last executing test programs: 1m34.468210455s ago: executing program 3 (id=1680): mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208000, 0x0) 1m34.467871348s ago: executing program 3 (id=1681): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000050000703000002feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 1m34.467810188s ago: executing program 3 (id=1682): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400260000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x40000}, 0x60044804) 1m34.401961477s ago: executing program 3 (id=1683): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x2200890, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_complete(0x0) (async) r0 = syz_io_uring_complete(0x0) landlock_restrict_self(r0, 0x4) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630173100000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m34.401597803s ago: executing program 3 (id=1684): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x88, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x11002, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x1fc}, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x9, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x88}, 0x1, 0x0, 0x3000000, 0xc0}, 0x0) 1m34.30624707s ago: executing program 3 (id=1685): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x8d0) 1m34.221730832s ago: executing program 32 (id=1685): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x8d0) 28.391726635s ago: executing program 1 (id=3163): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x239, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) 28.391443089s ago: executing program 1 (id=3165): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000080)={&(0x7f0000000680)=@canfd={{0x3, 0x0, 0x1, 0x1}, 0xd, 0x0, 0x0, 0x0, "1ef70e947f8abd39b26f626d03714b583416e05143ba5af47edea101240600eab614b9494a430aefee54a6b873320e0b3aabc4f503b7a55114e963e97b22a1c3"}, 0x48}}, 0x0) 28.340071698s ago: executing program 1 (id=3167): socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) 28.339803297s ago: executing program 1 (id=3168): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fedbdf25030040000800010000000000100007800c000180080001"], 0x2c}, 0x1, 0x0, 0x0, 0x150}, 0x20008040) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x40080) 28.271790729s ago: executing program 1 (id=3170): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000100)=0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 28.271665485s ago: executing program 1 (id=3171): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x14, 0x2, 0xff) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) 5.17110962s ago: executing program 4 (id=3544): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = dup(r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000280)=@vmx={0x100, 0x0, 0x2080, {0x0, 0x0, {0x900}}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000051bf2915bb30fc6b00"}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, &(0x7f00000000c0)=0x6, 0x4) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$UHID_INPUT(r2, &(0x7f0000000080)={0x8, {"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", 0x102b}}, 0x2000) 5.051560354s ago: executing program 2 (id=3545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.001473452s ago: executing program 4 (id=3546): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 4.150397242s ago: executing program 2 (id=3547): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4000100c, r2, 0x0) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x1, 0x40000, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf2, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r5, &(0x7f0000000400)=0xc, 0x7f03) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_usb_disconnect(r1) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x1000004, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d76697274696f2c616669643d3078303030303030303030303030303030302c0022a6ab9a37b79db946f14fa54d695e79245051a5e83c539f5ee2f66f4348051f1957db54dafbffbd1d669d031ce67d2f85534e94224b486af4176860fd1fa7347c0631744062fb0798618399fa105d60a48f56a1109b5b6c6f830fa3231273ba5214a832ae8cf920e75bf36674cd3900398c714b612ba66c8069d55f95fb34fa8dfae12a52cfc8967af8fb303aedc1bfa36f7d8cd30147428e46"]) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r6, &(0x7f0000003480)={0x2020}, 0x2020) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xdb) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xe) unshare(0x22020600) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) chroot(0x0) chdir(0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000004000000a5c000000060a0b04000000000000000002000000300004802cec86d162000100730002400000000b08000140000000030800030000000085bd3af100010073797a30fc68b5b50900020073797a3200000016dc26ea17dd38e500140000001100010000140000000000000000000a0000"], 0x84}}, 0x0) syz_usb_disconnect(r1) 4.143977783s ago: executing program 4 (id=3555): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 853.128204ms ago: executing program 2 (id=3548): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) pwrite64(r0, &(0x7f0000000000)="5be40f15f34d555c8db1b5750f6816c79f523a330cae0642d685c0a916e2b48890ae5967c8c84486", 0x28, 0x1) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x54, @local, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) 851.2583ms ago: executing program 0 (id=3557): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) dup(r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000280)=@vmx={0x100, 0x0, 0x2080, {0x0, 0x0, {0x900}}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000051bf2915bb30fc6b00"}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, &(0x7f00000000c0)=0x6, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r3, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x7, 0x7f, 0x8, 0x0, 0x1000, 0xe, 0x7, 0xf3, 0xb, 0x9, 0x7, 0x0, 0x0, 0x6, 0x10, 0xa, 0x4, 0x7f, 0x9f, '\x00', 0x6b}) 850.296199ms ago: executing program 4 (id=3558): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0x3cfa, 0x400, 0x2, 0x3b9}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 503.9863ms ago: executing program 0 (id=3549): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) prctl$PR_SET_TIMERSLACK(0x1d, 0x3ff) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001c80), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 1', 0x1b) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8051}, 0x4011) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') syz_emit_ethernet(0x112, &(0x7f00000009c0)={@broadcast, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0xd9, 0x300, 0x0, 0xfd, 0x6c, 0x0, @private, @rand_addr=0x64010102}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xa, 0x0, [], "d73c5886438fc6c2e401"}, {}, {}, {0x8, 0x88be, 0x1}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x2, {0x0, 0x4}}}, {0x8, 0x6558, 0x0, "29bd2fbbfbca7f14c8ec37c2fe2aab0a665902158086d15b44bb2f4316b9968ef73b635ef19d52ecb0f4784cde27978a83541fdda283186422ae80591eea7e9e10d502f9fd35f0d0a3c10a3c70c7604e8a638b0595973760dafbd4a034a4fad417e1c22290768c4d7708aa583c72cdebc27985127703bf"}}}}}}, 0x0) sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x109400, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000000d]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) ioctl$NBD_SET_TIMEOUT(r6, 0xab09, 0xedb8) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r8 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r8, 0xc06864b8, &(0x7f00000002c0)={0x0, 0x1ffd, 0x7d, 0x5, 0x2, [0x2], [0xfffffffd, 0x2, 0x4ec], [0x0, 0x1, 0x800000, 0xfffffffc], [0xa1d6]}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r1, 0x20, &(0x7f0000000080)={&(0x7f00000007c0)=""/206, 0xce, 0x0, &(0x7f00000008c0)=""/252, 0xfc}}, 0x10) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000100000000000000000002"], 0x4c}}, 0x20004010) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="fac2000000000000fc000000080045201d59ed8500000102907864010102ffffffff22039078ac1414bb"], 0x0) sendmsg$tipc(r12, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) 503.875032ms ago: executing program 2 (id=3550): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x110) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x26) 503.810853ms ago: executing program 4 (id=3551): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 400.725934ms ago: executing program 4 (id=3552): set_mempolicy(0x2, &(0x7f0000000000)=0xffd, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x3}]}) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000140)="020000000980", 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x20000000, 0x3, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f0000409000/0xa000)=nil, &(0x7f000056a000/0x2000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket(0x11, 0x80803, 0x0) setsockopt(r6, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) 394.651298ms ago: executing program 0 (id=3553): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = dup(r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000280)=@vmx={0x100, 0x0, 0x2080, {0x0, 0x0, {0x900}}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000051bf2915bb30fc6b00"}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, &(0x7f00000000c0)=0x6, 0x4) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) write$UHID_INPUT(r2, &(0x7f0000000080)={0x8, {"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", 0x102b}}, 0x2000) 392.06044ms ago: executing program 2 (id=3556): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = dup(r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000280)=@vmx={0x100, 0x0, 0x2080, {0x0, 0x0, {0x900}}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000051bf2915bb30fc6b00"}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, &(0x7f00000000c0)=0x6, 0x4) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$UHID_INPUT(r2, &(0x7f0000000080)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd8456a18f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x102b}}, 0x2000) 180.756837ms ago: executing program 0 (id=3559): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11, 0x81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x8000) 50.768823ms ago: executing program 0 (id=3560): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0x3cfa, 0x400, 0x2, 0x3b9}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 50.045218ms ago: executing program 2 (id=3561): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) dup(r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000280)=@vmx={0x100, 0x0, 0x2080, {0x0, 0x0, {0x900}}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000051bf2915bb30fc6b00"}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, &(0x7f00000000c0)=0x6, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r3, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x7, 0x7f, 0x8, 0x0, 0x1000, 0xe, 0x7, 0xf3, 0xb, 0x9, 0x7, 0x0, 0x0, 0x6, 0x10, 0xa, 0x4, 0x7f, 0x9f, '\x00', 0x6b}) 0s ago: executing program 0 (id=3562): syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0xffffffffffffffe3, 0x64, 0x0, 0x7, 0x6, 0x0, @private=0xa010101, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1db126bd7000fedbdf250b0000001000058004000280080001"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x48080) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x31c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3bbe}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9f53}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3eee}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x64f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x289}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x120000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffffd, @loopback, 0x1b}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}]}, 0x31c}}, 0x0) kernel console output (not intermixed with test programs): context=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 152.276905][ T40] audit: type=1400 audit(1773413745.353:30784): avc: denied { mount } for pid=12668 comm="syz.2.2113" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 152.285520][T12669] kAFS: unable to lookup cell 'syz0' [ 152.286554][ T40] audit: type=1400 audit(1773413745.353:30785): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=43914 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 152.400855][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 152.402960][T12684] Cannot find set identified by id 3 to match [ 152.404893][T12673] ceph: No mds server is up or the cluster is laggy [ 152.412340][T12676] ceph: No mds server is up or the cluster is laggy [ 152.535703][T12698] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2122'. [ 152.551671][ T24] usb 5-1: device descriptor read/64, error -71 [ 152.564699][T12703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2124'. [ 152.568239][T12703] team0: entered promiscuous mode [ 152.570038][T12703] team_slave_0: entered promiscuous mode [ 152.572692][T12703] team_slave_1: entered promiscuous mode [ 152.574472][T12706] Cannot find set identified by id 3 to match [ 152.574642][T12703] team0: entered allmulticast mode [ 152.578399][T12703] team_slave_0: entered allmulticast mode [ 152.580347][T12703] team_slave_1: entered allmulticast mode [ 152.584280][T12703] bridge0: port 3(team0) entered blocking state [ 152.586454][T12703] bridge0: port 3(team0) entered disabled state [ 152.590089][T12703] bridge0: port 3(team0) entered blocking state [ 152.592294][T12703] bridge0: port 3(team0) entered forwarding state [ 152.637325][T12715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2128'. [ 152.654694][T12721] openvswitch: netlink: Missing valid actions attribute. [ 152.657004][T12721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.680953][ T24] usb usb5-port1: attempt power cycle [ 152.826315][T12730] trusted_key: syz.4.2133 sent an empty control message without MSG_MORE. [ 152.850946][ T5935] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 152.854049][ T5935] Bluetooth: hci1: Injecting HCI hardware error event [ 152.858112][T12732] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2134'. [ 152.858195][ T5935] Bluetooth: hci1: hardware error 0x00 [ 152.894569][T12736] Cannot find set identified by id 3 to match [ 152.895852][T12734] bridge_slave_1: left allmulticast mode [ 152.897052][ C3] vxcan1: j1939_tp_rxtimer: 0xffff88805470f400: rx timeout, send abort [ 152.898961][T12734] bridge_slave_1: left promiscuous mode [ 152.905085][T12734] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.912059][T12734] bridge_slave_0: left allmulticast mode [ 152.913911][T12734] bridge_slave_0: left promiscuous mode [ 152.915885][T12734] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.030920][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 153.051810][ T24] usb 5-1: device descriptor read/8, error -71 [ 153.300909][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 153.333012][ T24] usb 5-1: device descriptor read/8, error -71 [ 153.339493][T12761] validate_nla: 4 callbacks suppressed [ 153.339504][T12761] netlink: 'syz.4.2142': attribute type 1 has an invalid length. [ 153.344207][T12761] netlink: 'syz.4.2142': attribute type 3 has an invalid length. [ 153.346709][T12761] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2142'. [ 153.396279][ C3] vxcan1: j1939_tp_rxtimer: 0xffff88805470c400: rx timeout, send abort [ 153.402239][T12767] mmap: