last executing test programs: 981.808041ms ago: executing program 0 (id=1280): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc8, 0x5}}, 0x1c}}, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000000)={0x0, 0x5, [0x6, 0x2, 0x5, 0x16, 0x401, 0x6]}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x1, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x20004018) 980.153911ms ago: executing program 0 (id=1281): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x600, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x6048080) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x34c8}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x20000010) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x100, 0x1403, 0x2, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'tunl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x48000}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000700)={'vxcan1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0}, &(0x7f0000000780)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xa4, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x820}, 0x800) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000940), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000980)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000a40)={&(0x7f0000000900), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r10, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80000) timerfd_create(0x7, 0x80400) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000ac0), r5) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x50, r12, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x50}}, 0x5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup/syz1\x00', 0x200002, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r5) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000fc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x2c0, r13, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xb7, 0x2a, [@random={0x5, 0x95, "4c0f81de8682523231d9e621cf2c1da375220959a9f52ec0f34054ce0b62e170cf0199d022916b1fc87c32719898f04f3a507d5bd87ae3729780a04d9d590696a44a6caef2c0736d03b58756522c8df54f614238b619863dffd0b62e6bdaa25ac1f07b3da326127e56275419aaae2f859392b7ed4353a57362d73cc27e3e9646b51662468d5cdd98e0cb54502237faf2a6b70a7784"}, @tim={0x5, 0x12, {0xfb, 0x77, 0x0, "998895123227cbeae47d0230952990"}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x99, 0x2a, [@random={0x10, 0x84, "1d26c41402d257d2be63b000b5da7543822b0fa9ed76e7cc91f54b6b49d67b6dbe559a6e31259b76561d2c757bfa3fb392f3741ce7c8aa1ba83e9da3bfb086d43f0ae2367910778b7ae2d0e184344dcc58e34af53b24c23efaa313ea3bd8ad29768149a5978e7f6f0e86e897e541bcada6d174df3e7adfa8077bbf33b0fee56845b2607a"}, @mesh_chsw={0x76, 0x6, {0x4, 0x5, 0x38, 0x2}}, @ibss={0x6, 0x2, 0x9}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x137, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @peer_mgmt={0x75, 0x14, {0x1, 0x9, @void, @void, @val="2dfea2c341d7ecdd9699aabce66813b9"}}, @fast_bss_trans={0x37, 0x86, {0x7, 0x4, "4ae88af0c082a3799dc0696d22e1064c", "2595ea52a3de628c99657794a9e9e311fe54677735e24a64cee7c969d58c59ce", "ec058c6b137fea6273c278aba720d4f4fea697e980490673885d94b8438eaa25", [{0x4, 0x2, "eb39"}, {0x3, 0x3, "6059d3"}, {0x2, 0x1c, "f336fdafd77e0ad0f00e71e2c7b1efbefdecf0a1017c09bc28b0fa61"}, {0x4, 0xb, "a25a8b4f0b0a6fde779265"}]}}, @ibss={0x6, 0x2, 0x3}, @preq={0x82, 0x6d, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0xc1, 0xb5, 0x81, @device_a, 0xf, @value=@broadcast, 0x0, 0x9, 0x7, [{{0x1, 0x0, 0x1}, @device_b, 0x1}, {{0x1}, @broadcast, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0xd}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}, {{0x1}, @device_b, 0x40}, {{0x1}, @device_b}, {{0x0, 0x0, 0x1}, @device_a, 0xa}]}}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @dsss={0x3, 0x1, 0xb6}, @gcr_ga={0xbd, 0x6, @broadcast}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4004}, 0x20000800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xf) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r14, 0x4010ae68, &(0x7f0000001000)={0xfec00000, 0x1000}) r15 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r15, 0x0, 0x24, &(0x7f0000001040)={@empty, @empty, r7}, 0xc) 977.31599ms ago: executing program 2 (id=1284): r0 = syz_clone(0x5002011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) rmdir(&(0x7f0000000180)='./file1\x00') (async) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') (async) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file1\x00') (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYBLOB="ef00000000000000140012"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8010) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x50) (async) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) (async) setreuid(0xee00, 0xee00) readv(r5, &(0x7f0000000700)=[{&(0x7f0000000280)=""/227, 0xe3}], 0x1) (async) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010328bd7100e15400fb33"], 0x1c}}, 0x0) 974.050259ms ago: executing program 2 (id=1285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x5, 0x0) (async, rerun: 32) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x2c, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4004) (rerun: 32) 970.151289ms ago: executing program 0 (id=1287): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x3) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) bind$can_j1939(r3, &(0x7f0000001180)={0x1d, r4, 0x2, {0x0, 0xff, 0x1}}, 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000040)={0x0, 0x6}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 969.850352ms ago: executing program 0 (id=1288): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r1, 0x0, 0x0, 0x40010021, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x1, @remote, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x1, @remote, 'team_slave_1\x00'}}) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3e, &(0x7f0000000000)=0x8, 0x4) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)='C', 0x1}], 0x1}, 0x24000040) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1800009) 969.074063ms ago: executing program 2 (id=1290): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000280)={0x28, 0x5, r3, 0x0, &(0x7f000000d000/0x1000)=nil, 0x1000, 0x57}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000002080)={0x28, 0x3, r3, r3, 0x3, 0x5, 0x1000}) open_by_handle_at(r2, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0xe7824c0b9e1c6bf6) 873.38158ms ago: executing program 2 (id=1293): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg/0:0:0:0\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f00000000c0)=0x2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x70bd25, 0x25dfdbf8, {0xc}}, 0x14}}, 0x4000000) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="14000000000000001001000002"], 0x30}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$kcm(r3, &(0x7f0000000300)={&(0x7f00000003c0)=@phonet={0x23, 0x8, 0xd, 0x6}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000440)="e5d7f2142b1a8e909392c7d55e480582cdb139f67302d347e3fe8661a36eb84354fd7ca096c96d8bfc763334a280ab84b7b6020339b166451f05e87ebe140a504f754f31b53a9d7c6128c2f7797c3713f06edb2a91614895faf40e367b53c2559bf0003c90be8b3dbaeece50ee52a608b4feed29d7fbd30f6667", 0x7a}], 0x1, &(0x7f00000006c0)=[{0x60, 0x29, 0x5, "e92912f532a387a3bb1a87c80d562bc59040e03da41186db5b1d27e5dcfcb9d9000558683b792dda723aa042c4203b1897cfbb9d8899f5f7692f3ef32685538df98503a3d3c9d15fc6914d"}, {0xf0, 0x110, 0x7, "04c92d00681ccfd322dc51226730a0286d110a878d7fd1a1913f5597e3fbf8f0247448b38b469bb2cbe439c46fadc2039fbb056720a0000b03b1b368883bb8067cb755d5eea29a0df2ba32a8f855d3b03618e3b780dd2174838993300345284bb31a7d45352bc6a08aa811f47c8cb0a74b6abcfd3dcda6025d8ec5d983defc707c04fefbdc82367cb8252c26330a3c6481bb40fbd37ac187e86d4af88bcc090caadad6587521ff5109fd29253280ca5ac444c2f432c7ee4f6e40446a4bef5165d0765edc9f957324361b86b6122312d20761968db49bf1d32988e36c46f325"}, {0xd8, 0x101, 0xfffffff8, "e4507f22c59a8e77027ca3946fedb11630122e27fb0e0c44b015e9a6bd87b0d79e02640cc8f9ff40eadead1fe265f06c932a09dce62c5bfc112f8165356f29d1c57fe338b663333a8d05d8f240ec23cabad047455f8dd1cc2602f30cf2859483caa138aa97c246f5161e91969a5d84e36c61751eadecff3c7d045aac5a8afe4380bfab2c12c0e4eb3077dd3380dd8bdc107692dca1a88109e5a2d530e2d21dec1e596b4bb35bb88187cbac1578aa7e8c6c1025ba6ce0d239ff94f8501a575055f8476fbe01ac8c"}, {0x98, 0x8e, 0x9, "f9a48a0cbda5920ee6cae108894e4b7abf04867eb080aa21598e25cab6317eb4d88192b5c69e5a154414362076c45927dcc88a60d64ab895e4350706184a338fb03770fc00592523599e96af00ca9db1b414b37667dfe3a2b1d980db9c070692fcde1ec96c988372175f59366f4cd0c32a55ab4168953b80c04f582aa3bc44cb19"}, {0xa8, 0x10d, 0x67, "b74ff08f1cc3cf28070d30899c8c74f57e3a6069bc39d605d49115461bfd09c40a842c4eebca53db64baa41c37342d9ebcbd79e54bc2c4a17f2354df406487710643d53ce683d054a69424512f130d57756e46236a64b1346566f86aa3f9b6f07f711ac59ee0e486fc8d9709b4c70a9b94b9d417afe11564bed5dbc14af42bccd3e00f84563350e540848f7e63cfe00365d0"}, {0x98, 0x10b, 0x4, "db4a65c58aab3f3cc1efdcae516a6421efee0c78ebe65979e5c5b48508cb83f0a97acafa4a1122df1e78b5674c4876882a14f48b9f5f11d6ea2f3a2c7a02f574b93a166950a3f76525660135b38ba95691ce6a91aaffc252b71d8f92e8b8011b4fc65ba64751b3b8cbdd6fc3f268cffa256d0f467c5d0c7740f361d28c14d52a89dd7652a2"}, {0x88, 0x119, 0x3, "41a2180e39456fb99b77bc90d3bf9d71074f71c23377affe6509157d95e8c582e2b10d8a896413355bd06a4e728d512ce69725292ce80c08a4a84dd012aa8313e56adf76ba4b2ccba4c3e161a331289f57ee9ff78178c839b2a28cf18bf79b77844354d9cea103c2e2a14351aa518b38eb36e556abb07b"}, {0x28, 0x109, 0x8001, "49fabedac5968d16e7241d106b11ae454d9b8663"}], 0x4b0}, 0x4000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x34, r5, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r7, &(0x7f00000000c0)=[@t={0x81, 0x5, 0x0, 0x1, @generic=0xf}], 0x8) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x30]}}}}]}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000080)={0x3, 0x0, [{0x1c4, 0x0, 0xe534}, {0x11, 0x0, 0x7}, {0x0, 0x0, 0x100}]}) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) ioctl$COMEDI_RANGEINFO(r12, 0x80106408, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000501000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) 733.572676ms ago: executing program 3 (id=1297): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=ANY=[@ANYBLOB="24000000200001032cbd7000ffdbdf25000000050016002c00e5ff"], 0x24}}, 0x8800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706970000083000c00028008000300e0"], 0x3c}}, 0x0) 733.173318ms ago: executing program 3 (id=1298): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_io_uring_setup(0x5c26, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0/../file0\x00'}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="f78d412ba80000000000000000000000cc78608136182e7c3706765f306e4285c2b61934abadde6c3b8bfcc99bd27b6e6d69de3dc3c8f8b4d099ffcc4da99735cf5f4369fd292d590f728cd64a3dfd1c71a3f5d99f8b98f298362708df8600001400000000000000000000000079994c28d885c03da5b0d589493ea4023bdca23b520d010d5faad6f43beadc3e703e566cd1d7fc6152493ed5dbb89d6b9db569fde2c852167a2babbae399bfc70d0b232cfae0b78cbb5ae442f7ddfb4e2632956909dc729135d15201208773a1ec6200f29b", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0x80000000}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x44881) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) io_uring_enter(r3, 0x1, 0x0, 0x1, 0x0, 0x1000000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03860000000000001e001f000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008080) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) (async) syz_io_uring_setup(0x5c26, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440), &(0x7f0000000080)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0/../file0\x00'}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r6, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) (async) accept4(r6, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r7, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="f78d412ba80000000000000000000000cc78608136182e7c3706765f306e4285c2b61934abadde6c3b8bfcc99bd27b6e6d69de3dc3c8f8b4d099ffcc4da99735cf5f4369fd292d590f728cd64a3dfd1c71a3f5d99f8b98f298362708df8600001400000000000000000000000079994c28d885c03da5b0d589493ea4023bdca23b520d010d5faad6f43beadc3e703e566cd1d7fc6152493ed5dbb89d6b9db569fde2c852167a2babbae399bfc70d0b232cfae0b78cbb5ae442f7ddfb4e2632956909dc729135d15201208773a1ec6200f29b", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0x80000000}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x44881) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) io_uring_enter(r3, 0x1, 0x0, 0x1, 0x0, 0x1000000) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03860000000000001e001f000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008080) (async) 672.899498ms ago: executing program 3 (id=1300): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003500), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000003540)={0x24, r1, 0x101, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007"], 0x34}, 0x1, 0x0, 0x0, 0x40060}, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x48, 0x1, [@m_ife={0x44, 0x0, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) close(0xffffffffffffffff) 669.281656ms ago: executing program 3 (id=1302): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) (async) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x10040) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async) r4 = socket$kcm(0x2, 0x1, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x4a, &(0x7f0000000640), 0x4) (async) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0xfe87, 0x30, 0x200, 0x3, 0x0, {}, [{0x144, 0x1, [@m_ife={0x140, 0x19, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @random="4f48edc66137"}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}]}, {0xc2, 0x6, "beba34d4694358339c1e7632dfee2313e36bc0faa62edf1b3efc7643b48c6e25f86c7d68bc7e57818aeedb95c96ffa427d2a9635c74a4b4927a03b4539bcba24d2c9aff64dd371d06edf83769322549ebe75fdebc87bebbbe5d0746674ba3e7c4c69282ef6534f6a325de4a0da56d562d4cd2d04d4fb24ecf74ce89a36390bbcea33ca5f4523fc963f1532d40380ba93d0483d5a2ce45ff91dd6ea0272c3a0fe0ddfb157eca10de653363d3ef9a5f84e0dd7b4c6fd30534a83fbd4a7f15a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x158}}, 0x0) 533.00011ms ago: executing program 3 (id=1303): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r1, r1, 0x0, 0x68) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@hyper, 0x6}, @my=0x1, 0x8, 0xff9, 0x6, 0x4, 0xffffffffffffff8c, 0x7, 0x2}) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000000c0)={0x1, @sliced={0xffff, [0x4, 0x8a, 0x7, 0x4, 0x1, 0x5, 0x6, 0x5, 0x1, 0x9, 0x3400, 0xaa, 0x3b1d, 0xffff, 0x49f9, 0x4, 0x4, 0xff, 0x2, 0x101, 0x1b7, 0x0, 0x2, 0x1, 0x0, 0x7be6, 0x4, 0x7, 0x0, 0x6, 0x4, 0x0, 0x40, 0x65f6, 0x6, 0x93b, 0x0, 0xff, 0x4, 0x4, 0x8, 0x9, 0xc, 0x8, 0xf, 0x5, 0xe717], 0x3}}) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) r3 = fanotify_init(0x40, 0x1000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x34, r5, 0x1, 0xffffffff, 0x3, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000081c) (async) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r3) (async) r8 = epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r9, &(0x7f0000004140)={0x2020, 0x0, 0x0}, 0x2020) (async) syz_fuse_handle_req(r9, &(0x7f0000002140)="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", 0x2000, &(0x7f000000dbc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x5, 0x2, 0x7, 0x8, 0x0, 0x0, {0x43, 0x3, 0x6, 0x400ffff, 0x1000, 0x80000000000000ff, 0x0, 0x1, 0x120, 0x2000, 0x10001, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r9, &(0x7f0000000440)={0x50, 0x0, r10, {0x7, 0x29, 0x2, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) (async) r11 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) write(r11, &(0x7f0000000100)="05d5", 0xfdef) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000000)={0x20000002}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x20000001}) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0xa0000013}) (async) getsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000280), &(0x7f0000000340)=0x8) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000300)={{}, 0xfff, 0x401, 0x0, 0x0, 0x80000, 0xc0000022, 0x1000000000ff6, 0x3}) 532.492536ms ago: executing program 3 (id=1305): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000980)={[{0x2b, 'pids'}]}, 0x6) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000380)={0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) fsetxattr$security_selinux(r0, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:device_t:s0\x00', 0x1e, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r5, &(0x7f0000000800)='[', 0x1, 0x7) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="0380c20000000000000000000800450000380000000009019078ac1e0001ac1414aa03049078b3b6fbb4439c4476f8ab82201b1209183f2500000000680000000100007f000001ac14141f00186371ae9b1c03"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 391.8878ms ago: executing program 2 (id=1307): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1e, 0x0, &(0x7f00000004c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1e, 0x0, &(0x7f00000004c0)) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) (async) 