolve './file1': -2 [ 182.862542][T11253] overlayfs: failed to resolve './file1': -2 [ 182.866148][T11253] overlayfs: failed to resolve './file1': -2 [ 182.870762][T11253] overlayfs: failed to resolve './file1': -2 [ 182.875337][T11253] overlayfs: failed to resolve './file1': -2 [ 182.879999][T11253] overlayfs: failed to resolve './file1': -2 [ 182.882211][T11253] overlayfs: failed to resolve './file1': -2 [ 182.889054][T11253] overlayfs: failed to resolve './file1': -2 [ 182.895866][T11253] overlayfs: failed to resolve './file1': -2 [ 182.899206][T11253] overlayfs: failed to resolve './file1': -2 [ 182.902475][T11253] overlayfs: failed to resolve './file1': -2 [ 182.905312][T11253] overlayfs: failed to resolve './file1': -2 [ 182.908084][T11253] overlayfs: failed to resolve './file1': -2 [ 182.911012][T11253] overlayfs: failed to resolve './file1': -2 [ 182.914127][T11253] overlayfs: failed to resolve './file1': -2 [ 182.916334][T11253] overlayfs: failed to resolve './file1': -2 [ 182.918875][T11253] overlayfs: failed to resolve './file1': -2 [ 182.921408][T11253] overlayfs: failed to resolve './file1': -2 [ 182.923554][T11253] overlayfs: failed to resolve './file1': -2 [ 182.925777][T11253] overlayfs: failed to resolve './file1': -2 [ 182.928027][T11253] overlayfs: failed to resolve './file1': -2 [ 182.930999][T11253] overlayfs: failed to resolve './file1': -2 [ 182.933124][T11253] overlayfs: failed to resolve './file1': -2 [ 182.935229][T11253] overlayfs: failed to resolve './file1': -2 [ 182.937522][T11253] overlayfs: failed to resolve './file1': -2 [ 182.944464][T11253] overlayfs: failed to resolve './file1': -2 [ 182.946781][T11253] overlayfs: failed to resolve './file1': -2 [ 182.948963][T11253] overlayfs: failed to resolve './file1': -2 [ 182.952763][T11253] overlayfs: failed to resolve './file1': -2 [ 183.033112][T11284] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1730'. [ 183.066538][ T59] hid_parser_main: 35 callbacks suppressed [ 183.066552][ T59] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 183.071696][ T59] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 183.073907][ T59] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 183.076303][ T59] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 183.078927][ T59] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 183.083507][ T59] mcp2221 0003:04D8:00DD.001D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 183.121736][T11297] /dev/nbd2: Can't lookup blockdev [ 183.136639][T11297] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 183.146113][T11297] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1734'. [ 183.159320][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1734'. [ 183.203814][ T5889] Process accounting resumed [ 183.261423][ T5889] usb 8-1: USB disconnect, device number 30 [ 183.816997][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1742'. [ 183.823220][T11343] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1742'. [ 183.853782][T11348] cgroup2: Unknown parameter 'euid' [ 183.905660][T11354] tmpfs: Bad value for 'mpol' [ 183.907956][T11354] tmpfs: Bad value for 'mpol' [ 183.911986][T11354] tmpfs: Bad value for 'mpol' [ 183.914301][T11354] tmpfs: Bad value for 'mpol' [ 183.916825][T11354] tmpfs: Bad value for 'mpol' [ 183.919015][T11354] tmpfs: Bad value for 'mpol' [ 183.921330][T11354] tmpfs: Bad value for 'mpol' [ 183.923594][T11354] tmpfs: Bad value for 'mpol' [ 183.925821][T11354] tmpfs: Bad value for 'mpol' [ 183.927968][T11354] tmpfs: Bad value for 'mpol' [ 183.931201][T11354] tmpfs: Bad value for 'mpol' [ 183.932885][T11354] tmpfs: Bad value for 'mpol' [ 183.934437][T11354] tmpfs: Bad value for 'mpol' [ 183.936018][T11354] tmpfs: Bad value for 'mpol' [ 183.937610][T11354] tmpfs: Bad value for 'mpol' [ 183.940788][T11354] tmpfs: Bad value for 'mpol' [ 183.942449][T11354] tmpfs: Bad value for 'mpol' [ 183.944278][T11354] tmpfs: Bad value for 'mpol' [ 183.945877][T11354] tmpfs: Bad value for 'mpol' [ 183.947559][T11354] tmpfs: Bad value for 'mpol' [ 183.949347][T11354] tmpfs: Bad value for 'mpol' [ 183.950942][T11354] tmpfs: Bad value for 'mpol' [ 183.952764][T11354] tmpfs: Bad value for 'mpol' [ 183.954726][T11354] tmpfs: Bad value for 'mpol' [ 183.956439][T11354] tmpfs: Bad value for 'mpol' [ 183.958066][T11354] tmpfs: Bad value for 'mpol' [ 183.960394][T11354] tmpfs: Bad value for 'mpol' [ 183.962631][T11354] tmpfs: Bad value for 'mpol' [ 183.964990][T11354] tmpfs: Bad value for 'mpol' [ 183.967294][T11354] tmpfs: Bad value for 'mpol' [ 183.970674][T11354] tmpfs: Bad value for 'mpol' [ 183.972974][T11354] tmpfs: Bad value for 'mpol' [ 183.975290][T11354] tmpfs: Bad value for 'mpol' [ 183.997718][T11363] netlink: 'syz.2.1748': attribute type 4 has an invalid length. [ 184.004956][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 184.004972][ T40] audit: type=1400 audit(1780198818.981:890): avc: denied { write } for pid=11359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.052583][ T40] audit: type=1400 audit(1780198819.031:891): avc: denied { write } for pid=11366 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.157598][ T40] audit: type=1400 audit(1780198819.131:892): avc: denied { write } for pid=11374 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.204333][ T40] audit: type=1400 audit(1780198819.181:893): avc: denied { write } for pid=11379 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.308996][ T40] audit: type=1400 audit(1780198819.281:894): avc: denied { write } for pid=11382 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.354464][ T40] audit: type=1400 audit(1780198819.331:895): avc: denied { write } for pid=11387 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.446967][ T40] audit: type=1400 audit(1780198819.421:896): avc: denied { write } for pid=11390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.493253][ T40] audit: type=1400 audit(1780198819.471:897): avc: denied { write } for pid=11393 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.529499][ T39] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 184.590848][ T40] audit: type=1400 audit(1780198819.571:898): avc: denied { write } for pid=11396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.636527][ T40] audit: type=1400 audit(1780198819.611:899): avc: denied { write } for pid=11399 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.679403][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 184.683424][ T39] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.688118][ T39] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.692325][ T39] usb 5-1: config 0 interface 0 has no altsetting 0 [ 184.694994][ T39] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 184.701945][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.711612][ T39] usb 5-1: config 0 descriptor?? [ 184.747204][T11405] SELinux: syz.3.1751 (11405) wrote to user. This is no longer supported. [ 184.910249][T11421] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 184.916100][T11421] Error validating options; rc = [-22] [ 184.969771][T11427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11427 comm=syz.2.1756 [ 185.123107][ T39] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 185.128028][ T39] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 185.132786][ T39] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 185.136818][ T39] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 185.139028][ T39] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 185.142947][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.143024][ T39] mcp2221 0003:04D8:00DD.001E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 185.149567][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.154356][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.161867][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.164380][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.176896][T11440] 8021q: adding VLAN 0 to HW filter on device .` [ 185.198674][T11440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.214856][T11440] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 185.222103][T11440] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.239254][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.242327][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.296175][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 185.327819][ T39] usb 5-1: USB disconnect, device number 38 [ 185.423486][T11437] Failed to initialize the IGMP autojoin socket (err -2) [ 185.649362][ T5889] usb 8-1: new low-speed USB device number 31 using dummy_hcd [ 185.741766][T11490] netlink: 'syz.3.1763': attribute type 1 has an invalid length. [ 185.759834][T11490] bond3: entered promiscuous mode [ 185.762057][T11490] bond3: entered allmulticast mode [ 185.764690][T11490] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.777386][T11490] erspan1: entered allmulticast mode [ 185.783827][T11490] bond3: (slave erspan1): making interface the new active one [ 185.786546][T11490] erspan1: entered promiscuous mode [ 185.794614][T11490] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 185.803148][T11490] __nla_validate_parse: 3 callbacks suppressed [ 185.803159][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1763'. [ 185.815578][T11490] bond3 (unregistering): (slave erspan1): Releasing active interface [ 185.818198][T11490] erspan1: left promiscuous mode [ 185.821768][T11490] bond3 (unregistering): Released all slaves [ 185.859424][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 185.874060][T11498] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 186.806824][T11539] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1770'. [ 186.812494][T11539] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.979736][T11567] /dev/loop2: Can't lookup blockdev [ 186.979921][T11566] /dev/loop2: Can't lookup blockdev [ 187.063067][T11585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1781'. [ 187.064815][T11583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1780'. [ 187.083520][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.122679][T11437] netdevsim netdevsim4 netdevsim0: renamed from eth2 [ 187.136332][T11437] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 187.139755][T11437] netdevsim netdevsim4 netdevsim1: renamed from eth3 [ 187.154324][T11437] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 187.161021][T11437] netdevsim netdevsim4 netdevsim2: renamed from eth4 [ 187.174784][T11437] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 187.177409][T11437] netdevsim netdevsim4 netdevsim3: renamed from eth5 [ 187.181760][T11437] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 187.209208][ T5096] Bluetooth: hci1: command tx timeout [ 187.360948][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.490404][T11638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.495332][T11635] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1792'. [ 187.495579][T11638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.567398][T11650] /dev/nbd2: Can't lookup blockdev [ 187.643040][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1798'. [ 187.679069][T11437] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 187.693830][T11437] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 