syz.4.2144 (12767) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 153.402410][ C3] vxcan1: j1939_tp_rxtimer: 0xffff88805470f400: abort rx timeout. Force session deactivation [ 153.433850][T12770] netlink: 'syz.1.2146': attribute type 4 has an invalid length. [ 153.436530][T12770] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2146'. [ 153.442097][ T24] usb usb5-port1: unable to enumerate USB device [ 153.463115][T12773] Cannot find set identified by id 3 to match [ 153.497585][T12780] autofs: Unknown parameter 'ÔS' [ 153.502889][T12777] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2149'. [ 153.518663][T12780] lo speed is unknown, defaulting to 1000 [ 153.522875][T12780] lo speed is unknown, defaulting to 1000 [ 153.526058][T12780] lo speed is unknown, defaulting to 1000 [ 153.530415][T12780] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 153.538353][T12780] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 153.553145][T12780] lo speed is unknown, defaulting to 1000 [ 153.556603][T12780] lo speed is unknown, defaulting to 1000 [ 153.559335][T12780] lo speed is unknown, defaulting to 1000 [ 153.563163][T12780] lo speed is unknown, defaulting to 1000 [ 153.724754][T12800] netlink: 'syz.4.2156': attribute type 4 has an invalid length. [ 153.727308][T12800] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2156'. [ 153.788314][T12805] Cannot find set identified by id 3 to match [ 153.812345][T12807] netlink: 'syz.4.2159': attribute type 1 has an invalid length. [ 153.823687][T12807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.849096][T12807] bond0: (slave veth3): Enslaving as an active interface with a down link [ 153.855929][T12808] bond0: (slave dummy0): making interface the new active one [ 153.858916][T12808] dummy0: entered promiscuous mode [ 153.860924][T12808] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 153.864298][T12808] netlink: 'syz.4.2159': attribute type 10 has an invalid length. [ 153.869835][T12808] bond0: (slave dummy0): Releasing active interface [ 153.899034][ C3] vxcan1: j1939_tp_rxtimer: 0xffff88805470c400: abort rx timeout. Force session deactivation [ 153.905488][T12818] netlink: 'syz.4.2162': attribute type 7 has an invalid length. [ 153.907960][T12818] netlink: 'syz.4.2162': attribute type 8 has an invalid length. [ 154.180888][ T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 154.332410][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.337051][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.341041][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.346360][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.350001][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.361284][ T24] usb 9-1: config 0 descriptor?? [ 154.580437][T12830] lo speed is unknown, defaulting to 1000 [ 154.776006][ T24] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 154.852549][T12834] netlink: 'syz.0.2167': attribute type 4 has an invalid length. [ 154.860853][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 154.883942][T12836] Cannot find add_set index 0 as target [ 154.930896][ T5935] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 155.023525][ T9] usb 6-1: config 0 has no interfaces? [ 155.027126][ T9] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 155.030179][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.035853][ T9] usb 6-1: Product: syz [ 155.039076][ T9] usb 6-1: Manufacturer: syz [ 155.042190][ T9] usb 6-1: SerialNumber: syz [ 155.046159][ T9] usb 6-1: config 0 descriptor?? [ 155.054495][ T6010] usb 9-1: USB disconnect, device number 6 [ 155.061820][T12842] /dev/sr0: Can't open blockdev [ 155.248377][T12857] kernel read not supported for file /policy (pid: 12857 comm: syz.2.2176) [ 155.485450][T12874] netlink: 'syz.0.2178': attribute type 4 has an invalid length. [ 155.846759][T12931] SELinux: policydb table sizes (0,4096) do not match mine (8,7) [ 155.849422][T12931] SELinux: failed to load policy [ 155.890833][ T5935] Bluetooth: hci4: command 0x0405 tx timeout [ 156.219375][T12969] EXT4-fs (nbd2): unable to read superblock [ 156.284370][T12976] openvswitch: netlink: Key type 51 is out of range max 32 [ 156.288626][T12977] openvswitch: netlink: Key type 51 is out of range max 32 [ 156.330535][T12985] lo speed is unknown, defaulting to 1000 [ 156.687821][T13008] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 157.215860][T13013] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 157.245512][T13017] __nla_validate_parse: 13 callbacks suppressed [ 157.245529][T13017] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2225'. [ 157.301223][ T40] kauditd_printk_skb: 184 callbacks suppressed [ 157.301235][ T40] audit: type=1400 audit(1773413750.393:30970): avc: denied { mount } for pid=13026 comm="syz.0.2227" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 157.314823][ T40] audit: type=1400 audit(1773413750.403:30971): avc: denied { unmount } for pid=11331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 157.335370][T13030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=13030 comm=syz.0.2228 [ 157.390353][T13032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2229'. [ 157.394600][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2229'. [ 157.400472][T13032] xfrm1: entered promiscuous mode [ 157.402904][T13032] xfrm1: entered allmulticast mode [ 157.573191][T13040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2233'. [ 157.579440][ T40] audit: type=1400 audit(1773413750.663:30972): avc: denied { create } for pid=13039 comm="syz.4.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 157.586859][ T6010] usb 6-1: USB disconnect, device number 41 [ 157.591347][ T40] audit: type=1400 audit(1773413750.663:30973): avc: denied { connect } for pid=13039 comm="syz.4.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 157.600935][ T40] audit: type=1400 audit(1773413750.683:30974): avc: denied { write } for pid=13039 comm="syz.4.2233" path="socket:[43335]" dev="sockfs" ino=43335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 157.651077][T13047] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2235'. [ 157.668911][ T40] audit: type=1400 audit(1773413750.753:30975): avc: denied { setcurrent } for pid=13035 comm="syz.0.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 157.692313][ T40] audit: type=1400 audit(1773413750.773:30976): avc: denied { map } for pid=13049 comm="syz.4.2236" path="socket:[44522]" dev="sockfs" ino=44522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 157.699965][ T40] audit: type=1400 audit(1773413750.773:30977): avc: denied { read } for pid=13049 comm="syz.4.2236" path="socket:[44522]" dev="sockfs" ino=44522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 157.705265][T13045] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 157.707666][ T40] audit: type=1400 audit(1773413750.773:30978): avc: denied { ioctl } for pid=13049 comm="syz.4.2236" path="socket:[44522]" dev="sockfs" ino=44522 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 157.748660][T13045] input: syz0 as /devices/virtual/input/input22 [ 157.755035][ T40] audit: type=1400 audit(1773413750.843:30979): avc: denied { read } for pid=5319 comm="acpid" name="event4" dev="devtmpfs" ino=3219 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.883136][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2240'. [ 157.943163][T13073] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2244'. [ 158.048261][T13013] ceph: No mds server is up or the cluster is laggy [ 158.052122][T13023] ceph: No mds server is up or the cluster is laggy [ 158.278656][T13091] 9p: Bad value for 'rfdno' [ 158.300172][T13091] SELinux: failed to load policy [ 158.345835][T13095] syzkaller0: entered promiscuous mode [ 158.348102][T13095] syzkaller0: entered allmulticast mode [ 158.351881][T13095] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 158.355325][T13095] sctp: [Deprecated]: syz.2.2252 (pid 13095) Use of int in maxseg socket option. [ 158.355325][T13095] Use struct sctp_assoc_value instead [ 158.419998][T13095] sd 0:0:0:0: PR command failed: 1026 [ 158.420135][T13100] validate_nla: 35 callbacks suppressed [ 158.420146][T13100] netlink: 'syz.1.2254': attribute type 4 has an invalid length. [ 158.422000][T13095] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 158.423906][T13100] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2254'. [ 158.426696][T13095] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 158.436326][T13095] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2252'. [ 158.492132][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'. [ 158.815168][T13134] 9p: Bad value for 'rfdno' [ 158.821692][ T6010] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 158.847549][T13141] netlink: zone id is out of range [ 158.849391][T13141] netlink: zone id is out of range [ 158.851277][T13141] netlink: zone id is out of range [ 158.853050][T13141] netlink: zone id is out of range [ 158.854747][T13141] netlink: zone id is out of range [ 158.856552][T13141] netlink: zone id is out of range [ 158.858270][T13141] netlink: zone id is out of range [ 158.860057][T13141] netlink: zone id is out of range [ 158.864783][T13141] netlink: zone id is out of range [ 158.866527][T13141] netlink: zone id is out of range [ 158.982396][ T6010] usb 9-1: config 0 has no interfaces? [ 158.984310][ T6010] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 158.987362][ T6010] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.992866][ T6010] usb 9-1: config 0 descriptor?? [ 159.180822][ T1326] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 159.201851][ T6010] usb 9-1: USB disconnect, device number 7 [ 159.342154][ T1326] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.345904][ T1326] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 159.349832][ T1326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 159.353593][ T1326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 99, setting to 64 [ 159.357213][ T1326] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.363251][ T1326] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 159.366431][ T1326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.369161][ T1326] usb 5-1: Product: syz [ 159.370696][ T1326] usb 5-1: Manufacturer: syz [ 159.372390][ T1326] usb 5-1: SerialNumber: syz [ 159.375859][ T1326] usb 5-1: config 0 descriptor?? [ 159.378155][T13146] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 159.384552][ T1326] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input23 [ 159.451494][ T6016] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 159.585472][T13143] raw_sendmsg: syz.0.2270 forgot to set AF_INET. Fix it! [ 159.600673][ T6012] usb 5-1: USB disconnect, device number 19 [ 159.607322][ T6016] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 159.611667][ T6016] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.615182][ T6016] usb 6-1: Product: syz [ 159.617054][ T6016] usb 6-1: Manufacturer: syz [ 159.619084][ T6016] usb 6-1: SerialNumber: syz [ 159.755082][T13152] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 159.758546][T13152] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 159.761763][T13152] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 159.765113][T13152] UDF-fs: Scanning with blocksize 512 failed [ 159.767828][T13152] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 159.771318][T13152] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 159.774498][T13152] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 159.777011][T13152] UDF-fs: Scanning with blocksize 1024 failed [ 159.779293][T13152] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 159.784191][T13152] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 159.787255][T13152] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 159.789678][T13152] UDF-fs: Scanning with blocksize 2048 failed [ 159.792052][T13152] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 159.795209][T13152] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 159.798530][T13152] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 159.801263][T13152] UDF-fs: Scanning with blocksize 4096 failed [ 159.803352][T13152] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 159.852197][T13165] NILFS (loop2): device size too small [ 159.854544][T13165] NILFS (loop2): device size too small [ 159.856731][T13165] NILFS (loop2): device size too small [ 159.858894][T13165] NILFS (loop2): device size too small [ 159.861279][T13165] NILFS (loop2): device size too small [ 159.863450][T13165] NILFS (loop2): device size too small [ 159.866519][T13165] NILFS (loop2): device size too small [ 159.868747][T13165] NILFS (loop2): device size too small [ 159.939716][T13170] Cannot find set identified by id 3 to match [ 160.030644][T13148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.035421][T13148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.040409][ T6016] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 160.044930][ T6016] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 160.049491][ T6016] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 160.057194][ T6016] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 160.062743][ T6016] usb 6-1: USB disconnect, device number 42 [ 160.080828][ T1334] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 160.157214][T13189] bond0: Removing last ns target with arp_interval on [ 160.190235][T13200] overlay: Bad value for 'workdir' [ 160.254266][ T1334] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 160.257083][ T1334] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.261197][ T1334] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 160.267683][ T1334] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.274907][ T1334] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 160.278040][ T1334] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 160.280652][ T1334] usb 9-1: Product: syz [ 160.283400][ T1334] usb 9-1: Manufacturer: syz [ 160.289287][ T1334] cdc_wdm 9-1:1.0: skipping garbage [ 160.291495][ T1334] cdc_wdm 9-1:1.0: skipping garbage [ 160.294119][ T1334] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 160.296133][ T1334] cdc_wdm 9-1:1.0: Unknown control protocol [ 160.305499][T13214] can0: slcan on ttynull. [ 160.374924][T13213] can0 (unregistered): slcan off ttynull. [ 160.492805][ T9] usb 9-1: USB disconnect, device number 8 [ 160.581688][T13243] bond0: entered allmulticast mode [ 160.665881][T13253] input: syz0 as /devices/virtual/input/input24 [ 160.681231][T13255] Cannot find set identified by id 3 to match [ 160.700852][ T5992] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 160.860883][ T5992] usb 5-1: Using ep0 maxpacket: 8 [ 160.863796][ T5992] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 160.866505][ T5992] usb 5-1: config 0 has no interface number 0 [ 160.868718][ T5992] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.872716][ T5992] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 160.875644][ T5992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.880084][ T5992] usb 5-1: config 0 descriptor?? [ 160.885300][ T5992] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 160.931050][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 161.082048][ T10] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.084964][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.088234][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.091260][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.095836][ T10] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.098878][ T10] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.101542][ T10] usb 9-1: Product: syz [ 161.102956][ T10] usb 9-1: Manufacturer: syz [ 161.105469][ T1334] usb 5-1: USB disconnect, device number 20 [ 161.108584][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 161.113794][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 161.116781][ T10] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device [ 161.119436][ T10] cdc_wdm 9-1:1.0: Unknown control protocol [ 161.611165][T13274] erspan1: entered promiscuous mode [ 161.613225][T13274] erspan1: entered allmulticast mode [ 161.924649][ T1334] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 162.080835][ T1334] usb 6-1: Using ep0 maxpacket: 8 [ 162.083662][ T1334] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 162.087265][ T1334] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 162.090590][ T1334] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.093892][ T1334] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.097927][ T1334] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 162.101288][ T1334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.307975][ T1334] usb 6-1: usb_control_msg returned -32 [ 162.309924][ T1334] usbtmc 6-1:16.0: can't read capabilities [ 162.691333][ T6012] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 162.693930][ T6012] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 162.701383][ T5934] Bluetooth: hci4: command 0x0405 tx timeout [ 162.714435][T13284] __nla_validate_parse: 8 callbacks suppressed [ 162.714445][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2308'. [ 162.714958][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 162.714967][ T40] audit: type=1400 audit(1773413755.803:31028): avc: denied { shutdown } for pid=13276 comm="syz.1.2308" lport=42732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 162.716577][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2308'. [ 162.731245][ T40] audit: type=1400 audit(1773413755.803:31029): avc: denied { read } for pid=13276 comm="syz.1.2308" lport=42732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 162.737677][ T40] audit: type=1400 audit(1773413755.803:31030): avc: denied { accept } for pid=13276 comm="syz.1.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 162.764701][T13287] Cannot find set identified by id 3 to match [ 162.915564][ T40] audit: type=1400 audit(1773413756.003:31031): avc: denied { mount } for pid=13313 comm="syz.2.2319" name="/" dev="ramfs" ino=45029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 162.922809][ T40] audit: type=1400 audit(1773413756.003:31032): avc: denied { create } for pid=13313 comm="syz.2.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 162.926026][T13314] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 162.931079][ T40] audit: type=1400 audit(1773413756.013:31033): avc: denied { write } for pid=13313 comm="syz.2.2319" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 162.932137][T13314] overlayfs: failed to set xattr on upper [ 162.940434][ T40] audit: type=1400 audit(1773413756.013:31034): avc: denied { mounton } for pid=13313 comm="syz.2.2319" path="/bus" dev="ramfs" ino=45031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 162.941345][T13314] overlayfs: ...falling back to redirect_dir=nofollow. [ 162.941353][T13314] overlayfs: ...falling back to index=off. [ 162.941357][T13314] overlayfs: ...falling back to uuid=null. [ 162.941362][T13314] overlayfs: ...falling back to xino=off. [ 162.941509][T13314] overlayfs: conflicting lowerdir path [ 162.955295][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2320'. [ 163.079305][ T6016] usb 9-1: USB disconnect, device number 9 [ 163.186232][T13338] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2325'. [ 163.278277][T13344] bond7: option downdelay: invalid value (18446744073709551615) [ 163.280968][T13344] bond7: option downdelay: allowed values 0 - 2147483647 [ 163.284014][T13344] bond7 (unregistering): Released all slaves [ 163.310125][T13348] loop2: detected capacity change from 0 to 3 [ 163.315126][T13348] Dev loop2: unable to read RDB block 3 [ 163.317055][T13348] loop2: unable to read partition table [ 163.319607][T13348] loop2: partition table beyond EOD, truncated [ 163.325173][T13348] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 163.354645][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2330'. [ 163.453910][T13361] Cannot find set identified by id 3 to match [ 163.460382][ T40] audit: type=1400 audit(1773413756.543:31035): avc: denied { execute } for pid=13353 comm="syz.0.2331" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=45603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 163.541166][T13370] binder: BINDER_SET_CONTEXT_MGR already set [ 163.543421][T13370] binder: 13369:13370 ioctl 4018620d 200000000040 returned -16 [ 163.562535][T13370] tipc: Can't bind to reserved service type 2 [ 163.591987][T13374] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2337'. [ 163.731121][ T29] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 163.780843][ T40] audit: type=1400 audit(1773413756.843:31036): avc: denied { create } for pid=13385 comm="syz.0.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 163.788007][ T40] audit: type=1400 audit(1773413756.843:31037): avc: denied { write } for pid=13385 comm="syz.0.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 163.858713][T13396] overlayfs: failed to get inode (-116) [ 163.862689][T13396] overlayfs: failed to get inode (-116) [ 163.882055][ T29] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.886227][ T29] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.889850][ T29] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.893341][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.897095][T13398] Cannot find add_set index 0 as target [ 163.898225][ T29] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.902256][ T29] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.904986][ T29] usb 9-1: Product: syz [ 163.906441][ T29] usb 9-1: Manufacturer: syz [ 163.917062][ T29] cdc_wdm 9-1:1.0: skipping garbage [ 163.919275][ T29] cdc_wdm 9-1:1.0: skipping garbage [ 163.924684][ T29] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device [ 163.926688][ T29] cdc_wdm 9-1:1.0: Unknown control protocol [ 164.030221][T13408] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 164.030221][T13408] program syz.2.2347 not setting count and/or reply_len properly [ 164.036399][T13408] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 164.056525][T13415] netlink: 'syz.0.2348': attribute type 11 has an invalid length. [ 164.061493][T13415] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2348'. [ 164.116172][ T29] usb 9-1: USB disconnect, device number 10 [ 164.191124][T13423] Bluetooth: hci2: Frame reassembly failed (-84) [ 164.193980][ T12] Bluetooth: hci2: Frame reassembly failed (-84) [ 164.196987][ T6561] Bluetooth: hci2: Frame reassembly failed (-84) [ 164.199086][T13423] netlink: 'syz.0.2351': attribute type 3 has an invalid length. [ 164.202446][T13423] netlink: 'syz.0.2351': attribute type 1 has an invalid length. [ 164.205045][T13423] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2351'. [ 164.208099][T13423] NCSI netlink: No device for ifindex 0 [ 164.308780][T13431] Cannot find set identified by id 3 to match [ 164.693389][ T1334] usb 6-1: USB disconnect, device number 43 [ 164.872273][T13466] netlink: 'syz.2.2365': attribute type 21 has an invalid length. [ 164.875008][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2365'. [ 164.882996][ T6561] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.885821][T13466] netlink: 'syz.2.2365': attribute type 21 has an invalid length. [ 164.886017][ T6561] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.889042][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2365'. [ 164.892059][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.897709][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.976200][T13474] netlink: 'syz.2.2366': attribute type 20 has an invalid length. [ 164.978769][T13474] netlink: 'syz.2.2366': attribute type 20 has an invalid length. [ 165.349892][T13497] Cannot find set identified by id 3 to match [ 165.413399][T13509] netlink: 'syz.4.2378': attribute type 2 has an invalid length. [ 165.470782][T13513] xt_CT: No such helper "snmp_trap" [ 165.478058][T13513] Invalid source name [ 165.479800][T13513] UBIFS error (pid: 13513): cannot open "/dev/sg0", error -22 [ 165.557658][T13526] netlink: 'syz.4.2383': attribute type 1 has an invalid length. [ 165.582597][T13526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.588755][T13526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13526 comm=syz.4.2383 [ 165.597744][T13526] bond1: (slave ip6erspan0): making interface the new active one [ 165.600659][T13526] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 165.655919][T13536] Cannot find set identified by id 3 to match [ 165.681561][T13540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=13540 comm=syz.4.2388 [ 165.686151][T13540] IPv6: NLM_F_CREATE should be specified when creating new route [ 165.689347][T13540] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 165.703286][T13540] bond2: entered promiscuous mode [ 165.705187][T13540] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.712502][T13540] netlink: 'syz.4.2388': attribute type 7 has an invalid length. [ 165.723783][T13543] usb usb8: usbfs: process 13543 (syz.1.2389) did not claim interface 0 before use [ 165.969380][T13560] trusted_key: encrypted_key: keylen parameter is missing [ 166.070893][ T6016] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 166.167999][T13570] Cannot find set identified by id 3 to match [ 166.200867][ T6016] usb 6-1: device descriptor read/64, error -71 [ 166.211048][ T5934] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 166.211072][ T5935] Bluetooth: hci2: command 0x1003 tx timeout [ 166.291271][T13587] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.418148][T13603] Cannot find add_set index 0 as target [ 166.460872][ T6016] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 166.600844][ T6016] usb 6-1: device descriptor read/64, error -71 [ 166.680953][ T6012] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 166.711094][ T6016] usb usb6-port1: attempt power cycle [ 166.833646][ T6012] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.842039][ T6012] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 166.846142][ T6012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 166.849788][ T6012] usb 5-1: Product: syz [ 166.851865][ T6012] usb 5-1: Manufacturer: syz [ 166.853952][ T6012] usb 5-1: SerialNumber: syz [ 167.050868][ T6016] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 167.064792][ T6012] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 167.071268][ T6016] usb 6-1: device descriptor read/8, error -71 [ 167.330985][ T6016] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 167.351623][ T6016] usb 6-1: device descriptor read/8, error -71 [ 167.461229][ T6016] usb usb6-port1: unable to enumerate USB device [ 167.662161][ T6016] usb 5-1: USB disconnect, device number 21 [ 167.666791][ T6016] usblp0: removed [ 167.840903][ T10] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 168.012789][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.016673][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 168.021759][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 179, setting to 64 [ 168.028213][ T10] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 168.032320][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.035670][ T10] usb 9-1: Product: syz [ 168.037589][ T10] usb 9-1: Manufacturer: syz [ 168.039634][ T10] usb 9-1: SerialNumber: syz [ 168.044715][ T10] usb 9-1: config 0 descriptor?? [ 168.047698][T13628] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 168.110428][T13636] __nla_validate_parse: 10 callbacks suppressed [ 168.110440][T13636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2420'. [ 168.151063][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 168.151079][ T40] audit: type=1400 audit(1773414017.252:31072): avc: denied { write } for pid=13637 comm="syz.2.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 168.161821][ T40] audit: type=1400 audit(1773414017.262:31073): avc: denied { map } for pid=13637 comm="syz.2.2421" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 168.172077][ T40] audit: type=1400 audit(1773414017.262:31074): avc: denied { execute } for pid=13637 comm="syz.2.2421" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 168.203682][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2422'. [ 168.206668][T13643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2422'. [ 168.209647][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2422'. [ 168.213967][T13643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2422'. [ 168.231790][T13647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2421'. [ 168.445461][T13653] tmpfs: Invalid gid '0x00000000ffffffff' [ 168.570632][ T40] audit: type=1400 audit(1773414017.662:31075): avc: denied { execute } for pid=13656 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 168.578343][ T40] audit: type=1400 audit(1773414017.672:31076): avc: denied { execute_no_trans } for pid=13656 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 168.639964][ T5935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.645230][ T5935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.649515][ T5935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.653131][ T5935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.656434][ T5935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.668537][ T5934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.671793][ T5934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.674368][ T5934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.681995][ T5934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.685245][ T5934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.690306][ T40] audit: type=1400 audit(1773414017.782:31077): avc: denied { mounton } for pid=13658 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 168.730025][T13658] lo speed is unknown, defaulting to 1000 [ 168.838457][T13658] chnl_net:caif_netlink_parms(): no params data found [ 168.856529][T13666] overlayfs: failed to resolve './file7': -2 [ 168.899313][T13658] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.901966][T13658] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.904370][T13658] bridge_slave_0: entered allmulticast mode [ 168.907095][T13658] bridge_slave_0: entered promiscuous mode [ 168.910309][T13658] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.912843][T13658] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.915209][T13658] bridge_slave_1: entered allmulticast mode [ 168.917955][T13658] bridge_slave_1: entered promiscuous mode [ 168.935523][T13658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.940109][T13658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.962058][T13658] team0: Port device team_slave_0 added [ 168.965559][T13658] team0: Port device team_slave_1 added [ 168.972225][T13679] loop4: detected capacity change from 0 to 7 [ 