391.260618ms ago: executing program 1 (id=1308): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) close(0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000ac0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000b80)={r1, @in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x28}}, [0x2, 0xfff, 0x7f, 0x3, 0x265086a0, 0x7, 0x285, 0x8001, 0x6, 0xc, 0x2, 0x9, 0x1, 0x9, 0x10001]}, &(0x7f0000000140)=0x100) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00005200060005000100000008000800", @ANYBLOB="ee"], 0x2c}}, 0x20008000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x3a, 0xffffffffffffffd0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x27) sendto$inet6(r0, &(0x7f0000000180)="da14", 0x2, 0x51, &(0x7f0000000040)={0xa, 0x4e22, 0x185, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) listen(r0, 0x100101) r6 = accept4(r0, 0x0, 0x0, 0x80800) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x6b, 0x30}, &(0x7f00000003c0)=0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x208a00}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x80c}, 0x1, 0x0, 0x0, 0x42040}, 0x8000) 322.855782ms ago: executing program 1 (id=1309): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00000000265312627000fcdb"], 0x14}}, 0x20006004) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) poll(&(0x7f0000000040)=[{r5, 0xf624}], 0x1, 0x6) (async) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x6d5b83, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000140)={0x8, r1}) (async) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0xfffc, @dev}, 0x2}}, 0x2e) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="21000000000003000000070000001400080076657468305f746f5f62726964676500ba5a35f4ea592d43240a544ebe60618e0ae8a188f789b7c328983e07bb10680915b264b44f29d85449673c5e3ad7cd5c6d32eb85e9c5a0a0c1a19428fcc659cdc479cf6e0b6ceec731424fc692385fa6bbf045893699dacd01d607331a8887cbb2026c1edef11158815fd950db0038476054cd4eccf0b975f3c9c581de65f2ba14856182a49d179b3668c7c13c3b42e46d41f232db1d00f7674c2c5f319d47564a8a4d61160149b83275f4f1ba7400c328fac58e861f"], 0x28}}, 0x2) (async) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000800)={0xf7e, 0x8000, 0x47}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r10) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="f8000000", @ANYRES64=r0, @ANYRES64, @ANYRESDEC=r11, @ANYRESOCT=r2, @ANYRESDEC=r2], 0xf8}}, 0x4004040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000240)={0x8, 0x5, 0x80000}) (async) r12 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000340)={0x6, 0x8161, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) fcntl$dupfd(r9, 0x0, r1) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000200)={0x30000, 0x1, 0x7}) 262.524746ms ago: executing program 1 (id=1310): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) syz_clone(0x180d0280, &(0x7f0000000540)="144b967bfc4fbbcb05d752c79236ff21fffcbca731a9607a14067fd7695af62da4aaea42d9ebabdc461eef157ad74f8b69bbeece38ca0b0fdade73b56aea6cbf85d6a1edba8743b361d3c97ade80326fc3b7a3094cf574dbb841f2c65db25eab132f4d20582365fb4c86e286af7aa58b0821dda895678b37ea78820a5b3f35a9b05bfb2b84fc1141135e346c3bbf58c10d680150fc0a1b5b8087774fbc79f3d9675a9e2a1065beb76f12663345ec93f2d17989ba0708bd7aa46400e90cba27b187080d", 0xc3, &(0x7f0000000280), &(0x7f0000000300), &(0x7f00000003c0)="a9faf6a4f7601b6076b02d95e6cd7eee2c444dfd0796f2a70d8c5e22587e0885f31de522cd1efbef69268d4173e4fbad263c7a45ccdb57e51bc12daaa55399b4a5bb49266a1f7bb41f0dc8858d158c") (async, rerun: 32) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000200)={0xed, 0x0, 0x5b}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000380)=0x5, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x400080, 0x0) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000440), 0x4) (async, rerun: 32) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) (async, rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000c60120ef565d90fe0001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e300000069f4ad91a2cc2d716822045ea489697d000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90) syz_80211_inject_frame(&(0x7f0000000f40)=@device_b, &(0x7f0000000f80)=@ctrl_frame=@ack={{}, {0x6}}, 0xa) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x2000001, 0x4, 0xc4, 0x53, 0x3d, 0x2, 0x80, 0x41, 0x6b, 0x45, 0x6, 0x2, 0x800000001}, {0xb, 0xa7f3, 0x8, 0x8, 0x33, 0xfd, 0x6, 0x3, 0xe, 0x7, 0x7, 0x6, 0x40000000000001}, {0x0, 0x7, 0xd, 0x10, 0x21, 0x10, 0x0, 0xbb, 0x4, 0x15, 0x0, 0x2, 0xfffffffffffffb97}], 0x9}) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000100)) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1700000008000000010400000002000002100100", @ANYRES32=0x1, @ANYBLOB='\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000300"/24, @ANYRES32, @ANYBLOB="0018f43b6dc3209e65612cd9e5b42b71de53b56a4913046fc8d55ff3713e01a9842a46bdc7f9f53dbf6733c9b75ddeec746febd3e704726abf4b4e7b654a527d662545c71aaf40c82a39a0c219f0bcce89ed416bbfbb6db300b6e66402dd2f6560f5a14982de2e57ab818df7c142f149f13bf2c35f0380796fe3d3333fad5a4f6442ad123c0c9a6ceb"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000100000000007000000000018280000", @ANYRES32=r4, @ANYBLOB="00000000f50f000085100000fbffffff186400000300000000000000020000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94) 261.441993ms ago: executing program 1 (id=1311): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x0, 0xa}}}}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_MTU={0x8, 0x4, 0x818}]}, 0x60}}, 0x8000) 259.409589ms ago: executing program 2 (id=1312): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002a40), 0x8040, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x74, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffe0, 0xa}, {0x1, 0x4}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0xf7, 0x17c, 0x8000, 0x2, 0x7, 0x800}}, {0x4}}, {{0x1c, 0x1, {0x10, 0x4, 0xfbff, 0xc5, 0x1, 0x6, 0xe}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0xc010) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000040)={0xfb, 0x4, 0xfd, 0x9}) 151.528947ms ago: executing program 32 (id=1312): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002a40), 0x8040, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x74, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffe0, 0xa}, {0x1, 0x4}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0xf7, 0x17c, 0x8000, 0x2, 0x7, 0x800}}, {0x4}}, {{0x1c, 0x1, {0x10, 0x4, 0xfbff, 0xc5, 0x1, 0x6, 0xe}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0xc010) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000040)={0xfb, 0x4, 0xfd, 0x9}) 101.818499ms ago: executing program 1 (id=1314): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x801) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0x400000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) socket(0x80000000000000a, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) write$UHID_INPUT(r2, &(0x7f0000000080)={0x8, {"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", 0x102b}}, 0x2000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4458c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) 101.336923ms ago: executing program 0 (id=1315): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c6966616365000014000780080006400000000008000840"], 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x33) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x28000054) recvmmsg(r3, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}], 0x1}, 0x4}], 0x2, 0x60, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = io_uring_setup(0x7ca4, &(0x7f00000002c0)={0x0, 0x83e3, 0x80, 0x0, 0xe4}) syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x100, 0x3, 0xffffffff, 0x0, r4}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000e0ff03000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1b9000, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x10, '\x00', 0x5, 0x40000003, 0x200, 0x8001}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4005820) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) 406.796µs ago: executing program 0 (id=1316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES8=0x0, @ANYBLOB="5319b3d5d8c4b07b12916aa1c5c7b70660c7cc6f06b8edf08401fb0cd1d99d76c34d2dfa00b176798ef6f4e665963f02fd305e45330aae61439d2eb6999d0233f531d6e6c3c8dba1a3dba50c261957d5e5c5fae817f982", @ANYRES8, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0, @ANYRESOCT=0x0], 0x50) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) (async) r3 = socket$caif_stream(0x25, 0x1, 0x4) sendmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[], 0x3e0}, 0x44) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x1, 0x9) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r5, 0x0, 0xee01) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1, 0xfffffffc}, 0x80, 0x0}, 0x1) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r7, 0xc02064cc, &(0x7f00000001c0)={r8, r8, 0x5, 0x2000, 0x2}) r9 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r9, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r7, 0xc01864cd, &(0x7f0000000280)={&(0x7f0000000200)=[r10, r8, r8], &(0x7f0000000240)=[0x9], 0x3}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x70bd26, 0x25dfdbfe, {0xa, 0xa9, 0x20, 0xc8}, [@IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80d5}, 0x10) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) 0s ago: executing program 1 (id=1317): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000020}, 0x28) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000880)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000800)={@fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x110a, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x19}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): nt [ 111.187608][ T9] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 111.191552][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 111.196804][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.206040][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 111.209035][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 111.211734][ T9] usb 5-1: Product: syz [ 111.213123][ T9] usb 5-1: Manufacturer: syz [ 111.214658][ T9] usb 5-1: SerialNumber: syz [ 111.225358][ T9] usb 5-1: config 0 descriptor?? [ 111.229809][ T9] usb 5-1: selecting invalid altsetting 0 [ 111.301819][ T7615] MINIX-fs: blocksize too small for device [ 111.318782][ T7615] netlink: 'syz.2.449': attribute type 9 has an invalid length. [ 111.321299][ T7615] netlink: 'syz.2.449': attribute type 3 has an invalid length. [ 111.324272][ T7615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 111.337026][ T7615] netlink: 'syz.2.449': attribute type 9 has an invalid length. [ 111.339610][ T7615] netlink: 'syz.2.449': attribute type 3 has an invalid length. [ 111.342127][ T7615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 111.344268][ T7612] xt_hashlimit: max too large, truncated to 1048576 [ 111.349179][ T7615] netlink: 'syz.2.449': attribute type 9 has an invalid length. [ 111.350026][ T7612] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 111.355002][ T7615] netlink: 'syz.2.449': attribute type 3 has an invalid length. [ 111.357673][ T7615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 111.366960][ T7615] netlink: 'syz.2.449': attribute type 9 has an invalid length. [ 111.369744][ T7615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 111.375958][ T7615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 111.380573][ T7615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 111.384914][ T7615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 111.449296][ T9] usb 5-1: USB disconnect, device number 5 [ 111.632793][ T7635] overlayfs: failed to set uuid (147/file0, err=-1); falling back to uuid=null. [ 111.636790][ T7635] overlayfs: failed to verify upper root origin [ 111.678706][ T7625] 0x000000000004-0x000000020000 : "" [ 111.687121][ T7625] ftl_cs: FTL header corrupt! [ 111.913616][ T7650] tmpfs: Bad value for 'mpol' [ 111.947567][ T7652] fuse: Bad value for 'user_id' [ 111.949215][ T7652] fuse: Bad value for 'user_id' [ 111.955481][ T7652] Bluetooth: MGMT ver 1.23 [ 111.994094][ T7654] fuse: blksize only supported for fuseblk [ 112.049463][ T7660] fuse: root generation should be zero [ 112.160399][ T7670] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.261337][ T7680] program syz.2.473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.283459][ T7680] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.384385][ T7680] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.491305][ T7680] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.573145][ T40] kauditd_printk_skb: 360 callbacks suppressed [ 112.573156][ T40] audit: type=1400 audit(1773400476.217:3446): avc: denied { create } for pid=7702 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.581823][ T40] audit: type=1400 audit(1773400476.227:3447): avc: denied { ioctl } for pid=7702 comm="syz.3.480" path="socket:[19431]" dev="sockfs" ino=19431 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.591830][ T40] audit: type=1400 audit(1773400476.237:3448): avc: denied { read write } for pid=7702 comm="syz.3.480" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 112.600547][ T40] audit: type=1400 audit(1773400476.237:3449): avc: denied { open } for pid=7702 comm="syz.3.480" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 112.608388][ T40] audit: type=1400 audit(1773400476.237:3450): avc: denied { create } for pid=7704 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.615139][ T40] audit: type=1400 audit(1773400476.247:3451): avc: denied { write } for pid=7704 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.622462][ T40] audit: type=1400 audit(1773400476.247:3452): avc: denied { mount } for pid=7702 comm="syz.3.480" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 112.632517][ T40] audit: type=1400 audit(1773400476.247:3453): avc: denied { create } for pid=7702 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.641393][ T40] audit: type=1400 audit(1773400476.247:3454): avc: denied { bind } for pid=7702 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.642447][ T7680] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.650062][ T40] audit: type=1400 audit(1773400476.247:3455): avc: denied { node_bind } for pid=7702 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 112.709644][ T7714] bridge1: entered promiscuous mode [ 112.742294][ T7718] syz.0.485(7718): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 112.764570][ T749] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.774398][ T7718] syzkaller0: entered promiscuous mode [ 112.777111][ T7718] syzkaller0: entered allmulticast mode [ 112.786715][ T7718] validate_nla: 59 callbacks suppressed [ 112.786730][ T7718] netlink: 'syz.0.485': attribute type 1 has an invalid length. [ 112.790272][ T749] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.804224][ T7718] erspan2: entered allmulticast mode [ 112.819944][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.833528][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.114476][ T7744] program syz.2.495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.167594][ T7751] netlink: 'syz.2.497': attribute type 1 has an invalid length. [ 113.184270][ T7751] bond2: entered promiscuous mode [ 113.186412][ T7751] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.195487][ T7751] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.197871][ T7751] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 113.201172][ T7751] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 113.206858][ T7751] bond2: (slave xfrm1): making interface the new active one [ 113.209307][ T7751] xfrm1: entered promiscuous mode [ 113.211860][ T7751] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 113.525278][ T830] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 113.686891][ T830] usb 7-1: config 0 has no interfaces? [ 113.690183][ T830] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 113.693216][ T830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.696045][ T830] usb 7-1: Product: syz [ 113.697767][ T830] usb 7-1: Manufacturer: syz [ 113.699299][ T830] usb 7-1: SerialNumber: syz [ 113.702144][ T830] usb 7-1: config 0 descriptor?? [ 113.908861][ T7758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.913597][ T7758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.917009][ T7758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.919995][ T7758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.927709][ T830] usb 7-1: USB disconnect, device number 6 [ 114.075951][ T7834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64528 sclass=netlink_route_socket pid=7834 comm=syz.3.519 [ 114.122587][ T7842] trusted_key: encrypted_key: master key parameter is missing [ 114.466047][ T6025] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 114.486465][ T7859] 0xfffffffffffffffd-0x000000020000 : "" [ 114.488345][ T7859] mtd: partition "" is out of reach -- disabled [ 114.496143][ T7859] ftl_cs: FTL header not found. [ 114.616826][ T6025] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 114.620349][ T6025] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 114.623542][ T6025] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 