187.704178][T11437] wireguard: wg0: Could not create IPv4 socket [ 187.708376][T11437] wireguard: wg1: Could not create IPv4 socket [ 187.714394][T11437] wireguard: wg2: Could not create IPv4 socket [ 187.794039][T11681] sit0: entered promiscuous mode [ 187.803681][T11681] netlink: 'syz.2.1802': attribute type 1 has an invalid length. [ 187.807779][T11675] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1800'. [ 187.810551][T11681] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1802'. [ 187.953575][ T845] hid-generic 0000:0000:0000.001F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 188.193375][T11729] IPv6: NLM_F_CREATE should be specified when creating new route [ 188.195872][T11729] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.198083][T11729] IPv6: NLM_F_CREATE should be set when creating new route [ 188.203275][T11729] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.205585][T11729] IPv6: NLM_F_CREATE should be set when creating new route [ 188.240278][T11730] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 188.241523][T11729] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11729 comm=syz.2.1812 [ 188.380039][T11746] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 188.380039][T11746] program syz.0.1816 not setting count and/or reply_len properly [ 188.415685][T11748] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 188.619749][T11767] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 189.037517][ T40] kauditd_printk_skb: 62 callbacks suppressed [ 189.037536][ T40] audit: type=1400 audit(1780198824.011:962): avc: denied { write } for pid=11805 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.142681][ T40] audit: type=1400 audit(1780198824.121:963): avc: denied { write } for pid=11808 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.188864][ T40] audit: type=1400 audit(1780198824.161:964): avc: denied { write } for pid=11811 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.238533][T11815] netlink: 'syz.0.1828': attribute type 4 has an invalid length. [ 189.241043][T11815] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1828'. [ 189.245489][T11815] .`: renamed from bond0 (while UP) [ 189.249379][ T5830] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 189.286512][ T40] audit: type=1400 audit(1780198824.261:965): avc: denied { write } for pid=11816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.340205][ T40] audit: type=1400 audit(1780198824.321:966): avc: denied { write } for pid=11822 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.381707][T11825] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 189.391915][T11825] cramfs: wrong magic [ 189.399491][ T5830] usb 8-1: Using ep0 maxpacket: 8 [ 189.403140][ T5830] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.407545][ T5830] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.411768][ T5830] usb 8-1: config 0 interface 0 has no altsetting 0 [ 189.414523][ T5830] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 189.417981][ T5830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.430902][ T5830] usb 8-1: config 0 descriptor?? [ 189.456367][ T40] audit: type=1400 audit(1780198824.431:967): avc: denied { write } for pid=11827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.493118][ T40] audit: type=1400 audit(1780198824.471:968): avc: denied { write } for pid=11834 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.495102][T11839] kAFS: unable to lookup cell 'syz0' [ 189.615890][ T40] audit: type=1400 audit(1780198824.591:969): avc: denied { write } for pid=11845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.640317][ T107] Bluetooth: hci1: Frame reassembly failed (-84) [ 189.704326][ T40] audit: type=1400 audit(1780198824.681:970): avc: denied { write } for pid=11858 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.807941][ T40] audit: type=1400 audit(1780198824.781:971): avc: denied { write } for pid=11862 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.849205][ T5830] hid_parser_main: 1 callbacks suppressed [ 189.849223][ T5830] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 189.854519][ T5830] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 189.857466][ T5830] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 189.860549][ T5830] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 189.863474][ T5830] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 189.866919][ T5830] mcp2221 0003:04D8:00DD.0020: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 190.048169][ T5830] usb 8-1: USB disconnect, device number 33 [ 190.403917][T11895] netlink: 'syz.2.1839': attribute type 21 has an invalid length. [ 190.406546][T11895] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.408773][T11895] IPv6: NLM_F_CREATE should be set when creating new route [ 190.411052][T11895] IPv6: NLM_F_CREATE should be set when creating new route [ 190.413277][T11895] IPv6: NLM_F_CREATE should be set when creating new route [ 190.419645][T11895] netlink: 'syz.2.1839': attribute type 21 has an invalid length. [ 190.422769][T11895] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.427441][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1839'. [ 190.775601][T11923] netlink: 'syz.3.1846': attribute type 10 has an invalid length. [ 190.783919][T11923] netlink: 'syz.3.1846': attribute type 10 has an invalid length. [ 190.804999][T11926] block nbd3: Device being setup by another task [ 190.814512][T11922] block nbd3: shutting down sockets [ 190.847393][T11941] fuse: Bad value for 'user_id' [ 190.849040][T11941] fuse: Bad value for 'user_id' [ 190.880631][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1851'. [ 190.942536][T11958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1854'. [ 191.194469][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1862'. [ 191.263078][ T5746] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.271234][ T5746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.274500][ T5746] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.282000][ T5746] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.285660][ T5746] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.453861][T12001] Failed to initialize the IGMP autojoin socket (err -2) [ 191.474211][T12041] netlink: 'syz.2.1870': attribute type 3 has an invalid length. [ 191.651655][ T845] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 191.691130][ T5096] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 191.799480][ T845] usb 8-1: device descriptor read/64, error -71 [ 191.857438][T12069] /dev/nullb0: Can't lookup blockdev [ 192.039267][ T845] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 192.179505][ T845] usb 8-1: device descriptor read/64, error -71 [ 192.222821][T12001] netdevsim netdevsim4 netdevsim0: renamed from eth2 [ 192.230954][T12001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 192.233609][T12001] netdevsim netdevsim4 netdevsim1: renamed from eth3 [ 192.241698][T12001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 192.244455][T12001] netdevsim netdevsim4 netdevsim2: renamed from eth4 [ 192.254862][T12001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 192.258007][T12001] netdevsim netdevsim4 netdevsim3: renamed from eth5 [ 192.268714][T12001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 192.300643][ T845] usb usb8-port1: attempt power cycle [ 192.641691][ T845] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 192.660625][ T845] usb 8-1: device descriptor read/8, error -71 [ 192.678805][T12001] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 192.686771][T12001] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 192.693059][T12001] wireguard: wg0: Could not create IPv4 socket [ 192.696956][T12001] wireguard: wg1: Could not create IPv4 socket [ 192.702099][T12001] wireguard: wg2: Could not create IPv4 socket [ 192.778441][T12129] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1881'. [ 192.839272][ T5830] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 192.910325][ T845] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 192.931280][ T845] usb 8-1: device descriptor read/8, error -71 [ 192.989268][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 192.993395][ T5830] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 192.997823][ T5830] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.002942][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 127, changing to 10 [ 193.007724][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 193.015610][ T5830] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 193.019631][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.022964][ T5830] usb 5-1: Product: syz [ 193.024722][ T5830] usb 5-1: Manufacturer: syz [ 193.026641][ T5830] usb 5-1: SerialNumber: syz [ 193.031022][ T5830] usb 5-1: config 0 descriptor?? [ 193.036742][T12126] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 193.039759][ T845] usb usb8-port1: unable to enumerate USB device [ 193.201215][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1888'. [ 193.206698][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1888'. [ 193.210382][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1888'. [ 193.213858][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1888'. [ 193.216632][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1888'. [ 193.250632][ T5830] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 193.258998][ T5830] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input45 [ 193.392556][T12161] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1892'. [ 193.458680][ C0] powermate: config urb returned -71 [ 193.459990][ T7027] usb 5-1: USB disconnect, device number 39 [ 193.460681][ C0] powermate: usb_submit_urb(config) failed [ 193.460718][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 193.997339][T12209] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 194.001011][T12210] overlayfs: failed lookup in lower (newroot/417, name='file0', err=-40): overlapping layers [ 194.174377][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 194.174395][ T40] audit: type=1400 audit(1780198829.151:1018): avc: denied { append } for pid=12219 comm="syz.0.1903" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 194.448126][T12250] CIFS: iocharset name too long [ 194.511588][T12253] netlink: 'syz.2.1907': attribute type 1 has an invalid length. [ 194.889300][ T845] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 194.899489][ T6303] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 194.909245][ T40] audit: type=1400 audit(1780198829.881:1019): avc: denied { write } for pid=12268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.959491][ T40] audit: type=1400 audit(1780198829.941:1020): avc: denied { write } for pid=12271 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.029260][ T6303] usb 8-1: device descriptor read/64, error -71 [ 195.059719][ T845] usb 5-1: Using ep0 maxpacket: 8 [ 195.063065][ T845] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 195.065918][ T845] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.069508][ T845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 127, changing to 10 [ 195.070806][ T40] audit: type=1400 audit(1780198830.051:1021): avc: denied { write } for pid=12274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.072995][ T845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 195.085803][ T845] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 195.088881][ T845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.092542][ T845] usb 5-1: Product: syz [ 195.093829][ T845] usb 5-1: Manufacturer: syz [ 195.095326][ T845] usb 5-1: SerialNumber: syz [ 195.100823][ T845] usb 5-1: config 0 descriptor?? [ 195.103438][T12260] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 195.126056][ T40] audit: type=1400 audit(1780198830.101:1022): avc: denied { write } for pid=12277 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.254187][ T40] audit: type=1400 audit(1780198830.231:1023): avc: denied { write } for pid=12280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.299280][ T6303] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 195.313256][ T845] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 195.313741][ T40] audit: type=1400 audit(1780198830.291:1024): avc: denied { write } for pid=12283 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.326832][ T845] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input46 [ 195.439378][ T6303] usb 8-1: device descriptor read/64, error -71 [ 195.502648][ T40] audit: type=1400 audit(1780198830.481:1025): avc: denied { write } for pid=12286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.518084][ C1] powermate: config urb returned -71 [ 195.518482][ T7027] usb 5-1: USB disconnect, device number 40 [ 195.520362][ C1] powermate: usb_submit_urb(config) failed [ 195.520809][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 195.549463][ T6303] usb usb8-port1: attempt power cycle [ 195.586740][ T40] audit: type=1400 audit(1780198830.561:1026): avc: denied { write } for pid=12294 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.753156][ T40] audit: type=1400 audit(1780198830.731:1027): avc: denied { write } for pid=12303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.899540][ T6303] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 195.920000][ T6303] usb 8-1: device descriptor read/8, error -71 [ 196.094330][T12321] program syz.0.1914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.171850][ T6303] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 196.191846][ T6303] usb 8-1: device descriptor read/8, error -71 [ 196.304237][ T6303] usb usb8-port1: unable to enumerate USB device [ 197.007759][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.014959][ T5752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 197.020408][ T5752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 197.026636][ T5752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 197.029701][ T845] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 197.032055][ T5752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 197.045861][T12306] kexec: Could not allocate control_code_buffer [ 197.085925][T12366] Failed to initialize the IGMP autojoin socket (err -2) [ 197.190630][ T845] usb 5-1: config 0 has no interfaces? [ 197.194223][ T845] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.197154][ T845] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 197.200246][ T845] usb 5-1: Product: syz [ 197.201579][ T845] usb 5-1: Manufacturer: syz [ 197.203072][ T845] usb 5-1: SerialNumber: syz [ 197.205993][ T845] usb 5-1: config 0 descriptor?? [ 197.236979][T12358] Failed to initialize the IGMP autojoin socket (err -2) [ 197.430851][ T845] usb 5-1: USB disconnect, device number 41 [ 197.618690][T12414] No source specified [ 197.914658][T12437] loop7: detected capacity change from 0 to 7 [ 197.980656][T12437] Dev loop7: unable to read RDB block 7 [ 197.982419][T12437] loop7: unable to read partition table [ 197.983439][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 197.988222][ C1] buffer_io_error: 11 callbacks suppressed [ 197.988237][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 197.994660][T12437] loop7: partition table beyond EOD, truncated [ 198.003337][T12437] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 199.052499][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.052999][ T5752] Bluetooth: hci1: command tx timeout [ 199.055748][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.181042][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 199.181059][ T40] audit: type=1400 audit(1780198834.161:1066): avc: denied { write } for pid=12489 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.308551][ T40] audit: type=1400 audit(1780198834.281:1067): avc: denied { write } for pid=12492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.358703][ T40] audit: type=1400 audit(1780198834.331:1068): avc: denied { write } for pid=12495 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.473751][ T40] audit: type=1400 audit(1780198834.451:1069): avc: denied { write } for pid=12498 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.525000][ T40] audit: type=1400 audit(1780198834.501:1070): avc: denied { write } for pid=12501 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.656571][ T40] audit: type=1400 audit(1780198834.631:1071): avc: denied { write } for pid=12504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.705552][ T40] audit: type=1400 audit(1780198834.681:1072): avc: denied { write } for pid=12507 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.805586][ T40] audit: type=1400 audit(1780198834.781:1073): avc: denied { write } for pid=12510 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.857004][ T40] audit: type=1400 audit(1780198834.831:1074): avc: denied { write } for pid=12513 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.962373][ T40] audit: type=1400 audit(1780198834.941:1075): avc: denied { write } for pid=12516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.934476][T12571] overlayfs: failed to resolve './file0': -2 [ 200.943156][T12571] 9p: Bad value for 'rfdno' [ 201.129202][ T5752] Bluetooth: hci1: command tx timeout [ 201.305519][T12358] netdevsim netdevsim4 netdevsim0: renamed from eth2 [ 201.314523][T12358] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.317813][T12358] netdevsim netdevsim4 netdevsim1: renamed from eth3 [ 201.337039][T12358] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.342379][T12358] netdevsim netdevsim4 netdevsim2: renamed from eth4 [ 201.357584][T12358] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 201.363570][T12358] netdevsim netdevsim4 netdevsim3: renamed from eth5 [ 201.372493][T12358] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.499062][T12648] __nla_validate_parse: 2 callbacks suppressed [ 201.499081][T12648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1951'. [ 201.509206][ T6303] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 201.669180][ T6303] usb 8-1: Using ep0 maxpacket: 8 [ 201.673240][ T6303] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.679584][ T6303] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.682347][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1953'. [ 201.688730][ T6303] usb 8-1: config 0 interface 0 has no altsetting 0 [ 201.696211][ T6303] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 201.698931][ T6303] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.708582][ T6303] usb 8-1: config 0 descriptor?? [ 201.898926][T12358] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 201.909990][T12358] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 201.918840][T12358] wireguard: wg0: Could not create IPv4 socket [ 201.924243][T12358] wireguard: wg1: Could not create IPv4 socket [ 201.928843][T12358] wireguard: wg2: Could not create IPv4 socket [ 202.015835][T12682] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1956'. [ 202.121636][ T6303] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 202.129267][ T6303] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 202.133166][ T6303] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 202.137871][ T6303] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 202.148968][ T6303] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 202.158930][ T6303] mcp2221 0003:04D8:00DD.0021: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 202.303066][T12745] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1962'. [ 202.322881][ T6303] usb 8-1: USB disconnect, device number 42 [ 202.753731][T12804] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1973'. [ 202.757036][T12804] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.759516][T12804] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.209269][ T5096] Bluetooth: hci1: command tx timeout [ 203.268946][T12851] netlink: 620 bytes leftover after parsing attributes in process `syz.3.1987'. [ 203.321600][T12854] netlink: 'syz.3.1988': attribute type 39 has an invalid length. [ 203.368428][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1989'. [ 203.378590][T12858] macvlan0: left promiscuous mode [ 203.383213][T12858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1989'. [ 203.529216][T12868] hpfs: Bad magic ... probably not HPFS [ 203.534807][T12868] hpfs: Bad magic ... probably not HPFS [ 203.624966][T12877] /dev/sg0: Can't lookup blockdev [ 203.659279][T12881] netlink: 'syz.2.1996': attribute type 10 has an invalid length. [ 203.665874][T12881] team_slave_0: left promiscuous mode [ 203.678875][T12881] team0 (unregistering): Port device team_slave_0 removed [ 203.682326][T12881] team_slave_1: left promiscuous mode [ 203.688355][T12881] team0 (unregistering): Port device team_slave_1 removed [ 203.721183][T12893] random: crng reseeded on system resumption [ 203.929802][T12921] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2006'. [ 204.039448][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 204.199184][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 204.202420][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 204.205982][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.211269][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 127, changing to 10 [ 204.215768][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 204.224840][ T9] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 204.228613][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.232540][ T9] usb 5-1: Product: syz [ 204.234146][ T9] usb 5-1: Manufacturer: syz [ 204.235582][ T9] usb 5-1: SerialNumber: syz [ 204.238947][ T9] usb 5-1: config 0 descriptor?? [ 204.241183][T12904] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 204.339289][ T3266] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 204.447503][ T9] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 204.451941][ T9] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input47 [ 204.500772][ T3266] usb 8-1: Using ep0 maxpacket: 16 [ 204.503873][ T3266] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.507509][ T3266] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 204.512114][ T3266] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 204.515007][ T3266] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.517512][ T3266] usb 8-1: Product: syz [ 204.518906][ T3266] usb 8-1: Manufacturer: syz [ 204.520844][ T3266] usb 8-1: SerialNumber: syz [ 204.525521][ T3266] r8152-cfgselector 8-1: Unknown version 0x0000 [ 204.527489][ T3266] r8152-cfgselector 8-1: config 0 descriptor?? [ 