168.974965][T13679] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.977578][T13679] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.980151][T13679] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.980504][T13658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.982893][T13679] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.985936][T13658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.987535][T13679] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.987559][T13679] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.996414][T13658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.998421][T13679] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.998432][T13679] ldm_validate_partition_table(): Disk read failed. [ 168.998446][T13679] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.998460][T13679] Buffer I/O error on dev loop4, logical block 0, async page read [ 169.002210][T13658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.004940][T13679] Buffer I/O error on dev loop4, logical block 0, async page read [ 169.004959][T13679] Dev loop4: unable to read RDB block 0 [ 169.007549][T13658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.009698][T13679] loop4: unable to read partition table [ 169.012338][T13658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.015050][T13679] loop4: partition table beyond EOD, [ 169.035061][T13680] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2428'. [ 169.036301][T13679] truncated [ 169.038462][T13658] hsr_slave_0: entered promiscuous mode [ 169.041054][T13679] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 169.049026][T13658] hsr_slave_1: entered promiscuous mode [ 169.051338][T13658] debugfs: 'hsr0' already exists in 'hsr' [ 169.053217][T13658] Cannot create hsr debugfs directory [ 169.055652][T13680] macvtap0: entered allmulticast mode [ 169.057467][T13680] veth0_macvtap: entered allmulticast mode [ 169.060091][T13680] net_ratelimit: 49 callbacks suppressed [ 169.060099][T13680] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 169.153651][T13688] Cannot find add_set index 0 as target [ 169.168984][T13686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2431'. [ 169.179717][T13658] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.184081][T13658] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.192065][T13685] tipc: Started in network mode [ 169.193845][T13685] tipc: Node identity fe80000000000000000000000000001f, cluster identity 4711 [ 169.197662][T13685] tipc: Enabling of bearer rejected, failed to enable media [ 169.202724][ T40] audit: type=1400 audit(1773414018.302:31078): avc: denied { read } for pid=13684 comm="syz.1.2431" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 169.238960][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2434'. [ 169.244634][T13697] validate_nla: 3 callbacks suppressed [ 169.244644][T13697] netlink: 'syz.0.2434': attribute type 9 has an invalid length. [ 169.250095][T13697] netlink: 47 bytes leftover after parsing attributes in process `syz.0.2434'. [ 169.268136][T13658] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.271619][T13658] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.344268][T13658] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.347590][T13658] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.353444][T13703] netlink: 'syz.0.2436': attribute type 3 has an invalid length. [ 169.365214][ T40] audit: type=1400 audit(1773414018.462:31079): avc: denied { ioctl } for pid=13704 comm="syz.1.2437" path="socket:[46816]" dev="sockfs" ino=46816 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 169.415245][T13658] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.418404][T13658] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.453349][T13719] netlink: 'syz.0.2442': attribute type 89 has an invalid length. [ 169.474383][T13722] Cannot find set identified by id 3 to match [ 169.499265][T13727] netlink: 'syz.0.2446': attribute type 3 has an invalid length. [ 169.530601][T13730] binder: 13729:13730 ioctl 4018620d 0 returned -22 [ 169.545750][T13658] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 169.550332][T13658] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 169.554749][T13658] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 169.558966][T13658] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 169.571944][ T40] audit: type=1400 audit(1773414018.672:31080): avc: denied { name_connect } for pid=13729 comm="syz.0.2447" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 169.573962][T13658] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.582518][T13658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.585002][T13658] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.587328][T13658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.592032][T13730] binder: 13729:13730 ioctl 4018620d 0 returned -22 [ 169.624146][T13658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.632504][ T6565] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.635810][ T6565] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.644063][ T40] audit: type=1400 audit(1773414018.742:31081): avc: denied { append } for pid=13738 comm="syz.0.2448" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 169.646659][T13739] program syz.0.2448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.658421][T13658] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.670606][ T1189] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.673036][ T1189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.684551][ T6565] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.686879][ T6565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.766176][T13757] Cannot find set identified by id 3 to match [ 169.789842][T13658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.795540][T13760] input: syz0 as /devices/virtual/input/input26 [ 169.824252][T13658] veth0_vlan: entered promiscuous mode [ 169.829781][T13658] veth1_vlan: entered promiscuous mode [ 169.854252][T13658] veth0_macvtap: entered promiscuous mode [ 169.858941][T13658] veth1_macvtap: entered promiscuous mode [ 169.867372][T13658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.876154][T13658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.882376][ T6561] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.887619][ T6561] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.892563][ T6561] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.896606][ T6561] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.938816][ T6564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.942585][ T6564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.959430][ T6564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.962623][ T6564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.291135][ T1334] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 170.357472][T13799] CUSE: unknown device info "ý<±5æç—‘ë\áïð«ºzöŒ0z,~XY©+A}sÎ…F'%ÓËó:„Ij!ó@Q…åmß‘RÞúGQãò––q 6*³5p)ÙxÙ?," [ 170.374332][T13799] CUSE: unknown device info "ÿŽ&b¬í%Z‰ñWú«)«×3\my­ åû" [ 170.377363][T13799] CUSE: unknown device info "Ò­Sû‡¨‚¨«€ýmMÀiÊ_¿Ä0˱°Ý¯;qÈ]Â{ìi¹ë79ñ©{Ò0Ôµßt•º~ø±>V¤ûÞÂZÀ\.9êÁOC‡«®U™&†qÿ…±Ïmsfûkž½cêð±"" [ 170.383042][T13799] CUSE: DEVNAME unspecified [ 170.439644][T13812] netlink: 'syz.1.2472': attribute type 16 has an invalid length. [ 170.446096][T13812] veth1_macvtap: entered allmulticast mode [ 170.453497][ T1334] usb 7-1: Using ep0 maxpacket: 32 [ 170.460490][ T1334] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 170.465452][ T1334] usb 7-1: config 0 has no interface number 0 [ 170.467492][ T1334] usb 7-1: too many endpoints for config 0 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 170.471388][ T1334] usb 7-1: config 0 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 170.475656][ T1334] usb 7-1: config 0 interface 1 has no altsetting 0 [ 170.479539][ T1334] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 170.483351][ T1334] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.486163][ T1334] usb 7-1: Product: syz [ 170.487904][ T1334] usb 7-1: Manufacturer: syz [ 170.489530][ T1334] usb 7-1: SerialNumber: syz [ 170.493300][ T1334] usb 7-1: config 0 descriptor?? [ 170.675179][ T10] usb 9-1: USB disconnect, device number 11 [ 170.745288][ T1334] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 170.749099][ T1334] usb 7-1: selecting invalid altsetting 1 [ 170.752652][ T1334] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 170.761155][ T1334] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 170.765666][ T1334] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 170.769756][ T1334] usb 7-1: media controller created [ 170.773157][ T5934] Bluetooth: hci2: command tx timeout [ 170.781514][ T1334] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.805268][T13842] netlink: 'syz.0.2483': attribute type 3 has an invalid length. [ 170.811241][ T1334] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 170.813611][ T1334] zl10353_read_register: readreg error (reg=127, ret==-71) [ 170.816119][ T1334] usb 7-1: selecting invalid altsetting 0 [ 170.818072][ T1334] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 170.840327][ T1334] usb 7-1: USB disconnect, device number 41 [ 171.391119][T13867] netlink: 'syz.1.2493': attribute type 3 has an invalid length. [ 171.731396][T13891] netlink: 'syz.2.2502': attribute type 9 has an invalid length. [ 171.766750][T13896] loop6: detected capacity change from 0 to 524287999 [ 171.769374][T13896] ldm_validate_partition_table(): Disk read failed. [ 171.773178][T13896] Dev loop6: unable to read RDB block 0 [ 171.775218][T13896] loop6: unable to read partition table [ 171.777160][T13896] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 171.831773][ T5928] ldm_validate_partition_table(): Disk read failed. [ 171.834010][ T5928] Dev loop6: unable to read RDB block 0 [ 171.835916][ T5928] loop6: unable to read partition table [ 171.842634][T13896] ldm_validate_partition_table(): Disk read failed. [ 171.844938][T13896] Dev loop6: unable to read RDB block 0 [ 171.846818][T13896] loop6: unable to read partition table [ 171.849045][T13896] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 172.330589][T13950] Cannot find add_set index 0 as target [ 172.356093][T13952] netlink: 'syz.1.2522': attribute type 1 has an invalid length. [ 172.374631][T13956] overlayfs: failed to resolve './file1/file0': -2 [ 172.393894][T13960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.423539][T13962] sg_write: data in/out 808464396/14 bytes for SCSI command 0x0-- guessing data in; [ 172.423539][T13962] program syz.2.2526 not setting count and/or reply_len properly [ 172.474761][T13967] netlink: 'syz.0.2528': attribute type 1 has an invalid length. [ 172.573878][T13975] openvswitch: netlink: Missing valid actions attribute. [ 172.576161][T13975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.620517][T13980] syzkaller0: entered promiscuous mode [ 172.622703][T13980] syzkaller0: entered allmulticast mode [ 172.642054][T13986] Cannot find set identified by id 3 to match [ 172.670116][T13989] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 172.851183][ T5934] Bluetooth: hci2: command tx timeout [ 173.753948][T14017] Cannot find add_set index 0 as target [ 173.774670][T14023] PKCS8: Unsupported PKCS#8 version [ 173.777942][T14023] bridge_slave_1: default FDB implementation only supports local addresses [ 173.785218][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 173.785228][ T40] audit: type=1400 audit(1773414022.882:31098): avc: denied { setattr } for pid=14018 comm="syz.2.2543" name="file1" dev="9p" ino=72614007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.801732][ T40] audit: type=1400 audit(1773414022.882:31099): avc: denied { sqpoll } for pid=14025 comm="syz.0.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 173.828127][T14024] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 173.843391][T14023] overlayfs: statfs failed on './file0' [ 173.966017][T14039] lo speed is unknown, defaulting to 1000 [ 174.062542][T14045] __nla_validate_parse: 18 callbacks suppressed [ 174.062553][T14045] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2549'. [ 174.083982][ T40] audit: type=1400 audit(1773414023.182:31100): avc: denied { create } for pid=14046 comm="syz.2.2548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 174.090091][ T40] audit: type=1400 audit(1773414023.182:31101): avc: denied { ioctl } for pid=14046 comm="syz.2.2548" path="socket:[50552]" dev="sockfs" ino=50552 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 174.098265][ T40] audit: type=1400 audit(1773414023.182:31102): avc: denied { lock } for pid=14046 comm="syz.2.2548" path="socket:[50552]" dev="sockfs" ino=50552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 174.470694][T14065] vlan0: entered allmulticast mode [ 174.472536][T14065] veth0_vlan: entered allmulticast mode [ 174.503386][ T40] audit: type=1400 audit(1773414023.602:31103): avc: denied { getopt } for pid=14068 comm="syz.4.2557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 174.549292][T14074] netlink: 'syz.2.2559': attribute type 3 has an invalid length. [ 174.722642][ T40] audit: type=1400 audit(1773414023.822:31104): avc: denied { write } for pid=14101 comm="syz.0.2569" path="socket:[51597]" dev="sockfs" ino=51597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 174.732087][ T40] audit: type=1400 audit(1773414023.822:31105): avc: denied { read } for pid=14101 comm="syz.0.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 174.776336][T14109] netlink: 'syz.1.2571': attribute type 3 has an invalid length. [ 174.804328][T14113] Cannot find set identified by id 3 to match [ 175.124981][ T40] audit: type=1400 audit(1773414024.222:31106): avc: denied { getopt } for pid=14132 comm="syz.2.