114.629425][ T6025] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 114.632418][ T6025] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.635500][ T6025] usb 8-1: Product: syz [ 114.637236][ T6025] usb 8-1: Manufacturer: syz [ 114.638828][ T6025] usb 8-1: SerialNumber: syz [ 114.641919][ T6025] usb 8-1: config 0 descriptor?? [ 114.823335][ T7898] qnx6: unable to read the first superblock [ 114.825773][ T7898] qnx6: unable to read the first superblock [ 114.827791][ T7898] qnx6: unable to read the first superblock [ 114.830672][ T7902] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.850656][ T6025] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 114.884443][ T7906] tipc: Enabling of bearer rejected, failed to enable media [ 115.003362][ T7911] syzkaller0: entered promiscuous mode [ 115.005529][ T7911] syzkaller0: entered allmulticast mode [ 115.058044][ T830] usb 8-1: USB disconnect, device number 3 [ 115.365005][ T7933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61974 sclass=netlink_route_socket pid=7933 comm=syz.2.546 [ 115.370012][ T7933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61974 sclass=netlink_route_socket pid=7933 comm=syz.2.546 [ 115.375888][ T7933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61974 sclass=netlink_route_socket pid=7933 comm=syz.2.546 [ 115.381442][ T7933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61974 sclass=netlink_route_socket pid=7933 comm=syz.2.546 [ 115.387164][ T7933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61974 sclass=netlink_route_socket pid=7933 comm=syz.2.546 [ 115.392738][ T7933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61974 sclass=netlink_route_socket pid=7933 comm=syz.2.546 [ 115.401261][ T7933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61974 sclass=netlink_route_socket pid=7933 comm=syz.2.546 [ 115.406946][ T7933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61974 sclass=netlink_route_socket pid=7933 comm=syz.2.546 [ 115.412312][ T7933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61974 sclass=netlink_route_socket pid=7933 comm=syz.2.546 [ 115.625087][ T54] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 115.766935][ T7951] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 115.768930][ T7951] PKCS7: Only support pkcs7_signedData type [ 115.798152][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.803023][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.806709][ T54] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.812186][ T54] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.817485][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.822953][ T54] usb 7-1: config 0 descriptor?? [ 115.842578][ T7959] __nla_validate_parse: 33 callbacks suppressed [ 115.842595][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 115.950134][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.556'. [ 115.961135][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.556'. [ 116.053578][ T54] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 116.070145][ T7624] udevd[7624]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 116.208275][ T8001] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 116.211188][ T8001] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 116.218064][ T8001] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 116.267143][ T8005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.567'. [ 116.274362][ T6032] IPVS: starting estimator thread 0... [ 116.292338][ T8007] overlayfs: overlapping lowerdir path [ 116.296704][ T830] usb 7-1: USB disconnect, device number 7 [ 116.375110][ T8006] IPVS: using max 45 ests per chain, 108000 per kthread [ 116.765284][ T8038] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 116.813193][ T8036] bond3: invalid ARP target 0.0.0.0 specified for addition [ 116.816534][ T8036] bond3: option arp_ip_target: invalid value (0) [ 116.820563][ T8036] bond3 (unregistering): Released all slaves [ 117.055592][ T8058] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.583'. [ 117.082271][ T8064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.584'. [ 117.143472][ T8050] ipt_REJECT: ECHOREPLY no longer supported. [ 117.360706][ T8091] nftables ruleset with unbound set [ 117.480343][ T8100] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.639326][ T40] kauditd_printk_skb: 422 callbacks suppressed [ 117.639341][ T40] audit: type=1400 audit(1773400481.287:3878): avc: denied { create } for pid=8114 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.650811][ T40] audit: type=1400 audit(1773400481.287:3879): avc: denied { bind } for pid=8114 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.658139][ T40] audit: type=1400 audit(1773400481.287:3880): avc: denied { connect } for pid=8114 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.666395][ T40] audit: type=1400 audit(1773400481.297:3881): avc: denied { create } for pid=8114 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.673401][ T40] audit: type=1400 audit(1773400481.297:3882): avc: denied { connect } for pid=8114 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.681886][ T40] audit: type=1400 audit(1773400481.297:3883): avc: denied { read } for pid=8114 comm="syz.3.599" path="socket:[23398]" dev="sockfs" ino=23398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.750973][ T40] audit: type=1400 audit(1773400481.397:3884): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 117.822133][ T40] audit: type=1400 audit(1773400481.467:3885): avc: denied { write } for pid=8116 comm="syz.3.601" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 117.835242][ T40] audit: type=1400 audit(1773400481.487:3886): avc: denied { create } for pid=8116 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.837101][ T8117] program syz.3.601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.841699][ T40] audit: type=1400 audit(1773400481.487:3887): avc: denied { read } for pid=8116 comm="syz.3.601" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 117.845995][ T8117] ata1.00: invalid service action 31 [ 117.940826][ T8120] 9p: Unknown access argument 18446744073709551615: -34 [ 117.970280][ T8117] kvm: kvm [8116]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 118.110450][ T8127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.113893][ T8127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.138304][ T8131] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 118.355083][ T6032] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 118.495813][ T54] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 118.505081][ T6032] usb 6-1: Using ep0 maxpacket: 8 [ 118.508928][ T6032] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 118.512467][ T6032] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 118.517606][ T6032] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 118.521832][ T8145] trusted_key: encrypted_key: insufficient parameters specified [ 118.525468][ T6032] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 118.530233][ T6032] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 118.534526][ T6032] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.540981][ T6032] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.544809][ T6032] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.656279][ T54] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 118.659757][ T54] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 118.663391][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 118.671243][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 99, setting to 64 [ 118.675899][ T54] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.682475][ T8152] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 118.683475][ T54] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 118.692733][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.695809][ T54] usb 5-1: Product: syz [ 118.697715][ T54] usb 5-1: Manufacturer: syz [ 118.699563][ T54] usb 5-1: SerialNumber: syz [ 118.703862][ T54] usb 5-1: config 0 descriptor?? [ 118.706552][ T8138] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 118.711062][ T54] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input13 [ 118.722245][ C1] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 118.757654][ T6032] usb 6-1: usb_control_msg returned -71 [ 118.760167][ T6032] usbtmc 6-1:16.0: can't read capabilities [ 118.781257][ T6032] usb 6-1: USB disconnect, device number 4 [ 118.823820][ T8154] netlink: 'syz.3.614': attribute type 63 has an invalid length. [ 118.827058][ T8154] netlink: 5 bytes leftover after parsing attributes in process `syz.3.614'. [ 118.829914][ T8154] gretap0: entered allmulticast mode [ 118.831880][ T8154] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 118.839711][ T8154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.911593][ T5988] usb 5-1: USB disconnect, device number 6 [ 118.916124][ T8158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.616'. [ 118.935823][ T54] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 119.075095][ T54] usb 7-1: device descriptor read/64, error -71 [ 119.275173][ T5988] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 119.284134][ T8166] /dev/sg0: Can't lookup blockdev [ 119.325217][ T54] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 119.445088][ T5988] usb 8-1: Using ep0 maxpacket: 32 [ 119.450899][ T5988] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 119.455806][ T5988] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 119.460232][ T5988] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 119.463926][ T5988] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 119.468384][ T54] usb 7-1: device descriptor read/64, error -71 [ 119.471056][ T5988] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 119.475121][ T5988] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 119.480712][ T5988] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 119.484485][ T5988] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.490635][ T5988] usb 8-1: config 0 descriptor?? [ 119.585563][ T54] usb usb7-port1: attempt power cycle [ 119.700798][ T5988] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 119.707173][ T5988] usb 8-1: USB disconnect, device number 4 [ 119.716503][ T5988] usblp0: removed [ 119.945176][ T54] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 119.965837][ T54] usb 7-1: device descriptor read/8, error -71 [ 120.205031][ T54] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 120.207801][ T5988] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 120.225801][ T54] usb 7-1: device descriptor read/8, error -71 [ 120.345642][ T54] usb usb7-port1: unable to enumerate USB device [ 120.375027][ T5988] usb 8-1: Using ep0 maxpacket: 32 [ 120.379171][ T5988] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 120.382823][ T5988] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 120.387384][ T5988] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 120.391401][ T5988] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 120.396461][ T5988] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 120.400688][ T5988] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 120.406652][ T5988] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 120.410557][ T5988] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.417102][ T5988] usb 8-1: config 0 descriptor?? [ 120.623716][ T5988] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 120.838399][ T6032] IPVS: starting estimator thread 0... [ 120.873338][ T8186] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.876181][ T8186] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.883991][ T8192] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 120.890311][ T8192] bond3 (unregistering): Released all slaves [ 120.918398][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 120.923030][ T8190] SELinux: policydb magic number 0x48 does not match expected magic number 0xf97cff8c [ 120.927294][ T8190] SELinux: failed to load policy [ 120.945951][ T8191] IPVS: using max 27 ests per chain, 64800 per kthread [ 121.219708][ T8210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.633'. [ 121.231133][ T8210] Mount JFS Failure: -22 [ 121.252421][ T8212] netlink: 'syz.1.634': attribute type 1 has an invalid length. [ 121.255352][ T8212] netlink: 228 bytes leftover after parsing attributes in process `syz.1.634'. [ 121.259387][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 121.302586][ T8217] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 121.308508][ T8216] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 121.367342][ T6032] usb 8-1: USB disconnect, device number 5 [ 121.374339][ T6032] usblp0: removed [ 121.399745][ T8221] macvlan0: entered allmulticast mode [ 121.401665][ T8221] veth1_vlan: entered allmulticast mode [ 121.407649][ T8221] pim6reg: entered allmulticast mode [ 121.411213][ T8221] veth1_vlan: left allmulticast mode [ 121.417381][ T8221] macvlan0 (unregistering): left allmulticast mode [ 121.509012][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.639'. [ 121.513109][ T8228] MTD: Couldn't look up './bus': -15 [ 121.769869][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'. [ 121.785262][ T6032] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 121.820618][ T8243] nbd: socks must be embedded in a SOCK_ITEM attr [ 121.899982][ T6654] udevd[6654]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 121.955033][ T6032] usb 6-1: Using ep0 maxpacket: 32 [ 121.960577][ T6032] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 121.966569][ T6032] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 121.971384][ T8249] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.645'. [ 121.972845][ T6032] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 121.977523][ T6032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.979981][ T6032] usb 6-1: Product: 螆㜼럹Иâ£ç§»à³¥ì®¶ïœŽé³Ÿêµ¹å‘࢟âŒé­î““郜ű훎樎ណⴿ͜ꆔ੡ [ 121.983343][ T6032] usb 6-1: Manufacturer: ï«šæ±”ê â¾šÄ§ï¬…逞㼑駒㞩섾࣢掲篩域硈䘎á¥åš©îž…虋劈隣桠鞷岅᾵â¥ë¶¨ê­§á £ëº¥Ã¨å•žï‹”à±ìº¿ë‡­íˆŒé½á®¿ê´«â‹°â¥•â‚„䙲䑻囀å‡å´ªì˜ë¤›êµªæ˜›à¸†á…ï„æºáŽ»äµ¦à ¯è°’⾓ [ 121.990276][ T6032] usb 6-1: SerialNumber: ૞㸇ã¼ã‚œÛ¤â•¡â‹ã„Ÿäƒ¥ä²µé­Žè˜á¸³é±´ç±Ÿî…‚帱툯Ế樟Ⴥ闪秊뼮茹䔴į棗⩄퟉٦㖼◱滑奮覀橔㤟㿤¼䪀栠远ᒬ㉭ѿ⩴臞ᄤ夽✉疶貢ç©á¶î·ŠÝ¥åŒ‚â¢â¥¿ï—ží§ïš£ [ 122.004522][ T8256] kvm: kvm [8255]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000088) = 0x3 [ 122.025911][ T8260] zonefs (loop0) ERROR: Not a zoned block device [ 122.116424][ T8268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.119278][ T8268] IPv6: NLM_F_CREATE should be set when creating new route [ 122.217206][ T8230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.223058][ T8230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.241759][ T8270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.651'. [ 122.242948][ T6032] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.247764][ T6032] usb 6-1: MIDIStreaming interface descriptor not found [ 122.251433][ T8270] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 122.278736][ T6032] usb 6-1: USB disconnect, device number 5 [ 122.311957][ T8270] usb usb8: usbfs: process 8270 (syz.3.651) did not claim interface 0 before use [ 122.413688][ T8280] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 122.416918][ T8280] overlayfs: failed to set xattr on upper [ 122.418807][ T8280] overlayfs: ...falling back to redirect_dir=nofollow. [ 122.421245][ T8280] overlayfs: ...falling back to index=off. [ 122.423637][ T8280] overlayfs: ...falling back to uuid=null. [ 122.427524][ T8280] overlayfs: maximum fs stacking depth exceeded [ 122.650104][ T40] kauditd_printk_skb: 249 callbacks suppressed [ 122.650122][ T40] audit: type=1400 audit(1773400486.297:4137): avc: denied { listen } for pid=8293 comm="syz.2.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 122.679750][ T40] audit: type=1400 audit(1773400486.327:4138): avc: denied { create } for pid=8307 comm="syz.3.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 122.683654][ T8309] 9p: Unknown uid 00000000004294967295 [ 122.687783][ T40] audit: type=1400 audit(1773400486.327:4139): avc: denied { getopt } for pid=8307 comm="syz.3.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 122.689809][ T8309] 9p: Unknown uid 00000000004294967295 [ 122.696429][ T40] audit: type=1400 audit(1773400486.327:4140): avc: denied { mounton } for pid=8307 comm="syz.3.662" path="/159/file0" dev="tmpfs" ino=871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.698549][ T8309] 9p: Unknown uid 00000000004294967295 [ 122.702257][ T8311] ipt_REJECT: ECHOREPLY no longer supported. [ 122.710446][ T8309] 9p: Unknown uid 00000000004294967295 [ 122.712491][ T8309] 9p: Unknown uid 00000000004294967295 [ 122.714419][ T8309] 9p: Unknown uid 00000000004294967295 [ 122.716838][ T8309] 9p: Unknown uid 00000000004294967295 [ 122.718899][ T8309] 9p: Unknown uid 00000000004294967295 [ 122.721224][ T8309] 9p: Unknown uid 00000000004294967295 [ 122.723209][ T8309] 9p: Unknown uid 00000000004294967295 [ 122.725822][ T8309] 9p: Unknown uid 00000000004294967295 [ 122.727759][ T8309] 9p: Unknown uid 00000000004294967295 [ 122.729840][ T8309] 9p: Unknown uid 00000000004294967295 [ 122.731909][ T8309] 9p: Unknown uid 00000000004294967295 [ 122.765922][ T40] audit: type=1400 audit(1773400486.417:4141): avc: denied { getopt } for pid=8313 comm="syz.3.663" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.772265][ T40] audit: type=1400 audit(1773400486.417:4142): avc: denied { create } for pid=8314 comm="syz.1.