204.650889][ C0] powermate: config urb returned -71 [ 204.653041][ C0] powermate: config urb returned -71 [ 204.654881][ T9] usb 5-1: USB disconnect, device number 42 [ 204.656853][ C0] powermate: config urb returned -71 [ 204.656862][ C0] powermate: usb_submit_urb(config) failed [ 204.656879][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 204.732682][ T3266] r8152-cfgselector 8-1: USB disconnect, device number 43 [ 204.924239][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 204.924256][ T40] audit: type=1400 audit(1780198839.901:1113): avc: denied { mount } for pid=12958 comm="syz.2.2013" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 205.014182][ T40] audit: type=1400 audit(1780198839.991:1114): avc: denied { remount } for pid=12958 comm="syz.2.2013" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 205.289296][ T40] audit: type=1400 audit(1780198840.261:1115): avc: denied { write } for pid=12963 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.332709][ T40] audit: type=1400 audit(1780198840.311:1116): avc: denied { write } for pid=12974 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.454592][T12988] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 205.482872][T12988] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 205.531744][ T40] audit: type=1400 audit(1780198840.511:1117): avc: denied { write } for pid=12990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.572704][ T40] audit: type=1400 audit(1780198840.551:1118): avc: denied { write } for pid=12998 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.649217][ T3266] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 205.716940][ T40] audit: type=1400 audit(1780198840.691:1119): avc: denied { write } for pid=13002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.773283][ T40] audit: type=1400 audit(1780198840.751:1120): avc: denied { unmount } for pid=5743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 205.784240][ T40] audit: type=1400 audit(1780198840.761:1121): avc: denied { write } for pid=13010 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.800252][ T3266] usb 5-1: Using ep0 maxpacket: 32 [ 205.805577][ T3266] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 205.812526][ T3266] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 205.815394][ T3266] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 205.819313][ T3266] usb 5-1: Product: syz [ 205.820645][ T3266] usb 5-1: Manufacturer: syz [ 205.822051][ T3266] usb 5-1: SerialNumber: syz [ 205.827802][ T3266] usb 5-1: config 0 descriptor?? [ 205.829913][T12983] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 205.833218][ T3266] hub 5-1:0.0: bad descriptor, ignoring hub [ 205.835177][ T3266] hub 5-1:0.0: probe with driver hub failed with error -5 [ 205.872099][ T40] audit: type=1400 audit(1780198840.851:1122): avc: denied { write } for pid=13016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.898794][T13023] netlink: 'syz.2.2027': attribute type 11 has an invalid length. [ 205.912200][T13023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2027'. [ 205.997069][T13034] bond3: entered promiscuous mode [ 205.998793][T13034] bond3: entered allmulticast mode [ 206.259758][ T7027] usb 5-1: USB disconnect, device number 43 [ 206.409775][T13082] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 206.511461][T13093] netlink: 'syz.2.2044': attribute type 1 has an invalid length. [ 206.535547][T13093] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.840057][T13133] netlink: 'syz.2.2050': attribute type 4 has an invalid length. [ 206.883486][T13138] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 206.896809][T13133] securityfs: Unknown parameter 'debuginfiniband/rdma_cm' [ 207.105435][T13171] IPVS: Error during creation of socket; terminating [ 207.956538][T13230] XFS (nbd3): no-recovery mounts must be read-only. [ 208.424784][T13260] __nla_validate_parse: 2 callbacks suppressed [ 208.424803][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2071'. [ 208.514392][T13264] netlink: 488 bytes leftover after parsing attributes in process `syz.3.2072'. [ 208.607436][T13275] netlink: 'syz.3.2074': attribute type 58 has an invalid length. [ 208.899409][ T3266] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 209.027985][T13293] NILFS (loop0): device size too small [ 209.081232][ T3266] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.085606][ T3266] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 209.090784][ T3266] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 209.094588][ T3266] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.100086][ T3266] usb 8-1: config 0 descriptor?? [ 209.106882][ T3266] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 209.113666][ T3266] dvb-usb: bulk message failed: -22 (3/0) [ 209.131919][ T3266] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 209.135913][ T3266] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 209.138881][ T3266] usb 8-1: media controller created [ 209.143328][ T3266] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.170677][ T3266] dvb-usb: bulk message failed: -22 (6/0) [ 209.173491][ T3266] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 209.182049][ T3266] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input48 [ 209.198862][ T3266] dvb-usb: schedule remote query interval to 150 msecs. [ 209.204954][ T3266] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 209.285693][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2080'. [ 209.309435][T13278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.313467][T13278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.321848][T13278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.325614][T13278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.365345][ T3266] dvb-usb: bulk message failed: -22 (1/0) [ 209.368872][ T3266] dvb-usb: error while querying for an remote control event. [ 209.529193][ T3266] dvb-usb: bulk message failed: -22 (1/0) [ 209.531313][ T3266] dvb-usb: error while querying for an remote control event. [ 209.540974][T13330] netlink: 'syz.0.2084': attribute type 16 has an invalid length. [ 209.544296][T13330] netlink: 'syz.0.2084': attribute type 17 has an invalid length. [ 209.561027][T13330] 8021q: adding VLAN 0 to HW filter on device .` [ 209.564495][T13330] batman_adv: batadv0: Interface activated: dummy0 [ 209.567823][T13330] batadv0: mtu less than device minimum [ 209.572929][T13330] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.577720][T13330] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.581369][T13330] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.585035][T13330] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.588655][T13330] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.593404][T13330] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.597007][T13330] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.600683][T13330] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.604467][T13330] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.625418][T13330] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.629646][T13330] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.673227][T13330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.678464][T13330] geneve2: left promiscuous mode [ 209.685718][T13330] batadv0: entered promiscuous mode [ 209.688786][T13330] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 209.695909][ T596] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 209.699399][ T3266] dvb-usb: bulk message failed: -22 (1/0) [ 209.705091][ T3266] dvb-usb: error while querying for an remote control event. [ 209.836616][ T5823] usb 8-1: USB disconnect, device number 44 [ 209.881330][ T5823] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 209.968190][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 209.968206][ T40] audit: type=1400 audit(1780198844.941:1178): avc: denied { write } for pid=13356 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.989359][ T3266] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 210.150688][ T3266] usb 5-1: Using ep0 maxpacket: 8 [ 210.152803][ T3266] usb 5-1: no configurations [ 210.154268][ T3266] usb 5-1: can't read configurations, error -22 [ 210.159246][ T40] audit: type=1400 audit(1780198845.131:1179): avc: denied { write } for pid=13372 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.222693][ T40] audit: type=1400 audit(1780198845.201:1180): avc: denied { write } for pid=13383 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.291401][ T3266] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 210.334753][ T40] audit: type=1400 audit(1780198845.311:1181): avc: denied { write } for pid=13387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.371823][ T845] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 210.386352][ T40] audit: type=1400 audit(1780198845.361:1182): avc: denied { write } for pid=13395 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.417940][T13398] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 210.471426][ T3266] usb 5-1: Using ep0 maxpacket: 8 [ 210.475058][ T3266] usb 5-1: no configurations [ 210.476996][ T3266] usb 5-1: can't read configurations, error -22 [ 210.482099][ T3266] usb usb5-port1: attempt power cycle [ 210.522103][ T845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.527254][ T845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.534100][ T845] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.539731][ T845] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.543422][ T845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.548852][ T845] usb 8-1: config 0 descriptor?? [ 210.829392][ T3266] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 210.862044][ T3266] usb 5-1: Using ep0 maxpacket: 8 [ 210.867103][ T3266] usb 5-1: no configurations [ 210.868824][ T3266] usb 5-1: can't read configurations, error -22 [ 210.960150][ T845] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 210.964611][ T845] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 210.969277][ T845] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 210.976129][ T845] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 210.981368][ T845] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 210.984009][ T845] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 210.986520][ T845] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 210.990647][ T845] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 210.993183][ T845] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 210.995986][ T845] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 210.999670][ T3266] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 211.010136][ T845] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 211.024375][ T3266] usb 5-1: Using ep0 maxpacket: 8 [ 211.026438][ T3266] usb 5-1: no configurations [ 211.027896][ T3266] usb 5-1: can't read configurations, error -22 [ 211.032395][ T3266] usb usb5-port1: unable to enumerate USB device [ 211.114279][T13452] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2100'. [ 211.275773][ T3266] usb 8-1: USB disconnect, device number 45 [ 211.283842][T13379] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2090'. [ 211.420221][T13477] fuse: Bad value for 'fd' [ 