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.305706][ T40] audit: type=1400 audit(1773414024.402:31107): avc: denied { map } for pid=14155 comm="syz.2.2585" path="/dev/video4" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 175.403511][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2588'. [ 175.634688][T14177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2593'. [ 175.747997][T14194] netlink: 'syz.0.2599': attribute type 3 has an invalid length. [ 175.750559][T14194] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2599'. [ 176.117982][T14220] program syz.0.2606 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.209116][T14228] netlink: 'syz.0.2609': attribute type 3 has an invalid length. [ 176.213293][T14228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2609'. [ 176.474776][ T10] Process accounting resumed [ 176.477576][T14251] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 176.611071][ T34] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 176.645699][T14252] Process accounting resumed [ 176.703915][T14256] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 176.713785][T14258] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2620'. [ 176.770857][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 176.774031][ T34] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 176.776831][ T34] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 176.779549][ T34] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 176.783866][ T34] usb 7-1: config 250 has no interface number 0 [ 176.785869][ T34] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 176.789461][ T34] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 176.803065][ T34] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.806428][ T34] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 176.809666][ T34] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 176.814457][ T34] usb 7-1: config 250 interface 228 has no altsetting 0 [ 176.821177][ T34] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 176.824722][ T34] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 176.827373][ T34] usb 7-1: Product: syz [ 176.829899][ T34] usb 7-1: SerialNumber: syz [ 176.836884][ T34] hub 7-1:250.228: bad descriptor, ignoring hub [ 176.839014][ T34] hub 7-1:250.228: probe with driver hub failed with error -5 [ 176.919987][T14278] loop3: detected capacity change from 0 to 4096 [ 176.964319][T14278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2627'. [ 177.054265][T14283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2629'. [ 177.102939][ T34] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 42 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 177.131195][ T34] usb 7-1: USB disconnect, device number 42 [ 177.134724][ T34] usblp0: removed [ 177.161205][T14297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2629'. [ 177.164094][T14297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2629'. [ 177.172244][T14297] erspan0: entered promiscuous mode [ 177.491067][ T5934] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 177.494275][ T5934] Bluetooth: hci2: Injecting HCI hardware error event [ 177.497761][ T5934] Bluetooth: hci2: hardware error 0x00 [ 177.510833][ T6010] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 177.620848][ T34] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 177.672936][ T6010] usb 5-1: Using ep0 maxpacket: 32 [ 177.675805][ T6010] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 177.679440][ T6010] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.683604][ T6010] usb 5-1: config 1 interface 0 has no altsetting 0 [ 177.689447][ T6010] usb 5-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.40 [ 177.692992][ T6010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.695621][ T6010] usb 5-1: Product: syz [ 177.697008][ T6010] usb 5-1: Manufacturer: ጠ[ 177.698592][ T6010] usb 5-1: SerialNumber: syz [ 177.751521][ T34] usb 7-1: device descriptor read/64, error -71 [ 177.916961][ T6010] usbhid 5-1:1.0: can't add hid device: -71 [ 177.918917][ T6010] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 177.923908][ T6010] usb 5-1: USB disconnect, device number 22 [ 177.933405][T14342] nfs: Unknown parameter 'nofsc ' [ 177.990842][ T34] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 178.008037][T14349] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 178.011157][T14349] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 178.014575][T14349] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 178.016953][T14349] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 178.044658][T14352] befs: (nullb0): No write support. Marking filesystem read-only [ 178.049687][T14352] befs: (nullb0): invalid magic header [ 178.140851][ T34] usb 7-1: device descriptor read/64, error -71 [ 178.221341][ T6010] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 178.251371][ T34] usb usb7-port1: attempt power cycle [ 178.308717][T14369] binder: 14368:14369 ioctl 40045407 0 returned -22 [ 178.371782][ T6010] usb 6-1: Using ep0 maxpacket: 8 [ 178.374562][ T6010] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 178.377158][ T6010] usb 6-1: config 179 has no interface number 0 [ 178.379160][ T6010] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 178.382759][ T6010] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 178.386207][ T6010] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 178.389673][ T6010] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 178.393326][ T6010] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 178.397453][ T6010] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 178.401009][ T6010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.406921][T14347] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 178.453529][T14374] sp0: Synchronizing with TNC [ 178.462418][T14378] loop3: detected capacity change from 0 to 4096 [ 178.590888][ T34] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 178.611363][ T34] usb 7-1: device descriptor read/8, error -71 [ 178.625398][ T6010] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input27 [ 178.650809][T14390] netlink: 'syz.4.2660': attribute type 1 has an invalid length. [ 178.655014][T14390] netlink: 'syz.4.2660': attribute type 1 has an invalid length. [ 178.795458][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 178.795530][ T40] audit: type=1400 audit(1773414027.892:31122): avc: denied { map } for pid=14405 comm="syz.4.2666" path="socket:[52103]" dev="sockfs" ino=52103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 178.850922][ T34] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 178.858666][T14410] netlink: 'syz.4.2668': attribute type 17 has an invalid length. [ 178.862058][T14410] macvtap0: entered allmulticast mode [ 178.864270][T14410] veth0_macvtap: entered allmulticast mode [ 178.867404][T14410] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 178.871579][ T34] usb 7-1: device descriptor read/8, error -71 [ 178.940050][ T6564] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 178.981446][ T34] usb usb7-port1: unable to enumerate USB device [ 179.180809][ T6010] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 179.334488][ T6010] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 179.338256][ T6010] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.341527][ T6010] usb 9-1: config 0 interface 0 has no altsetting 0 [ 179.343741][ T6010] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 179.346732][ T6010] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.351573][ T6010] usb 9-1: config 0 descriptor?? [ 179.571208][ T5934] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 179.763741][ T6010] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 179.766279][ T6010] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 179.772138][ T6010] hid-steam 0003:28DE:1102.0008: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 179.831398][ T6010] hid-steam 0003:28DE:1102.0008: Steam Controller 'XXXXXXXXXX' connected [ 179.844946][ T6010] input: Steam Controller as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:28DE:1102.0008/input/input28 [ 179.868310][ T6010] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 179.872542][ T6010] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 179.888069][ T6010] hid-steam 0003:28DE:1102.0009: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 180.228658][T14418] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 180.977516][ T40] audit: type=1326 audit(1773414030.072:31123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.1.2646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536459c799 code=0x7fc00000 [ 181.021776][ T6010] usb 9-1: reset full-speed USB device number 12 using dummy_hcd [ 181.856166][T14410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.892983][ T6016] usb 6-1: USB disconnect, device number 48 [ 181.893017][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 181.898393][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 181.927186][T14434] __nla_validate_parse: 13 callbacks suppressed [ 181.927198][T14434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2674'. [ 181.940901][T14434] nfs: Unknown parameter 'nofsc ' [ 181.978685][T14444] Cannot find set identified by id 3 to match [ 181.996635][ T40] audit: type=1400 audit(1773414031.092:31124): avc: denied { remount } for pid=14447 comm="syz.4.2681" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 182.034082][ T40] audit: type=1400 audit(1773414031.132:31125): avc: denied { create } for pid=14458 comm="syz.4.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 182.034435][T14449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19472 sclass=netlink_route_socket pid=14449 comm=syz.2.2680 [ 182.040977][ T40] audit: type=1400 audit(1773414031.132:31126): avc: denied { ioctl } for pid=14458 comm="syz.4.2683" path="socket:[52151]" dev="sockfs" ino=52151 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 182.040985][T14459] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 182.060083][T14461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2684'. [ 182.126443][T14471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2689'. [ 182.143449][T14471] nfs: Unknown parameter 'nofsc ' [ 182.144483][T14469] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 182.228992][T14497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2696'. [ 182.249654][T14501] netlink: 'syz.2.2699': attribute type 12 has an invalid length. [ 182.253219][T14501] netlink: 'syz.2.2699': attribute type 29 has an invalid length. [ 182.256132][T14501] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2699'. [ 182.260307][T14501] netlink: 59 bytes leftover after parsing attributes in process `syz.2.2699'. [ 182.263141][T14503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2701'. [ 182.270007][T14503] nfs: Unknown parameter 'nofsc ' [ 182.302280][T14510] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2702'. [ 182.347121][T14520] netlink: 'syz.2.2704': attribute type 7 has an invalid length. [ 182.428669][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2708'. [ 182.479401][ T40] audit: type=1400 audit(1773414031.572:31127): avc: denied { append } for pid=14532 comm="syz.0.2710" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 182.506823][ T40] audit: type=1400 audit(1773414031.602:31128): avc: denied { write } for pid=14530 comm="syz.4.2709" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 182.516634][ T40] audit: type=1400 audit(1773414031.602:31129): avc: denied { open } for pid=14530 comm="syz.4.2709" path="/240/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 182.517133][T14531] 0xfffffffffffffffd-0x000000020000 : "" [ 182.526202][ T40] audit: type=1400 audit(1773414031.612:31130): avc: denied { ioctl } for pid=14530 comm="syz.4.2709" path="/240/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 182.537532][T14531] mtd: partition "" is out of reach -- disabled [ 182.564049][T14531] ftl_cs: FTL header not found. [ 182.566829][ T40] audit: type=1400 audit(1773414031.662:31131): avc: denied { read } for pid=14539 comm="syz.0.2713" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 182.657391][T14551] nvme_fabrics: unknown parameter or missing value 'kq' in ctrl creation request [ 182.657530][ T10] usb 9-1: USB disconnect, device number 12 [ 182.696965][ T10] hid-steam 0003:28DE:1102.0008: Steam Controller 'XXXXXXXXXX' disconnected [ 182.876371][T14563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2718'. [ 183.615589][T14615] kvm: MWAIT instruction emulated as NOP! [ 183.620542][T14628] mkiss: ax0: crc mode is auto. [ 183.660118][T14630] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 183.932039][T14666] Cannot find add_set index 0 as target [ 184.342480][ T29] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 184.417957][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 184.417968][ T40] audit: type=1400 audit(1773414033.512:31148): avc: denied { getopt } for pid=14691 comm="syz.1.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.426925][ T40] audit: type=1400 audit(1773414033.512:31149): avc: denied { ioctl } for pid=14691 comm="syz.1.2763" path="socket:[54567]" dev="sockfs" ino=54567 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.490818][T14696] Cannot find set identified by id 3 to match [ 184.490882][ T29] usb 9-1: Using ep0 maxpacket: 16 [ 184.495855][ T29] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 184.499162][ T29] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 184.506794][ T29] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 42869, setting to 1024 [ 184.514952][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 184.521914][ T29] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 184.524875][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.527366][ T29] usb 9-1: Product: syz [ 184.528723][ T29] usb 9-1: Manufacturer: syz [ 184.530292][ T29] usb 9-1: SerialNumber: syz [ 184.533482][ T29] usb 9-1: config 0 descriptor?? [ 184.536211][T14683] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 184.600943][T14700] netlink: 'syz.1.2767': attribute type 10 has an invalid length. [ 184.741145][T14683] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 184.745273][ T29] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input29 [ 184.997434][ T40] audit: type=1400 audit(1773414034.092:31150): avc: denied { read } for pid=14682 comm="syz.4.2760" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.015362][ T9] usb 9-1: USB disconnect, device number 13 [ 185.250898][T14704] tmpfs: Unknown parameter '‰p3'u¤‡§{mpol[' [ 185.298728][T14711] program syz.1.2771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.350091][ T40] audit: type=1400 audit(1773414034.442:31151): avc: denied { relabelfrom } for pid=14717 comm="syz.1.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 185.358040][ T29] IPVS: starting estimator thread 0... [ 185.358071][ T40] audit: type=1400 audit(1773414034.442:31152): avc: denied { relabelto } for pid=14717 comm="syz.1.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 185.378369][T14721] Cannot find add_set index 0 as target [ 185.391989][T14718] ipt_REJECT: ECHOREPLY no longer supported. [ 185.470887][T14719] IPVS: using max 45 ests per chain, 108000 per kthread [ 186.920066][ T40] audit: type=1400 audit(1773414036.012:31153): avc: denied { write } for pid=14786 comm="syz.1.