last executing test programs: 13m38.252267114s ago: executing program 0 (id=208): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000980)='mm_khugepaged_scan_pmd\x00', r0, 0x0, 0xa17}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 13m38.162552861s ago: executing program 0 (id=210): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000919c00000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="110000000700000000000000", @ANYRES32=r2, @ANYRES64=0x0], 0x20) 13m38.072270035s ago: executing program 0 (id=213): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) 13m37.93652212s ago: executing program 0 (id=214): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m37.696824766s ago: executing program 0 (id=218): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = socket(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 13m37.547224613s ago: executing program 0 (id=219): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='io_uring_complete\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x12c6, &(0x7f00000003c0)={0x0, 0x3, 0x1, 0x0, 0x800220}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0xce3, 0xfffffffe, 0x0, 0x0, 0x0) 13m22.484038596s ago: executing program 32 (id=219): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='io_uring_complete\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x12c6, &(0x7f00000003c0)={0x0, 0x3, 0x1, 0x0, 0x800220}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0xce3, 0xfffffffe, 0x0, 0x0, 0x0) 12m12.413908316s ago: executing program 4 (id=1428): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12m12.298250902s ago: executing program 4 (id=1430): setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0xee00, 0x0) 12m12.18092896s ago: executing program 4 (id=1432): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) 12m12.033595544s ago: executing program 4 (id=1433): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = socket(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 12m11.923341975s ago: executing program 4 (id=1435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x70bd2c, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004014) read$hiddev(r0, &(0x7f0000000540)=""/69, 0x45) 12m11.440070782s ago: executing program 4 (id=1442): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 12m11.156455194s ago: executing program 33 (id=1442): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4m17.134005693s ago: executing program 6 (id=10148): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x4, 0x37, 0x4, 0x0, 0x48, @rand_addr=' \x01\x00', @private0, 0x20, 0x700, 0x8, 0x7c8}}) 4m16.877296132s ago: executing program 6 (id=10153): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) semget$private(0x0, 0x4, 0x24) 4m16.682019825s ago: executing program 6 (id=10157): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x801, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880e) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x1, 0x1, 0x2b, 0x8, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m16.570250185s ago: executing program 6 (id=10161): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000ec0)={0x64, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x20, 0x2a, [@preq={0x82, 0x1a, {{0x1, 0x1, 0x1}, 0x6, 0x4, 0xc, @device_b, 0x9, @void, 0x1, 0x3}}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) syz_usb_connect(0x0, 0x4c, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0xab, 0x62, 0x58, 0x40, 0xc880, 0x760e, 0x35fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3a, 0x1, 0xe, 0xe, 0xa0, 0x32, [{{0x9, 0x4, 0x15, 0xfb, 0x0, 0x1, 0x3, 0x67, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "7c1f"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x6}}, @hid_hid={0x9, 0x21, 0x7, 0x5a, 0x1, {0x22, 0xd46}}]}}]}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x8, &(0x7f0000001880)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x2}]}, 0x1, [{0x0, 0x0}]}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/keys\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e0001000000000000ecc80007000000", @ANYRES32=r4, @ANYBLOB="0000000008000900030400000a0002"], 0x30}}, 0x0) read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) chdir(&(0x7f0000000000)='./file0\x00') 4m15.968684234s ago: executing program 6 (id=10174): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) 4m15.813891827s ago: executing program 6 (id=10179): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 4m0.619623693s ago: executing program 34 (id=10179): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 2.276036157s ago: executing program 2 (id=15449): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) 1.78908219s ago: executing program 2 (id=15451): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) accept(r4, 0x0, 0x0) 1.737967995s ago: executing program 2 (id=15452): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$unix(0x1, 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r4, 0x2020}], 0x1, 0x0, 0x0, 0x0) 1.659409977s ago: executing program 3 (id=15455): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) 1.50765074s ago: executing program 2 (id=15459): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000250001"], 0x5c}, 0x1, 0x0, 0x0, 0x906b93b66f66f32c}, 0x10) 1.494673981s ago: executing program 7 (id=15460): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x87) 1.417094452s ago: executing program 2 (id=15462): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) socketpair(0x25, 0x5, 0x9, &(0x7f0000000040)) 1.377566626s ago: executing program 7 (id=15464): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r3, &(0x7f0000001b40)={0x2020}, 0x205c) 1.315718666s ago: executing program 3 (id=15465): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc0000001200010a000000000000000007"], 0xbc}}, 0x0) 1.306043849s ago: executing program 2 (id=15467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "1a3952b5"}]}}, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7040010000000f00000005002a000000000008000300", @ANYRES32=r4], 0x5c}}, 0x18) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000090}, 0xc0) syz_usb_connect(0x2, 0x3fe, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x18, 0xb5, 0xb4, 0x45, 0x582, 0x12, 0x1ad7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ec, 0x3, 0x40, 0x3, 0x30, 0x1, [{{0x9, 0x4, 0x5d, 0xfe, 0xb, 0x93, 0x92, 0x2e, 0x0, [@generic={0xdc, 0x22, "9a4cb7c2912d503e190b196a63f67a34513b8919dd3a293316b4f67222306a0e9d3a37ca49c8471f89d1b80e7d6e71e46da3da9d7234354febb05033da82c74f41474ebba59a9c9b7a2bbac5ffda840397992e49360996bacd8d5e224f469b430c8b69b540878076ae6cd1fe6d5873ab465f5ca048349b8255a55ce38a97a3d68078d2a07b916d15fefc1af25ed885b470db55b146cf2046057762a6af7ee8263d02bcb661252b121c85c1bbe7a04f5f64f8b402db75c2cabfedf544ed7a148690e3b15b56b2cf34d36e180ed4f97299ea02a82b106e0786edc3"}], [{{0x9, 0x5, 0x86, 0x10, 0x200, 0x0, 0xf, 0xb1}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x5, 0x2, 0x1b}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0x3, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x4c7}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x2, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x4}, @generic={0xd, 0xa, "58fd12e4ba7981983442b7"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x21, 0x8, 0x9}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x4, 0x8d, 0x7}}, {{0x9, 0x5, 0x6, 0xc, 0x20, 0x16, 0x4, 0x7}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x5, 0xa, 0x24, [@generic={0x3, 0x4, 'h'}, @generic={0x83, 0x19, "9d4d70b90919aaf12307d77b65bebceb91fe812f8e8e44fac3d66bc977e03b7f97c21568a0cbb449e88a02857cbb1f2785072c8e94c999410cf407b41fca70e21e65cfd0f84b3462607bb91b598b8787c87240aa21d3bf68726fc15ccf3e044df5426cc96f302857fecbd57759f7ce3348e764b73bce7f43684a4bb2f54a5bb0b5"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x8, 0x1}, @generic={0xd0, 0x21, "9f165d1f11650e15b6a8a64c616caf1aca266d295ff5feeec1b80d9df25ab6074627c4c1e85c281d6deb5dc4ee86b6a1cb8037244a1dd260c9dd767f6fd5db8632d08830b1f32ed6271d2c085b316f472caeef4e2c7aafcc88b809e06f328b4cc1f53a8563d791d502f91a26fe3508195cd34ba7c8050eb4af8ee84a0b52ec6e544a9cd084cfe08f2db773eb8633a75e0a590c1cdc549c97e768043b036a3b6f88052bffbd2a69afcc346cc6f13af0b24ffec0cd5df5c2e251c968ba1c9867256f0be210a07faf90ad0d0a786311"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x9, 0xa2, 0x3}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x6, 0x3, 0x7, [@generic={0x31, 0x25, "bdfd95c4e18cfd6f2a40b24dee92a6e4977fd41d3c83424d94ddfa91ad125fc98f63278cd1219c2ca8e408dbb220f5"}]}}]}}, {{0x9, 0x4, 0xc0, 0x0, 0x2, 0x2d, 0x26, 0xd4, 0x7, [@hid_hid={0x9, 0x21, 0x8, 0xf6, 0x1, {0x22, 0x64a}}], [{{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x7, 0x4, 0x65, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x9}]}}, {{0x9, 0x5, 0x7, 0x13, 0x10, 0x5, 0xe, 0x81}}]}}, {{0x9, 0x4, 0xe7, 0x9, 0x2, 0xf8, 0x9d, 0xab, 0x0, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '%'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x4, 0xe6e, 0x8}, {0x6, 0x24, 0x1a, 0x7fff, 0x2}}, @generic={0x80, 0x5, "bfb8155670ac035e4a561aa9ee9c0940b97962854a3d31e03f24d65b4a1152ce9e1389d926e6b95e8a38f8ccf32d37bf0cd2e76d6264766497477b0e8e02461fd2c52d85a1375800335fb5afd969941ef1c6e7bc5ecabfc02acb4448146222c3261de60d32cff6c2b7a7648455d4bb9f41dc9351d852273ad3f89db95ab6"}], [{{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x3, 0x0, 0x8}}, {{0x9, 0x5, 0x0, 0x14, 0x210, 0x80, 0x6, 0xf6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x4116}]}}]}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x8, [{0x2, &(0x7f0000000200)=@string={0x2}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x96, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0]}, {0x51, &(0x7f0000000640)=@string={0x51, 0x3, "8ccac8c6d6143e0cfa8b9e65e06218c597200dc9a5fc8924fb2a20c909a4d0279053574a422222ff68d59864327a482ed0d99e879b5360dab4aba87e29bd7d76c5e2d31d8b24bc884b902800000000"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x42c}}, {0x0, 0x0}, {0x3f, &(0x7f00000003c0)=@string={0x3f, 0x3, "42be0900004f4ee927abc1c8177eb12f5f7bf148437b32d240d96e6e4c56782afef65cc055bc7423a350d3e1acd4266b7f8ab711ee234d2ec1a58e4d1f"}}, {0x6, &(0x7f0000000000)=@string={0x6, 0x3, "54b65cbc"}}]}) 1.095499108s ago: executing program 3 (id=15473): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = getpgrp(0xffffffffffffffff) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r3, r4, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 875.518003ms ago: executing program 5 (id=15480): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x290) 755.140109ms ago: executing program 5 (id=15482): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000240)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @empty}, 'lo\x00'}) 747.27422ms ago: executing program 1 (id=15483): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) unshare(0x62040200) 683.001694ms ago: executing program 5 (id=15484): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r4}, 0x38) 586.657895ms ago: executing program 5 (id=15485): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="39020000000000000000140000000c000780070002"], 0x20}}, 0x0) 571.03065ms ago: executing program 5 (id=15486): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf250000", @ANYRES32, @ANYBLOB="001000008000000008000f0020"], 0xe8}}, 0x0) 490.561853ms ago: executing program 5 (id=15487): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040084}, 0x84) 471.029655ms ago: executing program 7 (id=15488): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) 423.279709ms ago: executing program 3 (id=15489): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x400000107ffff000, 0x0) 334.306641ms ago: executing program 1 (id=15490): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) 333.865446ms ago: executing program 7 (id=15491): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket(0x2c, 0x80000, 0x9) 332.795766ms ago: executing program 3 (id=15492): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x10000002]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000080)=@add_del={0x2, 0x0}) 255.483611ms ago: executing program 7 (id=15493): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0xd) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) 236.880466ms ago: executing program 1 (id=15494): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)='r0', 0x2, 0x1) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) 175.724438ms ago: executing program 7 (id=15495): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1d}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x24}}, 0x0) 168.255654ms ago: executing program 3 (id=15496): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, 0x0) 151.959121ms ago: executing program 1 (id=15497): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 61.769215ms ago: executing program 1 (id=15498): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x80}]}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@deltaction={0x18, 0x31, 0x9, 0x70bd2d, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004085}, 0x24000) 0s ago: executing program 1 (id=15499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty, 0x40}, {@in=@local, 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) kernel console output (not intermixed with test programs): 422] netlink: 2 bytes leftover after parsing attributes in process `syz.3.10318'. [ 664.656198][T29422] team0: entered promiscuous mode [ 664.673458][T29422] bridge0: port 1(team0) entered blocking state [ 664.691624][T29422] bridge0: port 1(team0) entered disabled state [ 664.712093][T29422] team0: entered allmulticast mode [ 665.277271][ T30] audit: type=1326 audit(2000000285.404:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29450 comm="syz.1.10331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x0 [ 666.293212][T29485] Invalid logical block size (34372) [ 666.302657][T29486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10347'. [ 666.336674][T29486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10347'. [ 666.611068][T29492] netlink: 664 bytes leftover after parsing attributes in process `syz.2.10351'. [ 667.370566][T29516] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10362'. [ 668.824930][ T30] audit: type=1400 audit(2000000288.944:3585): avc: denied { call } for pid=29584 comm="syz.5.10396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 668.889000][ T30] audit: type=1400 audit(2000000288.944:3586): avc: denied { transfer } for pid=29584 comm="syz.5.10396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 668.907257][T29591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10399'. [ 668.940634][T29591] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10399'. [ 669.479508][T29621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10414'. [ 669.960313][ T30] audit: type=1400 audit(2000000290.084:3587): avc: denied { accept } for pid=29650 comm="syz.3.10428" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 670.093465][ T30] audit: type=1326 audit(2000000290.214:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29660 comm="syz.3.10434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 670.157087][ T30] audit: type=1326 audit(2000000290.214:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29660 comm="syz.3.10434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 670.215828][ T30] audit: type=1326 audit(2000000290.214:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29660 comm="syz.3.10434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 670.296376][ T30] audit: type=1326 audit(2000000290.214:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29660 comm="syz.3.10434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 670.425633][ T30] audit: type=1326 audit(2000000290.214:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29660 comm="syz.3.10434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 670.487451][ T30] audit: type=1326 audit(2000000290.214:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29660 comm="syz.3.10434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 670.542382][T29677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10441'. [ 670.556606][ T30] audit: type=1326 audit(2000000290.214:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29660 comm="syz.3.10434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 671.055452][T29698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10452'. [ 671.372490][T29712] tmpfs: Bad value for 'nr_blocks' [ 673.160163][T29776] bond0: (slave geneve3): Releasing active interface [ 673.317199][T29779] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 