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 122.777649][ T8316] SELinux: failed to load policy [ 122.778573][ T40] audit: type=1400 audit(1773400486.417:4143): avc: denied { create } for pid=8313 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 122.787026][ T40] audit: type=1400 audit(1773400486.417:4144): avc: denied { prog_load } for pid=8314 comm="syz.1.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.793314][ T40] audit: type=1400 audit(1773400486.417:4145): avc: denied { perfmon } for pid=8314 comm="syz.1.664" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.800463][ T40] audit: type=1400 audit(1773400486.427:4146): avc: denied { load_policy } for pid=8314 comm="syz.1.664" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 122.856051][ T5936] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.936343][ T5936] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.064258][ T8349] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 123.068230][ T8349] block device autoloading is deprecated and will be removed. [ 123.173372][ T8340] md: could not open device unknown-block(0,0). [ 123.179044][ T8340] md: md_import_device returned -6 [ 123.198063][ T8367] netlink: 'syz.0.674': attribute type 10 has an invalid length. [ 123.204274][ T8367] netlink: 40 bytes leftover after parsing attributes in process `syz.0.674'. [ 123.215135][ T8367] batadv0: entered promiscuous mode [ 123.216877][ T8367] batadv0: entered allmulticast mode [ 123.219040][ T8367] bridge0: port 3(batadv0) entered blocking state [ 123.221249][ T8367] bridge0: port 3(batadv0) entered disabled state [ 123.224551][ T8367] bridge0: port 3(batadv0) entered blocking state [ 123.226710][ T8367] bridge0: port 3(batadv0) entered forwarding state [ 123.237566][ T1222] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 123.240981][ T1222] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 123.325695][ T8375] netlink: 'syz.3.677': attribute type 3 has an invalid length. [ 123.443497][ T8382] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 123.452065][ T8384] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 123.462081][ T8384] sp0: Synchronizing with TNC [ 124.025924][ T8401] syzkaller0: entered promiscuous mode [ 124.025945][ T8401] syzkaller0: entered allmulticast mode [ 124.235854][ T8409] ipt_REJECT: ECHOREPLY no longer supported. [ 124.240317][ T8409] futex_wake_op: syz.3.688 tries to shift op by -1; fix this program [ 124.303041][ T8415] netlink: 20 bytes leftover after parsing attributes in process `syz.3.690'. [ 124.378795][ T8417] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 124.382925][ T8417] block device autoloading is deprecated and will be removed. [ 124.465650][ T5936] Bluetooth: hci2: unexpected event for opcode 0x201c [ 124.594608][ T8422] new mount options do not match the existing superblock, will be ignored [ 124.658839][ T8426] /dev/sg0: Can't lookup blockdev [ 124.953607][ T8463] fuse: Bad value for 'fd' [ 125.011448][ T8467] sctp: [Deprecated]: syz.3.704 (pid 8467) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.011448][ T8467] Use struct sctp_sack_info instead [ 125.155143][ T50] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 125.178612][ T8469] tipc: Enabling of bearer rejected, failed to enable media [ 125.186581][ T8469] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 125.189202][ T8469] [U] J"—e:ÀÆ" [ 125.322571][ T50] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 125.325807][ T50] usb 5-1: can't read configurations, error -71 [ 125.597357][ T8478] overlayfs: failed to resolve './file0': -2 [ 126.053844][ T8515] __nla_validate_parse: 2 callbacks suppressed [ 126.053856][ T8515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.721'. [ 126.129714][ T8522] netlink: 32 bytes leftover after parsing attributes in process `syz.3.723'. [ 126.365083][ T54] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 126.405098][ T50] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 126.517199][ T54] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.521514][ T54] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 126.525863][ T54] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 126.529659][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.536352][ T54] usb 8-1: config 0 descriptor?? [ 126.541742][ T54] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 126.544717][ T54] dvb-usb: bulk message failed: -22 (3/0) [ 126.557209][ T54] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 126.561929][ T54] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 126.565781][ T54] usb 8-1: media controller created [ 126.570194][ T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.578983][ T50] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 126.583053][ T54] dvb-usb: bulk message failed: -22 (6/0) [ 126.592914][ T54] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 126.593670][ T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.594739][ T8533] input: syz1 as /devices/virtual/input/input14 [ 126.602318][ T54] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input15 [ 126.602729][ T50] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.616399][ T50] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.619329][ T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.622246][ T50] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.623017][ T54] dvb-usb: schedule remote query interval to 150 msecs. [ 126.625922][ T50] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.629945][ T54] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 126.631875][ T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.637539][ T50] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.640984][ T50] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.643926][ T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.647128][ T50] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.650681][ T50] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.653656][ T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.657242][ T50] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.660786][ T50] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.664106][ T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.667269][ T50] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.671260][ T50] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.674194][ T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.677423][ T50] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.680894][ T50] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.683923][ T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.687145][ T50] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.690635][ T50] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.694478][ T50] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 126.698424][ T50] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 126.701313][ T50] usb 5-1: Product: syz [ 126.702990][ T50] usb 5-1: Manufacturer: syz [ 126.704927][ T50] usb 5-1: SerialNumber: syz [ 126.708759][ T50] usb 5-1: config 0 descriptor?? [ 126.714516][ T50] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 126.747448][ T8522] netlink: 100 bytes leftover after parsing attributes in process `syz.3.723'. [ 126.776525][ T9] usb 8-1: USB disconnect, device number 6 [ 126.797173][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 126.917432][ T50] usb 5-1: USB disconnect, device number 8 [ 126.926311][ T50] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 126.935203][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 127.095079][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 127.099229][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 127.104231][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 127.107667][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.111061][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.115497][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.118909][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.119878][ T8508] sg_write: data in/out 875837202/251 bytes for SCSI command 0x0-- guessing data in; [ 127.119878][ T8508] program syz.0.718 not setting count and/or reply_len properly [ 127.346779][ T34] usb 6-1: usb_control_msg returned -32 [ 127.349320][ T34] usbtmc 6-1:16.0: can't read capabilities [ 127.409126][ T8547] kvm: emulating exchange as write [ 127.462830][ T8550] fuse: Bad value for 'fd' [ 127.699044][ T40] kauditd_printk_skb: 372 callbacks suppressed [ 127.699061][ T40] audit: type=1400 audit(1773400491.347:4519): avc: denied { write } for pid=8537 comm="syz.1.727" name="usbtmc0" dev="devtmpfs" ino=3036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 127.702546][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 127.720405][ T40] audit: type=1400 audit(1773400491.367:4520): avc: denied { mounton } for pid=8537 comm="syz.1.727" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 127.721295][ T8559] befs: (nullb0): No write support. Marking filesystem read-only [ 127.737574][ T8559] befs: (nullb0): invalid magic header [ 127.769702][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.732'. [ 127.773607][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.732'. [ 127.784598][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.732'. [ 127.788591][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.732'. [ 127.835650][ T40] audit: type=1400 audit(1773400491.487:4521): avc: denied { create } for pid=8564 comm="syz.2.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.843088][ T40] audit: type=1400 audit(1773400491.487:4522): avc: denied { setopt } for pid=8564 comm="syz.2.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.854647][ T8565] IPv6: addrconf: prefix option has invalid lifetime [ 127.917720][ T40] audit: type=1400 audit(1773400491.567:4523): avc: denied { create } for pid=8566 comm="syz.2.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.918108][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 127.979667][ T40] audit: type=1400 audit(1773400491.627:4524): avc: denied { ioctl } for pid=8569 comm="syz.2.735" path="socket:[27337]" dev="sockfs" ino=27337 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.032237][ T8572] netlink: 144 bytes leftover after parsing attributes in process `syz.2.736'. [ 128.127155][ T40] audit: type=1400 audit(1773400491.777:4525): avc: denied { mounton } for pid=8576 comm="syz.2.738" path="/165/file0" dev="tmpfs" ino=873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 128.135862][ T40] audit: type=1400 audit(1773400491.777:4526): avc: denied { mount } for pid=8576 comm="syz.2.738" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 128.293073][ T40] audit: type=1400 audit(1773400491.937:4527): avc: denied { connect } for pid=8576 comm="syz.2.738" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.298108][ T8577] xt_hashlimit: size too large, truncated to 1048576 [ 128.302776][ T40] audit: type=1400 audit(1773400491.937:4528): avc: denied { setopt } for pid=8576 comm="syz.2.738" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.013367][ T5936] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 129.057768][ T8601] binder: 8600:8601 unknown command 0 [ 129.060181][ T8601] binder: 8600:8601 ioctl c0306201 200000000240 returned -22 [ 129.351895][ T5936] Bluetooth: hci1: unexpected event for opcode 0x0c1b [ 129.354212][ T5936] Bluetooth: hci1: unexpected event for opcode 0x0c1b [ 129.641362][ T8648] netlink: 40 bytes leftover after parsing attributes in process `syz.0.757'. [ 129.691820][ T8651] netlink: 'syz.0.758': attribute type 2 has an invalid length. [ 129.695401][ T8651] netlink: 'syz.0.758': attribute type 2 has an invalid length. [ 129.715115][ T50] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 129.715582][ T54] usb 6-1: USB disconnect, device number 6 [ 129.794816][ T8661] Can't find a SQUASHFS superblock on nullb0 [ 129.865040][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 129.869470][ T50] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.870541][ T8665] netlink: 'syz.1.763': attribute type 16 has an invalid length. [ 129.873636][ T50] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.876678][ T8665] veth1_macvtap: entered allmulticast mode [ 129.881128][ T50] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.888380][ T50] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.893810][ T50] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.902010][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.905726][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.980159][ T8672] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 129.987657][ T8673] blkio.reset_stats is deprecated [ 129.990968][ T8673] /dev/sg0: Can't lookup blockdev [ 130.111571][ T50] usb 8-1: GET_CAPABILITIES returned 0 [ 130.112449][ T8677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.113489][ T50] usbtmc 8-1:16.0: can't read capabilities [ 130.119311][ T8677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.176540][ T6025] usb 8-1: USB disconnect, device number 7 [ 130.276473][ T50] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 130.426529][ T50] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 130.430290][ T50] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 130.434885][ T50] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 130.438996][ T50] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 130.443752][ T50] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 130.450225][ T50] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 130.454326][ T50] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.457981][ T50] usb 5-1: Product: syz [ 130.459937][ T50] usb 5-1: Manufacturer: syz [ 130.472431][ T50] cdc_wdm 5-1:1.0: skipping garbage [ 130.474758][ T50] cdc_wdm 5-1:1.0: skipping garbage [ 130.480975][ T50] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 130.483582][ T50] cdc_wdm 5-1:1.0: Unknown control protocol [ 130.670598][ T8686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.866721][ T8694] gretap0: left allmulticast mode [ 130.874794][ T9] usb 5-1: USB disconnect, device number 9 [ 130.891273][ T8694] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.894283][ T8694] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.941004][ T8694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.946323][ T8694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.970520][ T8694] veth1_macvtap: left allmulticast mode [ 130.989237][ T8696] XFS (nullb0): Invalid superblock magic number [ 131.055171][ T8694] vxlan0: left promiscuous mode [ 131.055196][ T8703] __nla_validate_parse: 2 callbacks suppressed [ 131.055206][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.773'. [ 131.057370][ T8694] vxlan0: left allmulticast mode [ 131.069802][ T1180] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.073632][ T1180] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.083330][ T1180] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.087394][ T1180] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.110429][ T1180] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.114315][ T1180] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.118540][ T1180] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.122444][ T1180] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.348249][ T8721] syzkaller0: entered promiscuous mode [ 131.348505][ T8720] loop5: detected capacity change from 0 to 65536 [ 131.350709][ T8721] syzkaller0: entered allmulticast mode [ 131.396799][ T8720] loop5: detected capacity change from 65536 to 524287995 [ 131.541399][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'. [ 131.669591][ T8753] omfs: Invalid superblock (0) [ 131.675490][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'. [ 132.043364][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 132.051446][ T8786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.797'. [ 132.116607][ T8790] selinux_netlink_send: 90 callbacks suppressed [ 132.116619][ T8790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=8790 comm=syz.3.798 [ 132.173726][ T8795] binder: 8793:8795 ioctl c0306201 0 returned -14 [ 132.220590][ T8804] overlayfs: failed to resolve 'fsuuid=94cbca0d-9Å29-159f-a77': -2 [ 132.314522][ T8816] fuse: Bad value for 'rootmode' [ 132.317061][ T8819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.807'. [ 132.355111][ T8819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.807'. [ 132.358754][ T8819] nbd: nbd64 already in use [ 132.398796][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 132.450263][ T8837] netlink: 'syz.1.811': attribute type 1 has an invalid length. [ 132.453730][ T8837] netlink: 'syz.1.811': attribute type 2 has an invalid length. [ 132.460740][ T8841] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 132.510293][ T8841] cramfs: wrong magic [ 132.516931][ T6654] udevd[6654]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 132.568491][ T8833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=8833 comm=syz.2.810 [ 132.578857][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 132.582907][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 132.611080][ T8855] input: syz0 as /devices/virtual/input/input19 [ 132.653360][ T8858] ufs: You didn't specify the type of your ufs filesystem [ 132.653360][ T8858] [ 132.653360][ T8858] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 132.653360][ T8858] [ 132.653360][ T8858] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 132.669299][ T8858] ufs: ufstype=old is supported read-only [ 132.672288][ T8858] ufs: ufs_fill_super(): bad magic number [ 132.677617][ T8858] ./cgroup: Can't lookup blockdev [ 132.713120][ T8862] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8862 comm=syz.1.818 [ 132.714688][ T40] kauditd_printk_skb: 319 callbacks suppressed [ 132.714698][ T40] audit: type=1400 audit(1773400496.357:4848): avc: denied { create } for pid=8863 comm="syz.0.