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 186.928629][ T40] audit: type=1400 audit(1773414036.022:31154): avc: denied { read } for pid=14786 comm="syz.1.2792" path="socket:[54215]" dev="sockfs" ino=54215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 187.121578][T14804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.124121][T14804] batadv_slave_0: entered promiscuous mode [ 187.126043][T14804] batadv_slave_0: entered allmulticast mode [ 187.163311][T14810] __nla_validate_parse: 9 callbacks suppressed [ 187.163323][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 187.296170][T14822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2800'. [ 187.299333][T14822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2800'. [ 187.492673][T14843] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 187.493664][T14845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2805'. [ 187.494026][ T40] audit: type=1400 audit(1773414036.592:31155): avc: denied { create } for pid=14842 comm="syz.1.2804" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 187.494880][T14843] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 187.494907][T14843] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 187.562143][ T40] audit: type=1400 audit(1773414036.592:31156): avc: denied { associate } for pid=14842 comm="syz.1.2804" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 187.562405][ T40] audit: type=1400 audit(1773414036.592:31157): avc: denied { mounton } for pid=14842 comm="syz.1.2804" path="/523/file0" dev="tmpfs" ino=2789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 187.797190][T14864] Cannot find set identified by id 3 to match [ 187.809780][T14859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2816'. [ 187.832285][T14859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2816'. [ 187.894649][ T10] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 187.921925][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2815'. [ 188.013189][T14892] Cannot find add_set index 0 as target [ 188.052754][ T10] usb 6-1: config 0 has no interfaces? [ 188.054588][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 188.057554][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.061552][ T10] usb 6-1: config 0 descriptor?? [ 188.271391][ T5933] usb 6-1: USB disconnect, device number 49 [ 188.293419][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2828'. [ 188.353207][T14920] Cannot find set identified by id 3 to match [ 188.375537][T14908] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 188.378057][T14923] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 188.382966][T14908] kvm: pic: non byte read [ 188.387028][T14908] kvm: pic: non byte read [ 188.389513][T14908] kvm: pic: non byte read [ 188.392561][T14908] kvm: pic: non byte read [ 188.395660][T14908] kvm: pic: single mode not supported [ 188.396162][T14908] kvm: pic: non byte read [ 188.403014][T14908] kvm: pic: non byte read [ 188.406012][T14908] kvm: pic: non byte read [ 188.408822][T14908] kvm: pic: non byte read [ 188.412435][T14908] kvm: pic: non byte read [ 188.415151][T14908] kvm: pic: non byte read [ 189.068730][T14946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2839'. [ 189.087342][T14946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2839'. [ 189.096964][T14946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14946 comm=syz.1.2839 [ 189.455938][T14961] siw: device registration error -23 [ 189.500326][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 189.500338][ T40] audit: type=1400 audit(1773414038.592:31165): avc: denied { nlmsg_read } for pid=14967 comm="syz.2.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 189.606250][T14980] overlayfs: missing 'lowerdir' [ 189.752213][T14993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=14993 comm=syz.2.2852 [ 189.999833][T15025] Cannot find set identified by id 3 to match [ 190.068518][T15038] tun0: tun_chr_ioctl cmd 1074025675 [ 190.070325][T15038] tun0: persist disabled [ 190.073305][ T40] audit: type=1400 audit(1773414039.172:31166): avc: denied { getopt } for pid=15037 comm="syz.0.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 190.080389][T15038] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 190.083266][T15038] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 190.088001][T15038] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 190.090028][ T40] audit: type=1400 audit(1773414039.182:31167): avc: denied { firmware_load } for pid=15037 comm="syz.0.2868" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 190.297150][T15063] Cannot find set identified by id 3 to match [ 190.428943][ T40] audit: type=1400 audit(1773414039.522:31168): avc: denied { ioctl } for pid=15073 comm="syz.4.2880" path="cgroup:[4026533485]" dev="nsfs" ino=4026533485 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 190.650881][ T34] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 190.695987][T15081] ip_vti0: Master is either lo or non-ether device [ 190.702821][ T40] audit: type=1400 audit(1773414039.802:31169): avc: denied { accept } for pid=15076 comm="syz.2.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.765172][T15081] kvm: pic: non byte write [ 190.802317][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.805714][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.809972][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 190.813170][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.019440][ T34] usb 6-1: usb_control_msg returned -32 [ 191.022072][ T34] usbtmc 6-1:16.0: can't read capabilities [ 191.371984][T15110] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 191.791221][T15140] openvswitch: netlink: Flow actions attr not present in new flow. [ 191.800925][ T40] audit: type=1400 audit(1773414040.892:31170): avc: denied { append } for pid=15139 comm="syz.0.2905" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 191.949549][ T40] audit: type=1400 audit(1773414041.042:31171): avc: denied { read } for pid=15159 comm="syz.2.2912" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 191.968473][ T40] audit: type=1400 audit(1773414041.042:31172): avc: denied { open } for pid=15159 comm="syz.2.2912" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 191.977741][ T40] audit: type=1400 audit(1773414041.042:31173): avc: denied { ioctl } for pid=15159 comm="syz.2.2912" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 192.067051][T15171] xt_hashlimit: size too large, truncated to 1048576 [ 192.118899][T15177] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 192.129433][T15179] fuse: Bad value for 'fd' [ 192.218974][ T40] audit: type=1400 audit(1773414041.312:31174): avc: denied { create } for pid=15191 comm="syz.4.2923" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 192.294878][T15203] __nla_validate_parse: 75 callbacks suppressed [ 192.294889][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2927'. [ 192.342695][T15207] x_tables: duplicate underflow at hook 1 [ 192.767624][T15228] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.777181][T15228] bond3: (slave ip6gretap1): making interface the new active one [ 192.780414][T15228] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 192.790892][T15233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2936'. [ 193.111832][T15251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2943'. [ 193.289098][T15262] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2947'. [ 193.299716][T15262] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2947'. [ 193.322713][T15262] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 193.328490][T15262] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2947'. [ 193.339296][T15262] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 193.415454][ T6010] usb 6-1: USB disconnect, device number 50 [ 193.508023][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2952'. [ 193.585510][T15291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2958'. [ 193.588579][T15292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2958'. [ 193.821432][T15308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2964'. [ 193.862278][T15310] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 193.864495][T15310] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.870879][T15310] vhci_hcd vhci_hcd.0: Device attached [ 193.877458][T15310] bpf: Bad value for 'uid' [ 193.882440][T15311] vhci_hcd: cannot find the pending unlink 1023 [ 193.893425][T15311] vhci_hcd: connection closed [ 193.894375][ T1144] vhci_hcd vhci_hcd.1: stop threads [ 193.898206][ T1144] vhci_hcd vhci_hcd.1: release socket [ 193.900251][ T1144] vhci_hcd vhci_hcd.1: disconnect device [ 193.981543][ T39] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 194.055888][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.057980][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.133433][ T39] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.136444][ T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.139704][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 194.142876][ T39] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.147749][ T39] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.150698][ T39] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.153609][ T39] usb 5-1: Product: syz [ 194.155022][ T39] usb 5-1: Manufacturer: syz [ 194.159028][ T39] cdc_wdm 5-1:1.0: skipping garbage [ 194.160937][ T39] cdc_wdm 5-1:1.0: skipping garbage [ 194.163895][ T39] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 194.165847][ T39] cdc_wdm 5-1:1.0: Unknown control protocol [ 194.368049][ T39] usb 5-1: USB disconnect, device number 23 [ 194.663278][T15328] usb usb8: usbfs: process 15328 (syz.1.2971) did not claim interface 0 before use [ 194.820815][ T34] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 194.994281][ T34] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.997216][ T34] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.000494][ T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 195.022189][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.029557][ T34] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 195.034477][ T34] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 195.037057][ T34] usb 5-1: Product: syz [ 195.038456][ T34] usb 5-1: Manufacturer: syz [ 195.049196][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 195.051084][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 195.055627][ T34] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 195.057705][ T34] cdc_wdm 5-1:1.0: Unknown control protocol [ 195.465723][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 195.465734][ T40] audit: type=1400 audit(1773414044.562:31183): avc: denied { mount } for pid=15366 comm="syz.2.2984" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 195.804272][T15370] 9pnet_virtio: no channels available for device syz [ 195.809107][ T40] audit: type=1400 audit(1773414044.902:31184): avc: denied { read write } for pid=15301 comm="syz.0.2957" name="cdc-wdm0" dev="devtmpfs" ino=3367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 195.825594][ T40] audit: type=1400 audit(1773414044.912:31185): avc: denied { open } for pid=15301 comm="syz.0.2957" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 196.334579][T15404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15404 comm=syz.1.2995 [ 196.507230][T15418] syzkaller1: entered promiscuous mode [ 196.509775][T15418] syzkaller1: entered allmulticast mode [ 196.520130][ T40] audit: type=1400 audit(1773414045.612:31186): avc: denied { create } for pid=15410 comm="syz.4.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 196.577534][ T1326] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 196.652129][T15429] tipc: Failed to obtain node identity [ 196.654274][T15429] tipc: Enabling of bearer rejected, failed to enable media [ 196.686815][T15432] netlink: 'syz.4.3008': attribute type 1 has an invalid length. [ 196.721694][ T1326] usb 6-1: Using ep0 maxpacket: 32 [ 196.727584][ T1326] usb 6-1: unable to get BOS descriptor or descriptor too short [ 196.732225][ T1326] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.738436][ T1326] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 196.741846][ T1326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.744470][ T1326] usb 6-1: Product: syz [ 196.745914][ T1326] usb 6-1: Manufacturer: syz [ 196.747481][ T1326] usb 6-1: SerialNumber: syz [ 196.930297][T15467] netlink: 'syz.2.3025': attribute type 1 has an invalid length. [ 196.944123][T15467] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.956026][T15467] bond2: (slave geneve2): Opening slave failed [ 196.965191][ T1326] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.967536][ T1326] usb 6-1: MIDIStreaming interface descriptor not found [ 196.995570][ T1326] usb 6-1: USB disconnect, device number 51 [ 197.028516][ T5927] udevd[5927]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.032998][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 197.035756][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 197.038696][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 197.040881][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 197.043098][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 197.045263][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 197.047611][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 197.049763][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 197.051185][ T6010] usb 5-1: USB disconnect, device number 24 [ 197.051777][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 197.225333][T15500] syzkaller0: entered promiscuous mode [ 197.227756][T15500] syzkaller0: entered allmulticast mode [ 197.366278][T15526] syzkaller0: entered promiscuous mode [ 197.368239][T15526] syzkaller0: entered allmulticast mode [ 197.373474][T15526] 0: reclassify loop, rule prio 0, protocol 800 [ 197.568452][T15543] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 197.637770][T15549] netlink: 'syz.2.3059': attribute type 1 has an invalid length. [ 198.048779][T15564] syzkaller0: entered promiscuous mode [ 198.050657][T15564] syzkaller0: entered allmulticast mode [ 198.144055][T15515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.206404][ T40] audit: type=1400 audit(1773414047.302:31187): avc: denied { create } for pid=15574 comm="syz.2.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 198.310417][T15599] __nla_validate_parse: 6 callbacks suppressed [ 198.310428][T15599] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3080'. [ 198.319303][T15594] team0 (unregistering): Port device team_slave_0 removed [ 198.352702][T15594] team0 (unregistering): Port device team_slave_1 removed [ 198.416796][T15612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3086'. [ 198.525068][T15635] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3095'. [ 198.605146][ T5933] lo speed is unknown, defaulting to 1000 [ 198.640212][T15649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3102'. [ 198.688472][T15657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3106'. [ 198.688949][ T40] audit: type=1400 audit(1773414047.782:31188): avc: denied { ioctl } for pid=15654 comm="syz.4.3105" path="socket:[63608]" dev="sockfs" ino=63608 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 198.691499][T15657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.712864][T15657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.724686][ T40] audit: type=1400 audit(1773414047.822:31189): avc: denied { bind } for pid=15658 comm="syz.4.3107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 198.770577][T15667] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3111'. [ 198.776809][T15667] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.783290][T15667] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.790264][T15667] ` (unregistering): Released all slaves [ 198.819658][T15669] Failed to initialize the IGMP autojoin socket (err -2) [ 198.947077][T15690] bpq0: left allmulticast mode [ 198.989313][T15697] block nbd0: not configured, cannot reconfigure [ 199.013149][T15700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3123'. [ 199.096862][T15711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3127'. [ 199.099873][T15711] netlink: 'syz.4.3127': attribute type 7 has an invalid length. [ 199.103497][T15711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3127'. [ 199.259454][ T5934] block nbd0: Receive control failed (result -32) [ 199.337344][T15738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3137'. [ 199.338679][T15744] team0: No ports can be present during mode change [ 199.362983][T15742] syzkaller0: entered promiscuous mode [ 199.364828][T15742] syzkaller0: entered allmulticast mode [ 199.391118][T15748] syzkaller1: entered promiscuous mode [ 199.392942][T15748] syzkaller1: entered allmulticast mode [ 199.490945][T15762] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 199.634793][T15788] syzkaller0: entered promiscuous mode [ 199.636658][T15788] syzkaller0: entered