last executing test programs: 17.96104315s ago: executing program 3 (id=3543): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000300)=""/147, 0x93}], 0x1, 0x7, 0x10000) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4603000702810000000000000003"], 0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) 17.735480901s ago: executing program 3 (id=3547): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1], 0x13) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000140)={0x49, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r7, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000380)={0x28, 0x2, r8, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000340)}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$EXT4_IOC_SETFSUUID(r9, 0x4008662c, &(0x7f0000000040)={0x0, 0x0, "7088c9a61a757f1ce64d9454eca7342f"}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000003000000140001800e0001006574683a6066726d30000000"], 0x28}}, 0x0) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@getchain={0x54, 0x66, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x5}, {0x8, 0x7}, {0xfff3, 0xd}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x59998764}, {0x8, 0xb, 0x10000}]}, 0x54}, 0x1, 0x0, 0x0, 0x2045015}, 0xc840) accept$alg(0xffffffffffffffff, 0x0, 0x0) 14.869289276s ago: executing program 3 (id=3550): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x4000, 0xfffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 13.692496925s ago: executing program 3 (id=3555): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x6, 0x410000, 0x0, 0x54, 0x6, 0x4}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 10.204847731s ago: executing program 3 (id=3571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a0101fff5000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) 8.286968596s ago: executing program 2 (id=3577): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) 8.046167996s ago: executing program 0 (id=3579): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000100)=0x2c0000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0xfbffffff, 0x0, 0x0}) 8.002014763s ago: executing program 2 (id=3580): socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x32, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x21000000}}}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x800000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0xffff, 0x400002) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_script(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x24, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9"]}]}, 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) dup(r0) 7.857280919s ago: executing program 0 (id=3584): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x5000000, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 7.311429108s ago: executing program 0 (id=3586): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x4004401) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x6, 0xf, "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", 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}}}, 0x120) 7.121241373s ago: executing program 2 (id=3587): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000005280)={0xe, @pix={0x3, 0x9, 0x20385655, 0x3, 0x7, 0xffffff74, 0xc, 0x1, 0x0, 0x1, 0x2, 0x5}}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) 5.632920808s ago: executing program 3 (id=3589): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ppoll(&(0x7f0000000180)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000201000/0x2000)=nil, 0x2000, 0x9) 5.631071571s ago: executing program 0 (id=3591): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180080ff00000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0xfd}, 0x2062) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) eventfd2(0x0, 0x0) eventfd2(0x200, 0x800) 5.576645586s ago: executing program 4 (id=3592): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004800}, 0x4004000) 5.56700832s ago: executing program 4 (id=3593): syz_create_resource$binfmt(0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e00000000280002800600", @ANYBLOB='\b\x00.'], 0x74}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf67, 0x1f480, 0x0, 0x399}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) io_uring_enter(r2, 0x8ae, 0x6931, 0x17, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) 5.393520624s ago: executing program 2 (id=3594): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0xfffffffd, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e0200000200000005cd000005c30000000000000004000000000000000000000000000000000400000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000280070673effeb09b5351f5bde05400000000018789ba916638814e5708103b494e10000000000000000020008005500f8f669"], 0x20e) 4.540884753s ago: executing program 0 (id=3596): r0 = open(0x0, 0x1031c2, 0xb4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r2], 0x13) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000140)={0x49, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r8, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000380)={0x28, 0x2, r9, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000340)}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$EXT4_IOC_SETFSUUID(r10, 0x4008662c, &(0x7f0000000040)={0x0, 0x0, "7088c9a61a757f1ce64d9454eca7342f"}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000003000000140001800e0001006574683a6066726d30000000"], 0x28}}, 0x0) r13 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@getchain={0x54, 0x66, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x5}, {0x8, 0x7}, {0xfff3, 0xd}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x59998764}, {0x8, 0xb, 0x10000}]}, 0x54}, 0x1, 0x0, 0x0, 0x2045015}, 0xc840) accept$alg(r0, 0x0, 0x0) 4.540072239s ago: executing program 4 (id=3597): r0 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r0, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4000, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x80000000, 0x149}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x339a, 0x8, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003200)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c3a, 0x4000, 0x3, 0x1ed}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd2c0, 0x10000, 0x2, 0xe1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1d, 0x0, 0x2, 0x278}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc77, 0x1000, 0x1, 0x151}}], 0x4, &(0x7f0000004480)={0x2e, 0x9, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xd3f, 0x0, &(0x7f0000003480)=@buf_1k="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"}}, &(0x7f0000004500)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) syz_io_uring_setup(0x2af8, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="28000000240007012bbd7000ffdbdf2503740000080001800400de800c0004"], 0x28}}, 0x48010) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0xffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x37f, 0x2, 0x4, 'syz0\x00', 'syz1\x00', {0x5}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xc1943) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$NBD_DO_IT(r6, 0xab03) 4.490765744s ago: executing program 2 (id=3598): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x14, 0x36, 0x1, 0x470fd2b, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x200000000000000, 0x0, 0x24040010}, 0x24000080) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x10000002) ioctl$FAT_IOCTL_GET_VOLUME_ID(r7, 0x80047213, &(0x7f0000000100)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000080)={0xbc, 0x0, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pimreg1\x00', 0x2}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x20) 3.393135841s ago: executing program 1 (id=3599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0xfffffffffffff000, 0x0, 0x4044000}, 0x0) 2.844068773s ago: executing program 1 (id=3600): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x2b, 0x3, "fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2"}]}], {0x14}}, 0x94}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000f5ff0900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) 2.800545058s ago: executing program 0 (id=3601): r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) read$nci(r2, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000150000ec000000000000dc6c8d35083d99b4dbdf25021088c800a8fda5ebc77029ef376659cc0096150ce0368afda9da8c8e9474578fab840c25690c2bf9d7577a6cae98ae0d2fa4f39edd797264e6e8165c9ee5d223d2f80a226bdf5c6247b1bf4f32c94ae53c73b86c856d5f96e897cc0770b259b14f6dbba3a7ead06d1e40225dcc4eb4e994907e4dee47c56aa0f7d576a56d5e8acf6de20c221cb063199f427a7d8ee3b3b64353a52d7b4138cb8c", @ANYRES32=r1, @ANYBLOB="08000800a0000000080001007f000001080009000100008008000200ac1e0001"], 0x38}}, 0x8040) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x141101) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[r9], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffe000/0x1000)=nil) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') read$FUSE(r12, &(0x7f0000003800)={0x2020}, 0x2020) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r10, 0x20, &(0x7f0000000700)={&(0x7f00000005c0)=""/172, 0xac, 0x0, &(0x7f0000000680)=""/86, 0x56}}, 0x10) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r15, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_CAP_X2APIC_API(r15, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r15, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @adapter={0x1, 0x62e98893, 0xfffffffffffffffe, 0xfffffbff, 0x3}}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffc}, 0x10, r13}, 0x94) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x13) r16 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) read$snapshot(r16, &(0x7f0000000040)=""/104, 0x68) 2.653466692s ago: executing program 1 (id=3602): r0 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x118, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x2, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000200)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<') (async) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000200)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/icmp6\x00') syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) (async) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x8}}, 0x30) read$FUSE(r2, &(0x7f0000000600)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000000600)={0x2020}, 0x2020) 2.613642716s ago: executing program 4 (id=3603): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file1/../file0', [{0x20, 'cgr\x01\x00 \x00q\xc84\x04\x04'}], 0xa, "e39a0e756a544899b89745f153c7c1c96c278c96dfcaab07"}, 0x39) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000540)="aa2e07a43ecaa4f030dff111e923219d3a5a00904a9bce005907230e8f75cfc68bd31e61698c6114ffdd856898d814b616a5ac", 0x33}], 0x1) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x3000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 2.602068075s ago: executing program 2 (id=3604): syz_usb_connect(0x5, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x58, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value=0x60}, 0x50) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2.312088034s ago: executing program 1 (id=3605): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000180), 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r3, &(0x7f0000000140)="82650000000000", 0x7) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b8", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) r5 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0xe000000000000000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x0, 0xffffff6a, 0x0, 0x0, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x180, 0x1c0, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty, @private2}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 325.872122ms ago: executing program 4 (id=3606): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60cb653e00303a0000000000000000002f6a93c7ac1414bbff02008d000000000000000000000001a1"], 0x0) 113.991766ms ago: executing program 1 (id=3607): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xc2, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0xb4, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "020007651442eb"}, {0x1, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "84a4913275be675de6a70a05a0dc"}, {0x6, 0xa, "ed66554900006000"}, {0x2, 0x12, "73bc23f9ffffffa30900a301c8460028"}, {0x0, 0x10, "c8f46976e79ea788f03d9d320592"}]}, @cipso={0x86, 0x6, 0x20}]}}, '\x00\x00\x00\x00'}}}}}, 0x0) 407.92µs ago: executing program 1 (id=3608): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000100)={0x0, 0xe0, "bef5474a4d91885b6131443e08d300000000001c00000021", {0x401, 0x1}, 0x81000001}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r3, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}}, 0x14}, 0x1, 0x620b}, 0x0) write(r0, &(0x7f0000000000)="09000300010000", 0x7) 0s ago: executing program 4 (id=3609): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x2000000000000042) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="ce6270db0e5d767b0fa64372595ba056821dcbaff2837b9c09", 0x19}, {&(0x7f0000000400)="5cfd3e496d5afe6a6b3f3b2ee70f02ccdb102c9a833696565928984eb1e293dd2bfb532b45c08b4e53a9c223d5b9df5dc59fc849676787f8e84530006d08a5539759f10e7c928436a7eef7adf698bb0c2fdb14", 0x53}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x13f0}}], 0x2, 0x8000) kernel console output (not intermixed with test programs): 7470 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.284006][ T8115] team0 (unregistering): Port device team_slave_0 removed [ 1019.423009][T17471] fido_id[17471]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1019.669320][T17486] XFS (nbd4): SB validate failed with error -5. [ 1019.872607][T14221] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1019.884838][T17462] tipc: Enabling of bearer rejected, failed to enable media [ 1019.907530][T17482] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3069'. [ 1020.046630][T14221] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.121119][T14221] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1020.130754][ T29] audit: type=1400 audit(1783483541.543:1430): avc: denied { write } for pid=17481 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1020.174391][T14221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.219562][T14221] usb 2-1: Product: syz [ 1020.227420][T14221] usb 2-1: Manufacturer: syz [ 1020.237007][T14221] usb 2-1: SerialNumber: syz [ 1020.246189][T17505] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1020.275855][T14221] usb 2-1: config 0 descriptor?? [ 1020.310374][ T29] audit: type=1400 audit(1783483541.733:1431): avc: denied { write } for pid=17507 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1020.398019][ T29] audit: type=1326 audit(1783483541.763:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17504 comm="syz.2.3072" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf58b9de59 code=0x0 [ 1020.498495][ T8557] usb 2-1: USB disconnect, device number 68 [ 1020.589914][T17514] loop8: detected capacity change from 0 to 7 [ 1020.611726][T17514] Dev loop8: unable to read RDB block 7 [ 1020.622987][ T8115] IPVS: stop unused estimator thread 0... [ 1020.638949][T17514] loop8: unable to read partition table [ 1020.650726][T17514] loop8: partition table beyond EOD, truncated [ 1020.662160][T17514] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1021.197181][T17077] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1021.215642][T17077] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1021.245175][T17077] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1021.274873][T17077] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1021.297093][T17077] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1021.316179][T17077] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1021.337749][T17077] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1021.369447][T17077] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1021.373295][T17527] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3078'. [ 