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.718951][ T8864] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 132.721197][ T40] audit: type=1400 audit(1773400496.377:4849): avc: denied { ioctl } for pid=8863 comm="syz.0.819" path="socket:[33200]" dev="sockfs" ino=33200 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.732657][ T749] Bluetooth: hci4: Frame reassembly failed (-84) [ 132.742797][ T40] audit: type=1400 audit(1773400496.377:4850): avc: denied { bind } for pid=8863 comm="syz.0.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.749025][ T40] audit: type=1400 audit(1773400496.377:4851): avc: denied { create } for pid=8865 comm="syz.3.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 132.755343][ T40] audit: type=1400 audit(1773400496.377:4852): avc: denied { setopt } for pid=8863 comm="syz.0.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.761649][ T40] audit: type=1400 audit(1773400496.377:4853): avc: denied { write } for pid=8863 comm="syz.0.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.787126][ T40] audit: type=1400 audit(1773400496.437:4854): avc: denied { mount } for pid=8867 comm="syz.3.821" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.794078][ T40] audit: type=1400 audit(1773400496.437:4855): avc: denied { read } for pid=8863 comm="syz.0.819" dev="nsfs" ino=4026533302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 132.801093][ T40] audit: type=1400 audit(1773400496.437:4856): avc: denied { open } for pid=8863 comm="syz.0.819" path="net:[4026533302]" dev="nsfs" ino=4026533302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 132.808989][ T40] audit: type=1400 audit(1773400496.437:4857): avc: denied { create } for pid=8863 comm="syz.0.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.818347][ T8871] kAFS: unable to lookup cell '/,c¾ûL' [ 132.984340][ T8890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.986828][ T8890] IPv6: NLM_F_CREATE should be set when creating new route [ 132.990036][ T8890] IPv6: NLM_F_CREATE should be set when creating new route [ 133.291633][ T8912] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 133.296306][ T8912] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 133.300552][ T8912] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 133.346837][ T8917] Invalid logical block size (536872960) [ 133.571426][ T8930] : entered promiscuous mode [ 133.617752][ T8935] netlink: 'syz.2.834': attribute type 3 has an invalid length. [ 133.620989][ T8935] netlink: 'syz.2.834': attribute type 1 has an invalid length. [ 133.695187][ T8940] ptrace attach of "/syz-executor exec"[5933] was attempted by "/syz-executor exec"[8940] [ 133.701264][ T8942] ptrace attach of "/syz-executor exec"[5933] was attempted by "/syz-executor exec"[8942] [ 133.772716][ T8947] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 133.775404][ T8947] UDF-fs: Scanning with blocksize 2048 failed [ 133.778343][ T8947] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 133.781443][ T8947] UDF-fs: Scanning with blocksize 4096 failed [ 134.225026][ T50] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 134.385141][ T50] usb 7-1: Using ep0 maxpacket: 32 [ 134.394873][ T50] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 134.400264][ T50] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 134.404163][ T50] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 134.407064][ T50] usb 7-1: Product: syz [ 134.408464][ T50] usb 7-1: Manufacturer: syz [ 134.410009][ T50] usb 7-1: SerialNumber: syz [ 134.414004][ T50] usb 7-1: config 0 descriptor?? [ 134.416650][ T8966] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 134.419980][ T50] hub 7-1:0.0: bad descriptor, ignoring hub [ 134.422056][ T50] hub 7-1:0.0: probe with driver hub failed with error -5 [ 134.785106][ T5936] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 134.785324][ T5286] Bluetooth: hci4: command 0x1003 tx timeout [ 134.908122][ T5936] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 134.921030][ T9002] bond4: option downdelay: invalid value (18446744073709551615) [ 134.923839][ T9002] bond4: option downdelay: allowed values 0 - 2147483647 [ 134.927591][ T9002] bond4 (unregistering): Released all slaves [ 135.268136][ T9022] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 135.278873][ T9022] CIFS mount error: No usable UNC path provided in device string! [ 135.278873][ T9022] [ 135.282281][ T9022] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 135.489341][ T9030] SELinux: ebitmap: empty map [ 135.491180][ T9030] SELinux: failed to load policy [ 135.530331][ T1222] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.534042][ T1222] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.539233][ T1222] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.542867][ T1222] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.579997][ T9042] netlink: 'syz.1.863': attribute type 28 has an invalid length. [ 135.583397][ T9042] netlink: 'syz.1.863': attribute type 3 has an invalid length. [ 135.793982][ T9071] SELinux: ebitmap: map size 2097152 does not match my size 64 (high bit was 0) [ 135.799494][ T9071] SELinux: failed to load policy [ 135.846711][ T9075] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 135.848898][ T9073] hub 2-0:1.0: USB hub found [ 135.852472][ T9073] hub 2-0:1.0: 2 ports detected [ 135.891037][ T9079] hfsplus: unable to find HFS+ superblock [ 136.245089][ T5615] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 136.247708][ T6032] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 136.385093][ T6032] usb 5-1: device descriptor read/64, error -71 [ 136.406414][ T5615] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 136.409825][ T5615] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.415298][ T5615] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 136.419365][ T5615] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 136.423689][ T5615] usb 8-1: Manufacturer: syz [ 136.428515][ T5615] usb 8-1: config 0 descriptor?? [ 136.475148][ T5615] rc_core: IR keymap rc-hauppauge not found [ 136.477916][ T5615] Registered IR keymap rc-empty [ 136.481107][ T5615] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 136.487213][ T5615] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input20 [ 136.635385][ T6032] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 136.765213][ T6032] usb 5-1: device descriptor read/64, error -71 [ 136.885346][ T6032] usb usb5-port1: attempt power cycle [ 137.245174][ T6032] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 137.266061][ T6032] usb 5-1: device descriptor read/8, error -71 [ 137.524996][ T6032] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 137.555664][ T6032] usb 5-1: device descriptor read/8, error -71 [ 137.675268][ T6032] usb usb5-port1: unable to enumerate USB device [ 138.187578][ T9] usb 7-1: USB disconnect, device number 12 [ 138.205331][ T40] kauditd_printk_skb: 256 callbacks suppressed [ 138.205344][ T40] audit: type=1400 audit(1773400501.847:5114): avc: denied { read write } for pid=5933 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.217215][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.217538][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.225371][ T40] audit: type=1400 audit(1773400501.847:5115): avc: denied { open } for pid=5933 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.233064][ T40] audit: type=1400 audit(1773400501.847:5116): avc: denied { ioctl } for pid=5933 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.241854][ T40] audit: type=1400 audit(1773400501.877:5117): avc: denied { create } for pid=9087 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.249952][ T40] audit: type=1400 audit(1773400501.877:5118): avc: denied { setopt } for pid=9087 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.257906][ T40] audit: type=1400 audit(1773400501.877:5119): avc: denied { write } for pid=9087 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.265272][ T40] audit: type=1400 audit(1773400501.877:5120): avc: denied { connect } for pid=9087 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.271544][ T40] audit: type=1400 audit(1773400501.877:5121): avc: denied { name_connect } for pid=9087 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 138.277976][ T40] audit: type=1400 audit(1773400501.897:5122): avc: denied { module_request } for pid=9087 comm="syz.2.877" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 138.284236][ T40] audit: type=1400 audit(1773400501.907:5123): avc: denied { sys_module } for pid=9087 comm="syz.2.877" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 138.493820][ T9092] overlayfs: conflicting lowerdir path [ 139.020392][ T50] usb 8-1: USB disconnect, device number 8 [ 139.132479][ T9132] __nla_validate_parse: 80 callbacks suppressed [ 139.132496][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.886'. [ 139.139767][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.886'. [ 139.250982][ T9143] x_tables: duplicate underflow at hook 1 [ 139.302710][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.889'. [ 139.458148][ T9162] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 139.643918][ T9179] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 139.809740][ T9193] blktrace: Concurrent blktraces are not allowed on loop6 [ 139.905946][ T9195] netlink: 'syz.2.901': attribute type 28 has an invalid length. [ 139.908846][ T9195] netlink: 'syz.2.901': attribute type 3 has an invalid length. [ 139.911379][ T9195] netlink: 132 bytes leftover after parsing attributes in process `syz.2.901'. [ 139.917528][ T9195] netlink: 'syz.2.901': attribute type 1 has an invalid length. [ 139.934031][ T9195] bond5 (unregistering): Released all slaves [ 139.965078][ T34] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 140.027071][ T9201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9201 comm=syz.2.901 [ 140.091384][ T9197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.901'. [ 140.117094][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 140.121002][ T34] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 140.124729][ T34] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 140.128488][ T34] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 140.132547][ T34] usb 6-1: config 250 has no interface number 0 [ 140.136046][ T34] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 140.140814][ T34] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 140.146423][ T34] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 140.150949][ T34] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 140.154637][ T34] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 140.160055][ T34] usb 6-1: config 250 interface 228 has no altsetting 0 [ 140.164735][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 140.169107][ T34] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 140.172840][ T34] usb 6-1: Product: syz [ 140.174764][ T34] usb 6-1: SerialNumber: syz [ 140.185200][ T34] hub 6-1:250.228: bad descriptor, ignoring hub [ 140.187942][ T34] hub 6-1:250.228: probe with driver hub failed with error -5 [ 140.201819][ T9216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.908'. [ 140.211782][ T9216] netlink: 124 bytes leftover after parsing attributes in process `syz.3.908'. [ 140.392401][ T34] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 140.467747][ T9231] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 140.476448][ T9231] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.909'. [ 140.603418][ T5936] Bluetooth: hci2: Malformed Event: 0x13 [ 140.651040][ T9238] sctp: [Deprecated]: syz.0.917 (pid 9238) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.651040][ T9238] Use struct sctp_sack_info instead [ 140.696008][ T34] usb 6-1: USB disconnect, device number 7 [ 140.702868][ T34] usblp0: removed [ 140.703147][ T9240] ocfs2: Unknown parameter 'aclile1' [ 141.231206][ T9278] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 141.234342][ T9276] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 141.241362][ T9276] overlayfs: failed to set xattr on upper [ 141.243945][ T9276] overlayfs: ...falling back to redirect_dir=nofollow. [ 141.248616][ T9276] overlayfs: ...falling back to index=off. [ 141.254319][ T9282] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 141.254844][ T9276] overlayfs: ...falling back to uuid=null. [ 141.315784][ T9286] XFS (nbd1): no-recovery mounts must be read-only. [ 141.381687][ T9289] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 141.387958][ T9289] exFAT-fs (nullb0): invalid boot record signature [ 141.390884][ T9289] exFAT-fs (nullb0): failed to read boot sector [ 141.393628][ T9289] exFAT-fs (nullb0): failed to recognize exfat type [ 141.547769][ T9302] netlink: 'syz.0.937': attribute type 11 has an invalid length. [ 141.551369][ T9302] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.937'. [ 141.762381][ T9310] netlink: 'syz.0.938': attribute type 1 has an invalid length. [ 141.989114][ T9342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.947'. [ 142.059120][ T9351] 9pnet_virtio: no channels available for device syz [ 142.064671][ T9351] tipc: Failed to obtain node identity [ 142.068446][ T9351] tipc: Enabling of bearer rejected, failed to enable media [ 142.195938][ T9365] netlink: 'syz.3.953': attribute type 1 has an invalid length. [ 142.305124][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 142.459733][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 142.463841][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.466988][ T9] usb 6-1: Product: syz [ 142.470251][ T9] usb 6-1: Manufacturer: syz [ 142.471839][ T9] usb 6-1: SerialNumber: syz [ 142.477863][ T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 142.503176][ T5936] Bluetooth: hci1: unexpected event for opcode 0x2064 [ 142.506801][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 142.646701][ T9394] ipt_REJECT: ECHOREPLY no longer supported. [ 142.713188][ T9348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.726653][ T9348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.731409][ T5988] usb 6-1: USB disconnect, device number 8 [ 143.250102][ T40] kauditd_printk_skb: 302 callbacks suppressed [ 143.250117][ T40] audit: type=1400 audit(1773400506.897:5426): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 143.261521][ T40] audit: type=1400 audit(1773400506.907:5427): avc: denied { setopt } for pid=9418 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.268605][ T40] audit: type=1400 audit(1773400506.907:5428): avc: denied { write } for pid=9418 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.276640][ T40] audit: type=1400 audit(1773400506.907:5429): avc: denied { ioctl } for pid=9418 comm="syz.2.967" path="socket:[36283]" dev="sockfs" ino=36283 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.284577][ T40] audit: type=1400 audit(1773400506.917:5430): avc: denied { module_request } for pid=9418 comm="syz.2.967" kmod="net-pf-2-proto-132-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 143.292096][ T40] audit: type=1400 audit(1773400506.917:5431): avc: denied { create } for pid=9421 comm="syz.3.