allmulticast mode [ 199.702034][ T6564] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 199.776262][T15804] netlink: 'syz.4.3166': attribute type 11 has an invalid length. [ 199.820402][T15810] syzkaller0: entered promiscuous mode [ 199.823057][T15810] syzkaller0: entered allmulticast mode [ 199.827484][T15810] 0: reclassify loop, rule prio 0, protocol 800 [ 199.966414][T15818] syzkaller0: entered promiscuous mode [ 199.968308][T15818] syzkaller0: entered allmulticast mode [ 200.077809][ T5935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.085005][ T5935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.090928][ T5935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.093907][ T5935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.096582][ T5935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.118527][T15822] Failed to initialize the IGMP autojoin socket (err -2) [ 200.121502][T15827] syzkaller0: entered promiscuous mode [ 200.121520][T15827] syzkaller0: entered allmulticast mode [ 200.175348][ T6564] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.179269][ T6564] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.313129][T15822] chnl_net:caif_netlink_parms(): no params data found [ 200.336330][ T6564] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.339735][ T6564] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.433408][ T6564] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.437624][ T6564] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.479988][T15822] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.487573][T15822] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.489955][T15822] bridge_slave_0: entered allmulticast mode [ 200.493357][T15822] bridge_slave_0: entered promiscuous mode [ 200.507678][T15822] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.510035][T15822] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.513410][T15822] bridge_slave_1: entered allmulticast mode [ 200.516215][T15822] bridge_slave_1: entered promiscuous mode [ 200.551982][ T6564] `: (slave netdevsim0): Releasing backup interface [ 200.559434][ T6564] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.564018][ T6564] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.568410][ T40] audit: type=1400 audit(1773414049.662:31190): avc: denied { bind } for pid=15856 comm="syz.4.3182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 200.582786][ T40] audit: type=1400 audit(1773414049.662:31191): avc: denied { listen } for pid=15856 comm="syz.4.3182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 200.594570][ T40] audit: type=1400 audit(1773414049.662:31192): avc: denied { accept } for pid=15856 comm="syz.4.3182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 200.602384][T15822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.625024][T15822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.667751][T15822] team0: Port device team_slave_0 added [ 200.681874][T15822] team0: Port device team_slave_1 added [ 200.717220][T15822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.719617][T15822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.728536][T15822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.739456][T15822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.742145][T15822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.750694][T15822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.834882][T15822] hsr_slave_0: entered promiscuous mode [ 200.837414][T15822] hsr_slave_1: entered promiscuous mode [ 200.839668][T15822] debugfs: 'hsr0' already exists in 'hsr' [ 200.842425][T15822] Cannot create hsr debugfs directory [ 200.882433][T15879] syzkaller0: entered promiscuous mode [ 200.884729][T15879] syzkaller0: entered allmulticast mode [ 200.959596][T15890] syzkaller0: entered promiscuous mode [ 200.962884][T15890] syzkaller0: entered allmulticast mode [ 200.966898][ T6564] bridge0: port 3(team0) entered disabled state [ 200.974206][ T6564] bridge_slave_1: left allmulticast mode [ 200.976737][ T6564] bridge_slave_1: left promiscuous mode [ 200.979359][ T6564] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.985927][ T6564] bridge_slave_0: left allmulticast mode [ 200.988501][ T6564] bridge_slave_0: left promiscuous mode [ 200.991435][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.276170][ T6564] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.280032][ T6564] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.283609][ T6564] ` (unregistering): Released all slaves [ 201.287865][ T6564] bond0 (unregistering): Released all slaves [ 201.294448][ T6564] bond1 (unregistering): Released all slaves [ 201.339130][T15889] syzkaller0: entered promiscuous mode [ 201.341232][T15889] syzkaller0: entered allmulticast mode [ 201.390644][ T6564] tipc: Left network mode [ 201.509695][T15901] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 201.528539][T15901] syzkaller0: entered promiscuous mode [ 201.530395][T15901] syzkaller0: entered allmulticast mode [ 201.536018][T15901] tipc: Started in network mode [ 201.537645][T15901] tipc: Node identity 02bc687a2c61, cluster identity 4711 [ 201.541830][T15901] tipc: Enabled bearer , priority 0 [ 201.545342][T15900] tipc: Resetting bearer [ 201.556009][T15900] tipc: Disabling bearer [ 201.563425][T15909] syzkaller0: entered promiscuous mode [ 201.565281][T15909] syzkaller0: entered allmulticast mode [ 201.633471][T15916] Failed to initialize the IGMP autojoin socket (err -2) [ 201.696283][ T40] audit: type=1400 audit(1773414050.792:31193): avc: denied { create } for pid=15914 comm="syz.2.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 201.928656][ T6564] hsr_slave_0: left promiscuous mode [ 201.934706][ T6564] hsr_slave_1: left promiscuous mode [ 201.936941][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.939821][ T6564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.950120][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.952678][ T6564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.959861][ T6564] veth1_macvtap: left promiscuous mode [ 201.961877][ T6564] veth0_macvtap: left allmulticast mode [ 201.963725][ T6564] veth0_macvtap: left promiscuous mode [ 201.965542][ T6564] veth1_vlan: left promiscuous mode [ 201.967269][ T6564] veth0_vlan: left promiscuous mode [ 202.008298][ T6564] pimreg (unregistering): left allmulticast mode [ 202.082365][ T6564] team_slave_1 (unregistering): left promiscuous mode [ 202.084628][ T6564] team_slave_1 (unregistering): left allmulticast mode [ 202.087839][ T6564] team0 (unregistering): Port device team_slave_1 removed [ 202.093913][ T6564] team_slave_0 (unregistering): left promiscuous mode [ 202.096140][ T6564] team_slave_0 (unregistering): left allmulticast mode [ 202.098894][ T6564] team0 (unregistering): Port device team_slave_0 removed [ 202.134688][ T5934] Bluetooth: hci3: command tx timeout [ 202.376861][T15822] netdevsim netdevsim1 netdevsim0: renamed from eth6 [ 202.393157][T15822] netdevsim netdevsim1 netdevsim1: renamed from eth7 [ 202.406216][T15822] netdevsim netdevsim1 netdevsim2: renamed from eth8 [ 202.411828][T15822] netdevsim netdevsim1 netdevsim3: renamed from eth9 [ 202.465956][ T40] audit: type=1400 audit(1773414051.562:31194): avc: denied { ioctl } for pid=15976 comm="syz.0.3226" path="socket:[63185]" dev="sockfs" ino=63185 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 202.561255][T15822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.576506][T15988] netlink: 'syz.0.3230': attribute type 13 has an invalid length. [ 202.586813][ T6564] IPVS: stop unused estimator thread 0... [ 202.698316][T15822] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.720852][ T6561] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.723210][ T6561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.745295][ T1189] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.748133][ T1189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.777742][T16007] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input30 [ 202.782278][T16004] syzkaller0: entered promiscuous mode [ 202.784586][T16004] syzkaller0: entered allmulticast mode [ 202.818673][T16004] tc action pedit 'at' offset 82 out of bounds [ 202.821586][T16004] tc action pedit 'at' offset 82 out of bounds [ 202.824154][T16004] tc action pedit 'at' offset 82 out of bounds [ 202.826696][T16004] tc action pedit 'at' offset 82 out of bounds [ 202.829257][T16004] tc action pedit 'at' offset 82 out of bounds [ 202.831875][T16004] tc action pedit 'at' offset 82 out of bounds [ 202.834415][T16004] tc action pedit 'at' offset 82 out of bounds [ 202.836952][T16004] tc action pedit 'at' offset 82 out of bounds [ 202.839495][T16004] tc action pedit 'at' offset 82 out of bounds [ 202.842135][T16004] tc action pedit 'at' offset 82 out of bounds [ 202.844681][T16004] 0: reclassify loop, rule prio 0, protocol 800 [ 203.019262][T15822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.107111][T15822] veth0_vlan: entered promiscuous mode [ 203.114721][T15822] veth1_vlan: entered promiscuous mode [ 203.173611][T15822] veth0_macvtap: entered promiscuous mode [ 203.186017][T15822] veth1_macvtap: entered promiscuous mode [ 203.268335][T16045] Failed to initialize the IGMP autojoin socket (err -2) [ 203.349660][T15822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.373744][T15822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.380993][T15822] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 203.411815][T15822] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 203.424892][T15822] wireguard: wg0: Could not create IPv4 socket [ 203.429153][T15822] wireguard: wg1: Could not create IPv4 socket [ 203.434201][T15822] wireguard: wg2: Could not create IPv4 socket [ 203.658974][ T40] audit: type=1400 audit(1773414052.752:31195): avc: denied { accept } for pid=16068 comm="syz.2.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.897807][T16085] __nla_validate_parse: 5 callbacks suppressed [ 203.897820][T16085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3264'. [ 203.918744][T16085] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.935788][T16085] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.938309][T16085] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 203.942229][T16085] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 204.078269][T16096] Failed to initialize the IGMP autojoin socket (err -2) [ 204.188470][ T40] audit: type=1400 audit(1773414053.282:31196): avc: denied { connect } for pid=16107 comm="syz.4.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 204.195398][ T40] audit: type=1400 audit(1773414053.292:31197): avc: denied { accept } for pid=16107 comm="syz.4.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 204.210930][ T5935] Bluetooth: hci3: command tx timeout [ 204.233715][T16112] syzkaller0: entered promiscuous mode [ 204.235630][T16112] syzkaller0: entered allmulticast mode [ 204.488673][ T40] audit: type=1400 audit(1773414053.582:31198): avc: denied { write } for pid=16146 comm="syz.0.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 204.655161][T16180] netlink: zone id is out of range [ 204.656129][T16181] vlan1: Caught tx_queue_len zero misconfig [ 204.657316][T16180] netlink: zone id is out of range [ 204.662697][T16180] netlink: zone id is out of range [ 204.664848][T16180] netlink: get zone limit has 4 unknown bytes [ 204.712932][T16189] tipc: Started in network mode [ 204.714633][T16189] tipc: Node identity e665858b9837, cluster identity 4711 [ 204.717072][T16189] tipc: Enabled bearer , priority 0 [ 204.739868][T16189] syzkaller0: entered promiscuous mode [ 204.743154][T16189] syzkaller0: entered allmulticast mode [ 204.746143][T16189] tipc: Resetting bearer [ 204.760412][T16188] tipc: Resetting bearer [ 205.788243][T16188] tipc: Disabling bearer [ 205.796721][ T40] audit: type=1400 audit(1773414054.892:31199): avc: denied { firmware_load } for pid=16198 comm="syz.2.3295" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 205.804885][T16200] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 205.807983][T16200] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 205.811382][T16200] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 205.819582][ T9] tipc: Node number set to 2119337355 [ 205.878646][T16260] syzkaller0: entered promiscuous mode [ 205.880528][T16260] syzkaller0: entered allmulticast mode [ 205.928419][T16266] syzkaller0: entered promiscuous mode [ 205.930265][T16266] syzkaller0: entered allmulticast mode [ 205.970208][T16274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3302'. [ 206.011710][ T40] audit: type=1400 audit(1773414055.112:31200): avc: denied { accept } for pid=16276 comm="syz.4.3303" path="socket:[66606]" dev="sockfs" ino=66606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 206.039528][T16283] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3305'. [ 206.238960][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3324'. [ 206.246457][T16337] netlink: 'syz.2.3325': attribute type 1 has an invalid length. [ 206.254519][T16333] hsr_slave_1 (unregistering): left promiscuous mode [ 206.370579][T16351] syzkaller0: entered promiscuous mode [ 206.372735][T16351] syzkaller0: entered allmulticast mode [ 206.389753][T16357] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.394027][T16357] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.372988][T16354] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.411097][T16512] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3336'. [ 209.499078][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3342'. [ 209.507102][T16529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3343'. [ 209.510350][T16529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3343'. [ 209.525765][ T40] audit: type=1400 audit(1773414058.622:31201): avc: denied { read } for pid=16533 comm="syz.4.3345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 209.581506][ T40] audit: type=1400 audit(1773414058.682:31202): avc: denied { setopt } for pid=16533 comm="syz.4.3345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 209.820428][T16566] syzkaller1: entered promiscuous mode [ 209.823391][T16566] syzkaller1: entered allmulticast mode [ 210.018665][T16588] syzkaller0: entered promiscuous mode [ 210.020684][T16588] syzkaller0: entered allmulticast mode [ 210.074986][T16597] block nbd0: reconnected socket [ 210.077838][ T5935] block nbd0: Receive control failed (result -32) [ 210.394437][T16623] syzkaller0: entered promiscuous mode [ 210.396331][T16623] syzkaller0: entered allmulticast mode [ 210.627371][T16660] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3383'. [ 210.838327][T16697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3393'. [ 210.988837][ T40] audit: type=1400 audit(1773414060.082:31203): avc: denied { setopt } for pid=16715 comm="syz.4.3397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 211.584358][T16682] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.630612][T16760] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3403'. [ 211.705742][T16772] syzkaller0: entered promiscuous mode [ 211.708068][T16772] syzkaller0: entered allmulticast mode [ 211.793923][T16784] bridge_slave_0: left allmulticast mode [ 211.795872][T16784] bridge_slave_0: left promiscuous mode [ 211.797909][T16784] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.809264][T16784] bridge_slave_1: left allmulticast mode [ 