673.345347][T29783] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.10487'. [ 673.400601][T17181] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 673.415939][T17181] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 673.563194][T25934] bond0: (slave syz_tun): Releasing backup interface [ 673.586697][T29789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 673.597042][T29789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 673.606356][T29789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 673.616945][T17181] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 673.634090][T29789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 673.643089][T29789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 673.646546][T17181] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 673.675913][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 673.698559][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 673.713340][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 673.726036][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 673.735977][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 674.314050][T29804] netlink: 'syz.1.10495': attribute type 16 has an invalid length. [ 674.337354][T29804] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.10495'. [ 674.555304][ T1132] bridge_slave_1: left allmulticast mode [ 674.561187][ T1132] bridge_slave_1: left promiscuous mode [ 674.568213][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.582800][ T1132] bridge_slave_0: left allmulticast mode [ 674.589669][ T1132] bridge_slave_0: left promiscuous mode [ 674.595416][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.603533][T29817] IPv6: NLM_F_CREATE should be specified when creating new route [ 674.635140][T29819] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10503'. [ 674.664881][T29819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10503'. [ 674.676124][ T7214] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 674.684388][T29819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10503'. [ 674.843615][ T1132] smc: removing net device ip6tnl0 with user defined pnetid SYZ1 [ 674.892649][ T7214] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.911120][ T7214] usb 6-1: config 0 has no interfaces? [ 674.935432][ T7214] usb 6-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 674.955797][ T7214] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.982451][ T7214] usb 6-1: config 0 descriptor?? [ 675.077415][ T1132] bond1 (unregistering): (slave xfrm1): Releasing backup interface [ 675.217655][ T7214] usb 6-1: USB disconnect, device number 46 [ 675.529249][ T1132] bond2 (unregistering): (slave geneve2): Releasing active interface [ 675.676364][ T1132] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 675.797213][T29789] Bluetooth: hci2: command tx timeout [ 676.939512][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.951791][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.963552][ T1132] bond0 (unregistering): Released all slaves [ 676.978658][ T1132] bond1 (unregistering): Released all slaves [ 677.211270][ T1132] bond2 (unregistering): Released all slaves [ 677.348139][ T1132] tipc: Disabling bearer [ 677.398297][ T1132] tipc: Left network mode [ 677.615027][T29915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10548'. [ 677.818081][T29788] chnl_net:caif_netlink_parms(): no params data found [ 677.865605][T29789] Bluetooth: hci2: command tx timeout [ 678.148003][T29949] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10562'. [ 678.187713][T29954] overlayfs: empty lowerdir [ 678.239873][T29788] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.284135][T29788] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.303866][T29788] bridge_slave_0: entered allmulticast mode [ 678.317174][T29788] bridge_slave_0: entered promiscuous mode [ 678.367387][T29788] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.374667][T29788] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.392360][T29788] bridge_slave_1: entered allmulticast mode [ 678.394030][T29958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10567'. [ 678.404498][T29788] bridge_slave_1: entered promiscuous mode [ 678.412788][T29958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10567'. [ 678.422986][T29958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10567'. [ 678.506687][ T1132] hsr_slave_0: left promiscuous mode [ 678.513201][ T1132] hsr_slave_1: left promiscuous mode [ 679.193257][T29968] netlink: 'syz.1.10570': attribute type 4 has an invalid length. [ 679.219264][T29788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.236732][T29788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.410179][T29788] team0: Port device team_slave_0 added [ 679.418382][T29976] netlink: 188 bytes leftover after parsing attributes in process `syz.5.10575'. [ 679.490020][T29788] team0: Port device team_slave_1 added [ 679.611664][T29788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.639978][T29788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.696036][T29788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.724490][T29788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.765582][T29788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.875548][T29788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.946390][T29789] Bluetooth: hci2: command tx timeout [ 679.968469][T29788] hsr_slave_0: entered promiscuous mode [ 679.978819][T29788] hsr_slave_1: entered