211.978250][T13487] netlink: 'syz.2.2109': attribute type 39 has an invalid length. [ 212.068649][ T40] audit: type=1400 audit(1780198847.041:1183): avc: denied { write } for pid=13490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.130004][ T40] audit: type=1400 audit(1780198847.111:1184): avc: denied { write } for pid=13493 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.209358][ T845] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 212.370816][ T845] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.375523][ T845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 212.379537][ T845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 212.385144][ T845] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 212.388697][ T845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.392172][ T845] usb 8-1: Product: syz [ 212.393781][ T845] usb 8-1: Manufacturer: syz [ 212.397036][ T845] usb 8-1: SerialNumber: syz [ 212.402798][ T845] usb 8-1: config 0 descriptor?? [ 212.405598][T13488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 212.459282][ T845] rc_core: IR keymap rc-streamzap not found [ 212.461172][ T845] Registered IR keymap rc-empty [ 212.463445][ T845] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 212.468472][ T845] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input49 [ 212.498432][ T40] audit: type=1400 audit(1780198847.471:1185): avc: denied { write } for pid=13510 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.560238][ T40] audit: type=1400 audit(1780198847.541:1186): avc: denied { write } for pid=13523 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.626935][ T40] audit: type=1400 audit(1780198847.601:1187): avc: denied { write } for pid=13485 comm="syz.3.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 213.139378][ T845] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 213.309582][ T845] usb 5-1: Using ep0 maxpacket: 8 [ 213.313365][ T845] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.317087][ T845] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.320826][ T845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 213.322828][ T845] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 213.325709][ T845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.333623][ T845] usb 5-1: config 0 descriptor?? [ 213.439380][T13562] can: request_module (can-proto-0) failed. [ 213.449410][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 213.544543][T13572] fuse: Bad value for 'fd' [ 213.746990][ T845] mcp2221 0003:04D8:00DD.0023: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 213.944823][ T5843] usb 5-1: USB disconnect, device number 48 [ 214.285128][T13580] overlayfs: missing 'lowerdir' [ 214.573428][T13616] bridge5: entered promiscuous mode [ 214.575727][T13616] bridge5: entered allmulticast mode [ 215.029579][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 215.029591][ T40] audit: type=1400 audit(1780198850.001:1200): avc: denied { write } for pid=13651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.076816][ T40] audit: type=1400 audit(1780198850.051:1201): avc: denied { write } for pid=13658 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.177505][T13667] binder: BINDER_SET_CONTEXT_MGR already set [ 215.179259][ T59] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 215.179663][T13667] binder: 13666:13667 ioctl 4018620d 200000000100 returned -16 [ 215.186502][T13667] binder: 13666:13667 ioctl c0306201 200000000480 returned -14 [ 215.188305][ T40] audit: type=1400 audit(1780198850.161:1202): avc: denied { write } for pid=13664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.245116][ T40] audit: type=1400 audit(1780198850.221:1203): avc: denied { write } for pid=13671 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.333436][ T40] audit: type=1400 audit(1780198850.311:1204): avc: denied { write } for pid=13674 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.343751][ T59] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.349473][T13678] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 215.353300][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 215.357796][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 215.365759][ T59] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 215.371154][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.374253][ T59] usb 5-1: Product: syz [ 215.376020][ T59] usb 5-1: Manufacturer: syz [ 215.377865][ T59] usb 5-1: SerialNumber: syz [ 215.382544][ T59] usb 5-1: config 0 descriptor?? [ 215.387345][T13649] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 215.403918][ T40] audit: type=1400 audit(1780198850.381:1205): avc: denied { write } for pid=13682 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.441078][ T59] rc_core: IR keymap rc-streamzap not found [ 215.442719][T13688] Failed to initialize the IGMP autojoin socket (err -2) [ 215.445117][ T59] Registered IR keymap rc-empty [ 215.455924][ T59] rc rc1: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc1 [ 215.458402][T13689] Failed to initialize the IGMP autojoin socket (err -2) [ 215.464923][ T59] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc1/input50 [ 215.527834][ T40] audit: type=1400 audit(1780198850.501:1206): avc: denied { write } for pid=13693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.582631][ T40] audit: type=1400 audit(1780198850.561:1207): avc: denied { write } for pid=13704 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.607562][ T6303] usb 5-1: USB disconnect, device number 49 [ 215.658508][T13716] binder: BINDER_SET_CONTEXT_MGR already set [ 215.661442][T13716] binder: 13715:13716 ioctl 4018620d 200000000480 returned -16 [ 215.667493][T13716] binder: 13715:13716 ioctl c0306201 200000000040 returned -14 [ 215.671002][T13716] binder: 13715:13716 ioctl c0306201 200000000280 returned -11 [ 215.677350][T13716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.681650][T13716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.710729][ T40] audit: type=1400 audit(1780198850.691:1208): avc: denied { write } for pid=13720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.756401][ T40] audit: type=1400 audit(1780198850.731:1209): avc: denied { write } for pid=13727 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.890180][T13732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13732 comm=syz.2.2168 [ 216.153034][T13761] netlink: 620 bytes leftover after parsing attributes in process `syz.0.2174'. [ 216.347034][T13777] dns_resolver: Unsupported content type (234) [ 216.389019][T13782] debugfs: Bad value for 'mode' [ 216.675866][T13806] netlink: 'syz.2.2187': attribute type 2 has an invalid length. [ 216.678974][T13806] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2187'. [ 216.721132][T13810] /dev/nbd2: Can't lookup blockdev [ 216.723854][T13810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2188'. [ 216.863018][T13804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.872266][T13804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.879714][T13804] binder: BINDER_SET_CONTEXT_MGR already set [ 216.883052][T13804] binder: 13802:13804 ioctl 4018620d 200000000480 returned -16 [ 216.924389][T13804] binder: 13802:13804 ioctl c0306201 200000000040 returned -22 [ 217.575161][T13869] overlayfs: conflicting options: nfs_export=on,index=off [ 217.580761][T13869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=13869 comm=syz.2.2199 [ 217.823768][T13903] dlm: no locking on control device [ 218.040710][T13926] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2211'. [ 218.192881][T13945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2217'. [ 218.308660][T13962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2222'. [ 218.327612][T13965] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 218.397800][T13971] netlink: 'syz.0.2223': attribute type 10 has an invalid length. [ 218.402258][T13971] batman_adv: batadv0: Interface deactivated: dummy0 [ 218.406020][T13971] batman_adv: batadv0: Removing interface: dummy0 [ 218.416440][T13971] team0: Port device dummy0 added [ 218.680891][T13998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.689612][T13998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.241796][T14039] netlink: 'syz.3.2236': attribute type 1 has an invalid length. [ 219.267692][T14039] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.746170][T14090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2246'. [ 220.140219][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 220.140236][ T40] audit: type=1400 audit(1780198855.121:1258): avc: denied { write } for pid=14126 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.214674][ T40] audit: type=1400 audit(1780198855.191:1259): avc: denied { write } for pid=14131 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.250039][ T5889] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 220.315059][ T40] audit: type=1400 audit(1780198855.291:1260): avc: denied { write } for pid=14141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.383505][ T40] audit: type=1400 audit(1780198855.361:1261): avc: denied { write } for pid=14152 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.409866][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 220.413735][ T5889] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 220.416954][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.421747][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 127, changing to 10 [ 220.425420][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 220.430861][ T5889] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 220.433755][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.436340][ T5889] usb 5-1: Product: syz [ 220.440383][ T5889] usb 5-1: Manufacturer: syz [ 220.442036][ T5889] usb 5-1: SerialNumber: syz [ 220.446299][T14150] kvm: kvm [14149]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 220.449271][ T5889] usb 5-1: config 0 descriptor?? [ 220.452736][T14120] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 220.453141][T14150] kvm: kvm [14149]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 220.490092][ T40] audit: type=1400 audit(1780198855.471:1262): avc: denied { write } for pid=14156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.540397][ T40] audit: type=1400 audit(1780198855.521:1263): avc: denied { write } for pid=14160 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.660984][ T5889] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 220.672874][ T40] audit: type=1400 audit(1780198855.651:1264): avc: denied { write } for pid=14164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.685379][ T5889] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input51 [ 220.731433][ T40] audit: type=1400 audit(1780198855.711:1265): avc: denied { write } for pid=14167 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.793290][T14174] 9p: Bad value for 'wfdno' [ 220.793941][T14173] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 220.867856][ C1] powermate: config urb returned -71 [ 220.868793][ T59] usb 5-1: USB disconnect, device number 50 [ 220.903466][ C1] powermate: usb_submit_urb(config) failed [ 220.903520][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 220.915219][ T40] audit: type=1400 audit(1780198855.881:1266): avc: denied { write } for pid=14176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.947690][ T40] audit: type=1400 audit(1780198855.921:1267): avc: denied { write } for pid=14181 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.459278][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 221.527354][T14252] nbd: must specify an index to disconnect [ 221.614133][T14263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.621514][T14263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.652909][T14265] netlink: 'syz.2.2281': attribute type 29 has an invalid length. [ 222.490458][T14286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2290'. [ 222.553109][T14294] geneve1: entered allmulticast mode [ 222.572955][T14294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2292'. [ 222.712830][T14311] 9p: Could not find request transport: vartio [ 222.718380][T14314] program syz.3.2298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.805470][T14324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2303'. [ 222.832148][T14326] (syz.3.2304,14326,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 222.839608][T14326] (syz.3.2304,14326,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 222.842660][T14326] (syz.3.2304,14326,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 222.843389][T14324] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14324 comm=syz.0.2303 [ 222.845624][T14326] (syz.3.2304,14326,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 222.911139][T14336] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2307'. [ 222.953037][T14336] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2307'. [ 222.960792][T14336] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2307'. [ 222.971032][T14336] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2307'. [ 222.978885][T14336] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2307'. [ 222.985346][T14336] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2307'. [ 222.991906][T14336] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2307'. [ 223.043979][T14341] netlink: 'syz.0.2309': attribute type 1 has an invalid length. [ 223.047421][T14343] netlink: 'syz.0.2309': attribute type 1 has an invalid length. [ 223.070758][T14341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.078998][T14341] binder: 14340:14341 ioctl c0306201 200000000080 returned -22 [ 223.134892][T14347] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 223.441725][T14373] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 223.452817][T14374] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 223.458870][T14374] net_ratelimit: 10 callbacks suppressed [ 223.458880][T14374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.781105][T14388] i2c i2c-1: dtv_property_process_set: SET cmd 0x00002000 undefined [ 223.819267][ T5843] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 223.823221][T14388] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 223.969456][ T5843] usb 5-1: Using ep0 maxpacket: 8 [ 223.973601][ T5843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.977901][ T5843] usb 5-1: config 0 has no interfaces? [ 223.984098][ T5843] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 223.987979][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.991670][ T5843] usb 5-1: Product: syz [ 223.993408][ T5843] usb 5-1: Manufacturer: syz [ 223.995396][ T5843] usb 5-1: SerialNumber: syz [ 224.000902][ T5843] usb 5-1: config 0 descriptor?? [ 224.144079][T14414] /dev/nbd2: Can't lookup blockdev [ 224.345268][T14421] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 224.495760][T14429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=14429 comm=syz.3.2337 [ 224.504471][T14429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=14429 comm=syz.3.2337 [ 224.509904][T14429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=14429 comm=syz.3.2337 [ 224.853097][T14467] befs: (nbd3): unable to read superblock [ 225.589561][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 225.589572][ T40] audit: type=1400 audit(1780198860.571:1290): avc: denied { write } for pid=14495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.646790][ T40] audit: type=1400 audit(1780198860.621:1291): avc: denied { write } for pid=14498 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.683703][T14503] netlink: 'syz.2.2356': attribute type 15 has an invalid length. [ 225.683728][T14504] netlink: 'syz.2.2356': attribute type 15 has an invalid length. [ 225.862500][T14515] netlink: 'syz.2.2360': attribute type 266 has an invalid length. [ 226.163802][ T40] audit: type=1400 audit(1780198861.141:1292): avc: denied { write } for pid=14526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.224567][ T40] audit: type=1400 audit(1780198861.201:1293): avc: denied { write } for pid=14533 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.343888][ T40] audit: type=1400 audit(1780198861.321:1294): avc: denied { write } for pid=14536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.405808][ T40] audit: type=1400 audit(1780198861.381:1295): avc: denied { write } for pid=14544 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.509671][ T40] audit: type=1400 audit(1780198861.481:1296): avc: denied { write } for pid=14551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.582616][ T40] audit: type=1400 audit(1780198861.561:1297): avc: denied { write } for pid=14558 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.354927][ T7027] usb 5-1: USB disconnect, device number 51 [ 227.453354][ T40] audit: type=1400 audit(1780198862.431:1298): avc: denied { ioctl } for pid=14563 comm="syz.2.2370" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 227.465946][ T40] audit: type=1400 audit(1780198862.441:1299): avc: denied { wake_alarm } for pid=14563 comm="syz.2.2370" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 227.467873][T14569] kernel read not supported for file /file1 (pid: 14569 comm: syz.0.2369) [ 227.516945][T14574] nfs: Unknown parameter 'nofscKu6 5WB~%' [ 227.520575][T14575] nfs: Unknown parameter 'nofscKu6 5WB~%' [ 227.717125][T14592] nfs: Unknown parameter '@' [ 227.814658][T14590] IPVS: persistence engine module ip_vs_pe_s not found [ 228.087447][T14617] __nla_validate_parse: 30 callbacks suppressed [ 228.087461][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2387'. [ 228.368163][T14644] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2397'. [ 228.374333][T14645] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2397'. [ 228.403479][T14648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.407306][T14648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.419693][T14650] netlink: 620 bytes leftover after parsing attributes in process `syz.2.2399'. [ 228.517631][T14664] fuse: Bad value for 'fd' [ 228.789610][T14690] netlink: 'syz.2.2413': attribute type 3 has an invalid length. [ 229.099267][ T5843] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 229.249232][ T5843] usb 5-1: Using ep0 maxpacket: 8 [ 229.255173][ T5843] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 229.258873][ T5843] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.264612][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 127, changing to 10 [ 229.269312][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 229.275693][ T5843] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 229.279784][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.283079][ T5843] usb 5-1: Product: syz [ 229.284841][ T5843] usb 5-1: Manufacturer: syz [ 229.286285][T14715] sg_write: data in/out 1067/14 bytes for SCSI command 0x0-- guessing data in; [ 229.286285][T14715] program syz.3.2423 not setting count and/or reply_len properly [ 229.286737][ T5843] usb 5-1: SerialNumber: syz [ 229.288919][ T5843] usb 5-1: config 0 descriptor?? [ 229.299523][T14694] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 229.388173][T14718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2424'. [ 229.509014][ T5843] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 229.514733][ T5843] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input52 [ 229.716918][ C3] powermate: config urb returned -71 [ 229.719261][ C3] powermate: config urb returned -71 [ 229.719880][ T29] usb 5-1: USB disconnect, device number 52 [ 229.721327][ C3] powermate: usb_submit_urb(config) failed [ 229.721353][ C3] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 230.045589][T14730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14730 comm=syz.2.2428 [ 230.104480][T14732] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2429'. [ 230.110247][T14715] orangefs_mount: mount request failed with -4 [ 230.253478][T14748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2434'. [ 230.307789][T14753] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2435'. [ 230.441498][T14759] binder: 14758:14759 ioctl c00c6211 0 returned -14 [ 230.472990][T14771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.478069][T14771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.496899][T14768] devtmpfs: Cannot change global quota limit on remount [ 230.529283][ T5843] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 230.679317][ T5843] usb 5-1: Using ep0 maxpacket: 8 [ 230.682791][ T5843] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.686944][ T5843] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.690438][ T5843] usb 5-1: config 0 interface 0 has no altsetting 0 [ 230.693071][ T5843] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 230.696488][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.701619][ T5843] usb 5-1: config 0 descriptor?? [ 231.113277][ T5843] hid_parser_main: 9 callbacks suppressed [ 231.113296][ T5843] mcp2221 0003:04D8:00DD.0024: unknown main item tag 0x0 [ 231.121325][ T5843] mcp2221 0003:04D8:00DD.0024: unknown main item tag 0x0 [ 231.124201][ T5843] mcp2221 0003:04D8:00DD.0024: unknown main item tag 0x0 [ 231.127070][ T5843] mcp2221 0003:04D8:00DD.0024: unknown main item tag 0x0 [ 231.130142][ T5843] mcp2221 0003:04D8:00DD.0024: unknown main item tag 0x0 [ 231.133150][ T5843] mcp2221 0003:04D8:00DD.0024: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 231.162653][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2451'. [ 231.306020][T14808] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2455'. [ 231.310919][T14808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=14808 comm=syz.2.2455 [ 231.316867][ T59] usb 5-1: USB disconnect, device number 53 [ 231.340511][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 231.340523][ T40] audit: type=1400 audit(1780198866.321:1312): avc: denied { listen } for pid=14809 comm="syz.3.