211.812868][T16784] bridge_slave_1: left promiscuous mode [ 211.814836][T16784] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.825272][T16784] `: (slave bond_slave_0): Releasing backup interface [ 211.829698][T16784] `: (slave bond_slave_1): Releasing backup interface [ 211.840163][T16784] team_slave_0: left promiscuous mode [ 211.847602][T16784] team0: Port device team_slave_0 removed [ 211.850393][T16784] team_slave_1: left promiscuous mode [ 211.856095][T16784] team0: Port device team_slave_1 removed [ 211.858341][T16784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.861166][T16784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.871936][T16784] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 211.897752][T16794] team0: No ports can be present during mode change [ 211.998153][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3421'. [ 212.013221][T16812] hsr_slave_1 (unregistering): left promiscuous mode [ 212.084503][T16824] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3426'. [ 212.096340][T16827] Failed to initialize the IGMP autojoin socket (err -2) [ 212.323182][T16851] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 212.334316][T16851] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 212.382652][T16855] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 212.528226][T16860] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 212.639742][T16865] kvm: pic: single mode not supported [ 212.640329][T16865] kvm: pic: level sensitive irq not supported [ 213.195037][T16898] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 213.758073][T16933] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 213.929088][T16950] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3455'. [ 213.940621][T16948] overlayfs: failed lookup in lower (newroot/260, name='file0', err=-40): overlapping layers [ 213.948199][T16948] overlayfs: failed lookup in lower (newroot/260, name='file0', err=-40): overlapping layers [ 213.959839][T16948] overlayfs: failed lookup in lower (newroot/260, name='file0', err=-40): overlapping layers [ 214.227568][T16985] vlan2: entered allmulticast mode [ 214.229297][T16985] bond0: entered allmulticast mode [ 214.353942][T16982] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 214.397437][T16982] picdev_read: 3 callbacks suppressed [ 214.397449][T16982] kvm: pic: non byte read [ 214.402573][T16982] kvm: pic: non byte read [ 214.405773][T16982] kvm: pic: non byte read [ 214.413463][T16982] kvm: pic: non byte read [ 214.420377][T16982] kvm: pic: single mode not supported [ 214.421805][T16982] kvm: pic: non byte read [ 214.426587][T16982] kvm: pic: non byte read [ 214.429385][T16982] kvm: pic: non byte read [ 214.433439][T16982] kvm: pic: non byte read [ 214.436308][T16982] kvm: pic: non byte read [ 214.439992][T16982] kvm: pic: non byte read [ 214.495007][T17005] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 214.784431][T17017] kvm: pic: single mode not supported [ 214.880976][T17017] kvm: pic: level sensitive irq not supported [ 214.883328][T17017] kvm: pic: single mode not supported [ 214.885371][T17017] kvm: pic: level sensitive irq not supported [ 214.887671][T17017] kvm: pic: single mode not supported [ 214.889687][T17017] kvm: pic: level sensitive irq not supported [ 214.892307][T17017] kvm: pic: single mode not supported [ 214.894330][T17017] kvm: pic: level sensitive irq not supported [ 214.896651][T17017] kvm: pic: single mode not supported [ 214.898674][T17017] kvm: pic: level sensitive irq not supported [ 214.904888][T17017] kvm: pic: single mode not supported [ 214.906924][T17017] kvm: pic: level sensitive irq not supported [ 214.909257][T17017] kvm: pic: single mode not supported [ 214.911366][T17017] kvm: pic: level sensitive irq not supported [ 214.913888][T17017] kvm: pic: single mode not supported [ 214.916688][T17017] kvm: pic: level sensitive irq not supported [ 214.936053][T17017] kvm: pic: level sensitive irq not supported [ 215.660531][T17061] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 215.875071][T17071] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 216.723102][T17118] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 217.362874][ T40] audit: type=1804 audit(1773414066.462:31204): pid=17156 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.3486" name=2F6E6577726F6F742F3530372FE16F8F1F449A7A8356 dev="tmpfs" ino=2631 res=1 errno=0 [ 219.438671][T17297] dump_vmcs: 1 callbacks suppressed [ 219.438681][T17297] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.307967][T17400] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.441699][T17408] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 221.469648][T17437] kvm: kvm [17436]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 221.474678][T17437] kvm: kvm [17436]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x8000000000000 [ 221.995561][ T40] audit: type=1804 audit(1773414071.092:31205): pid=17461 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.3537" name="/newroot/526/T" dev="tmpfs" ino=2729 res=1 errno=0 [ 222.112601][T17465] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 222.130254][T17465] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 224.240909][ T6012] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 224.392472][ T6012] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 224.396430][ T6012] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.401172][ T6012] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 224.405114][ T6012] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.413243][ T6012] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 224.417524][ T6012] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 224.421174][ T6012] usb 7-1: Product: syz [ 224.423153][ T6012] usb 7-1: Manufacturer: syz [ 224.435750][ T6012] cdc_wdm 7-1:1.0: skipping garbage [ 224.438452][ T6012] cdc_wdm 7-1:1.0: skipping garbage [ 224.442595][ T6012] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 224.445291][ T6012] cdc_wdm 7-1:1.0: Unknown control protocol [ 224.636365][ T1326] usb 7-1: USB disconnect, device number 47 [ 225.090897][ T6012] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 225.242009][ T6012] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 225.244793][ T6012] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.248442][ T6012] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 225.251553][ T6012] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.256154][ T6012] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 225.259062][ T6012] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 225.261709][ T6012] usb 7-1: Product: syz [ 225.263103][ T6012] usb 7-1: Manufacturer: syz [ 225.267867][ T6012] cdc_wdm 7-1:1.0: skipping garbage [ 225.269566][ T6012] cdc_wdm 7-1:1.0: skipping garbage [ 225.274095][ T6012] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 225.276150][ T6012] cdc_wdm 7-1:1.0: Unknown control protocol [ 226.022331][T17517] 9pnet_virtio: no channels available for device syz [ 226.033002][T17517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3547'. [ 227.247083][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 227.249202][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 227.252069][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 227.254178][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 227.256253][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 227.258309][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 227.260490][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 227.262505][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 227.264804][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 227.266803][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 227.268834][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 227.270925][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 227.273513][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 227.275607][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 227.277739][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 227.279798][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 227.281724][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 227.284897][ T24] usb 7-1: USB disconnect, device number 48 [ 227.875545][T17570] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 227.910130][T17570] picdev_read: 1 callbacks suppressed [ 227.910147][T17570] kvm: pic: non byte read [ 227.917584][T17570] kvm: pic: non byte read [ 227.920609][T17570] kvm: pic: non byte read [ 227.923896][T17570] kvm: pic: non byte read [ 227.926704][T17570] pic_ioport_write: 3 callbacks suppressed [ 227.926713][T17570] kvm: pic: single mode not supported [ 227.929022][T17570] kvm: pic: non byte read [ 227.932911][T17583] team0: Device vlan2 is already an upper device of the team interface [ 227.933879][T17570] kvm: pic: non byte read [ 227.940418][T17570] kvm: pic: non byte read [ 227.945712][T17570] kvm: pic: non byte read [ 227.949104][T17570] kvm: pic: non byte read [ 227.952897][T17570] kvm: pic: non byte read [ 243.333406][ T1334] ------------[ cut here ]------------ [ 243.335973][ T1334] workqueue: cannot queue hci_conn_timeout on wq hci3 [ 243.338339][ T1334] WARNING: kernel/workqueue.c:2270 at __queue_work+0xd08/0x1150, CPU#2: kworker/2:2/1334 [ 243.341535][ T1334] Modules linked in: [ 243.343130][ T1334] CPU: 2 UID: 0 PID: 1334 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.346623][ T1334] Tainted: [L]=SOFTLOCKUP [ 243.348053][ T1334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.351404][ T1334] Workqueue: events l2cap_chan_timeout [ 243.353573][ T1334] RIP: 0010:__queue_work+0xd0c/0x1150 [ 243.355337][ T1334] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d 18 ba 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 65 e3 38 00 90 0f 0b 90 e9 b2 f5 [ 243.361757][ T1334] RSP: 0018:ffffc90006f5fa30 EFLAGS: 00010046 [ 243.363883][ T1334] RAX: dffffc0000000000 RBX: ffff88801b8f0c00 RCX: 1ffff1100443214b [ 243.366430][ T1334] RDX: ffff88801c7a0978 RSI: ffffffff8a8742d0 RDI: ffffffff90dc8e40 [ 243.368980][ T1334] RBP: ffff888022190a40 R08: 0000000000000005 R09: 0000000000000000 [ 243.371563][ T1334] R10: 0000000000200000 R11: 0000000000000000 R12: ffff88801c7a0800 [ 243.374277][ T1334] R13: ffff88802baf4980 R14: ffff888022190a88 R15: ffff888022190a48 [ 243.376812][ T1334] FS: 0000000000000000(0000) GS:ffff8880d6545000(0000) knlGS:0000000000000000 [ 243.379740][ T1334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.381847][ T1334] CR2: 000055f3b9c3d660 CR3: 000000000e598000 CR4: 0000000000352ef0 [ 243.384443][ T1334] Call Trace: [ 243.385504][ T1334] [ 243.386491][ T1334] ? __cancel_work+0x2b5/0x340 [ 243.388067][ T1334] ? lockdep_hardirqs_on+0x78/0x100 [ 243.389723][ T1334] ? __cancel_work+0x245/0x340 [ 243.391345][ T1334] __queue_delayed_work+0x365/0x470 [ 243.393027][ T1334] queue_delayed_work_on+0x180/0x1e0 [ 243.394712][ T1334] l2cap_chan_del+0x649/0x930 [ 243.396232][ T1334] l2cap_chan_close+0x3b0/0xa70 [ 243.397809][ T1334] ? debug_object_deactivate+0x2e4/0x3b0 [ 243.399658][ T1334] ? __pfx_l2cap_chan_close+0x10/0x10 [ 243.401359][ T1334] l2cap_chan_timeout+0x196/0x330 [ 243.403038][ T1334] process_one_work+0x9d7/0x1920 [ 243.404656][ T1334] ? __pfx_process_one_work+0x10/0x10 [ 243.406369][ T1334] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 243.408135][ T1334] worker_thread+0x5da/0xe40 [ 243.409637][ T1334] ? __pfx_worker_thread+0x10/0x10 [ 243.411261][ T1334] ? kthread+0x13a/0x450 [ 243.412701][ T1334] ? __pfx_worker_thread+0x10/0x10 [ 243.414345][ T1334] kthread+0x370/0x450 [ 243.415661][ T1334] ? __pfx_kthread+0x10/0x10 [ 243.417123][ T1334] ret_from_fork+0x754/0xd80 [ 243.418598][ T1334] ? __pfx_ret_from_fork+0x10/0x10 [ 243.420240][ T1334] ? __switch_to+0x7b4/0x1120 [ 243.421768][ T1334] ? __pfx_kthread+0x10/0x10 [ 243.423317][ T1334] ret_from_fork_asm+0x1a/0x30 [ 243.424867][ T1334] [ 243.425862][ T1334] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 243.428154][ T1334] CPU: 2 UID: 0 PID: 1334 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.431571][ T1334] Tainted: [L]=SOFTLOCKUP [ 243.432995][ T1334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.436220][ T1334] Workqueue: events l2cap_chan_timeout [ 243.437987][ T1334] Call Trace: [ 243.439050][ T1334] [ 243.440035][ T1334] dump_stack_lvl+0x100/0x190 [ 243.441531][ T1334] vpanic+0x552/0x970 [ 243.442867][ T1334] ? __pfx_vpanic+0x10/0x10 [ 243.444367][ T1334] panic+0xd1/0xe0 [ 243.445605][ T1334] ? __pfx_panic+0x10/0x10 [ 243.447092][ T1334] ? check_panic_on_warn+0x1f/0x90 [ 243.448784][ T1334] check_panic_on_warn.cold+0x19/0x34 [ 243.450555][ T1334] ? __queue_work+0xd08/0x1150 [ 243.452151][ T1334] __warn.cold+0x191/0x348 [ 243.453582][ T1334] __report_bug+0x296/0x3d0 [ 243.455089][ T1334] ? __queue_work+0xd08/0x1150 [ 243.456670][ T1334] ? __pfx___report_bug+0x10/0x10 [ 243.458293][ T1334] ? __pfx_hci_conn_timeout+0x10/0x10 [ 243.460022][ T1334] ? __pfx_debug_object_assert_init+0x10/0x10 [ 243.461948][ T1334] report_bug_entry+0xe1/0x290 [ 243.463702][ T1334] ? __queue_work+0xd0c/0x1150 [ 243.465331][ T1334] handle_bug+0x1cd/0x2a0 [ 243.466719][ T1334] exc_invalid_op+0x17/0x50 [ 243.468238][ T1334] asm_exc_invalid_op+0x1a/0x20 [ 243.469855][ T1334] RIP: 0010:__queue_work+0xd0c/0x1150 [ 243.471625][ T1334] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d 18 ba 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 65 e3 38 00 90 0f 0b 90 e9 b2 f5 [ 243.477699][ T1334] RSP: 0018:ffffc90006f5fa30 EFLAGS: 00010046 [ 243.479686][ T1334] RAX: dffffc0000000000 RBX: ffff88801b8f0c00 RCX: 1ffff1100443214b [ 243.482253][ T1334] RDX: ffff88801c7a0978 RSI: ffffffff8a8742d0 RDI: ffffffff90dc8e40 [ 243.484781][ T1334] RBP: ffff888022190a40 R08: 0000000000000005 R09: 0000000000000000 [ 243.487344][ T1334] R10: 0000000000200000 R11: 0000000000000000 R12: ffff88801c7a0800 [ 243.489844][ T1334] R13: ffff88802baf4980 R14: ffff888022190a88 R15: ffff888022190a48 [ 243.492437][ T1334] ? __pfx_hci_conn_timeout+0x10/0x10 [ 243.494231][ T1334] ? __cancel_work+0x2b5/0x340 [ 243.495815][ T1334] ? lockdep_hardirqs_on+0x78/0x100 [ 243.497397][ T1334] ? __cancel_work+0x245/0x340 [ 243.498928][ T1334] __queue_delayed_work+0x365/0x470 [ 243.500656][ T1334] queue_delayed_work_on+0x180/0x1e0 [ 243.502413][ T1334] l2cap_chan_del+0x649/0x930 [ 243.503972][ T1334] l2cap_chan_close+0x3b0/0xa70 [ 243.505521][ T1334] ? debug_object_deactivate+0x2e4/0x3b0 [ 243.507300][ T1334] ? __pfx_l2cap_chan_close+0x10/0x10 [ 243.509014][ T1334] l2cap_chan_timeout+0x196/0x330 [ 243.510640][ T1334] process_one_work+0x9d7/0x1920 [ 243.512227][ T1334] ? __pfx_process_one_work+0x10/0x10 [ 243.513975][ T1334] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 243.515734][ T1334] worker_thread+0x5da/0xe40 [ 243.517220][ T1334] ? __pfx_worker_thread+0x10/0x10 [ 243.518877][ T1334] ? kthread+0x13a/0x450 [ 243.520260][ T1334] ? __pfx_worker_thread+0x10/0x10 [ 243.521875][ T1334] kthread+0x370/0x450 [ 243.523225][ T1334] ? __pfx_kthread+0x10/0x10 [ 243.524764][ T1334] ret_from_fork+0x754/0xd80 [ 243.526279][ T1334] ? __pfx_ret_from_fork+0x10/0x10 [ 243.527960][ T1334] ? __switch_to+0x7b4/0x1120 [ 243.529504][ T1334] ? __pfx_kthread+0x10/0x10 [ 243.531041][ T1334] ret_from_fork_asm+0x1a/0x30 [ 243.532673][ T1334] [ 243.534389][ T1334] Kernel Offset: disabled [ 243.535819][ T1334] Rebooting in 86400 seconds..