promiscuous mode [ 680.002085][ T1132] IPVS: stop unused estimator thread 0... [ 680.099616][T30008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10590'. [ 680.283804][T30015] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10594'. [ 680.555307][T29788] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 680.662863][T29788] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 680.692220][T29788] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 680.743170][T29788] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 681.001171][T29788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.047335][T29788] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.063759][T17198] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.070972][T17198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.100507][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.107665][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.331388][T30066] tmpfs: Bad value for 'nr_inodes' [ 681.417452][T29788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.537564][T30074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10615'. [ 681.720180][T30077] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 681.977516][T29788] veth0_vlan: entered promiscuous mode [ 682.007933][T29788] veth1_vlan: entered promiscuous mode [ 682.025701][T29789] Bluetooth: hci2: command tx timeout [ 682.099863][T29788] veth0_macvtap: entered promiscuous mode [ 682.138321][T29788] veth1_macvtap: entered promiscuous mode [ 682.184222][T29788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.213299][T29788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.249748][T17181] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.275982][T17181] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.310391][T17181] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.324786][T17181] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.477191][T17181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.501127][T17181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.567221][T17198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.583963][T17198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.606168][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 682.606185][ T30] audit: type=1400 audit(2000000302.725:3613): avc: denied { name_bind } for pid=30110 comm="syz.2.10632" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 682.752634][T30117] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 682.762953][ T30] audit: type=1400 audit(2000000302.885:3614): avc: denied { relabelto } for pid=30116 comm="syz.3.10634" name="TCPv6" dev="sockfs" ino=111213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:ppp_device_t:s0" [ 684.715615][T30186] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10664'. [ 685.552512][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.554504][T30198] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 685.584787][T30198] qnx6: wrong signature (magic) in superblock #1. [ 685.592458][T30198] qnx6: unable to read the first superblock [ 685.629468][T30204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10671'. [ 686.296215][T30248] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10691'. [ 687.840563][T30299] 9pnet: Could not find request transport: 0xffffffffffffffff [ 688.012619][T30310] 9p: Unknown Cache mode or invalid value m [ 688.046137][T30312] tipc: Failed to remove unknown binding: 66,1,1/2:1834396219/1834396221 [ 688.055263][T30312] tipc: Failed to remove unknown binding: 66,1,1/2:1834396219/1834396221 [ 688.303233][T30320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10723'. [ 688.307692][T30322] cgroup: Need name or subsystem set [ 688.393849][T30328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10726'. [ 688.670552][T30339] netlink: 393 bytes leftover after parsing attributes in process `syz.3.10731'. [ 689.374510][T30388] netlink: 'syz.2.10755': attribute type 28 has an invalid length. [ 689.388999][T30391] netlink: 188 bytes leftover after parsing attributes in process `syz.1.10756'. [ 689.511425][T30400] netlink: 'syz.1.10761': attribute type 6 has an invalid length. [ 689.655116][T18224] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 689.815509][T18224] usb 8-1: Using ep0 maxpacket: 8 [ 689.822271][T18224] usb 8-1: config 252 has an invalid interface number: 117 but max is 0 [ 689.831165][T18224] usb 8-1: config 252 has no interface number 0 [ 689.837569][T18224] usb 8-1: config 252 interface 117 has no altsetting 0 [ 689.846412][T18224] usb 8-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=82.4f [ 689.855875][T18224] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.864666][T18224] usb 8-1: Product: syz [ 689.869035][T18224] usb 8-1: Manufacturer: syz [ 689.883117][T18224] usb 8-1: SerialNumber: syz [ 689.961704][ T30] audit: type=1326 audit(2000000310.085:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30417 comm="syz.1.10769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 689.986841][ T30] audit: type=1326 audit(2000000310.085:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30417 comm="syz.1.10769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 690.010810][ T30] audit: type=1326 audit(2000000310.115:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30417 comm="syz.1.10769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 690.036965][ T30] audit: type=1326 audit(2000000310.115:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30417 