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 231.379636][T14814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.382419][T14814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.386958][T14814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.389849][T14814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.447216][T14819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.451321][T14819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.456201][T14819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.458923][T14819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.085933][T14833] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 232.345825][T14853] bond6: entered promiscuous mode [ 232.549248][ T29] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 232.699402][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 232.702779][ T29] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.706309][ T29] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.710124][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 232.712238][ T29] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 232.715028][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.722830][ T29] usb 5-1: config 0 descriptor?? [ 232.823006][T14879] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14879 comm=syz.2.2481 [ 233.152378][ T29] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 233.155452][ T29] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 233.158631][ T29] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 233.161777][ T29] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 233.164879][ T29] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 233.169062][ T29] mcp2221 0003:04D8:00DD.0025: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 233.348494][ T59] usb 5-1: USB disconnect, device number 54 [ 233.882589][ T40] audit: type=1400 audit(1780198868.861:1313): avc: denied { append } for pid=14944 comm="syz.0.2491" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 234.045791][T14962] fuse: Bad value for 'fd' [ 234.192609][T14973] kernel profiling enabled (shift: 63) [ 234.194972][T14973] profiling shift: 63 too large [ 234.274735][T14980] __nla_validate_parse: 3 callbacks suppressed [ 234.274747][T14980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2502'. [ 234.318676][T14985] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 234.329000][T14985] CIFS mount error: No usable UNC path provided in device string! [ 234.329000][T14985] [ 234.333544][T14985] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 234.415159][T14991] misc userio: Invalid payload size [ 234.492843][T14994] team0: entered promiscuous mode [ 234.495093][T14994] team_slave_0: entered promiscuous mode [ 234.497694][T14994] team_slave_1: entered promiscuous mode [ 234.500521][T14994] team0: entered allmulticast mode [ 234.502589][T14994] team_slave_0: entered allmulticast mode [ 234.504917][T14994] team_slave_1: entered allmulticast mode [ 234.662864][ T40] audit: type=1400 audit(1780198869.641:1314): avc: denied { setattr } for pid=14997 comm="syz.3.2507" name="video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 235.505887][T15043] bond2: entered promiscuous mode [ 235.507848][T15043] 8021q: adding VLAN 0 to HW filter on device bond2 [ 235.524012][T15043] IPv4: Oversized IP packet from 127.202.26.0 [ 235.527988][T15043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2518'. [ 235.991246][T15088] sd 0:0:0:0: PR command failed: 1026 [ 235.993024][T15088] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 235.995119][T15088] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 236.021622][T15097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.024408][T15079] bridge0: port 3(erspan0) entered blocking state [ 236.024484][T15097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.031086][T15079] bridge0: port 3(erspan0) entered disabled state [ 236.037122][T15079] erspan0: entered allmulticast mode [ 236.041308][T15079] erspan0: entered promiscuous mode [ 236.671842][T15127] netlink: 'syz.0.2541': attribute type 1 has an invalid length. [ 236.672239][T15122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2539'. [ 236.680517][T15122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2539'. [ 236.683237][T15127] 8021q: adding VLAN 0 to HW filter on device bond3 [ 236.692567][T15127] bond3: (slave geneve3): making interface the new active one [ 236.696522][T15127] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 236.826591][T15138] exFAT-fs (nbd3): unable to read boot sector [ 236.828530][T15138] exFAT-fs (nbd3): failed to read boot sector [ 236.832191][T15138] exFAT-fs (nbd3): failed to recognize exfat type [ 236.837759][T15138] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2546'. [ 236.879367][T15145] binder: BINDER_SET_CONTEXT_MGR already set [ 236.881414][T15145] binder: 15144:15145 ioctl 4018620d 200000004a80 returned -16 [ 236.933873][ T40] audit: type=1400 audit(1780198871.911:1315): avc: denied { read write } for pid=15146 comm="syz.3.2549" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 236.942211][ T40] audit: type=1400 audit(1780198871.921:1316): avc: denied { open } for pid=15146 comm="syz.3.2549" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 236.950788][T15147] bridge_slave_0 (unregistering): left allmulticast mode [ 236.953077][T15147] bridge_slave_0 (unregistering): left promiscuous mode [ 236.956954][T15147] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.060790][ T7027] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 237.176669][ T40] audit: type=1400 audit(1780198872.151:1317): avc: denied { bind } for pid=15150 comm="syz.3.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 237.219242][ T7027] usb 5-1: Using ep0 maxpacket: 8 [ 237.223298][ T7027] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.229260][ T7027] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.239198][ T7027] usb 5-1: config 0 interface 0 has no altsetting 0 [ 237.241925][ T7027] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 237.245805][ T7027] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.260681][ T7027] usb 5-1: config 0 descriptor?? [ 237.293681][T15161] fuse: Bad value for 'fd' [ 237.301136][T15161] cgroup: subsys name conflicts with all [ 237.449264][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 237.465354][T15171] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2557'. [ 237.567518][ T40] audit: type=1804 audit(1780198872.541:1318): pid=15173 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2558" name="/newroot/649/file0" dev="tmpfs" ino=3448 res=1 errno=0 [ 237.674088][ T7027] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0 [ 237.677242][ T7027] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0 [ 237.681135][ T7027] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0 [ 237.684106][ T7027] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0 [ 237.686926][ T7027] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0 [ 237.687462][T15183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.690563][ T7027] mcp2221 0003:04D8:00DD.0026: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 237.692462][T15183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.874004][ T5889] usb 5-1: USB disconnect, device number 55 [ 238.330213][T15219] netlink: 'syz.2.2572': attribute type 1 has an invalid length. [ 238.332770][T15219] netlink: 'syz.2.2572': attribute type 1 has an invalid length. [ 238.335090][T15219] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2572'. [ 238.337728][T15219] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2572'. [ 238.340729][T15219] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2572'. [ 238.358459][ T40] audit: type=1326 audit(1780198873.331:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15213 comm="syz.3.2573" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f6259ce59 code=0x0 [ 238.577045][T15232] fuse: Unknown parameter '0xffffffffffffffff' [ 238.991127][T15264] overlayfs: failed lookup in lower (newroot/554, name='bus', err=-40): overlapping layers [ 239.214956][ T40] audit: type=1400 audit(1780198874.191:1320): avc: denied { load_policy } for pid=15269 comm="syz.3.2587" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 239.215081][T15270] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 239.227049][T15270] SELinux: failed to load policy [ 239.259444][ T29] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 239.261863][T15275] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2589'. [ 239.400151][T15287] FAULT_INJECTION: forcing a failure. [ 239.400151][T15287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.404271][T15287] CPU: 3 UID: 0 PID: 15287 Comm: syz.3.2595 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.404288][T15287] Tainted: [L]=SOFTLOCKUP [ 239.404293][T15287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.404299][T15287] Call Trace: [ 239.404303][T15287] [ 239.404308][T15287] dump_stack_lvl+0x100/0x190 [ 239.404324][T15287] should_fail_ex.cold+0x5/0xa [ 239.404340][T15287] _copy_from_user+0x2e/0xd0 [ 239.404354][T15287] copy_msghdr_from_user+0x9f/0x4f0 [ 239.404369][T15287] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 239.404389][T15287] ___sys_sendmsg+0x106/0x1e0 [ 239.404403][T15287] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.404432][T15287] __sys_sendmsg+0x170/0x220 [ 239.404448][T15287] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.404470][T15287] ? rcu_is_watching+0x12/0xc0 [ 239.404487][T15287] do_syscall_64+0x115/0x870 [ 239.404502][T15287] ? clear_bhb_loop+0x40/0x90 [ 239.404516][T15287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.404527][T15287] RIP: 0033:0x7f3f6259ce59 [ 239.404537][T15287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.404548][T15287] RSP: 002b:00007f3f607f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.404559][T15287] RAX: ffffffffffffffda RBX: 00007f3f62815fa0 RCX: 00007f3f6259ce59 [ 239.404566][T15287] RDX: 0000000004040000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 239.404573][T15287] RBP: 00007f3f607f6090 R08: 0000000000000000 R09: 0000000000000000 [ 239.404579][T15287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.404585][T15287] R13: 00007f3f62816038 R14: 00007f3f62815fa0 R15: 00007ffde82aaff8 [ 239.404599][T15287] [ 239.463446][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 239.466618][ T29] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.470111][ T29] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.473261][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 239.475379][ T29] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 239.478803][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.485297][ T29] usb 5-1: config 0 descriptor?? [ 239.605453][ T40] audit: type=1804 audit(1780198874.581:1321): pid=15301 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2602" name="/newroot/661/file0" dev="tmpfs" ino=3510 res=1 errno=0 [ 239.704076][T15308] netlink: 'syz.3.2604': attribute type 15 has an invalid length. [ 239.707228][T15308] netlink: 'syz.3.2604': attribute type 7 has an invalid length. [ 239.711737][T15308] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2604'. [ 239.754627][T15315] FAULT_INJECTION: forcing a failure. [ 239.754627][T15315] name failslab, interval 1, probability 0, space 0, times 0 [ 239.759192][T15315] CPU: 0 UID: 0 PID: 15315 Comm: syz.3.2607 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.759210][T15315] Tainted: [L]=SOFTLOCKUP [ 239.759215][T15315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.759221][T15315] Call Trace: [ 239.759226][T15315] [ 239.759231][T15315] dump_stack_lvl+0x100/0x190 [ 239.759248][T15315] should_fail_ex.cold+0x5/0xa [ 239.759264][T15315] should_failslab+0xc2/0x120 [ 239.759276][T15315] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 239.759293][T15315] ? __alloc_skb+0x140/0x710 [ 