1021.497817][T17527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3078'. [ 1021.645664][ T8557] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1021.697384][T17077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.761235][T17077] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.804067][ T8115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.811229][ T8115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.828382][ T8557] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 1021.845903][ T8557] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1021.860446][ T8557] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1021.870250][ T8557] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.904029][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.911189][ T6860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.923198][ T8557] usb 5-1: config 0 descriptor?? [ 1022.030313][T17246] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1022.458163][ T29] audit: type=1400 audit(1783483543.883:1433): avc: denied { write } for pid=17512 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1022.580191][ T8557] megaworld 0003:07B5:0312.001D: hidraw0: USB HID v0.01 Device [HID 07b5:0312] on usb-dummy_hcd.4-1/input0 [ 1022.599928][ T8557] megaworld 0003:07B5:0312.001D: no inputs found [ 1022.763931][T17526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.797455][T17526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.830453][ T9] usb 5-1: USB disconnect, device number 62 [ 1022.875229][T17558] fido_id[17558]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1022.922732][ T8557] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1022.950464][ T29] audit: type=1400 audit(1783483544.373:1434): avc: denied { write } for pid=17563 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1023.120709][ T8557] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1023.153697][ T8557] usb 2-1: config 0 has no interface number 0 [ 1023.166326][ T8557] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1023.188951][ T8557] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1023.225470][ T8557] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1023.240249][ T8557] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.265642][ T8557] usb 2-1: Product: syz [ 1023.273127][ T8557] usb 2-1: Manufacturer: syz [ 1023.290955][ T8557] usb 2-1: SerialNumber: syz [ 1023.303545][ T8557] usb 2-1: config 0 descriptor?? [ 1023.321444][T17559] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1023.335790][ T8557] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1023.358284][ T8557] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1023.367255][ T8557] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1023.556647][T17077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.798805][T17025] usb 2-1: USB disconnect, device number 69 [ 1023.835293][T17025] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1023.855582][T17077] veth0_vlan: entered promiscuous mode [ 1023.864210][T17025] cyberjack 2-1:0.69: device disconnected [ 1023.881461][T17598] xt_connbytes: Forcing CT accounting to be enabled [ 1023.904023][T17077] veth1_vlan: entered promiscuous mode [ 1023.909739][T17598] Cannot find set identified by id 0 to match [ 1023.980972][T17077] veth0_macvtap: entered promiscuous mode [ 1024.002610][ T5614] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1024.020748][ T29] audit: type=1400 audit(1783483545.443:1435): avc: denied { write } for pid=17574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1024.072092][ T24] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1024.092382][T17077] veth1_macvtap: entered promiscuous mode [ 1024.157523][T17077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.179771][T17077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.234102][ T24] usb 3-1: device descriptor read/64, error -71 [ 1024.259803][ T8116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.280472][ T8116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.299196][ T29] audit: type=1400 audit(1783483545.723:1436): avc: denied { write } for pid=17610 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1024.306150][ T8116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.346129][ T8116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.492031][ T24] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1024.585891][T17615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3094'. [ 1024.597179][ T8115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.608172][ T8115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.608797][T17617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3095'. [ 1024.644966][T17619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3094'. [ 1024.662028][ T24] usb 3-1: device descriptor read/64, error -71 [ 1024.679240][T17615] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1024.700070][T17620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3095'. [ 1024.723005][ T8115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.741774][ T8115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.772455][ T24] usb usb3-port1: attempt power cycle [ 1024.773409][T17617] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1024.788340][T17619] bond10: entered promiscuous mode [ 1024.794061][T17619] bond10: entered allmulticast mode [ 1024.813174][T17620] bond7: entered promiscuous mode [ 1024.823605][T17620] bond7: entered allmulticast mode [ 1025.044752][T17626] batadv_slave_1: entered promiscuous mode [ 1025.063647][T17626] trusted_key: encrypted_key: insufficient parameters specified [ 1025.123460][ T24] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1025.304264][T17627] binder: 17625:17627 unknown command 154 [ 1025.318708][ T24] usb 3-1: device descriptor read/8, error -71 [ 1025.329518][T17627] binder: 17625:17627 ioctl c0306201 200000000180 returned -22 [ 1025.339669][T17623] batadv_slave_1: left promiscuous mode [ 1025.462313][T17630] netlink: 868 bytes leftover after parsing attributes in process `syz.3.2988'. [ 1025.582143][ T24] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1026.082711][ T24] usb 3-1: device descriptor read/8, error -71 [ 1026.210823][ T24] usb usb3-port1: unable to enumerate USB device [ 1026.946441][T17638] ceph: No mds server is up or the cluster is laggy [ 1027.131119][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1027.143090][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1027.330007][T17645] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3101'. [ 1027.431372][ T5721] libceph: connect (1)[c::]:6789 error -101 [ 1027.452261][ T5721] libceph: mon0 (1)[c::]:6789 connect error [ 1027.508267][T17645] XFS (nbd2): SB validate failed with error -5. [ 1027.541848][T17246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1027.554977][T17246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1027.565485][T17246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1027.576135][T17246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1027.583655][T17246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1027.906609][T17661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3103'. [ 1027.916081][T17661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3103'. [ 1028.401448][T17667] /dev/nullb0: Can't open blockdev [ 1028.534952][T17661] xt_CT: No such helper "snmp_trap" [ 1028.722674][T17246] Bluetooth: hci5: unknown advertising packet type: 0x65 [ 1028.722748][T17246] Bluetooth: hci5: unknown advertising packet type: 0x20 [ 1028.736244][T17246] Bluetooth: hci5: Malformed LE Event: 0x02 [ 1029.672084][T17246] Bluetooth: hci4: command tx timeout [ 1030.098022][T17689] binder: 17688:17689 unknown command 154 [ 1030.105926][T17689] binder: 17688:17689 ioctl c0306201 200000000180 returned -22 [ 1031.476716][T17696] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 1031.500628][T17696] netlink: 'syz.4.3109': attribute type 4 has an invalid length. [ 1031.587317][T17699] netlink: 'syz.4.3109': attribute type 4 has an invalid length. [ 1031.668252][T17646] lo speed is unknown, defaulting to 1000 [ 1031.752061][T17246] Bluetooth: hci4: command tx timeout [ 1031.829855][ T29] audit: type=1326 audit(1783483553.253:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.4.3109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54bf9de59 code=0x7ffc0000 [ 1031.961288][ T29] audit: type=1326 audit(1783483553.253:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.4.3109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54bf9de59 code=0x7ffc0000 [ 1032.164318][ T151] bond0: (slave netdevsim1): Releasing backup interface [ 1033.706416][T17646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.747115][T17646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.775917][T17646] bridge_slave_0: entered allmulticast mode [ 1033.863168][T17246] Bluetooth: hci4: command tx timeout [ 1033.952426][T17646] bridge_slave_0: entered promiscuous mode [ 1035.847634][T17646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.877258][T17646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.894620][T17646] bridge_slave_1: entered allmulticast mode [ 1035.912626][T17246] Bluetooth: hci4: command tx timeout [ 1035.914229][T17646] bridge_slave_1: entered promiscuous mode [ 1035.958736][T17742] binder: 17740:17742 unknown command 154 [ 1035.972036][T17742] binder: 17740:17742 ioctl c0306201 200000000180 returned -22 [ 1036.206928][T17646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1036.646878][T17750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3121'. [ 1036.669470][T17646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1036.696672][T17750] netlink: 392 bytes leftover after parsing attributes in process `syz.0.3121'. [ 1036.800058][T17646] team0: Port device team_slave_0 added [ 1036.808639][T17646] team0: Port device team_slave_1 added [ 1037.046154][T17758] sctp: [Deprecated]: syz.2.3112 (pid 17758) Use of int in max_burst socket option deprecated. [ 1037.046154][T17758] Use struct sctp_assoc_value instead [ 1037.101318][T17759] netlink: 'syz.3.3124': attribute type 1 has an invalid length. [ 1037.119567][T17761] CIFS: VFS: UNC: path must begin with // or \\ [ 1037.125938][T17761] Malformed UNC in devname [ 1037.125938][T17761] [ 1037.132681][T17761] CIFS: VFS: Malformed UNC in devname [ 1037.429728][T17763] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1038.345090][T17777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6952 sclass=netlink_route_socket pid=17777 comm=syz.0.3127 [ 1039.239636][ T151] bond5 (unregistering): (slave geneve3): Releasing active interface [ 1039.258715][T17790] /dev/nullb0: Can't open blockdev [ 1040.043523][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1040.057694][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1040.088207][ T151] bond0 (unregistering): (slave bond3): Releasing backup interface [ 1040.103768][ T151] bond0 (unregistering): Released all slaves [ 1040.118446][ T151] bond1 (unregistering): Released all slaves [ 1040.131240][ T151] bond2 (unregistering): Released all slaves [ 1040.144003][ T151] bond3 (unregistering): Released all slaves [ 1040.163190][ T151] bond4 (unregistering): (slave veth3): Releasing active interface [ 1040.171178][ T151] batadv1: entered promiscuous mode [ 1040.178128][ T151] bond4 (unregistering): (slave batadv1): Releasing active interface [ 1040.187396][ T151] bond4 (unregistering): Released all slaves [ 1040.202353][ T151] bond5 (unregistering): Released all slaves [ 1040.217064][ T151] bond6 (unregistering): Released all slaves [ 1040.229256][ T151] bond7 (unregistering): Released all slaves [ 1040.247232][ T151] bond8 (unregistering): Released all slaves [ 1040.261668][ T151] bond9 (unregistering): Released all slaves [ 1040.276730][ T151] bond10 (unregistering): Released all slaves [ 1040.447940][T17765] batman_adv: batadv0: Adding interface: geneve2 [ 1040.488370][T17765] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 1040.524087][T17789] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1040.573284][T17646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.679903][T17646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.761402][T17646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.806498][T17807] binder: 17806:17807 unknown command 154 [ 1040.825137][T17807] binder: 17806:17807 ioctl c0306201 200000000180 returned -22 [ 1040.840863][ T151] tipc: Left network mode [ 1040.842421][T17646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.922163][ T29] audit: type=1400 audit(1783483562.323:1439): avc: denied { write } for pid=17795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1040.982951][ T151] IPVS: stopping master sync thread 9190 ... [ 1041.094514][T17646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.121148][T17646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.274021][T17824] netlink: 'syz.4.3137': attribute type 10 has an invalid length. [ 1041.449644][ T29] audit: type=1400 audit(1783483562.863:1440): avc: denied { write } for pid=17826 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1042.091108][T17824] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1042.933931][T17845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3142'. [ 1043.284325][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1043.342454][T17845] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1043.360283][T17845] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1043.441131][T17646] hsr_slave_0: entered promiscuous mode [ 1043.466136][T17646] hsr_slave_1: entered promiscuous mode [ 1043.483218][T17646] debugfs: 'hsr0' already exists in 'hsr' [ 1043.498078][T17646] Cannot create hsr debugfs directory [ 1043.516660][T17849] netlink: 'syz.4.3144': attribute type 1 has an invalid length. [ 1043.558993][T17855] netlink: 794 bytes leftover after parsing attributes in process `syz.3.3146'. [ 1043.722072][ T24] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1043.761557][ T29] audit: type=1400 audit(1783483565.183:1441): avc: denied { map } for pid=17863 comm="syz.3.3148" path="socket:[60117]" dev="sockfs" ino=60117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1043.772086][ T5721] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1043.892174][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1043.913836][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.927993][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1043.951525][ T29] audit: type=1400 audit(1783483565.183:1442): avc: denied { accept } for pid=17863 comm="syz.3.3148" path="socket:[60117]" dev="sockfs" ino=60117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1043.963990][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1043.986253][ T29] audit: type=1400 audit(1783483565.223:1443): avc: denied { read } for pid=17863 comm="syz.3.3148" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1044.012203][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1044.030042][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1044.057985][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1044.061299][ T29] audit: type=1400 audit(1783483565.223:1444): avc: denied { open } for pid=17863 comm="syz.3.3148" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1044.077237][ T24] usb 3-1: SerialNumber: syz [ 1044.105469][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1044.141396][ T29] audit: type=1400 audit(1783483565.223:1445): avc: denied { ioctl } for pid=17863 comm="syz.3.3148" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1044.153648][ T5721] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1044.225887][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.250524][ T24] usb 3-1: 0:2 : does not exist [ 1044.301967][ T29] audit: type=1400 audit(1783483565.473:1446): avc: denied { create } for pid=17872 comm="syz.0.3150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1045.144824][ T5721] usb 5-1: Product: syz [ 1045.159242][ T5721] usb 5-1: Manufacturer: syz [ 1045.163524][ T29] audit: type=1400 audit(1783483566.583:1447): avc: denied { write } for