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 143.299948][ T40] audit: type=1400 audit(1773400506.927:5432): avc: denied { ioctl } for pid=9421 comm="syz.3.968" path="socket:[36288]" dev="sockfs" ino=36288 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 143.307960][ T40] audit: type=1400 audit(1773400506.927:5433): avc: denied { write } for pid=9421 comm="syz.3.968" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 143.315771][ T40] audit: type=1400 audit(1773400506.967:5434): avc: denied { create } for pid=9418 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 143.321934][ T40] audit: type=1400 audit(1773400506.967:5435): avc: denied { getopt } for pid=9418 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 143.524783][ T9442] netlink: 'syz.1.973': attribute type 9 has an invalid length. [ 143.585143][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 143.588734][ T9] ath9k_htc: Failed to initialize the device [ 143.595948][ T5988] usb 6-1: ath9k_htc: USB layer deinitialized [ 143.598838][ T9450] usb usb9: usbfs: process 9450 (syz.1.975) did not claim interface 48 before use [ 143.612744][ T9452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=9452 comm=syz.3.976 [ 143.823415][ T9464] syzkaller1: entered promiscuous mode [ 143.828335][ T9464] syzkaller1: entered allmulticast mode [ 143.841600][ T9466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.970365][ T9474] misc userio: The device must be registered before sending interrupts [ 144.100142][ T9474] syz.1.984 (9474) used greatest stack depth: 19104 bytes left [ 144.375871][ T9486] overlayfs: failed to get inode (-116) [ 144.381725][ T9486] overlayfs: failed to get inode (-116) [ 144.442255][ T9489] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 144.638518][ T9501] __nla_validate_parse: 5 callbacks suppressed [ 144.638531][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.992'. [ 144.683026][ T9501] bond5: entered promiscuous mode [ 144.684687][ T9501] bond5: entered allmulticast mode [ 144.705888][ T9504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.991'. [ 144.875792][ T9508] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9508 comm=syz.1.991 [ 144.885403][ T9503] ip6gretap0: entered promiscuous mode [ 144.887410][ T9503] ip6gretap0: entered allmulticast mode [ 144.889442][ T9503] bond5: (slave ip6gretap0): Enslaving as an active interface with an up link [ 145.422577][ T5286] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 145.518953][ T9525] netlink: 'syz.1.998': attribute type 3 has an invalid length. [ 145.526193][ T9523] gretap0: entered promiscuous mode [ 145.529013][ T9523] macsec1: entered promiscuous mode [ 145.538975][ T9523] gretap0: left promiscuous mode [ 145.625103][ T9528] netlink: 'syz.1.999': attribute type 1 has an invalid length. [ 145.628165][ T9528] netlink: 96 bytes leftover after parsing attributes in process `syz.1.999'. [ 145.631673][ T9528] netlink: 658 bytes leftover after parsing attributes in process `syz.1.999'. [ 145.635409][ T9528] netlink: 1 bytes leftover after parsing attributes in process `syz.1.999'. [ 145.660192][ T9530] qnx4: unable to read the superblock [ 145.799997][ T9541] Cannot find add_set index 46338 as target [ 145.854640][ T9538] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.858387][ T9538] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.944501][ T9538] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.948290][ T9538] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.015219][ T5615] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 146.051869][ T9538] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.056120][ T9538] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.081877][ T9549] bond4: option downdelay: invalid value (18446744073709551615) [ 146.084102][ T9549] bond4: option downdelay: allowed values 0 - 2147483647 [ 146.087534][ T9549] bond4 (unregistering): Released all slaves [ 146.111134][ T9548] bond4: option downdelay: invalid value (18446744073709551615) [ 146.114555][ T9548] bond4: option downdelay: allowed values 0 - 2147483647 [ 146.119711][ T9548] bond4 (unregistering): Released all slaves [ 146.175035][ T5615] usb 7-1: Using ep0 maxpacket: 8 [ 146.187011][ T5615] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.195007][ T5615] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.201468][ T5615] usb 7-1: config 0 interface 0 has no altsetting 0 [ 146.203601][ T5615] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 146.211582][ T5615] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.211649][ T9538] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.220165][ T9538] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.225539][ T5615] usb 7-1: config 0 descriptor?? [ 146.271380][ T9555] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1008'. [ 146.300265][ T9555] bond3: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 146.306647][ T9555] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1008'. [ 146.311117][ T9555] bond3: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 146.339387][ T9560] xt_hashlimit: invalid rate [ 146.389486][ T81] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.392974][ T81] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.399000][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 146.402459][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 146.408516][ T81] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.411830][ T81] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.415209][ T81] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.419767][ T81] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.457487][ T81] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.461112][ T81] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.646820][ T5615] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 146.649164][ T5615] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 146.651397][ T5615] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 146.653667][ T5615] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 146.664299][ T5615] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 146.667076][ T5615] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 146.669949][ T9578] tmpfs: Bad value for 'mpol' [ 146.672271][ T9579] tmpfs: Bad value for 'mpol' [ 146.847111][ T50] usb 7-1: USB disconnect, device number 13 [ 147.483984][ T9612] random: crng reseeded on system resumption [ 147.715181][ T54] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 147.877378][ T54] usb 8-1: config 160 has an invalid interface number: 117 but max is 0 [ 147.885075][ T54] usb 8-1: config 160 has no interface number 0 [ 147.887688][ T54] usb 8-1: config 160 interface 117 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 8 [ 147.897828][ T54] usb 8-1: config 160 interface 117 altsetting 7 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 147.903028][ T54] usb 8-1: config 160 interface 117 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 147.908136][ T54] usb 8-1: config 160 interface 117 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.912761][ T54] usb 8-1: config 160 interface 117 altsetting 7 endpoint 0xC has invalid maxpacket 64, setting to 8 [ 147.919951][ T54] usb 8-1: config 160 interface 117 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 147.924843][ T54] usb 8-1: config 160 interface 117 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 147.929788][ T54] usb 8-1: config 160 interface 117 altsetting 7 has an endpoint descriptor with address 0x2F, changing to 0xF [ 147.934154][ T54] usb 8-1: config 160 interface 117 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 147.942138][ T54] usb 8-1: config 160 interface 117 altsetting 7 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 147.948041][ T54] usb 8-1: config 160 interface 117 has no altsetting 0 [ 148.613561][ T40] kauditd_printk_skb: 177 callbacks suppressed [ 148.613573][ T40] audit: type=1400 audit(1773400512.257:5613): avc: denied { bpf } for pid=9648 comm="syz.2.1034" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 148.622816][ T40] audit: type=1400 audit(1773400512.257:5614): avc: denied { perfmon } for pid=9648 comm="syz.2.1034" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 148.623057][ T9653] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9653 comm=syz.0.1035 [ 148.629769][ T40] audit: type=1400 audit(1773400512.257:5615): avc: denied { prog_run } for pid=9648 comm="syz.2.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 148.639643][ T9653] netlink: 'syz.0.1035': attribute type 1 has an invalid length. [ 148.640071][ T40] audit: type=1400 audit(1773400512.267:5616): avc: denied { create } for pid=9652 comm="syz.0.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 148.648411][ T40] audit: type=1400 audit(1773400512.287:5617): avc: denied { mounton } for pid=9652 comm="syz.0.1035" path="/266/file0" dev="tmpfs" ino=1435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 148.650468][ T9653] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.655466][ T40] audit: type=1400 audit(1773400512.287:5618): avc: denied { mount } for pid=9652 comm="syz.0.1035" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 148.664435][ T40] audit: type=1400 audit(1773400512.287:5619): avc: denied { create } for pid=9652 comm="syz.0.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 148.671367][ T40] audit: type=1400 audit(1773400512.287:5620): avc: denied { bind } for pid=9652 comm="syz.0.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 148.677664][ T40] audit: type=1400 audit(1773400512.287:5621): avc: denied { setopt } for pid=9652 comm="syz.0.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 148.683441][ T40] audit: type=1400 audit(1773400512.287:5622): avc: denied { accept } for pid=9652 comm="syz.0.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 148.841530][ T9680] ªªªªª5gæ¹Q[Ô: renamed from lo (while UP) [ 148.879397][ T9680] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1043'. [ 149.123533][ T9695] netlink: 'syz.0.1047': attribute type 1 has an invalid length. [ 149.303095][ T9704] netlink: 'syz.0.1049': attribute type 2 has an invalid length. [ 149.311358][ T9704] !: entered promiscuous mode [ 149.315814][ T9704] netlink: 'syz.0.1049': attribute type 2 has an invalid length. [ 149.319087][ T9704] !: left promiscuous mode [ 149.645072][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 149.797918][ T9] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 149.801010][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.803691][ T9] usb 6-1: Product: syz [ 149.805536][ T9] usb 6-1: Manufacturer: syz [ 149.807100][ T9] usb 6-1: SerialNumber: syz [ 149.810610][ T9] usb 6-1: config 0 descriptor?? [ 150.021777][ T50] usb 6-1: USB disconnect, device number 9 [ 150.088488][ T9709] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 150.101244][ T9709] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 150.219317][ T9711] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 150.221480][ T9711] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 150.224036][ T9711] vhci_hcd vhci_hcd.0: Device attached [ 150.355780][ T9712] vhci_hcd: connection closed [ 150.356015][ T81] vhci_hcd vhci_hcd.0: stop threads [ 150.360122][ T81] vhci_hcd vhci_hcd.0: release socket [ 150.362491][ T81] vhci_hcd vhci_hcd.0: disconnect device [ 150.398749][ T54] usb 8-1: string descriptor 0 read error: -71 [ 150.403290][ T54] usb 8-1: New USB device found, idVendor=0bb4, idProduct=0a7f, bcdDevice=76.78 [ 150.406837][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.411719][ T54] usb 8-1: can't set config #160, error -71 [ 150.415894][ T54] usb 8-1: USB disconnect, device number 9 [ 150.783917][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 150.788146][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 150.791289][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 150.795753][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 150.798893][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 151.055075][ T54] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 151.076272][ T9758] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 151.125392][ T5988] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 151.164382][ T9768] zonefs (nbd3) ERROR: Not a zoned block device [ 151.209531][ T54] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.213968][ T54] usb 7-1: config 0 has no interfaces? [ 151.218525][ T54] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 151.221462][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.224135][ T54] usb 7-1: Product: syz [ 151.226005][ T54] usb 7-1: Manufacturer: syz [ 151.228058][ T54] usb 7-1: SerialNumber: syz [ 151.236857][ T54] usb 7-1: config 0 descriptor?? [ 151.287456][ T5988] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 151.291180][ T5988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.294703][ T5988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.298325][ T5988] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 151.306416][ T5988] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 151.310463][ T5988] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 151.314118][ T5988] usb 5-1: Manufacturer: syz [ 151.331056][ T5988] usb 5-1: config 0 descriptor?? [ 151.390464][ T9784] syzkaller0: entered promiscuous mode [ 151.392924][ T9784] syzkaller0: entered allmulticast mode [ 151.454156][ T54] usb 7-1: USB disconnect, device number 14 [ 151.482946][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 151.486916][ T9788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1079'. [ 151.492868][ T9788] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1079'. [ 151.498591][ T9788] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2081 sclass=netlink_xfrm_socket pid=9788 comm=syz.1.1079 [ 151.508111][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 151.739284][ T5988] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 151.746007][ T5988] appleir 0003:05AC:8243.0004: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 152.007147][ T5988] usb 5-1: USB disconnect, device number 14 [ 152.046530][ T9819] IPv6: addrconf: prefix option has invalid lifetime [ 152.121657][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1088'. [ 153.605223][ T830] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 153.755219][ T830] usb 5-1: Using ep0 maxpacket: 8 [ 153.758582][ T830] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 153.761430][ T830] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.765538][ T830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.768751][ T830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.772298][ T830] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.777260][ T830] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 153.780325][ T830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.988587][ T830] usb 5-1: usb_control_msg returned -32 [ 153.990917][ T830] usbtmc 5-1:16.0: can't read capabilities [ 154.547837][ T9790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.630860][ T40] kauditd_printk_skb: 214 callbacks suppressed [ 154.630877][ T40] audit: type=1400 audit(1773400518.277:5837): avc: denied { read } for pid=9866 comm="syz.3.1102" dev="nsfs" ino=4026533095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 154.645119][ T40] audit: type=1400 audit(1773400518.287:5838): avc: denied { open } for pid=9866 comm="syz.3.1102" path="net:[4026533095]" dev="nsfs" ino=4026533095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 154.654872][ T40] audit: type=1400 audit(1773400518.287:5839): avc: denied { create } for pid=9866 comm="syz.3.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.664164][ T40] audit: type=1400 audit(1773400518.287:5840): avc: denied { bind } for pid=9866 comm="syz.3.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.673854][ T40] audit: type=1400 audit(1773400518.287:5841): avc: denied { nlmsg_write } for pid=9866 comm="syz.3.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 154.682484][ T40] audit: type=1400 audit(1773400518.317:5842): avc: denied { bpf } for pid=9869 comm="syz.1.1103" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.691676][ T40] audit: type=1400 audit(1773400518.317:5843): avc: denied { perfmon } for pid=9869 comm="syz.1.1103" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.700878][ T40] audit: type=1400 audit(1773400518.317:5844): avc: denied { prog_run } for pid=9869 comm="syz.1.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 154.709203][ T40] audit: type=1400 audit(1773400518.337:5845): avc: denied { write } for pid=9859 comm="syz.0.1099" name="usbtmc0" dev="devtmpfs" ino=3096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 154.724284][ T9878] vcan1: entered allmulticast mode [ 154.727311][ T40] audit: type=1400 audit(1773400518.387:5846): avc: denied { create } for pid=9879 comm="syz.1.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.868106][ T9886] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 154.909120][ T9891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=9891 comm=syz.2.1110 [ 154.918306][ T9892] netlink: 'syz.2.1110': attribute type 10 has an invalid length. [ 154.918392][ T9891] netlink: 'syz.2.1110': attribute type 10 has an invalid length. [ 154.933937][ T9892] team0: Port device dummy0 added [ 154.945188][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 154.967202][ T5988] usb 5-1: USB disconnect, device number 15 [ 155.019541][ T9900] xt_l2tp: missing protocol rule (udp|l2tpip) [ 155.026723][ T9900] xt_l2tp: missing protocol rule (udp|l2tpip) [ 155.081724][ T9905] pvfs2: Unknown parameter '$!