239.759308][T15315] ? __alloc_skb+0x5b7/0x710 [ 239.759325][T15315] __alloc_skb+0x140/0x710 [ 239.759339][T15315] ? __alloc_skb+0x5b7/0x710 [ 239.759354][T15315] ? __pfx___alloc_skb+0x10/0x10 [ 239.759372][T15315] netlink_alloc_large_skb+0x69/0x150 [ 239.759388][T15315] netlink_sendmsg+0x680/0xda0 [ 239.759403][T15315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.759415][T15315] ? __might_fault+0x60/0x140 [ 239.759435][T15315] ____sys_sendmsg+0x9e1/0xb70 [ 239.759448][T15315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.759462][T15315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.759480][T15315] ___sys_sendmsg+0x190/0x1e0 [ 239.759494][T15315] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.759523][T15315] __sys_sendmsg+0x170/0x220 [ 239.759539][T15315] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.759561][T15315] ? rcu_is_watching+0x12/0xc0 [ 239.759579][T15315] do_syscall_64+0x115/0x870 [ 239.759593][T15315] ? clear_bhb_loop+0x40/0x90 [ 239.759606][T15315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.759622][T15315] RIP: 0033:0x7f3f6259ce59 [ 239.759632][T15315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.759642][T15315] RSP: 002b:00007f3f607f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.759653][T15315] RAX: ffffffffffffffda RBX: 00007f3f62815fa0 RCX: 00007f3f6259ce59 [ 239.759660][T15315] RDX: 0000000004040000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 239.759667][T15315] RBP: 00007f3f607f6090 R08: 0000000000000000 R09: 0000000000000000 [ 239.759673][T15315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.759679][T15315] R13: 00007f3f62816038 R14: 00007f3f62815fa0 R15: 00007ffde82aaff8 [ 239.759693][T15315] [ 239.874170][T15319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2608'. [ 239.902998][ T29] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 239.906071][ T29] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 239.909054][ T29] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 239.913599][ T29] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 239.916635][ T29] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 239.921240][ T29] mcp2221 0003:04D8:00DD.0027: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 240.100790][ T3266] usb 5-1: USB disconnect, device number 56 [ 240.636116][T15323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2610'. [ 240.716360][T15331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2613'. [ 240.804888][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2612'. [ 240.944408][T15333] syzkaller0: entered promiscuous mode [ 240.946224][T15333] syzkaller0: entered allmulticast mode [ 241.053635][T15362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'. [ 241.114302][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2627'. [ 241.183247][T15375] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2630'. [ 241.226650][T15373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2629'. [ 241.244610][T15373] netlink: 'syz.3.2629': attribute type 10 has an invalid length. [ 241.248005][T15373] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2629'. [ 241.311628][T15388] bad cache= option: none [ 241.311628][T15388] [ 241.315301][T15388] CIFS: VFS: bad cache= option: none [ 241.357595][T15392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=15392 comm=syz.3.2635 [ 241.412291][ T40] audit: type=1400 audit(1780198876.391:1322): avc: denied { accept } for pid=15397 comm="syz.0.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 241.475034][ T40] audit: type=1326 audit(1780198876.451:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15406 comm="syz.0.2642" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18d559ce59 code=0x0 [ 241.524635][T15415] kAFS: unable to lookup cell '1' [ 241.529062][T15416] kAFS: No cell specified [ 241.529647][T15415] netlink: 'syz.3.2644': attribute type 32 has an invalid length. [ 241.551146][T15415] bond5: Setting coupled_control to off (0) [ 241.553794][T15415] bond5: entered promiscuous mode [ 241.577988][T15422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=15422 comm=syz.0.2642 [ 241.582268][T15422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=15422 comm=syz.0.2642 [ 241.586643][T15422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=15422 comm=syz.0.2642 [ 241.605483][T15424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.615264][ T7027] hid-generic 0000:0000:0000.0028: hidraw1: HID v0.00 Device [syz1] on syz0 [ 241.637139][T15422] MINIX-fs: unable to read superblock [ 241.665497][T15424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.671143][T15429] fido_id[15429]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 241.682601][ T40] audit: type=1400 audit(1780198876.661:1324): avc: denied { write } for pid=15431 comm="syz.3.2650" name="mouse0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 241.722633][T15424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.817896][ T77] Bluetooth: hci4: Frame reassembly failed (-84) [ 241.938610][ T7027] ------------[ cut here ]------------ [ 241.941284][ T7027] workqueue: cannot queue hci_conn_timeout on wq hci1 [ 241.943883][ T7027] WARNING: kernel/workqueue.c:2297 at __queue_work+0xcee/0x1270, CPU#2: kworker/2:5/7027 [ 241.947570][ T7027] Modules linked in: [ 241.949795][ T7027] CPU: 2 UID: 0 PID: 7027 Comm: kworker/2:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.954550][ T7027] Tainted: [L]=SOFTLOCKUP [ 241.956159][ T7027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.960005][ T7027] Workqueue: events l2cap_chan_timeout [ 241.962257][ T7027] RIP: 0010:__queue_work+0xcf2/0x1270 [ 241.964200][ T7027] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 3d 05 00 00 48 8d 3d 72 21 0b 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 241.971842][ T7027] RSP: 0018:ffffc90005d87a28 EFLAGS: 00010046 [ 241.974350][ T7027] RAX: dffffc0000000000 RBX: ffff88801b8f0c00 RCX: 1ffff1100b16394b [ 241.977594][ T7027] RDX: ffff88802d7a5170 RSI: ffffffff8a8242e0 RDI: ffffffff90da1b80 [ 241.980829][ T7027] RBP: ffff888058b1ca40 R08: 0000000000000005 R09: 0000000000000000 [ 241.984126][ T7027] R10: 0000000000200000 R11: 0000000000000000 R12: ffff88802d7a5000 [ 241.987461][ T7027] R13: ffff88802b64a540 R14: ffff888058b1ca88 R15: ffff888058b1ca48 [ 241.990713][ T7027] FS: 0000000000000000(0000) GS:ffff8880d6583000(0000) knlGS:0000000000000000 [ 241.994330][ T7027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.996884][ T7027] CR2: 00007f3f60792ff8 CR3: 0000000048c88000 CR4: 0000000000352ef0 [ 242.000125][ T7027] Call Trace: [ 242.001546][ T7027] [ 242.002808][ T7027] ? __cancel_work+0x2b5/0x340 [ 242.004852][ T7027] ? lockdep_hardirqs_on+0x78/0x100 [ 242.007032][ T7027] ? __cancel_work+0x245/0x340 [ 242.009022][ T7027] __queue_delayed_work+0x357/0x450 [ 242.011115][ T7027] queue_delayed_work_on+0x180/0x1e0 [ 242.013133][ T7027] l2cap_chan_del+0x649/0x930 [ 242.015087][ T7027] l2cap_chan_close+0x3b0/0xa70 [ 242.017129][ T7027] ? __pfx_l2cap_chan_close+0x10/0x10 [ 242.019232][ T7027] l2cap_chan_timeout+0x196/0x360 [ 242.021078][ T7027] process_one_work+0xa0e/0x1980 [ 242.022923][ T7027] ? __pfx_process_one_work+0x10/0x10 [ 242.024904][ T7027] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 242.026852][ T7027] worker_thread+0x5ef/0xe50 [ 242.028530][ T7027] ? __pfx_worker_thread+0x10/0x10 [ 242.030360][ T7027] ? kthread+0x13a/0x450 [ 242.031676][ T7027] ? __pfx_worker_thread+0x10/0x10 [ 242.033232][ T7027] kthread+0x370/0x450 [ 242.034495][ T7027] ? __pfx_kthread+0x10/0x10 [ 242.036213][ T7027] ret_from_fork+0x72b/0xd50 [ 242.037699][ T7027] ? __pfx_ret_from_fork+0x10/0x10 [ 242.039309][ T7027] ? __switch_to+0x800/0x1100 [ 242.040769][ T7027] ? __pfx_kthread+0x10/0x10 [ 242.042183][ T7027] ret_from_fork_asm+0x1a/0x30 [ 242.043624][ T7027] [ 242.044602][ T7027] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 242.046796][ T7027] CPU: 2 UID: 0 PID: 7027 Comm: kworker/2:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.050041][ T7027] Tainted: [L]=SOFTLOCKUP [ 242.051342][ T7027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.054361][ T7027] Workqueue: events l2cap_chan_timeout [ 242.056038][ T7027] Call Trace: [ 242.057066][ T7027] [ 242.057981][ T7027] dump_stack_lvl+0x100/0x190 [ 242.059428][ T7027] vpanic+0x552/0x970 [ 242.060656][ T7027] ? __pfx_vpanic+0x10/0x10 [ 242.062051][ T7027] panic+0xd1/0xe0 [ 242.063218][ T7027] ? __pfx_panic+0x10/0x10 [ 242.064632][ T7027] ? check_panic_on_warn+0x1f/0x90 [ 242.066200][ T7027] check_panic_on_warn.cold+0x19/0x34 [ 242.067840][ T7027] ? __queue_work+0xcee/0x1270 [ 242.069322][ T7027] __warn.cold+0x191/0x328 [ 242.070697][ T7027] __report_bug+0x296/0x3d0 [ 242.072086][ T7027] ? __queue_work+0xcee/0x1270 [ 242.073614][ T7027] ? __pfx___report_bug+0x10/0x10 [ 242.075206][ T7027] ? __pfx_hci_conn_timeout+0x10/0x10 [ 242.076855][ T7027] ? __pfx_debug_object_assert_init+0x10/0x10 [ 242.079201][ T7027] report_bug_entry+0xe1/0x290 [ 242.081077][ T7027] ? __queue_work+0xcf2/0x1270 [ 242.082847][ T7027] handle_bug+0x1cd/0x2a0 [ 242.084534][ T7027] exc_invalid_op+0x17/0x50 [ 242.086292][ T7027] asm_exc_invalid_op+0x1a/0x20 [ 242.088170][ T7027] RIP: 0010:__queue_work+0xcf2/0x1270 [ 242.090235][ T7027] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 3d 05 00 00 48 8d 3d 72 21 0b 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 242.097464][ T7027] RSP: 0018:ffffc90005d87a28 EFLAGS: 00010046 [ 242.099404][ T7027] RAX: dffffc0000000000 RBX: ffff88801b8f0c00 RCX: 1ffff1100b16394b [ 242.102263][ T7027] RDX: ffff88802d7a5170 RSI: ffffffff8a8242e0 RDI: ffffffff90da1b80 [ 242.105296][ T7027] RBP: ffff888058b1ca40 R08: 0000000000000005 R09: 0000000000000000 [ 242.108337][ T7027] R10: 0000000000200000 R11: 0000000000000000 R12: ffff88802d7a5000 [ 242.111361][ T7027] R13: ffff88802b64a540 R14: ffff888058b1ca88 R15: ffff888058b1ca48 [ 242.114382][ T7027] ? __pfx_hci_conn_timeout+0x10/0x10 [ 242.116451][ T7027] ? __queue_work+0xcc0/0x1270 [ 242.118326][ T7027] ? __cancel_work+0x2b5/0x340 [ 242.120194][ T7027] ? lockdep_hardirqs_on+0x78/0x100 [ 242.122197][ T7027] ? __cancel_work+0x245/0x340 [ 242.124068][ T7027] __queue_delayed_work+0x357/0x450 [ 242.125983][ T7027] queue_delayed_work_on+0x180/0x1e0 [ 242.128030][ T7027] l2cap_chan_del+0x649/0x930 [ 242.129848][ T7027] l2cap_chan_close+0x3b0/0xa70 [ 242.131706][ T7027] ? __pfx_l2cap_chan_close+0x10/0x10 [ 242.133784][ T7027] l2cap_chan_timeout+0x196/0x360 [ 242.135740][ T7027] process_one_work+0xa0e/0x1980 [ 242.137658][ T7027] ? __pfx_process_one_work+0x10/0x10 [ 242.139741][ T7027] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 242.141859][ T7027] worker_thread+0x5ef/0xe50 [ 242.143650][ T7027] ? __pfx_worker_thread+0x10/0x10 [ 242.145608][ T7027] ? kthread+0x13a/0x450 [ 242.147296][ T7027] ? __pfx_worker_thread+0x10/0x10 [ 242.149263][ T7027] kthread+0x370/0x450 [ 242.150849][ T7027] ? __pfx_kthread+0x10/0x10 [ 242.152627][ T7027] ret_from_fork+0x72b/0xd50 [ 242.154415][ T7027] ? __pfx_ret_from_fork+0x10/0x10 [ 242.156408][ T7027] ? __switch_to+0x800/0x1100 [ 242.158255][ T7027] ? __pfx_kthread+0x10/0x10 [ 242.160066][ T7027] ret_from_fork_asm+0x1a/0x30 [ 242.161931][ T7027] [ 242.163849][ T7027] Kernel Offset: disabled [ 242.165495][ T7027] Rebooting in 86400 seconds..