pid=17857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1045.166160][ T5721] usb 5-1: SerialNumber: syz [ 1045.678963][ T5721] usb 5-1: config 0 descriptor?? [ 1045.914816][ T29] audit: type=1400 audit(1783483567.343:1448): avc: denied { write } for pid=17894 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1046.073959][ T5721] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1046.093783][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1046.115667][T17896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4951 sclass=netlink_route_socket pid=17896 comm=syz.0.3153 [ 1046.163269][T17899] netlink: 'syz.3.3154': attribute type 4 has an invalid length. [ 1046.231322][ T5344] usb 5-1: USB disconnect, device number 63 [ 1046.553634][T17912] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3157'. [ 1046.611443][T17915] XFS (nbd3): SB validate failed with error -5. [ 1047.027983][T17926] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3158'. [ 1047.822252][ T9] usb 3-1: USB disconnect, device number 87 [ 1047.996558][ T6856] Bluetooth: hci2: Frame reassembly failed (-84) [ 1048.127627][T17943] xt_connbytes: Forcing CT accounting to be enabled [ 1048.169870][T17943] Cannot find set identified by id 0 to match [ 1048.209379][ T151] hsr_slave_0: left promiscuous mode [ 1048.227054][ T151] hsr_slave_1: left promiscuous mode [ 1048.989349][ T29] audit: type=1400 audit(1783483570.413:1449): avc: denied { write } for pid=17918 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1049.235819][ T29] audit: type=1400 audit(1783483570.663:1450): avc: denied { write } for pid=17960 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1049.323525][ T151] team0 (unregistering): Port device team_slave_1 removed [ 1049.339758][ T151] team0 (unregistering): Port device team_slave_0 removed [ 1049.996183][ T5614] Bluetooth: hci2: command 0x1003 tx timeout [ 1050.002658][T17246] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1050.034939][T17967] siw: device registration error -23 [ 1050.332896][ T5721] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1050.354106][ T5784] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1050.533082][ T5721] usb 3-1: Using ep0 maxpacket: 32 [ 1050.670987][ T5721] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.702145][ T5784] usb 1-1: Using ep0 maxpacket: 32 [ 1050.719351][ T5721] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1050.799677][ T5721] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1050.840670][ T5784] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1050.876924][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.960571][ T5721] usb 3-1: Product: syz [ 1050.978770][ T5784] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1051.011689][ T5721] usb 3-1: Manufacturer: syz [ 1051.055664][ T5784] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1051.073284][ T5721] usb 3-1: SerialNumber: syz [ 1051.126501][ T5784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.203991][ T5784] usb 1-1: Product: syz [ 1051.236352][ T5784] usb 1-1: Manufacturer: syz [ 1051.300509][ T5784] usb 1-1: SerialNumber: syz [ 1051.551268][ T5784] usb 1-1: config 0 descriptor?? [ 1051.623367][ T5721] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1051.709114][ T5784] gs_usb 1-1:0.0: Required endpoints not found [ 1052.063443][ T5721] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1052.119936][T17979] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3166'. [ 1052.126138][ T5721] usb 3-1: USB disconnect, device number 88 [ 1052.246308][T17903] udevd[17903]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1052.267071][T17979] XFS (nbd4): SB validate failed with error -5. [ 1052.428651][ T5721] usb 1-1: USB disconnect, device number 69 [ 1052.515581][T17246] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 1052.515755][T17246] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 1052.523478][T17246] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1052.960994][T17646] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1053.003434][ T29] audit: type=1400 audit(1783483574.433:1451): avc: denied { write } for pid=17964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1053.086396][T17646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1053.110361][T17646] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1053.245116][T17646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1053.253063][T17646] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1053.368898][ T29] audit: type=1400 audit(1783483574.793:1452): avc: denied { write } for pid=18001 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1053.427180][T17646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1053.831142][T17646] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1054.162921][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.516709][T17646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1054.543349][T18020] netlink: 'syz.0.3174': attribute type 4 has an invalid length. [ 1054.626934][T18020] netlink: 'syz.0.3174': attribute type 4 has an invalid length. [ 1054.708594][ T5721] lo speed is unknown, defaulting to 1000 [ 1054.719518][ T5721] syz2: Port: 1 Link ACTIVE [ 1054.904562][ T6860] Bluetooth: hci2: Frame reassembly failed (-84) [ 1055.067384][T17646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.298716][T17646] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.336346][ T6861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.343539][ T6861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.367699][ T6861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.374870][ T6861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.012040][ T29] audit: type=1400 audit(1783483577.433:1453): avc: denied { write } for pid=18033 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1056.082087][T14221] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1056.254866][T14221] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1056.288465][T14221] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.311382][ T29] audit: type=1400 audit(1783483577.733:1454): avc: denied { write } for pid=18063 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1056.315409][T14221] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1056.432585][T14221] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1056.465975][T14221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.515869][T14221] usb 3-1: config 0 descriptor?? [ 1056.537258][T14221] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1056.581773][T14221] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1057.002688][ T5614] Bluetooth: hci2: command 0x1003 tx timeout [ 1057.015002][T17246] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1057.236044][T18083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1057.724556][T18054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3180'. [ 1057.947114][T18084] netlink: 'syz.2.3180': attribute type 4 has an invalid length. [ 1058.381574][ T5721] usb 3-1: USB disconnect, device number 89 [ 1058.741574][T17646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.861283][T17646] veth0_vlan: entered promiscuous mode [ 1058.885061][T17646] veth1_vlan: entered promiscuous mode [ 1058.899973][T18099] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3185'. [ 1058.965488][ T29] audit: type=1400 audit(1783483580.373:1455): avc: denied { write } for pid=18066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1058.974609][T17646] veth0_macvtap: entered promiscuous mode [ 1059.035127][T17646] veth1_macvtap: entered promiscuous mode [ 1059.117487][T17646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1059.150550][T17646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.207278][ T6861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.207346][ T6861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.207385][ T6861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.207425][ T6861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.268729][ T29] audit: type=1400 audit(1783483580.693:1456): avc: denied { write } for pid=18108 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1059.496139][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.496163][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.653882][ T8116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.653906][ T8116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.662144][ T5784] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1059.814449][ T5784] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 1059.814484][ T5784] usb 5-1: config 0 has no interface number 0 [ 1059.814527][ T5784] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1059.814556][ T5784] usb 5-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1059.816462][ T5784] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1059.816497][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.816521][ T5784] usb 5-1: Product: syz [ 1059.816540][ T5784] usb 5-1: Manufacturer: syz [ 1059.816559][ T5784] usb 5-1: SerialNumber: syz [ 1059.825395][ T5784] usb 5-1: config 0 descriptor?? [ 1059.832816][T18114] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1059.855805][ T5784] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1059.856436][ T5784] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1059.863038][ T5784] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1059.866815][T18127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1059.891363][T18131] overlayfs: missing 'lowerdir' [ 1059.947467][ T5614] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1059.949013][ T3307] Bluetooth: hci2: Frame reassembly failed (-84) [ 1060.245719][ T5784] usb 5-1: USB disconnect, device number 64 [ 1060.297567][ T5784] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1060.301376][ T5784] cyberjack 5-1:0.69: device disconnected [ 1060.491403][ T29] audit: type=1400 audit(1783483581.913:1457): avc: denied { write } for pid=18118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1060.698093][ T29] audit: type=1400 audit(1783483582.123:1458): avc: denied { write } for pid=18145 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1061.028335][T18119] tipc: Enabling of bearer rejected, failed to enable media [ 1061.642190][T16251] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1061.816531][T16251] usb 4-1: Using ep0 maxpacket: 16 [ 1061.837805][T16251] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.867784][T16251] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1061.915086][T16251] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1062.007775][ T5614] Bluetooth: hci2: command 0x1003 tx timeout [ 1062.014291][T17246] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1062.137441][T16251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1062.148339][T16251] usb 4-1: SerialNumber: syz [ 1062.356979][T16251] usb 4-1: 0:2 : does not exist [ 1062.510515][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1062.538650][T16251] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1062.589063][T16251] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1062.658078][T16251] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1062.666540][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1062.684538][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1062.704873][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1062.724489][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1062.733633][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1062.788058][T16251] usb 4-1: USB disconnect, device number 52 [ 1062.905210][T17903] udevd[17903]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1063.313548][T18185] /dev/nullb0: Can't open blockdev [ 1063.810992][T18007] bond0: (slave syz_tun): Releasing backup interface [ 1063.993713][T18189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3206'. [ 1064.030356][T18191] SELinux: security_context_str_to_sid (u18446744073709551615) failed with errno=-22 [ 1064.040407][T18189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3206'. [ 1064.056696][ T29] audit: type=1400 audit(1783483585.453:1459): avc: denied { mounton } for pid=18184 comm="syz.4.3205" path="/file0" dev="ramfs" ino=62029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1064.634610][T18201] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3208'. [ 1064.643766][T18201] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3208'. [ 1064.972898][T17246] Bluetooth: hci2: command tx timeout [ 1064.973958][ T6861] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.998431][ T8557] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1066.252064][ T8557] usb 3-1: Using ep0 maxpacket: 32 [ 1066.266853][ T8557] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1066.275274][ T6861] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.297448][ T8557] usb 3-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 8 [ 1066.332776][ T8557] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1066.363884][ T8557] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1066.395142][T18168] lo speed is unknown, defaulting to 1000 [ 1066.403982][ T8557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.435711][ T8557] usb 3-1: Product: syz [ 1066.455942][ T8557] usb 3-1: Manufacturer: syz [ 1066.464501][T18213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3211'. [ 1066.484868][ T8557] usb 3-1: SerialNumber: syz [ 1066.489453][T18207] syzkaller0: entered promiscuous mode [ 1066.497433][T18207] syzkaller0: entered allmulticast mode [ 1066.509755][T18194] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1066.647209][ T6861] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.743963][T18194] /dev/nullb0: Can't open blockdev [ 1067.035454][T17246] Bluetooth: hci2: command tx timeout [ 1067.282637][T18223] xt_hashlimit: size too large, truncated to 1048576 [ 1069.122147][T17246] Bluetooth: hci2: command tx timeout [ 1071.145518][ T8557] usblp0: Disabling reads from problematic bidirectional printer [ 1071.187622][ T8557] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 90 if 0 alt 235 proto 2 vid 0x03F0 pid 0x0004 [ 1071.207263][T17246] Bluetooth: hci2: command tx timeout [ 1071.237547][ T6861] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.258500][ T8557] usb 3-1: USB disconnect, device number 90 [ 1071.306476][ T8557] usblp0: removed [ 1071.401090][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3217'. [ 1071.415460][T18238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3217'. [ 1071.818498][ T29] audit: type=1400 audit(1783483593.243:1460): avc: denied { getopt } for pid=18243 comm="syz.1.3219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1071.870814][ T29] audit: type=1400 audit(1783483593.273:1461): avc: denied { append } for pid=18243 comm="syz.1.3219" name="usbmon2" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1072.607925][T18237] xt_CT: No such helper "snmp_trap" [ 1073.429754][T18262] XFS (nbd3): SB validate failed with error -5. [ 1073.711148][ T29] audit: type=1400 audit(1783483595.113:1462): avc: denied { map } for pid=18273 comm="syz.4.3226" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1073.951519][ T29] audit: type=1400 audit(1783483595.123:1463): avc: denied { execute } for pid=18273 comm="syz.4.3226" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1074.539411][ T6861] bond5 (unregistering): (slave geneve4): Releasing active interface [ 1074.570943][ T6861] bond1 (unregistering): (slave geneve3): Releasing active interface [ 1074.729474][ T6861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.749254][ T6861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.753869][ T6861] bond0 (unregistering): Released all slaves [ 1074.770886][ T6861] bond1 (unregistering): Released all slaves [ 1074.790822][ T6861] bond2 (unregistering): Released all slaves [ 1074.849978][ T6861] bond3 (unregistering): Released all slaves [ 1074.915040][ T6861] bond4 (unregistering): Released all slaves [ 1074.930495][ T6861] bond5 (unregistering): Released all slaves [ 1075.005816][ T6861] bond6 (unregistering): Released all slaves [ 1075.035783][ T6861] bond7 (unregistering): Released all slaves [ 1075.083935][T18295] vlan2: entered promiscuous mode [ 1075.101084][T18295] bridge0: entered promiscuous mode [ 1075.184906][ T6861] tipc: Left network mode [ 1075.518369][T18308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3236'. [ 1075.669912][T18168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.677373][T18168] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.687075][T18168] bridge_slave_0: entered allmulticast mode [ 1075.712058][T18168] bridge_slave_0: entered promiscuous mode [ 1075.926499][T18168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.402630][T18168] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.409919][T18168] bridge_slave_1: entered allmulticast mode [ 1076.418331][T18168] bridge_slave_1: entered promiscuous mode [ 1076.704608][T18168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.988316][T18168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.496830][ T29] audit: type=1400 audit(1783483598.893:1464): avc: denied { write } for pid=18312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1077.537754][T18342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3243'. [ 1077.553942][T18342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3243'. [ 1077.701091][T18342] netlink: 'syz.4.3243': attribute type 14 has an invalid length. [ 1077.743964][T18342] netlink: 'syz.4.3243': attribute type 12 has an invalid length. [ 1077.822472][T18168] team0: Port device team_slave_0 added [ 1077.974285][T18168] team0: Port device team_slave_1 added [ 1077.981428][ T29] audit: type=1400 audit(1783483599.403:1465): avc: denied { write } for pid=18344 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1078.825021][T18168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.999735][T18168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.263275][T18357] netlink: 'syz.2.3246': attribute type 4 has an invalid length. [ 1079.492130][T18168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.509245][T18168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.517890][T18168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.579122][T18168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.804019][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1080.695432][T18168] hsr_slave_0: entered promiscuous mode [ 1080.728596][T18168] hsr_slave_1: entered promiscuous mode [ 1080.748842][T18168] debugfs: 'hsr0' already exists in 'hsr' [ 1080.756695][T18168] Cannot create hsr debugfs directory [ 1080.851800][T16251] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1081.028841][T16251] usb 4-1: Using ep0 maxpacket: 16 [ 1081.047858][T16251] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 1081.073217][T16251] usb 4-1: config 251 has no interface number 0 [ 1081.108289][T18376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3252'. [ 1081.178273][T16251] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1081.193662][T16251] usb 4-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1081.200743][T18379] fuse: Unknown parameter 'E00000000000000000000007' [ 1081.204890][T16251] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1081.223833][T16251] usb 4-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1081.612551][T16251] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 40960, setting to 1024 [ 1081.633209][T16251] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1081.634039][T18387] binder: 18384:18387 unknown command 154 [ 1081.646933][T16251] usb 4-1: config 251 interface 202 has no altsetting 0 [ 1081.657675][T18387] binder: 18384:18387 ioctl c0306201 200000000180 returned -22 [ 1081.685635][T16251] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1082.006535][T16251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.014974][T16251] usb 4-1: Product: syz [ 1082.021395][T16251] usb 4-1: Manufacturer: syz [ 1082.037918][T16251] usb 4-1: SerialNumber: syz [ 1082.082856][T18371] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1082.287979][ T29] audit: type=1400 audit(1783483603.713:1466): avc: denied { write } for pid=18377 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1082.771448][ T6861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.776634][ T29] audit: type=1400 audit(1783483604.193:1467): avc: denied { write } for pid=18409 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1082.961140][T16251] cxacru 4-1:251.202: cxacru_bind: interface has incorrect endpoints [ 1082.991196][T16251] cxacru 4-1:251.202: usbatm_usb_probe: bind failed: -19! [ 1082.993765][T18415] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1083.014945][T18415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3258'. [ 1083.047527][T16251] usb 4-1: USB disconnect, device number 53 [ 1083.598225][T18426] overlay: Unknown parameter 'fowner>00000000000000000000' [ 1083.684548][ T6861] team0 (unregistering): Port device team_slave_1 removed [ 1083.748034][ T6861] team0 (unregistering): Port device team_slave_0 removed [ 1083.872068][T16251] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1084.002445][ T10] lo speed is unknown, defaulting to 1000 [ 1084.022661][ T10] syz2: Port: 1 Link DOWN [ 1084.033543][ T3307] smbdirect: ib_dev[syz2] removed [ 1084.072553][T16251] usb 3-1: device descriptor read/64, error -71 [ 1084.369156][T16251] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1084.564312][T16251] usb 3-1: device descriptor read/64, error -71 [ 1084.682230][T16251] usb usb3-port1: attempt power cycle [ 1085.489020][T18453] overlayfs: failed to resolve './file0': -2 [ 1085.953356][T16251] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1086.001141][T16251] usb 3-1: device descriptor read/8, error -71 [ 1086.295814][T18460] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3268'. [ 1086.337670][T18460] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3268'. [ 1086.483641][T18460] netlink: 'syz.4.3268': attribute type 4 has an invalid length. [ 1086.558898][T18465] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3269'. [ 1086.568124][T18465] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3269'. [ 1086.974846][ T5614] Bluetooth: hci5: command 0x0406 tx timeout [ 1087.228537][ T29] audit: type=1400 audit(1783483608.633:1468): avc: denied { write } for pid=18448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1087.823134][T18475] overlayfs: failed to resolve './file0': -2 [ 1088.848425][ T29] audit: type=1400 audit(1783483610.263:1469): avc: denied { write } for pid=18480 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1089.206708][T18486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3274'. [ 1089.268307][T18486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3274'. [ 1089.325686][T18486] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1089.345072][T18486] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1089.393520][T18168] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1089.429202][T18168] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1089.452069][T14221] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1089.464617][T18168] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1089.507206][T18168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1089.520487][T18168] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1089.537220][T18168] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1089.549052][T18168] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1089.622069][T14221] usb 3-1: Using ep0 maxpacket: 32 [ 1089.633646][T14221] usb 3-1: config 10 has an invalid interface number: 251 but max is 0 [ 1089.652014][T14221] usb 3-1: config 10 has no interface number 0 [ 1089.658967][T14221] usb 3-1: config 10 interface 251 has no altsetting 0 [ 1089.688833][T14221] usb 3-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= 5.ff [ 1089.704235][T18168] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1089.714569][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1089.739976][T14221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.844650][T14221] usb 3-1: Product: syz [ 1089.891291][T14221] usb 3-1: Manufacturer: syz [ 1089.946634][T14221] usb 3-1: SerialNumber: syz [ 1089.952860][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1090.039345][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.171336][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1090.199812][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.225289][ T10] usb 4-1: config 0 descriptor?? [ 1090.271391][T18168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.295586][ T29] audit: type=1400 audit(1783483611.723:1470): avc: denied { write } for pid=18484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1090.357928][T18168] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.368143][ T29] audit: type=1400 audit(1783483611.793:1471): avc: denied { bind } for pid=18487 comm="syz.2.3275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1090.396504][T18488] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3275'. [ 1090.448186][T18514] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3275'. [ 1090.466246][ T3280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.473453][ T3280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.494011][ T29] audit: type=1400 audit(1783483611.913:1472): avc: denied { write } for pid=18515 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1090.555556][T14221] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 1090.572031][ T8115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.579225][ T8115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.608848][T14221] gspca_sunplus: reg_r err -71 [ 1090.618733][T14221] sunplus 3-1:10.251: probe with driver sunplus failed with error -71 [ 1090.650152][T14221] usb 3-1: USB disconnect, device number 95 [ 1090.698730][ T10] mcp2221 0003:04D8:00DD.001E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1091.138815][ T10] usb 4-1: USB disconnect, device number 54 [ 1091.333277][ T29] audit: type=1400 audit(1783483612.763:1473): avc: denied { write } for pid=18523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1091.589409][T18545] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1091.885377][ T29] audit: type=1400 audit(1783483613.313:1474): avc: denied { write } for pid=18547 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1091.892009][T18545] tipc: Enabling of bearer rejected, failed to enable media [ 1092.739026][T18561] overlayfs: failed to resolve './file0': -2 [ 1093.475377][T18168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.645892][T18168] veth0_vlan: entered promiscuous mode [ 1093.691437][T18168] veth1_vlan: entered promiscuous mode [ 1093.883361][ T5784] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1094.119016][T18583] tipc: Enabling of bearer rejected, failed to enable media [ 1094.255803][T18168] veth0_macvtap: entered promiscuous mode [ 1094.549446][T18168] veth1_macvtap: entered promiscuous mode [ 1095.050496][T18168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.133279][T18168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.171176][ T3280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.186417][ T5784] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1095.193880][ T3280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.251573][ T5784] usb 5-1: not running at top speed; connect to a high speed hub [ 1095.261601][ T5784] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.262618][T18590] loop9: detected capacity change from 0 to 255852544 [ 1095.272236][ T5784] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1095.292083][ T3280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.304165][ T5784] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x42, changing to 0x2 [ 1095.305728][ T3280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.338939][ T5784] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 1095.382374][ T29] audit: type=1400 audit(1783483616.803:1475): avc: denied { write } for pid=18563 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1095.383907][ T5784] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1095.540805][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.579776][ T5784] usb 5-1: Product: syz [ 1095.599190][ T5784] usb 5-1: Manufacturer: syz [ 1095.615431][ T5784] usb 5-1: SerialNumber: syz [ 1095.702349][T17025] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1095.842674][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.990610][T17025] usb 2-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 1095.997592][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.073780][T17025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.084825][T17025] usb 2-1: Product: syz [ 1096.106940][T17025] usb 2-1: Manufacturer: syz [ 1096.114336][ T29] audit: type=1400 audit(1783483617.533:1476): avc: denied { write } for pid=18593 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1096.236078][T18602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3282'. [ 1096.245200][T18602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3282'. [ 1096.542714][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.568330][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.599313][T17025] usb 2-1: SerialNumber: syz [ 1096.684932][T18602] xt_CT: No such helper "snmp_trap" [ 1096.889722][ T29] audit: type=1400 audit(1783483618.313:1477): avc: denied { setattr } for pid=18588 comm="syz.1.3287" name="ns" dev="proc" ino=63268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1096.935691][T17025] usb 2-1: BAAD HEADPHONE p_chmask mismatch [ 1097.062237][T18113] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1097.150165][T17025] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1097.210887][ T29] audit: type=1400 audit(1783483618.633:1478): avc: denied { ioctl } for pid=18613 comm="syz.3.3290" path="socket:[63276]" dev="sockfs" ino=63276 ioctlcmd=0x6e80 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1097.223457][T17025] usb 2-1: USB disconnect, device number 70 [ 1097.247080][T18616] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3290'. [ 1097.277268][T18113] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16358, setting to 64 [ 1097.322851][T18113] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1097.353223][T17938] udevd[17938]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1097.412061][T18113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.465828][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1097.480804][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1097.491132][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1097.504982][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1097.508091][T18113] usb 1-1: config 0 descriptor?? [ 1097.521250][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1097.595772][T18608] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1098.144060][ T29] audit: type=1400 audit(1783483619.573:1479): avc: denied { write } for pid=18606 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1098.278302][T18608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63498 sclass=netlink_route_socket pid=18608 comm=syz.0.3198 [ 1098.367891][T18113] usbhid 1-1:0.0: can't add hid device: -71 [ 1098.410036][T18113] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1098.626152][T18113] usb 1-1: USB disconnect, device number 70 [ 1099.127726][ T29] audit: type=1400 audit(1783483620.543:1480): avc: denied { write } for pid=18636 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1099.436797][ T5784] snd-usb-us122l 5-1:1.1: usb_set_interface error [ 1099.457053][ T5784] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1099.482138][ T5784] usb 5-1: USB disconnect, device number 65 [ 1099.593740][T17246] Bluetooth: hci1: command tx timeout [ 1100.238595][T18652] netlink: 392 bytes leftover after parsing attributes in process `syz.1.3296'. [ 1101.099422][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3298'. [ 1101.256165][ T6854] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.270033][T18662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3298'. [ 