&]°'%).' [ 155.095393][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 155.099132][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 155.107026][ T9] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 155.111101][ T9] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 155.114624][ T9] usb 8-1: Product: syz [ 155.116625][ T9] usb 8-1: Manufacturer: syz [ 155.118702][ T9] usb 8-1: SerialNumber: syz [ 155.123850][ T9] usb 8-1: config 0 descriptor?? [ 155.127661][ T9875] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 155.284319][ T9907] sctp: [Deprecated]: syz.2.1114 (pid 9907) Use of int in max_burst socket option. [ 155.284319][ T9907] Use struct sctp_assoc_value instead [ 155.401658][ T5988] usb 8-1: USB disconnect, device number 10 [ 155.573543][ T9936] macsec2: entered promiscuous mode [ 155.575471][ T9936] macsec2: entered allmulticast mode [ 155.651699][ T1180] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.651766][ T9952] CIFS mount error: No usable UNC path provided in device string! [ 155.651766][ T9952] [ 155.655516][ T1180] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.658993][ T9952] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 155.664755][ T1180] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.669406][ T1180] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.673556][ T9952] netlink: 'syz.2.1124': attribute type 1 has an invalid length. [ 155.678278][ T9952] CIFS mount error: No usable UNC path provided in device string! [ 155.678278][ T9952] [ 155.682170][ T9952] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 155.752758][ T9966] team0 (unregistering): Port device team_slave_0 removed [ 155.758802][ T9966] team0 (unregistering): Port device team_slave_1 removed [ 155.895072][ T5615] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 155.967350][ T9982] __nla_validate_parse: 5 callbacks suppressed [ 155.967362][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1131'. [ 155.979429][ T9982] vlan2: entered allmulticast mode [ 155.981299][ T9982] vlan0: entered allmulticast mode [ 155.983171][ T9982] veth0_vlan: entered allmulticast mode [ 156.055230][ T5615] usb 6-1: Using ep0 maxpacket: 8 [ 156.060492][ T5615] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.064753][ T5615] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.069194][ T5615] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.073685][ T5615] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.080257][ T5615] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.084170][ T5615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.129588][ T9987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1133'. [ 156.279703][ T9995] netdevsim netdevsim0 ªªªªªª: renamed from netdevsim0 [ 156.294883][ T5615] usb 6-1: GET_CAPABILITIES returned 0 [ 156.305057][ T5615] usbtmc 6-1:16.0: can't read capabilities [ 156.327197][ T9995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9995 comm=syz.0.1136 [ 156.368246][ T9995] netlink: 'syz.0.1136': attribute type 9 has an invalid length. [ 156.372582][ T9995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1136'. [ 156.498518][ T9948] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 156.503860][ T830] usb 6-1: USB disconnect, device number 10 [ 156.509852][T10009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1141'. [ 156.540128][T10016] Cannot find add_set index 1 as target [ 156.595170][T10020] program syz.3.1145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.726386][ T5936] Bluetooth: hci2: ISO packet too small [ 156.801385][T10039] netlink: 'syz.3.1150': attribute type 7 has an invalid length. [ 156.805658][T10039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10039 comm=syz.3.1150 [ 157.039627][T10060] netlink: 'syz.1.1156': attribute type 11 has an invalid length. [ 157.058571][ T29] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 157.205105][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 157.211566][ T29] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.219068][ T29] usb 5-1: config 0 has no interface number 0 [ 157.222763][ T29] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.227603][ T29] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 157.231661][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.240491][ T29] usb 5-1: config 0 descriptor?? [ 157.250908][ T29] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 157.462771][ T54] usb 5-1: USB disconnect, device number 16 [ 157.510448][T10090] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1162'. [ 157.533313][T10090] bond0: (slave bond_slave_1): Releasing backup interface [ 157.652403][T10097] ip6gre1: entered promiscuous mode [ 157.654784][T10097] ip6gre1: entered allmulticast mode [ 157.682935][T10102] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1169'. [ 157.985270][T10129] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1178'. [ 158.275173][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 158.435635][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 158.444855][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 158.448064][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 158.452664][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 158.460213][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.466327][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.471317][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 158.476517][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 158.482637][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 158.486273][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 158.489751][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 158.494625][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 158.501598][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1186'. [ 158.505045][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.512170][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.517396][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 158.522614][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 158.528685][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 158.533005][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 158.538433][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 158.543706][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 158.549084][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.554570][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.559685][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 158.565122][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 158.571179][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 158.577440][ T9] usb 5-1: string descriptor 0 read error: -22 [ 158.580390][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 158.585013][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.605295][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 158.951233][ T54] usb 5-1: USB disconnect, device number 17 [ 159.011264][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 159.015682][T10182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10182 comm=syz.2.1192 [ 159.035344][T10132] hsr_slave_1 (unregistering): left promiscuous mode [ 159.660396][T10249] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.1201'. [ 159.663707][T10249] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 159.671600][ T40] kauditd_printk_skb: 307 callbacks suppressed [ 159.671611][ T40] audit: type=1400 audit(1773400523.327:6154): avc: denied { create } for pid=10250 comm="syz.1.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.684386][ T40] audit: type=1400 audit(1773400523.327:6155): avc: denied { setopt } for pid=10250 comm="syz.1.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.754223][ T40] audit: type=1400 audit(1773400523.397:6156): avc: denied { read write } for pid=10255 comm="syz.2.1203" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 159.765319][ T40] audit: type=1400 audit(1773400523.397:6157): avc: denied { open } for pid=10255 comm="syz.2.1203" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 159.775213][ T40] audit: type=1400 audit(1773400523.407:6158): avc: denied { ioctl } for pid=10255 comm="syz.2.1203" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 159.840513][ T40] audit: type=1400 audit(1773400523.487:6159): avc: denied { write } for pid=10258 comm="syz.1.1204" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 159.904198][T10262] netlink: 'syz.3.1205': attribute type 2 has an invalid length. [ 159.923135][ T40] audit: type=1400 audit(1773400523.567:6160): avc: denied { create } for pid=10263 comm="syz.2.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.931639][ T40] audit: type=1400 audit(1773400523.567:6161): avc: denied { write } for pid=10263 comm="syz.2.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.940554][ T40] audit: type=1400 audit(1773400523.567:6162): avc: denied { nlmsg_write } for pid=10263 comm="syz.2.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.949064][ T40] audit: type=1400 audit(1773400523.567:6163): avc: denied { mount } for pid=10263 comm="syz.2.1206" name="/" dev="ramfs" ino=40530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 159.978558][T10267] hsr_slave_0: left promiscuous mode [ 159.981840][T10267] hsr_slave_1: left promiscuous mode [ 160.425157][ T34] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 160.554904][T10313] all: renamed from bridge_slave_0 (while UP) [ 160.595993][ T34] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 160.615036][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.618783][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 101, changing to 10 [ 160.627040][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 160.631597][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 160.635550][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.638867][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 101, changing to 10 [ 160.642935][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 160.661677][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 160.665560][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.668975][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 101, changing to 10 [ 160.673351][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 160.678204][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 160.681788][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.685464][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 101, changing to 10 [ 160.690178][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 160.694476][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 160.698263][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.702007][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 101, changing to 10 [ 160.706460][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 160.710926][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 160.714369][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.717770][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 101, changing to 10 [ 160.722086][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 160.727094][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 160.730923][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.734845][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 101, changing to 10 [ 160.739962][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 160.744593][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 160.748147][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.751795][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 101, changing to 10 [ 160.756453][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 160.760639][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 160.765766][ T34] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 160.769778][ T34] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 160.773399][ T34] usb 7-1: Product: syz [ 160.774789][ T34] usb 7-1: Manufacturer: syz [ 160.777423][ T34] usb 7-1: SerialNumber: syz [ 160.782187][ T34] usb 7-1: config 0 descriptor?? [ 160.794198][ T34] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 160.989230][T10275] Cannot find add_set index 0 as target [ 161.011952][ T5615] usb 7-1: USB disconnect, device number 15 [ 161.017849][ T5615] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 161.529475][T10337] sp0: Synchronizing with TNC [ 161.530653][T10340] x_tables: duplicate underflow at hook 1 [ 161.534070][T10337] __nla_validate_parse: 2 callbacks suppressed [ 161.534084][T10337] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1227'. [ 161.540720][T10337] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 161.546567][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1227'. [ 161.550694][T10337] netlink: 'syz.1.1227': attribute type 13 has an invalid length. [ 161.625305][T10346] fuse: Bad value for 'user_id' [ 161.627614][T10346] fuse: Bad value for 'user_id' [ 161.646884][T10346] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 162.761483][T10401] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1245'. [ 162.772329][T10401] ip6gre2: entered promiscuous mode [ 162.774705][T10401] ip6gre2: entered allmulticast mode [ 162.799783][T10401] binder: 10400:10401 ioctl c018620c 200000000240 returned -22 [ 162.851583][T10405] overlayfs: invalid origin (0000) [ 162.865892][T10406] binder: 10396:10406 ioctl c0205867 2000000001c0 returned -22 [ 162.934466][T10411] tmpfs: Group quota inode hardlimit too large. [ 162.940264][T10408] bond6 (unregistering): Released all slaves [ 162.982734][T10417] batadv_slave_1: entered promiscuous mode [ 163.102647][T10426] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1252'. [ 163.235683][ T29] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 163.254353][T10438] netlink: 'syz.0.1254': attribute type 1 has an invalid length. [ 163.257342][T10438] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1254'. [ 163.260367][T10438] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1254'. [ 163.263430][T10438] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1254'. [ 163.397383][ T29] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.402409][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 163.407460][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 163.411712][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.417801][ T29] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.421699][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.428420][ T29] usb 8-1: config 0 descriptor?? [ 163.485127][ T5615] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 163.531249][T10448] sctp: [Deprecated]: syz.0.1256 (pid 10448) Use of int in max_burst socket option. [ 163.531249][T10448] Use struct sctp_assoc_value instead [ 163.645030][ T5615] usb 7-1: Using ep0 maxpacket: 32 [ 163.648388][ T5615] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 163.651233][ T5615] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 163.654168][ T5615] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 163.657426][ T5615] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.660668][ T5615] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 163.664138][ T5615] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 163.668617][ T5615] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 163.671584][ T5615] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.675903][ T5615] usb 7-1: config 0 descriptor?? [ 163.835826][ T29] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 163.838339][ T29] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 163.840905][ T29] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 163.843445][ T29] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 163.846145][ T29] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 163.848579][ T29] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 163.851901][ T29] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 163.854416][ T29] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 163.857324][ T29] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 163.859701][ T29] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 163.872981][ T29] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 163.884637][ T5615] usblp 7-1:0.0: usblp1: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 163.893947][ T5615] usb 7-1: USB disconnect, device number 16 [ 163.899819][ T5615] usblp1: removed [ 163.986484][T10462] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 164.036559][T10417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.039929][T10417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.167852][T10467] batadv_slave_1: left promiscuous mode [ 164.304640][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'. [ 164.315220][ T29] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 164.465124][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 164.469566][ T29] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 164.473306][ T29] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 164.477213][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 164.481341][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.485550][ T29] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 164.489633][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 164.495399][ T29] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 164.499346][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.505594][ T29] usb 7-1: config 0 descriptor?? [ 164.718299][ T29] usblp 7-1:0.0: usblp1: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 164.911562][ T40] kauditd_printk_skb: 250 callbacks suppressed [ 164.911578][ T40] audit: type=1400 audit(1773400528.557:6414): avc: denied { write } for pid=10431 comm="syz.2.1253" name="hiddev0" dev="devtmpfs" ino=3127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 164.975847][ T40] audit: type=1400 audit(1773400528.627:6415): avc: denied { bind } for pid=10431 comm="syz.2.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 164.989987][ T40] audit: type=1400 audit(1773400528.627:6416): avc: denied { setopt } for pid=10431 comm="syz.2.