1101.324371][T18662] netlink: 'syz.0.3298': attribute type 14 has an invalid length. [ 1101.361806][T18665] CIFS: VFS: UNC: path must begin with // or \\ [ 1101.368200][T18665] Malformed UNC in devname [ 1101.368200][T18665] [ 1101.375032][T18665] CIFS: VFS: Malformed UNC in devname [ 1101.458551][T18662] netlink: 'syz.0.3298': attribute type 12 has an invalid length. [ 1101.719251][T17246] Bluetooth: hci1: command tx timeout [ 1102.769404][T18674] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3302'. [ 1102.813596][ T6854] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.915594][T18685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3305'. [ 1103.061509][ T6854] team0: Port device netdevsim1 removed [ 1103.085861][ T6854] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.279017][ T6854] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.457169][T18694] XFS (nbd1): SB validate failed with error -5. [ 1103.720456][T18691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.728230][T18691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.752219][T17246] Bluetooth: hci1: command tx timeout [ 1103.955015][T18691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1103.982429][T18691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.390990][T18693] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3307'. [ 1104.487131][ T6856] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.512383][T18707] netlink: 'syz.0.3309': attribute type 1 has an invalid length. [ 1104.527716][ T6856] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.579967][ T6856] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.635613][ T6856] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.888140][T18713] CIFS: VFS: UNC: path must begin with // or \\ [ 1104.894505][T18713] Malformed UNC in devname [ 1104.894505][T18713] [ 1104.901165][T18713] CIFS: VFS: Malformed UNC in devname [ 1105.749190][T18721] CIFS: VFS: UNC: path must begin with // or \\ [ 1105.755656][T18721] Malformed UNC in devname [ 1105.755656][T18721] [ 1105.762347][T18721] CIFS: VFS: Malformed UNC in devname [ 1105.852089][T17246] Bluetooth: hci1: command tx timeout [ 1106.398571][ T6854] veth5: left allmulticast mode [ 1106.422044][ T6854] veth5: left promiscuous mode [ 1106.517071][ T6854] bridge5: port 2(veth5) entered disabled state [ 1106.669575][T18732] loop2: detected capacity change from 0 to 7 [ 1106.676586][T18732] Dev loop2: unable to read RDB block 7 [ 1106.682281][T18732] loop2: AHDI p1 p2 p3 [ 1106.686456][T18732] loop2: partition table partially beyond EOD, truncated [ 1106.693656][T18732] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1106.700438][T18732] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1106.730768][ T6854] veth3: left allmulticast mode [ 1106.783104][T18734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3317'. [ 1106.802111][ T6854] veth3: left promiscuous mode [ 1106.828928][ T6854] bridge5: port 1(veth3) entered disabled state [ 1106.958402][ T6854] pim6reg: left allmulticast mode [ 1107.190637][ T4978] Dev loop2: unable to read RDB block 7 [ 1107.202349][ T4978] loop2: AHDI p1 p2 p3 [ 1107.211647][ T4978] loop2: partition table partially beyond EOD, truncated [ 1107.227386][ T4978] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1107.254671][ T4978] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1107.464347][ T6854] team0: Port device geneve2 removed [ 1108.486795][ T6854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1108.525961][ T6854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1108.536062][ T6854] bond0 (unregistering): Released all slaves [ 1108.548743][ T6854] bond1 (unregistering): Released all slaves [ 1108.765184][ T6854] tipc: Left network mode [ 1109.491478][T18755] fuse: fd is not a fuse device [ 1111.078124][T18785] CIFS: VFS: UNC: path must begin with // or \\ [ 1111.084649][T18785] Malformed UNC in devname [ 1111.084649][T18785] [ 1111.091287][T18785] CIFS: VFS: Malformed UNC in devname [ 1111.485906][ T29] audit: type=1400 audit(1783483632.903:1481): avc: denied { write } for pid=18752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1111.601716][T18621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.618900][T18621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.654399][T18621] bridge_slave_0: entered allmulticast mode [ 1111.691822][T18621] bridge_slave_0: entered promiscuous mode [ 1111.756014][ T29] audit: type=1400 audit(1783483633.183:1482): avc: denied { write } for pid=18788 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1111.934336][T18621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.950959][T18621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.958478][T18777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1111.979524][T18621] bridge_slave_1: entered allmulticast mode [ 1112.023071][T18621] bridge_slave_1: entered promiscuous mode [ 1113.133907][T18791] syzkaller0: entered promiscuous mode [ 1113.151847][T18791] syzkaller0: entered allmulticast mode [ 1113.303320][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1113.705009][T18815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3330'. [ 1115.612446][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.709615][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 1117.735868][T18787] tipc: Enabling of bearer rejected, failed to enable media [ 1117.814769][T18621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.848519][T18621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.869976][T18821] XFS (nbd1): SB validate failed with error -5. [ 1117.939326][T18815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1118.574097][T18621] team0: Port device team_slave_0 added [ 1118.608111][T18621] team0: Port device team_slave_1 added [ 1118.749387][T18850] loop8: detected capacity change from 0 to 7 [ 1118.753080][T18621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.764474][T18621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1118.802539][T18621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.813629][T18850] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1118.825797][T18853] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3340'. [ 1118.833596][T18850] loop8: partition table partially beyond EOD, truncated [ 1118.870328][T18854] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3339'. [ 1118.880542][T18850] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1118.888864][T18621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.889689][T18850] loop8: p2 start 121280928 is beyond EOD, truncated [ 1119.372001][T18621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.637543][T18858] XFS (nbd1): SB validate failed with error -5. [ 1119.664349][T18621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.673146][T18859] udevd[18859]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1119.695427][T18857] XFS (nbd0): SB validate failed with error -5. [ 1119.996491][T18621] hsr_slave_0: entered promiscuous mode [ 1120.043164][T18621] hsr_slave_1: entered promiscuous mode [ 1120.137457][T18621] debugfs: 'hsr0' already exists in 'hsr' [ 1120.166515][T18621] Cannot create hsr debugfs directory [ 1120.362498][T18894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3345'. [ 1120.430366][T18894] veth0_vlan: left promiscuous mode [ 1120.583790][T18113] veth0_vlan: entered promiscuous mode [ 1120.662032][ T29] audit: type=1400 audit(1783483642.083:1483): avc: denied { write } for pid=18882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1120.836716][T18909] Cannot find set identified by id 0 to match [ 1120.871637][ T29] audit: type=1400 audit(1783483642.283:1484): avc: denied { write } for pid=18908 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1121.046282][T18914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1124.170276][T18914] tipc: Enabling of bearer rejected, failed to enable media [ 1124.182519][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1125.833654][T18943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1126.341856][T18954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3355'. [ 1126.706777][ T29] audit: type=1400 audit(1783483648.133:1485): avc: denied { write } for pid=18935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1126.882963][ T6854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1126.936712][ T6854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.991607][ T6854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1127.122311][ T6854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.723379][ T29] audit: type=1400 audit(1783483649.153:1486): avc: denied { write } for pid=18969 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1127.777582][ T6854] veth1_macvtap: left promiscuous mode [ 1127.798436][ T6854] veth1_vlan: left promiscuous mode [ 1127.831061][ T6854] veth0_vlan: left promiscuous mode [ 1128.272145][T18989] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3360'. [ 1128.444475][ T6854] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 1128.777976][T16251] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1129.379356][ T6854] team0 (unregistering): Port device team_slave_1 removed [ 1129.489991][ T6854] team0 (unregistering): Port device team_slave_0 removed [ 1129.642134][T16251] usb 1-1: Using ep0 maxpacket: 8 [ 1129.648748][T16251] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1129.657170][T16251] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1129.667066][T16251] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1129.677082][T16251] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1129.688095][T16251] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1129.716600][T16251] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1129.732380][T16251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.870815][T18950] tipc: Enabling of bearer rejected, failed to enable media [ 1129.888240][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1130.078589][T16251] usb 1-1: usb_control_msg returned -71 [ 1130.101463][T16251] usbtmc 1-1:16.0: can't read capabilities [ 1130.198646][T16251] usb 1-1: USB disconnect, device number 71 [ 1131.342628][T19020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3366'. [ 1133.685917][T19037] XFS (nbd3): SB validate failed with error -5. [ 1134.327532][T19032] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3371'. [ 1134.452591][T19055] /dev/nullb0: Can't open blockdev [ 1135.203998][ T29] audit: type=1400 audit(1783483656.603:1487): avc: denied { write } for pid=19014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1135.438033][T19069] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3377'. [ 1135.457480][T19069] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3377'. [ 1135.480286][T19069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3377'. [ 1135.503759][ T29] audit: type=1400 audit(1783483656.933:1488): avc: denied { write } for pid=19067 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1136.321870][T19083] CIFS: VFS: UNC: path must begin with // or \\ [ 1136.328372][T19083] Malformed UNC in devname [ 1136.328372][T19083] [ 1136.335160][T19083] CIFS: VFS: Malformed UNC in devname [ 1136.625090][ T29] audit: type=1400 audit(1783483658.043:1489): avc: denied { write } for pid=19077 comm="syz.4.3378" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1136.901370][T18621] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1137.214531][T18621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1137.330603][T18621] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1137.503301][T18621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1137.542947][T18621] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1138.576071][T18621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1138.654477][T18621] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1138.663787][T19099] binder_alloc: 19098: binder_alloc_buf size 61696 failed, no address space [ 1138.686742][T18621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1138.694956][T19103] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3385'. [ 1138.704659][T19099] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 1138.723347][T19104] XFS (nbd4): SB validate failed with error -5. [ 1139.083436][ T29] audit: type=1400 audit(1783483660.513:1490): avc: denied { write } for pid=19075 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1139.406638][T18621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.672785][ T5721] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1139.812945][T18621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1139.829503][ T29] audit: type=1400 audit(1783483661.253:1491): avc: denied { write } for pid=19127 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1139.872853][ T8115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.879967][ T8115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1139.910497][ T8115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.917635][ T8115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1139.968899][ T5721] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1140.002836][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.027664][ T5721] usb 1-1: Product: syz [ 1140.048632][ T5721] usb 1-1: Manufacturer: syz [ 1140.063553][ T5721] usb 1-1: SerialNumber: syz [ 1140.153879][T19137] loop8: detected capacity change from 0 to 7 [ 1140.168433][T19140] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3389'. [ 1140.183502][T19137] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1140.201434][T19137] loop8: partition table partially beyond EOD, truncated [ 1140.216517][T19137] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1140.242523][T19137] loop8: p2 start 121280928 is beyond EOD, truncated [ 1140.369022][T18859] udevd[18859]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1140.577303][ T29] audit: type=1400 audit(1783483662.003:1492): avc: denied { write } for pid=19131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1140.739437][T19157] netlink: 'syz.0.3386': attribute type 4 has an invalid length. [ 1140.791742][T19156] CIFS: VFS: UNC: path must begin with // or \\ [ 1140.798266][T19156] Malformed UNC in devname [ 1140.798266][T19156] [ 1140.804960][T19156] CIFS: VFS: Malformed UNC in devname [ 1141.080117][T19123] netlink: 'syz.0.3386': attribute type 4 has an invalid length. [ 1141.114794][T19161] batadv_slave_1: entered promiscuous mode [ 1141.221677][T19163] trusted_key: encrypted_key: insufficient parameters specified [ 1141.344665][ T29] audit: type=1400 audit(1783483662.773:1493): avc: denied { write } for pid=19159 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1141.487578][ T5721] rtl8150 1-1:1.0: couldn't reset the device [ 1141.544028][ T5721] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 1141.605046][ T5721] usb 1-1: USB disconnect, device number 72 [ 1141.617623][ T29] audit: type=1400 audit(1783483663.033:1494): avc: denied { create } for pid=19167 comm="syz.1.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1141.725861][T19158] batadv_slave_1: left promiscuous mode [ 1141.965863][T18621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1142.973848][ T29] audit: type=1400 audit(1783483664.403:1495): avc: denied { write } for pid=19182 comm="syz.4.3392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1143.110350][T18621] veth0_vlan: entered promiscuous mode [ 1143.166718][T18621] veth1_vlan: entered promiscuous mode [ 1143.247318][T18621] veth0_macvtap: entered promiscuous mode [ 1143.271588][T18621] veth1_macvtap: entered promiscuous mode [ 1143.317911][T18621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1143.370202][T18621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1143.412161][T18113] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1143.634179][T18113] usb 1-1: Using ep0 maxpacket: 16 [ 1143.703633][T18113] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.775371][ T6856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.828590][T18113] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1143.842827][ T6856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.858946][T18113] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1143.863651][ T6856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.877696][T18113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1143.895041][T18113] usb 1-1: SerialNumber: syz [ 1143.915976][ T6856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.917950][T18113] usb 1-1: 0:2 : does not exist [ 1143.943015][ T29] audit: type=1400 audit(1783483665.363:1496): avc: denied { write } for pid=19177 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1144.266114][ T29] audit: type=1400 audit(1783483665.693:1497): avc: denied { write } for pid=19210 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1144.300200][ T3280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.317791][T18113] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1144.334244][ T3280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.355155][T18113] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1144.423136][T18113] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1144.503349][ T6861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.524035][ T6861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.565804][T18113] usb 1-1: USB disconnect, device number 73 [ 1145.012122][ T5730] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1145.039409][T19238] CIFS: VFS: UNC: path must begin with // or \\ [ 1145.045835][T19238] Malformed UNC in devname [ 1145.045835][T19238] [ 1145.053005][T19238] CIFS: VFS: Malformed UNC in devname [ 1145.303499][ T5730] usb 3-1: Using ep0 maxpacket: 8 [ 1145.368670][ T5730] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.421305][ T5730] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1145.447553][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.464949][ T5730] usb 3-1: Product: syz [ 1145.472432][ T5730] usb 3-1: Manufacturer: syz [ 1145.480309][ T5730] usb 3-1: SerialNumber: syz [ 1145.485390][ T29] audit: type=1400 audit(1783483666.903:1498): avc: denied { write } for pid=19220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1145.525869][ T5730] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 1145.537307][ T5730] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 1145.645330][T19251] netlink: 'syz.0.3404': attribute type 1 has an invalid length. [ 1145.683673][ T29] audit: type=1400 audit(1783483667.113:1499): avc: denied { write } for pid=19249 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1145.753274][ T5730] usb 3-1: USB disconnect, device number 96 [ 1145.792429][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1145.829060][T19251] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1145.837163][ T5614] Bluetooth: hci5: unexpected event for opcode 0x202d [ 1145.942114][ T9] usb 4-1: device descriptor read/64, error -71 [ 1146.056073][ T29] audit: type=1400 audit(1783483667.483:1500): avc: denied { write } for pid=19256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1146.155381][T17246] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1146.214485][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1146.338847][ T29] audit: type=1400 audit(1783483667.763:1501): avc: denied { write } for pid=19276 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1146.373699][ T9] usb 4-1: device descriptor read/64, error -71 [ 1146.492363][ T29] audit: type=1400 audit(1783483667.913:1502): avc: denied { getopt } for pid=19279 comm="syz.1.3409" lport=60347 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1146.502905][ T9] usb usb4-port1: attempt power cycle [ 1146.842018][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1146.882674][ T9] usb 4-1: device descriptor read/8, error -71 [ 1147.141972][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1147.183607][ T9] usb 4-1: device descriptor read/8, error -71 [ 1147.222183][ T29] audit: type=1400 audit(1783483668.653:1503): avc: denied { write } for pid=19283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1147.328315][ T9] usb usb4-port1: unable to enumerate USB device [ 1147.493147][ T29] audit: type=1400 audit(1783483668.913:1504): avc: denied { write } for pid=19303 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1147.721303][T19306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3412'. [ 1147.794511][T19306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3412'. [ 1148.411980][ T24] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1148.478649][ T29] audit: type=1400 audit(1783483669.903:1505): avc: denied { write } for pid=19309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1148.592025][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1148.609749][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.647671][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1148.677675][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1148.707272][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1148.717938][ T29] audit: type=1400 audit(1783483670.133:1506): avc: denied { write } for pid=19330 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1148.755753][ T24] usb 1-1: SerialNumber: syz [ 1148.788380][ T24] usb 1-1: 0:2 : does not exist [ 1149.283858][ T24] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1149.343241][ T24] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1149.456605][ T24] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1149.587841][ T24] usb 1-1: USB disconnect, device number 74 [ 1149.654839][ T29] audit: type=1400 audit(1783483671.083:1507): avc: denied { write } for pid=19332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1150.223067][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3416'. [ 1150.430244][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3416'. [ 1151.067906][ T29] audit: type=1400 audit(1783483672.453:1508): avc: denied { write } for pid=19350 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1151.228465][T19360] XFS (nbd0): SB validate failed with error -5. [ 1151.641493][T19371] fuse: fd is not a fuse device [ 1151.883746][T19376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3423'. [ 1151.893151][T19376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3423'. [ 1152.224212][T19376] xt_CT: No such helper "snmp_trap" [ 1152.433261][ T29] audit: type=1326 audit(1783483673.863:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19383 comm="syz.0.3424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0fd9de59 code=0x7ffc0000 [ 1152.497915][ T29] audit: type=1326 audit(1783483673.883:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19383 comm="syz.0.3424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0fd9de59 code=0x7ffc0000 [ 1152.550983][ T29] audit: type=1326 audit(1783483673.883:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19383 comm="syz.0.3424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fef0fd9de59 code=0x7ffc0000 [ 1152.763030][ T5784] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1153.126752][ T5784] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1153.136820][ T29] audit: type=1326 audit(1783483673.883:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19383 comm="syz.0.3424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0fd9de59 code=0x7ffc0000 [ 1153.211378][ T5784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.278238][ T5784] usb 4-1: config 0 descriptor?? [ 1153.335922][ T29] audit: type=1326 audit(1783483673.883:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19383 comm="syz.0.3424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0fd9de59 code=0x7ffc0000 [ 1153.484864][ T29] audit: type=1326 audit(1783483673.953:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19383 comm="syz.0.3424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0fd9de59 code=0x7ffc0000 [ 1153.587896][ T29] audit: type=1326 audit(1783483673.953:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19383 comm="syz.0.3424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0fd9de59 code=0x7ffc0000 [ 1153.661582][ T29] audit: type=1326 audit(1783483673.963:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19383 comm="syz.0.3424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fef0fd9de59 code=0x7ffc0000 [ 1153.698312][ T5614] Bluetooth: hci4: command 0x0406 tx timeout [ 1154.405724][ T5784] ath6kl: Failed to submit usb control message: -110 [ 1154.502416][ T5784] ath6kl: unable to send the bmi data to the device: -110 [ 1154.548753][ T5784] ath6kl: Unable to send get target info: -110 [ 1154.591024][ T29] audit: type=1326 audit(1783483673.963:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19383 comm="syz.0.3424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0fd9de59 code=0x7ffc0000 [ 1154.640593][ T5784] ath6kl: Failed to init ath6kl core: -110 [ 1154.670682][ T5784] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1154.807871][ T5784] usb 4-1: USB disconnect, device number 59 [ 1155.322840][T19419] tipc: Started in network mode [ 1155.327968][T19419] tipc: Node identity 2007ff, cluster identity 4711 [ 1155.334766][T19419] tipc: Node number set to 2099199 [ 1155.486086][T17246] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1155.524206][ T9] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1155.686452][T19433] syzkaller0: entered promiscuous mode [ 1155.713981][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1155.725018][T19433] syzkaller0: entered allmulticast mode [ 1155.735818][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.755680][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1155.781060][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1155.796380][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1155.818438][ T9] usb 3-1: SerialNumber: syz [ 1155.819559][T19433] tipc: Enabled bearer , priority 0 [ 1155.853930][ T9] usb 3-1: 0:2 : does not exist [ 1155.877948][T19432] tipc: Resetting bearer [ 1155.923160][ T5730] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1155.951280][T19432] tipc: Disabling bearer [ 1156.002073][T18113] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1156.084796][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 1156.098045][ T5730] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1156.112354][ T5730] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1156.121494][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.133393][ T5730] usb 4-1: config 0 descriptor?? [ 1156.295440][T18113] usb 5-1: Using ep0 maxpacket: 32 [ 1156.304559][ T9] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1156.312578][T18113] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.334509][ T9] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1157.043542][ T9] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1157.056793][T18113] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1157.086242][T18113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.111733][T18113] usb 5-1: Product: syz [ 1157.124043][T18113] usb 5-1: Manufacturer: syz [ 1157.137321][T18113] usb 5-1: SerialNumber: syz [ 1157.149900][ T9] usb 3-1: USB disconnect, device number 97 [ 1157.495043][ T5730] usbhid 4-1:0.0: can't add hid device: -71 [ 1157.996377][T18113] usb 5-1: config 0 descriptor?? [ 1158.003066][ T5730] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1158.024037][T18113] smsc75xx 5-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1158.034610][T18113] smsc75xx 5-1:0.0: probe with driver smsc75xx failed with error -22 [ 1158.047500][T19452] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3438'. [ 1158.064211][ T5730] usb 4-1: USB disconnect, device number 60 [ 1158.067321][T19452] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3438'. [ 1158.127014][T19452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3438'. [ 1158.345635][T19459] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3441'. [ 1158.600497][T19461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1158.607856][T19461] IPv6: NLM_F_CREATE should be set when creating new route [ 1158.716318][T19457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1158.724104][T19464] XFS (nbd0): SB validate failed with error -5. [ 1159.314750][T19473] vlan2: entered promiscuous mode [ 1159.325731][T19473] bridge0: entered promiscuous mode [ 1159.360059][T18113] usb 5-1: USB disconnect, device number 66 [ 1160.392079][ T5614] Bluetooth: hci0: command 0x1003 tx timeout [ 1160.404440][T17246] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1160.544707][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 1160.544725][ T29] audit: type=1326 audit(1783483681.973:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19498 comm="syz.2.3451" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c3ad9de59 code=0x0 [ 1160.654697][T19506] binder: 19503:19506 unknown command 154 [ 1160.663171][T19506] binder: 19503:19506 ioctl c0306201 200000000180 returned -22 [ 1160.663602][ T29] audit: type=1400 audit(1783483682.093:1589): avc: denied { ioctl } for pid=19505 comm="syz.0.3455" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1160.714414][ T29] audit: type=1400 audit(1783483682.123:1590): avc: denied { write } for pid=19505 comm="syz.0.3455" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1160.942216][T18113] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1161.110564][T19513] netlink: 'syz.4.3456': attribute type 2 has an invalid length. [ 1161.125283][T19515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3457'. [ 1161.188036][T19519] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3458'. [ 1161.197736][T18113] usb 4-1: Using ep0 maxpacket: 16 [ 1161.204806][T18113] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.216766][T18113] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1161.227347][T18113] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1161.234870][T19523] loop8: detected capacity change from 0 to 7 [ 1161.237517][T18113] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1161.251078][T18113] usb 4-1: SerialNumber: syz [ 1161.255323][T19523] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1161.302937][T19523] loop8: partition table partially beyond EOD, truncated [ 1161.311828][T19519] XFS (nbd0): SB validate failed with error -5. [ 1161.374070][T18113] usb 4-1: 0:2 : does not exist [ 1161.380049][T19523] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1161.507228][T19530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3460'. [ 1161.516905][T19530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3460'. [ 1161.754349][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1161.761956][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1161.766117][T19523] loop8: p2 start 121280928 is beyond EOD, truncated [ 1161.784552][T18113] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1161.795691][T18113] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1161.838666][T19530] xt_CT: No such helper "snmp_trap" [ 1161.845627][T18113] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1161.928426][T18113] usb 4-1: USB disconnect, device number 61 [ 1161.968332][T18859] udevd[18859]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1162.041395][T19125] udevd[19125]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1162.205900][T19539] xt_hashlimit: size too large, truncated to 1048576 [ 1163.003058][T19548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3465'. [ 1163.117902][T19554] netlink: 'syz.3.3466': attribute type 4 has an invalid length. [ 1163.160744][T19554] netlink: 'syz.3.3466': attribute type 4 has an invalid length. [ 1163.180865][T19553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1163.310099][T19557] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3468'. [ 1163.663383][T19536] tipc: Enabling of bearer rejected, failed to enable media [ 1164.139015][T19574] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3473'. [ 1164.849748][T19589] F2FS-fs: Conflicting test_dummy_encryption options [ 1165.072225][ T5784] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1165.245197][ T5784] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1165.253369][ T5784] usb 3-1: config 0 has no interface