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 164.998167][ T40] audit: type=1400 audit(1773400528.627:6417): avc: denied { accept } for pid=10431 comm="syz.2.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 165.006837][ T40] audit: type=1400 audit(1773400528.627:6418): avc: denied { write } for pid=10431 comm="syz.2.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 165.015503][ T40] audit: type=1400 audit(1773400528.627:6419): avc: denied { read } for pid=10431 comm="syz.2.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 165.189734][ T40] audit: type=1400 audit(1773400528.837:6420): avc: denied { create } for pid=10493 comm="syz.1.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.198519][ T40] audit: type=1400 audit(1773400528.837:6421): avc: denied { prog_load } for pid=10493 comm="syz.1.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 165.207259][ T40] audit: type=1400 audit(1773400528.837:6422): avc: denied { bpf } for pid=10493 comm="syz.1.1266" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 165.215567][ T40] audit: type=1400 audit(1773400528.837:6423): avc: denied { perfmon } for pid=10493 comm="syz.1.1266" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 165.237276][T10494] bond0: (slave bond_slave_0): Releasing backup interface [ 165.316985][ T54] usb 8-1: reset high-speed USB device number 11 using dummy_hcd [ 165.881614][T10516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10516 comm=syz.1.1274 [ 165.907385][T10516] netlink: 'syz.1.1274': attribute type 1 has an invalid length. [ 165.935647][T10516] bond4: (slave bridge2): making interface the new active one [ 165.939456][T10516] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 166.039340][T10522] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1276'. [ 166.203506][T10539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.205964][T10539] IPv6: NLM_F_CREATE should be set when creating new route [ 166.206947][ T29] e1000 0000:00:06.0 eth0: Reset adapter [ 166.208294][T10539] IPv6: NLM_F_CREATE should be set when creating new route [ 166.240019][ T6001] usb 7-1: USB disconnect, device number 17 [ 166.250896][T10545] netlink: 'syz.3.1283': attribute type 1 has an invalid length. [ 166.254194][ T6001] usblp1: removed [ 166.298692][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1284'. [ 166.345395][ T29] e1000 0000:00:06.0 eth0: Reset adapter [ 166.356055][T10545] bond0: entered promiscuous mode [ 166.358344][T10545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.452403][T10561] netlink: 'syz.0.1287': attribute type 10 has an invalid length. [ 166.453525][T10564] ptrace attach of "/syz-executor exec"[10566] was attempted by "/syz-executor exec"[10564] [ 166.463290][T10545] bpq0: entered promiscuous mode [ 166.475634][T10553] bond0: (slave bridge3): making interface the new active one [ 166.479476][T10553] bridge3: entered promiscuous mode [ 166.481856][T10553] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 166.485266][T10561] syz_tun: entered promiscuous mode [ 166.504745][T10561] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 166.778837][ T5988] usb 8-1: USB disconnect, device number 11 [ 168.536376][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 179.832413][ T40] kauditd_printk_skb: 79 callbacks suppressed [ 179.832425][ T40] audit: type=1400 audit(1773400543.477:6503): avc: denied { map_create } for pid=10603 comm="syz.3.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 179.848756][ T40] audit: type=1400 audit(1773400543.477:6504): avc: denied { read } for pid=10602 comm="syz.0.1288" dev="nsfs" ino=4026533302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 179.855884][ T40] audit: type=1400 audit(1773400543.477:6505): avc: denied { open } for pid=10602 comm="syz.0.1288" path="net:[4026533302]" dev="nsfs" ino=4026533302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 179.863543][ T40] audit: type=1400 audit(1773400543.477:6506): avc: denied { bpf } for pid=10603 comm="syz.3.1291" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.870548][ T40] audit: type=1400 audit(1773400543.477:6507): avc: denied { create } for pid=10602 comm="syz.0.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 179.877812][ T40] audit: type=1400 audit(1773400543.477:6508): avc: denied { map_read map_write } for pid=10603 comm="syz.3.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 179.885029][ T40] audit: type=1400 audit(1773400543.477:6509): avc: denied { read } for pid=10602 comm="syz.0.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 179.891429][ T40] audit: type=1400 audit(1773400543.497:6510): avc: denied { name_bind } for pid=10603 comm="syz.3.1291" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 179.898933][ T40] audit: type=1400 audit(1773400543.497:6511): avc: denied { mount } for pid=10607 comm="syz.2.1290" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 179.906331][ T40] audit: type=1400 audit(1773400543.507:6512): avc: denied { write } for pid=10607 comm="syz.2.1290" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.077172][T10641] __nla_validate_parse: 1 callbacks suppressed [ 180.077187][T10641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1298'. [ 180.244778][T10621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.284282][T10672] 9pnet_fd: p9_fd_create_unix (10672): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 180.289381][T10672] EXT4-fs: Conflicting test_dummy_encryption options [ 180.515049][ T5615] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 180.558569][T10686] team0: Device veth13 is up. Set it down before adding it as a team port [ 180.632449][ T1145] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.687701][ T5615] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 180.690734][ T5615] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 180.697279][ T5615] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.698239][T10691] ALSA: mixer_oss: invalid OSS volume '' [ 180.702760][ T5615] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 180.726559][ T1145] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.728760][ T5615] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 180.729748][ T5286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.734788][ T5615] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 180.740774][ T5615] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 180.741422][ T5286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.744287][ T5615] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.753049][ T5286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.755535][ T5615] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 180.758597][ T5286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.759845][ T5615] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 180.767229][ T5615] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 180.768376][ T5286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.769672][ T5615] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 180.771492][T10696] netlink: 16102 bytes leftover after parsing attributes in process `syz.0.1316'. [ 180.779202][ T5615] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.782957][ T5615] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 180.786619][ T5615] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 180.789136][T10698] binder: 10695:10698 ioctl c0306201 2000000004c0 returned -22 [ 180.792738][ T5615] usb 8-1: string descriptor 0 read error: -22 [ 180.792820][ T5615] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 180.795723][ T1145] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.798162][ T5615] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.808717][ T5615] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 180.828463][T10697] ------------[ cut here ]------------ [ 180.830993][T10697] 1 [ 180.831003][T10697] WARNING: mm/page_alloc.c:5226 at __alloc_frozen_pages_noprof+0x23ea/0x2ba0, CPU#2: syz.0.1316/10697 [ 180.837764][T10697] Modules linked in: [ 180.839529][T10697] CPU: 2 UID: 0 PID: 10697 Comm: syz.0.1316 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.844231][T10697] Tainted: [L]=SOFTLOCKUP [ 180.846452][T10697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.850789][T10697] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 180.853717][T10697] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 7f 92 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 180.862270][T10697] RSP: 0018:ffffc90007e0f760 EFLAGS: 00010246 [ 180.865419][T10697] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 180.868442][T10697] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 180.871439][T10697] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 180.874501][T10697] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 180.877534][T10697] R13: 1ffff92000fc1f3b R14: 0000000000000016 R15: 1ffff92000fc1f05 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 180.880158][T10697] FS: 00007f39969a16c0(0000) GS:ffff8880d6545000(0000) knlGS:0000000000000000 [ 180.883576][T10697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.885800][T10697] CR2: 0000200000001080 CR3: 0000000026750000 CR4: 0000000000352ef0 [ 180.888841][T10697] Call Trace: [ 180.890184][T10697] [ 180.891477][T10697] ? find_held_lock+0x2b/0x80 [ 180.893603][T10697] ? is_bpf_text_address+0x8a/0x1a0 [ 180.896130][T10697] ? is_bpf_text_address+0x8a/0x1a0 [ 180.898456][T10697] ? bpf_ksym_find+0x128/0x1c0 [ 180.900490][T10697] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 180.902874][T10697] ? is_bpf_text_address+0x94/0x1a0 [ 180.905241][T10697] ? kernel_text_address+0x8d/0x100 [ 180.907532][T10697] ? __kernel_text_address+0xd/0x30 [ 180.909790][T10697] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 180.912578][T10697] ? arch_stack_walk+0xa6/0xf0 [ 180.914709][T10697] ? stack_trace_save+0x8e/0xc0 [ 180.916866][T10697] ? __pfx_stack_trace_save+0x10/0x10 [ 180.919140][T10697] ? stack_depot_save_flags+0x27/0x9d0 [ 180.920902][T10697] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 180.923603][T10697] ? policy_nodemask+0xed/0x4f0 [ 180.925623][T10697] alloc_pages_mpol+0x1fb/0x550 [ 180.927508][T10697] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 180.929785][T10697] ? drm_syncobj_array_find+0x34/0x3b0 [ 180.932091][T10697] ___kmalloc_large_node+0x104/0x150 [ 180.934346][T10697] __kmalloc_large_node_noprof+0x1c/0x70 [ 180.936842][T10697] __kmalloc_noprof+0x5be/0x850 [ 180.938990][T10697] drm_syncobj_array_find+0x34/0x3b0 [ 180.941273][T10697] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 180.943895][T10697] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 180.946464][T10697] ? drm_dev_exit+0x41/0x60 [ 180.948262][T10697] ? drm_dev_exit+0x41/0x60 [ 180.950171][T10697] drm_ioctl_kernel+0x1f3/0x3e0 [ 180.952052][T10697] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 180.954299][T10697] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 180.956141][T10697] drm_ioctl+0x5e6/0xc60 [ 180.957778][T10697] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 180.960730][T10697] ? __pfx_drm_ioctl+0x10/0x10 [ 180.962484][T10697] ? selinux_file_ioctl+0x139/0x290 [ 180.964285][T10697] ? selinux_file_ioctl+0xb4/0x290 [ 180.964552][ T50] usb 8-1: USB disconnect, device number 12 [ 180.966239][T10697] ? __pfx_drm_ioctl+0x10/0x10 [ 180.970294][T10697] __x64_sys_ioctl+0x18e/0x210 [ 180.972440][T10697] do_syscall_64+0x106/0xf80 [ 180.974542][T10697] ? clear_bhb_loop+0x40/0x90 [ 180.976803][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.979430][T10697] RIP: 0033:0x7f3995b9c799 [ 180.981441][T10697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.989857][T10697] RSP: 002b:00007f39969a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.993463][T10697] RAX: ffffffffffffffda RBX: 00007f3995e16090 RCX: 00007f3995b9c799 [ 180.997010][T10697] RDX: 0000200000000280 RSI: 00000000c01864cd RDI: 0000000000000008 [ 181.000458][T10697] RBP: 00007f3995c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 181.003970][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.007687][T10697] R13: 00007f3995e16128 R14: 00007f3995e16090 R15: 00007ffcca92dcd8 [ 181.011132][T10697] [ 181.012540][T10697] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 181.015705][T10697] CPU: 2 UID: 0 PID: 10697 Comm: syz.0.1316 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.020350][T10697] Tainted: [L]=SOFTLOCKUP [ 181.022275][T10697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.026663][T10697] Call Trace: [ 181.028129][T10697] [ 181.029477][T10697] dump_stack_lvl+0x100/0x190 [ 181.031574][T10697] vpanic+0x552/0x970 [ 181.033402][T10697] ? __pfx_vpanic+0x10/0x10 [ 181.035432][T10697] panic+0xd1/0xe0 [ 181.037063][T10697] ? __pfx_panic+0x10/0x10 [ 181.039011][T10697] ? check_panic_on_warn+0x1f/0x90 [ 181.040719][T10697] check_panic_on_warn.cold+0x19/0x34 [ 181.042502][T10697] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 181.044578][T10697] __warn.cold+0x191/0x348 [ 181.046060][T10697] __report_bug+0x296/0x3d0 [ 181.047589][T10697] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 181.049818][T10697] ? __pfx___report_bug+0x10/0x10 [ 181.052087][T10697] ? __lock_acquire+0x4a5/0x2630 [ 181.053925][T10697] ? __lock_acquire+0x4a5/0x2630 [ 181.055579][T10697] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 181.057592][T10697] report_bug+0xb2/0x220 [ 181.058991][T10697] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 181.061008][T10697] handle_bug+0x16a/0x2a0 [ 181.062455][T10697] exc_invalid_op+0x17/0x50 [ 181.063949][T10697] asm_exc_invalid_op+0x1a/0x20 [ 181.065542][T10697] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 181.067720][T10697] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 7f 92 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 181.073897][T10697] RSP: 0018:ffffc90007e0f760 EFLAGS: 00010246 [ 181.075874][T10697] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 181.078422][T10697] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 181.080965][T10697] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 181.083505][T10697] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 181.086055][T10697] R13: 1ffff92000fc1f3b R14: 0000000000000016 R15: 1ffff92000fc1f05 [ 181.088557][T10697] ? find_held_lock+0x2b/0x80 [ 181.090069][T10697] ? is_bpf_text_address+0x8a/0x1a0 [ 181.091727][T10697] ? is_bpf_text_address+0x8a/0x1a0 [ 181.093428][T10697] ? bpf_ksym_find+0x128/0x1c0 [ 181.094999][T10697] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 181.097003][T10697] ? is_bpf_text_address+0x94/0x1a0 [ 181.098698][T10697] ? kernel_text_address+0x8d/0x100 [ 181.100382][T10697] ? __kernel_text_address+0xd/0x30 [ 181.102115][T10697] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 181.104153][T10697] ? arch_stack_walk+0xa6/0xf0 [ 181.105716][T10697] ? stack_trace_save+0x8e/0xc0 [ 181.107246][T10697] ? __pfx_stack_trace_save+0x10/0x10 [ 181.108975][T10697] ? stack_depot_save_flags+0x27/0x9d0 [ 181.110737][T10697] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 181.112677][T10697] ? policy_nodemask+0xed/0x4f0 [ 181.114214][T10697] alloc_pages_mpol+0x1fb/0x550 [ 181.115825][T10697] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 181.117622][T10697] ? drm_syncobj_array_find+0x34/0x3b0 [ 181.119381][T10697] ___kmalloc_large_node+0x104/0x150 [ 181.121116][T10697] __kmalloc_large_node_noprof+0x1c/0x70 [ 181.122966][T10697] __kmalloc_noprof+0x5be/0x850 [ 181.124564][T10697] drm_syncobj_array_find+0x34/0x3b0 [ 181.126351][T10697] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 181.128327][T10697] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 181.130531][T10697] ? drm_dev_exit+0x41/0x60 [ 181.132042][T10697] ? drm_dev_exit+0x41/0x60 [ 181.133545][T10697] drm_ioctl_kernel+0x1f3/0x3e0 [ 181.135160][T10697] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 181.137370][T10697] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 181.139109][T10697] drm_ioctl+0x5e6/0xc60 [ 181.140498][T10697] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 181.142730][T10697] ? __pfx_drm_ioctl+0x10/0x10 [ 181.144303][T10697] ? selinux_file_ioctl+0x139/0x290 [ 181.146000][T10697] ? selinux_file_ioctl+0xb4/0x290 [ 181.147663][T10697] ? __pfx_drm_ioctl+0x10/0x10 [ 181.149238][T10697] __x64_sys_ioctl+0x18e/0x210 [ 181.150809][T10697] do_syscall_64+0x106/0xf80 [ 181.152317][T10697] ? clear_bhb_loop+0x40/0x90 [ 181.153873][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.155813][T10697] RIP: 0033:0x7f3995b9c799 [ 181.157305][T10697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.163505][T10697] RSP: 002b:00007f39969a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.166132][T10697] RAX: ffffffffffffffda RBX: 00007f3995e16090 RCX: 00007f3995b9c799 [ 181.168801][T10697] RDX: 0000200000000280 RSI: 00000000c01864cd RDI: 0000000000000008 [ 181.171534][T10697] RBP: 00007f3995c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 181.174126][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.176715][T10697] R13: 00007f3995e16128 R14: 00007f3995e16090 R15: 00007ffcca92dcd8 [ 181.179286][T10697] [ 181.181071][T10697] Kernel Offset: disabled [ 181.182539][T10697] Rebooting in 86400 seconds..