number 0 [ 1165.259485][ T5784] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1165.268643][ T5784] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1165.278868][ T5784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.287188][T17025] usb 4-1: new low-speed USB device number 62 using dummy_hcd [ 1165.294747][ T5784] usb 3-1: Product: syz [ 1165.299110][ T5784] usb 3-1: Manufacturer: syz [ 1165.304463][ T5784] usb 3-1: SerialNumber: syz [ 1165.315832][ T5784] usb 3-1: config 0 descriptor?? [ 1165.543845][T17025] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1165.554906][T17025] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1165.565937][T17025] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1165.575354][T17025] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.990083][T17025] usb 4-1: config 0 descriptor?? [ 1166.160271][T19604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3483'. [ 1166.178191][T19604] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1166.187262][T19604] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1166.208197][T17025] hid (null): usage index exceeded [ 1166.219115][T17025] aquacomputer_d5next 0003:0C70:F0B6.001F: ignoring exceeding usage max [ 1166.335095][T17025] aquacomputer_d5next 0003:0C70:F0B6.001F: ignoring exceeding usage max [ 1166.344446][T19606] netlink: 'syz.0.3484': attribute type 1 has an invalid length. [ 1166.345661][T17025] aquacomputer_d5next 0003:0C70:F0B6.001F: usage index exceeded [ 1166.362084][T17025] aquacomputer_d5next 0003:0C70:F0B6.001F: item 0 1 2 2 parsing failed [ 1166.371129][T17025] aquacomputer_d5next 0003:0C70:F0B6.001F: probe with driver aquacomputer_d5next failed with error -22 [ 1166.397530][ T5784] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 1166.415422][T17025] usb 4-1: USB disconnect, device number 62 [ 1166.437145][T19610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3484'. [ 1166.459057][ T5784] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 1166.501562][ T5784] usb 3-1: USB disconnect, device number 98 [ 1166.537164][T17246] Bluetooth: Unexpected start frame (len 12) [ 1166.575315][T19606] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1166.713673][T19610] bond2: (slave geneve2): making interface the new active one [ 1166.736145][T19610] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1166.748853][ T3280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.004858][T19622] netlink: 'syz.4.3487': attribute type 4 has an invalid length. [ 1167.223929][ T3307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.250723][ T3307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.267155][ T3307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.614020][T17025] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1167.777014][ T29] audit: type=1400 audit(1783483689.203:1591): avc: denied { map } for pid=19627 comm="syz.3.3491" path="/dev/sg0" dev="devtmpfs" ino=778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1167.834501][T17025] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 1167.857805][T17025] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1167.878059][ T29] audit: type=1400 audit(1783483689.203:1592): avc: denied { execute } for pid=19627 comm="syz.3.3491" path="/dev/sg0" dev="devtmpfs" ino=778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1167.922796][T17025] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1167.933335][T17025] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.954298][T17025] usb 1-1: config 0 descriptor?? [ 1168.350860][T19661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3500'. [ 1168.389962][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1168.403089][T17025] usbhid 1-1:0.0: can't add hid device: -71 [ 1168.507613][T17025] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1168.534323][T17025] usb 1-1: USB disconnect, device number 75 [ 1169.058244][T19661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1169.120900][T19661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.273154][ T29] audit: type=1400 audit(1783483690.703:1593): avc: denied { write } for pid=19649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1169.614836][T19678] xt_connbytes: Forcing CT accounting to be enabled [ 1169.627683][T19678] Cannot find set identified by id 0 to match [ 1169.797029][T19686] netlink: 'syz.2.3503': attribute type 4 has an invalid length. [ 1170.157412][T19688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3504'. [ 1170.166455][ T29] audit: type=1400 audit(1783483691.583:1594): avc: denied { write } for pid=19681 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1170.440213][T19688] CIFS: VFS: UNC: path must begin with // or \\ [ 1170.446977][T19688] Malformed UNC in devname [ 1170.446977][T19688] [ 1170.453669][T19688] CIFS: VFS: Malformed UNC in devname [ 1170.757685][T19696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3506'. [ 1170.791379][T19696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3506'. [ 1170.817051][T19696] netlink: 'syz.2.3506': attribute type 4 has an invalid length. [ 1171.091435][ T29] audit: type=1400 audit(1783483692.513:1595): avc: denied { map } for pid=19697 comm="syz.4.3507" path="socket:[69862]" dev="sockfs" ino=69862 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1171.253435][ T29] audit: type=1400 audit(1783483692.543:1596): avc: denied { accept } for pid=19697 comm="syz.4.3507" path="socket:[69862]" dev="sockfs" ino=69862 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1171.411982][T18113] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1171.573474][T18113] usb 1-1: Using ep0 maxpacket: 16 [ 1171.742249][T18113] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.839498][T18113] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1171.939650][T18113] usb 1-1: New USB device found, idVendor=1b96, idProduct=0001, bcdDevice= 0.00 [ 1172.034914][T18113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.157636][T18113] usb 1-1: config 0 descriptor?? [ 1172.229184][ T29] audit: type=1400 audit(1783483693.533:1597): avc: denied { write } for pid=19699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1172.425841][T19736] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1172.656326][T19743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3515'. [ 1172.695637][ T29] audit: type=1400 audit(1783483694.113:1598): avc: denied { write } for pid=19744 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1173.163708][T19753] netlink: 'syz.4.3516': attribute type 4 has an invalid length. [ 1173.637612][T19757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59423 sclass=netlink_route_socket pid=19757 comm=syz.2.3517 [ 1173.671625][T19757] syz_tun: entered allmulticast mode [ 1173.961959][T17025] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1174.120345][ T29] audit: type=1400 audit(1783483695.543:1599): avc: denied { connect } for pid=19761 comm="syz.4.3520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1174.145448][T17025] usb 3-1: Using ep0 maxpacket: 16 [ 1174.162755][T17025] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 1174.177616][ T29] audit: type=1400 audit(1783483695.593:1600): avc: denied { setopt } for pid=19761 comm="syz.4.3520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1174.210757][T17025] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1174.228086][T17025] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1174.274282][T17025] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.348927][T17025] usb 3-1: config 0 descriptor?? [ 1174.447757][T18113] usbhid 1-1:0.0: can't add hid device: -71 [ 1174.453852][T18113] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1174.479303][T18113] usb 1-1: USB disconnect, device number 76 [ 1174.956616][T19775] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1176.364857][T19781] kAFS: unable to lookup cell '' [ 1176.553013][T19771] tipc: Enabling of bearer rejected, failed to enable media [ 1176.593264][T17025] usbhid 3-1:0.0: can't add hid device: -71 [ 1176.615005][T17025] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1176.666277][T17025] usb 3-1: USB disconnect, device number 99 [ 1176.782585][T19784] netlink: 'syz.4.3522': attribute type 10 has an invalid length. [ 1177.037068][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.103768][T19793] netlink: 'syz.4.3522': attribute type 10 has an invalid length. [ 1177.172769][T19796] XFS (nbd0): SB validate failed with error -5. [ 1177.410393][T19803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3526'. [ 1177.543967][T19784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1177.585789][T19784] team0: Port device netdevsim1 added [ 1177.747461][T19790] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3525'. [ 1177.966250][T19781] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1178.020566][T19810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3527'. [ 1178.088662][T19793] team0: Port device netdevsim1 removed [ 1178.161862][T19793] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1178.264398][T19793] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1178.466240][ T29] audit: type=1400 audit(1783483699.893:1601): avc: denied { accept } for pid=19779 comm="syz.4.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1179.021086][T19827] netlink: 'syz.3.3530': attribute type 4 has an invalid length. [ 1179.967956][T14221] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1180.342110][T14221] usb 4-1: Using ep0 maxpacket: 32 [ 1180.363380][T14221] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 1180.378898][T19839] Cannot find set identified by id 0 to match [ 1180.392273][T14221] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 18083, setting to 1024 [ 1180.412141][T14221] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1180.446340][T14221] usb 4-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 1180.474826][T14221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.500196][T14221] usb 4-1: Product: 堆饎隦Ŭ沏騦칱䐈ꨀ꬐뢰坪舭ᗥꊤ炢焘뵊诜㸸㬐큃㴪狠ﺟ샣辯蝹麭톢龚㳇៾⧎勧噲늢薿⡼삌磸岴婫容㦱ꋛ䡺⸂ꇣ솜퐷৳呛퉸ꡲ헔簨剢씅Ẑ픴⿧绐怎㰇쭲䤮⤚㊷Ặ빞蚡魯秊瘰꿎⌃ᇛ㚾웆䫩흨땢쟷ᴖ玜⋂᱐鴫 [ 1180.534088][T19838] tipc: Enabling of bearer rejected, failed to enable media [ 1180.712718][T14221] usb 4-1: Manufacturer: Џ [ 1180.721782][T14221] usb 4-1: SerialNumber: Ѓ [ 1180.792801][T19847] CIFS: VFS: UNC: path must begin with // or \\ [ 1180.799138][T19847] Malformed UNC in devname [ 1180.799138][T19847] [ 1180.805878][T19847] CIFS: VFS: Malformed UNC in devname [ 1181.405336][T19830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.436429][T19830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.504410][T19830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.549945][T19830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.587864][ T29] audit: type=1400 audit(1783483703.003:1602): avc: denied { map } for pid=19829 comm="syz.3.3532" path="socket:[70220]" dev="sockfs" ino=70220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1181.593383][T14221] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1181.614052][T19854] netlink: 'syz.2.3538': attribute type 1 has an invalid length. [ 1181.739150][T19854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1181.791318][T19859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3540'. [ 1181.816096][T19860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3538'. [ 1181.859619][T14221] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1181.915724][T19862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3541'. [ 1181.924621][T19862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3541'. [ 1181.974654][T14221] usb 4-1: USB disconnect, device number 63 [ 1181.988612][T19860] bond1: entered promiscuous mode [ 1182.005354][T19125] udevd[19125]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1182.044053][T19860] bond1: entered allmulticast mode [ 1182.102633][T19862] xt_CT: No such helper "snmp_trap" [ 1182.129013][T19854] bond1: (slave dummy0): making interface the new active one [ 1182.149290][T19854] dummy0: entered promiscuous mode [ 1182.159540][T19854] dummy0: entered allmulticast mode [ 1182.178075][T19854] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1183.108540][T19887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1183.116172][T19881] loop2: detected capacity change from 0 to 7 [ 1183.129902][T19881] Dev loop2: unable to read RDB block 7 [ 1183.135513][T19881] loop2: AHDI p1 p2 p3 [ 1183.139675][T19881] loop2: partition table partially beyond EOD, truncated [ 1183.147769][T19881] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1183.154598][T19881] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1184.092980][T19891] tipc: Enabling of bearer rejected, failed to enable media [ 1185.331820][T19899] bpf: Bad value for 'context' [ 1186.361296][T19905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3552'. [ 1186.370439][T19905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3552'. [ 1186.594833][T19905] xt_CT: No such helper "snmp_trap" [ 1186.613209][T19913] netlink: 794 bytes leftover after parsing attributes in process `syz.0.3554'. [ 1186.932093][T17025] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1187.257706][T19931] tipc: Enabling of bearer rejected, failed to enable media [ 1187.286482][T17025] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1187.308792][T17025] usb 3-1: config 0 has no interface number 0 [ 1187.343136][T17025] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1187.408431][T17025] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1187.448251][T17025] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.473008][T17025] usb 3-1: Product: syz [ 1187.488762][T17025] usb 3-1: Manufacturer: syz [ 1187.504271][T17025] usb 3-1: SerialNumber: syz [ 1187.527923][T17025] usb 3-1: config 0 descriptor?? [ 1187.552623][T17025] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 1187.769393][T19916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.796591][T19916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.822339][T14221] usb 3-1: USB disconnect, device number 100 [ 1187.835498][T14221] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 1188.192572][T19943] XFS (nbd0): SB validate failed with error -5. [ 1189.383946][T17246] Bluetooth: hci2: command 0x0406 tx timeout [ 1189.823310][T19959] loop8: detected capacity change from 0 to 7 [ 1189.859422][T19959] Dev loop8: unable to read RDB block 7 [ 1189.875938][T19959] loop8: unable to read partition table [ 1189.900688][T19959] loop8: partition table beyond EOD, truncated [ 1189.924503][T19959] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1189.970818][T19962] netlink: 'syz.0.3569': attribute type 10 has an invalid length. [ 1189.981778][T19962] syz_tun: entered promiscuous mode [ 1190.024327][T19962] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1191.392513][T19979] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1191.413971][T19979] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1191.547205][ T29] audit: type=1400 audit(1783483712.963:1603): avc: denied { create } for pid=19975 comm="syz.0.3575" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1191.892204][ T29] audit: type=1400 audit(1783483712.963:1604): avc: denied { write } for pid=19975 comm="syz.0.3575" name="file0" dev="tmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1191.893776][T19984] block device autoloading is deprecated and will be removed. [ 1192.030023][ T29] audit: type=1400 audit(1783483712.963:1605): avc: denied { open } for pid=19975 comm="syz.0.3575" path="/71/file0" dev="tmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1192.191522][ T29] audit: type=1400 audit(1783483713.613:1606): avc: denied { unlink } for pid=18168 comm="syz-executor" name="file0" dev="tmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1192.340203][T19997] XFS (nbd2): SB validate failed with error -5. [ 1192.389950][T20001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3582'. [ 1192.810868][T20012] fuse: Bad value for 'fd' [ 1192.816620][T20014] xt_hashlimit: max too large, truncated to 1048576 [ 1193.298127][ T5614] Bluetooth: hci4: unexpected event for opcode 0x042c [ 1193.988163][T20025] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3588'. [ 1193.998716][T20025] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3588'. [ 1194.008620][T20025] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3588'. [ 1194.717209][T20034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3590'. [ 1194.726201][T20034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3590'. [ 1195.531721][T20034] xt_CT: No such helper "snmp_trap" [ 1195.899971][T20056] netlink: 'syz.4.3597': attribute type 4 has an invalid length. [ 1195.945290][T20056] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1196.160953][T20058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1196.964955][T20062] tipc: Enabling of bearer rejected, failed to enable media [ 1196.979827][T20063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3598'. [ 1197.379644][ T5614] block nbd4: Receive control failed (result -32) [ 1197.524439][T20039] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888072740000 pfn:0x72740 [ 1197.536976][T20056] block nbd4: shutting down sockets [ 1197.542042][T20029] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x200000000 pfn:0x23339 [ 1197.552189][T20029] memcg:ffff88802ca20380 [ 1197.575682][T20039] memcg:ffff88802ca20380 [ 1197.617637][T20077] xt_cluster: node mask cannot exceed total number of nodes [ 1197.634751][T20029] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 1197.667549][T20071] ip6erspan0: entered allmulticast mode [ 1197.680590][T20039] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 1197.701001][T20083] loop8: detected capacity change from 0 to 7 [ 1197.722114][T20029] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 1197.731989][T20039] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 1197.740730][T20029] raw: 0000000200000000 0000000000000000 00000001ffffffff ffff88802ca20380 [ 1197.750190][T20039] raw: ffff888072740000 0000000000000000 00000001ffffffff ffff88802ca20380 [ 1197.770187][T20083] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1197.780670][T20029] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 1197.794158][T20083] loop8: partition table partially beyond EOD, truncated [ 1197.801339][T20039] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 1197.813356][T20083] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1197.823766][T20029] page_owner tracks the page as allocated [ 1197.848438][ T29] audit: type=1400 audit(1783483719.273:1607): avc: denied { read } for pid=4960 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1197.871107][T20083] loop8: p2 start 121280928 is beyond EOD, truncated [ 1197.881301][T20039] page_owner tracks the page as allocated [ 1197.913576][T20029] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 20029, tgid 20029 (syz.3.3589), ts 1197542010013, free_ts 1197535089987 [ 1197.937156][T20029] post_alloc_hook+0xfd/0x120 [ 1198.065777][T20039] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 20039, tgid 20029 (syz.3.3589), ts 1197524265552, free_ts 1197507549867 [ 1198.220290][T20029] get_page_from_freelist+0xf48/0x3530 [ 1198.341165][T20029] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1198.420013][T20029] alloc_pages_mpol+0x1fb/0x540 [ 1198.483621][T20029] folio_alloc_noprof+0x22/0x250 [ 1198.547269][T20039] post_alloc_hook+0xfd/0x120 [ 1198.857645][ T29] audit: type=1400 audit(1783483719.273:1608): avc: denied { search } for pid=4960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1199.845356][T20029] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 1199.853466][ T29] audit: type=1400 audit(1783483719.273:1609): avc: denied { append } for pid=4960 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1199.877717][T20087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3605'. [ 1199.886757][T20039] get_page_from_freelist+0xf48/0x3530 [ 1199.887679][T19125] udevd[19125]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1199.894264][T20029] filemap_alloc_folio_noprof+0x5e/0x80 [ 1199.904351][ T29] audit: type=1400 audit(1783483719.273:1610): avc: denied { open } for pid=4960 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1199.921959][T20039] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1199.936934][T20087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3605'. [ 1199.955867][T20029] page_cache_ra_order+0x539/0xed0 [ 1199.966274][T20039] alloc_pages_mpol+0x1fb/0x540 [ 1199.970433][T20029] filemap_fault+0x1943/0x3130 [ 1199.975194][T20091] xt_hashlimit: size too large, truncated to 1048576 [ 1199.989558][T20029] __do_fault+0x10b/0x440 [ 1199.990599][T20039] folio_alloc_noprof+0x22/0x250 [ 1199.995638][ T29] audit: type=1400 audit(1783483719.273:1611): avc: denied { getattr } for pid=4960 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1200.027137][T20029] do_fault+0x2db/0x1750 [ 1200.036779][T20029] __handle_mm_fault+0x187d/0x2a00 [ 1200.045704][T20088] xt_CT: No such helper "snmp_trap" [ 1200.051440][T20029] handle_mm_fault+0x37b/0xa30 [ 1200.056651][T20029] do_user_addr_fault+0x5a3/0x12f0 [ 1200.061829][T20029] exc_page_fault+0x6f/0xd0 [ 1200.070678][T20039] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 1200.095650][T20029] asm_exc_page_fault+0x26/0x30 [ 1200.116319][T20029] page last free pid 2 tgid 2 stack trace: [ 1200.131962][T20029] __free_frozen_pages+0x79f/0x1090 [ 1200.131997][T20039] filemap_alloc_folio_noprof+0x5e/0x80 [ 1200.137228][T20029] __kasan_populate_vmalloc+0x1ea/0x210 [ 1200.137263][T20029] alloc_vmap_area+0x95d/0x2bb0 [ 1200.160431][T20039] page_cache_ra_order+0x539/0xed0 [ 1200.174141][T20039] filemap_fault+0x1943/0x3130 [ 1200.175073][T20029] __get_vm_area_node+0x1ca/0x330 [ 1200.187357][T20039] __do_fault+0x10b/0x440 [ 1200.197413][T20029] __vmalloc_node_range_noprof+0x228/0x1630 [ 1200.205330][T20039] do_fault+0xa99/0x1750 [ 1200.212241][T20029] __vmalloc_node_noprof+0xad/0xf0 [ 1200.216981][T20039] __handle_mm_fault+0x187d/0x2a00 [ 1200.224255][T20029] copy_process+0x7fb/0x8030 [ 1200.230104][T20029] kernel_clone+0x176/0x9d0 [ 1200.237162][T20029] kernel_thread+0xdb/0x120 [ 1200.240127][T20039] handle_mm_fault+0x37b/0xa30 [ 1200.246641][T20029] kthreadd+0x498/0x7a0 [ 1200.246682][T20029] ret_from_fork+0x72b/0xd50 [ 1200.246709][T20029] ret_from_fork_asm+0x1a/0x30 [ 1200.250541][T20029] ------------[ cut here ]------------ [ 1200.250555][T20029] kernel BUG at mm/filemap.c:858! [ 1200.251172][T20029] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1200.265065][T20039] __get_user_pages+0x1178/0x32a0 [ 1200.269835][T20029] CPU: 0 UID: 0 PID: 20029 Comm: syz.3.3589 Tainted: G L syzkaller #0 PREEMPT(full) [ 1200.269865][T20029] Tainted: [L]=SOFTLOCKUP [ 1200.269873][T20029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1200.269886][T20029] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 1200.276805][T20039] populate_vma_page_range+0x267/0x3f0 [ 1200.281265][T20029] Code: 4c c1 ff 48 c7 c6 a0 93 dd 8b 4c 89 ef e8 d6 eb 12 00 90 0f 0b e8 ee 4b c1 ff 48 c7 c6 00 94 dd 8b 4c 89 ef e8 bf eb 12 00 90 <0f> 0b e8 d7 4b c1 ff 48 c7 c6 80 94 dd 8b 4c 89 ef e8 a8 eb 12 00 [ 1200.281287][T20029] RSP: 0018:ffffc90004527820 EFLAGS: 00010293 [ 1200.281305][T20029] RAX: 0000000000000000 RBX: 0000000000112c00 RCX: 0000000000000000 [ 1200.286963][T20039] __mm_populate+0x107/0x3a0 [ 1200.297196][T20029] RDX: ffff88801fe82540 RSI: ffffffff825b70a8 RDI: ffff88801fe82a04 [ 1200.297213][T20029] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1200.297226][T20029] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 1200.297237][T20029] R13: ffffea00008cce40 R14: 000000000002c928 R15: 0000000000000000 [ 1200.297251][T20029] FS: 0000555573700500(0000) GS:ffff888123dec000(0000) knlGS:0000000000000000 [ 1200.297270][T20029] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1200.297284][T20029] CR2: 00007f488b627dac CR3: 000000003abf8000 CR4: 00000000003526f0 [ 1200.297298][T20029] Call Trace: [ 1200.297305][T20029] [ 1200.297316][T20029] ? __pfx___filemap_add_folio+0x10/0x10 [ 1200.297351][T20029] filemap_add_folio+0x1d3/0x630 [ 1200.297379][T20029] ? __pfx_filemap_add_folio+0x10/0x10 [ 1200.297410][T20029] page_cache_ra_order+0x602/0xed0 [ 1200.297440][T20029] filemap_fault+0x1943/0x3130 [ 1200.297472][T20029] ? __pfx_filemap_fault+0x10/0x10 [ 1200.302798][T20039] page last free pid 2 tgid 2 stack trace: [ 1200.311830][T20029] ? __pfx_filemap_map_pages+0x10/0x10 [ 1200.311862][T20029] __do_fault+0x10b/0x440 [ 1200.311884][T20029] do_fault+0x2db/0x1750 [ 1200.318309][T20039] __free_frozen_pages+0x79f/0x1090 [ 1200.323275][T20029] __handle_mm_fault+0x187d/0x2a00 [ 1200.323310][T20029] ? __pfx___handle_mm_fault+0x10/0x10 [ 1200.343354][T20039] __kasan_populate_vmalloc+0x1ea/0x210 [ 1200.348945][T20029] ? irqentry_exit+0x24d/0xa00 [ 1200.348975][T20029] ? lockdep_hardirqs_on+0x78/0x100 [ 1200.349002][T20029] ? irqentry_exit+0x24d/0xa00 [ 1200.349033][T20029] ? handle_mm_fault+0x53c/0xa30 [ 1200.349063][T20029] ? handle_mm_fault+0x54d/0xa30 [ 1200.349093][T20029] handle_mm_fault+0x37b/0xa30 [ 1200.349125][T20029] do_user_addr_fault+0x5a3/0x12f0 [ 1200.349161][T20029] exc_page_fault+0x6f/0xd0 [ 1200.349190][T20029] asm_exc_page_fault+0x26/0x30 [ 1200.349213][T20029] RIP: 0033:0x7f44c7b6e488 [ 1200.349231][T20029] Code: 66 89 74 17 02 88 0f c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 0f 1f 44 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 62 e1 fe 28 6f 54 16 ff 62 e1 fe 28 6f [ 1200.349253][T20029] RSP: 002b:00007ffd632c1768 EFLAGS: 00010202 [ 1200.349272][T20029] RAX: 0000200000000040 RBX: 0000000000000004 RCX: 00236962762f7665 [ 1200.349287][T20029] RDX: 000000000000000a RSI: 6962762f7665642f RDI: 0000200000000040 [ 1200.349303][T20029] RBP: fffffffffffffffe R08: 0000001b2de20000 R09: 0000000000000001 [ 1200.349317][T20029] R10: 7ffffffffffffff5 R11: 0000000000000009 R12: 00007ffd632c1890 [ 1200.349331][T20029] R13: 00007f44c7e2609c R14: 0000000000123a8f R15: 00007ffd632c1870 [ 1200.349353][T20029] [ 1200.349375][T20029] Modules linked in: [ 1200.350039][T20029] ---[ end trace 0000000000000000 ]--- [ 1200.404910][T20039] alloc_vmap_area+0x95d/0x2bb0 [ 1200.413957][T20029] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 1200.418483][T20039] __get_vm_area_node+0x1ca/0x330 [ 1200.422648][T20029] Code: 4c c1 ff 48 c7 c6 a0 93 dd 8b 4c 89 ef e8 d6 eb 12 00 90 0f 0b e8 ee 4b c1 ff 48 c7 c6 00 94 dd 8b 4c 89 ef e8 bf eb 12 00 90 <0f> 0b e8 d7 4b c1 ff 48 c7 c6 80 94 dd 8b 4c 89 ef e8 a8 eb 12 00 [ 1200.424423][T20039] __vmalloc_node_range_noprof+0x228/0x1630 [ 1200.429849][T20029] RSP: 0018:ffffc90004527820 EFLAGS: 00010293 [ 1200.434861][T20039] __vmalloc_node_noprof+0xad/0xf0 [ 1200.440235][T20029] [ 1200.445789][T20039] copy_process+0x7fb/0x8030 [ 1200.451064][T20029] RAX: 0000000000000000 RBX: 0000000000112c00 RCX: 0000000000000000 [ 1200.457405][T20039] kernel_clone+0x176/0x9d0 [ 1200.462112][T20029] RDX: ffff88801fe82540 RSI: ffffffff825b70a8 RDI: ffff88801fe82a04 [ 1200.467612][T20039] kernel_thread+0xdb/0x120 [ 1200.472870][T20029] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1200.475819][T20039] kthreadd+0x498/0x7a0 [ 1200.481144][T20029] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 1200.502687][T20039] ret_from_fork+0x72b/0xd50 [ 1200.507400][T20029] R13: ffffea00008cce40 R14: 000000000002c928 R15: 0000000000000000 [ 1200.741664][T20039] ret_from_fork_asm+0x1a/0x30 [ 1200.746626][T20039] ------------[ cut here ]------------ [ 1200.752357][T20039] kernel BUG at mm/filemap.c:858! [ 1200.764959][T20039] Oops: invalid opcode: 0000 [#2] SMP KASAN NOPTI [ 1200.771409][T20039] CPU: 0 UID: 0 PID: 20039 Comm: syz.3.3589 Tainted: G D L syzkaller #0 PREEMPT(full) [ 1200.782358][T20039] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 1200.787441][T20039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1200.797477][T20039] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 1200.803453][T20039] Code: 4c c1 ff 48 c7 c6 a0 93 dd 8b 4c 89 ef e8 d6 eb 12 00 90 0f 0b e8 ee 4b c1 ff 48 c7 c6 00 94 dd 8b 4c 89 ef e8 bf eb 12 00 90 <0f> 0b e8 d7 4b c1 ff 48 c7 c6 80 94 dd 8b 4c 89 ef e8 a8 eb 12 00 [ 1200.823048][T20039] RSP: 0018:ffffc90003da73f8 EFLAGS: 00010246 [ 1200.829095][T20039] RAX: 0000000000080000 RBX: 0000000000112c00 RCX: ffffc90017d16000 [ 1200.837046][T20039] RDX: 0000000000080000 RSI: ffffffff825b70a8 RDI: ffff8880329f4f44 [ 1200.844999][T20039] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff22444d2 [ 1200.852946][T20039] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000002 [ 1200.860896][T20039] R13: ffffea0001c9d000 R14: 000000000002c928 R15: 0000000000000000 [ 1200.868854][T20039] FS: 00007f44c8afe6c0(0000) GS:ffff888123dec000(0000) knlGS:0000000000000000 [ 1200.877784][T20039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1200.884357][T20039] CR2: 000000110c35a11c CR3: 000000003abf8000 CR4: 00000000003526f0 [ 1200.892319][T20039] Call Trace: [ 1200.895584][T20039] [ 1200.898504][T20039] ? __pfx___filemap_add_folio+0x10/0x10 [ 1200.904144][T20039] filemap_add_folio+0x1d3/0x630 [ 1200.909078][T20039] ? __lock_acquire+0x49f/0x1a40 [ 1200.914006][T20039] ? __pfx_filemap_add_folio+0x10/0x10 [ 1200.919465][T20039] ? __pfx___css_rstat_updated+0x10/0x10 [ 1200.925094][T20039] page_cache_ra_order+0x602/0xed0 [ 1200.930209][T20039] filemap_fault+0x1943/0x3130 [ 1200.934977][T20039] ? __pfx_filemap_fault+0x10/0x10 [ 1200.940091][T20039] ? find_held_lock+0x2b/0x80 [ 1200.944769][T20039] __do_fault+0x10b/0x440 [ 1200.949087][T20039] do_fault+0xa99/0x1750 [ 1200.953325][T20039] __handle_mm_fault+0x187d/0x2a00 [ 1200.958438][T20039] ? mt_find+0x45e/0x8e0 [ 1200.962737][T20039] ? __pfx___handle_mm_fault+0x10/0x10 [ 1200.968221][T20039] ? __pfx_mt_find+0x10/0x10 [ 1200.972825][T20039] handle_mm_fault+0x37b/0xa30 [ 1200.977596][T20039] __get_user_pages+0x1178/0x32a0 [ 1200.982622][T20039] ? __pfx___get_user_pages+0x10/0x10 [ 1200.987990][T20039] populate_vma_page_range+0x267/0x3f0 [ 1200.993453][T20039] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1200.999431][T20039] ? __pfx_find_vma_intersection+0x10/0x10 [ 1201.005232][T20039] ? do_mmap+0x93f/0x12f0 [ 1201.009563][T20039] __mm_populate+0x107/0x3a0 [ 1201.014150][T20039] ? __pfx___mm_populate+0x10/0x10 [ 1201.019263][T20039] ? up_write+0x2e5/0x5c0 [ 1201.024136][T20039] vm_mmap_pgoff+0x37f/0x470 [ 1201.028746][T20039] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1201.033859][T20039] ? __fget_files+0x215/0x3d0 [ 1201.038545][T20039] ? __fget_files+0x21f/0x3d0 [ 1201.043224][T20039] ksys_mmap_pgoff+0x3cb/0x610 [ 1201.047979][T20039] ? kcov_ioctl+0x17a/0x750 [ 1201.052474][T20039] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1201.057748][T20039] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1201.063554][T20039] __x64_sys_mmap+0x125/0x190 [ 1201.068230][T20039] do_syscall_64+0x115/0x870 [ 1201.072819][T20039] ? clear_bhb_loop+0x40/0x90 [ 1201.077495][T20039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.083377][T20039] RIP: 0033:0x7f44c7b9de59 [ 1201.087781][T20039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.107379][T20039] RSP: 002b:00007f44c8afe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1201.115779][T20039] RAX: ffffffffffffffda RBX: 00007f44c7e26090 RCX: 00007f44c7b9de59 [ 1201.123740][T20039] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 1201.131699][T20039] RBP: 00007f44c7c33e6f R08: 0000000000000004 R09: 000000002c93a000 [ 1201.139658][T20039] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 1201.147615][T20039] R13: 00007f44c7e26128 R14: 00007f44c7e26090 R15: 00007ffd632c1608 [ 1201.155584][T20039] [ 1201.158584][T20039] Modules linked in: [ 1201.163238][T20039] ---[ end trace 0000000000000000 ]--- [ 1201.175075][T20029] FS: 0000555573700500(0000) GS:ffff888123dec000(0000) knlGS:0000000000000000 [ 1201.184497][T20029] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1201.198570][T20029] CR2: 000000110c35a11c CR3: 000000003abf8000 CR4: 00000000003526f0 [ 1201.206725][T20029] Kernel panic - not syncing: Fatal exception [ 1201.213019][T20029] Kernel Offset: disabled [ 1201.217319][T20029] Rebooting in 86400 seconds..