comm="syz.1.10769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 690.060877][ T30] audit: type=1326 audit(2000000310.115:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30417 comm="syz.1.10769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 690.084778][ T30] audit: type=1326 audit(2000000310.115:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30417 comm="syz.1.10769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 690.115732][ T30] audit: type=1326 audit(2000000310.115:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30417 comm="syz.1.10769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 690.144072][T18224] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:252.117/input/input83 [ 690.160487][ T30] audit: type=1326 audit(2000000310.115:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30417 comm="syz.1.10769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 690.187265][ T5170] bcm5974 8-1:252.117: could not read from device [ 690.205325][T18224] usb 8-1: USB disconnect, device number 2 [ 690.313505][T30430] netlink: 'syz.5.10774': attribute type 25 has an invalid length. [ 690.376466][T30435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10776'. [ 690.511822][T30441] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 690.519223][T30441] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 690.591560][ T30] audit: type=1326 audit(2000000310.715:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30410 comm="syz.2.10766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7fc00000 [ 691.481884][T30465] netlink: 'syz.7.10791': attribute type 13 has an invalid length. [ 691.555466][T30465] gretap0: refused to change device tx_queue_len [ 691.572746][T30465] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 691.638858][T30475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10795'. [ 691.758312][T30481] netlink: 268 bytes leftover after parsing attributes in process `syz.5.10799'. [ 692.022308][T30502] tipc: Enabling of bearer rejected, failed to enable media [ 692.529150][T30531] 9p: Unknown access argument a: -22 [ 692.562863][T30535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10825'. [ 692.720390][T30541] IPv6: NLM_F_CREATE should be specified when creating new route [ 693.037874][T30561] netlink: 152 bytes leftover after parsing attributes in process `syz.5.10837'. [ 693.196693][T30571] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10842'. [ 693.829351][ T30] audit: type=1326 audit(2000000313.845:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30588 comm="syz.3.10850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 694.091064][T30603] xt_TCPMSS: Only works on TCP SYN packets [ 694.208646][T30613] bridge0: port 3(erspan0) entered blocking state [ 694.222757][T30613] bridge0: port 3(erspan0) entered disabled state [ 694.235297][T30613] erspan0: entered allmulticast mode [ 694.255613][T30613] erspan0: entered promiscuous mode [ 694.271564][T30613] bridge0: port 3(erspan0) entered blocking state [ 694.278220][T30613] bridge0: port 3(erspan0) entered forwarding state [ 694.486981][T30633] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10871'. [ 694.516376][T30633] netlink: 59 bytes leftover after parsing attributes in process `syz.5.10871'. [ 694.542149][T30633] netlink: 59 bytes leftover after parsing attributes in process `syz.5.10871'. [ 694.564748][T30637] netlink: 'syz.1.10873': attribute type 11 has an invalid length. [ 694.582907][T30637] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.10873'. [ 697.526010][T30742] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.10924'. [ 697.673196][T30757] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10931'. [ 697.689228][T30755] netlink: 200 bytes leftover after parsing attributes in process `syz.7.10930'. [ 697.743069][T30759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10932'. [ 697.784588][T30759] dummy0: Caught tx_queue_len zero misconfig [ 698.099587][T30787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10946'. [ 698.936767][T30806] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10954'. [ 699.243285][T30822] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10962'. [ 699.354606][ T1222] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 699.643250][ T1222] usb 8-1: config 0 has an invalid interface number: 133 but max is 0 [ 699.722003][ T1222] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.766064][ T1222] usb 8-1: config 0 has no interface number 0 [ 699.788834][ T1222] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 699.824500][ T1222] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.832521][ T1222] usb 8-1: Product: syz [ 699.871270][ T1222] usb 8-1: Manufacturer: syz [ 699.893695][ T1222] usb 8-1: SerialNumber: syz [ 700.025608][ T1222] usb 8-1: config 0 descriptor?? [ 700.097299][T30838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10969'. [ 700.279836][ T1222] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected [ 700.307728][ T1222] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 82 [ 700.365385][ T1222] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81 [ 700.412778][ T1222] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1 [ 700.451134][ T1222] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2 [ 700.531536][ T1222] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 700.566702][ T1222] usb 8-1: USB disconnect, device number 3 [ 700.603088][ T1222] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 700.646967][ T1222] keyspan 8-1:0.133: device disconnected [ 700.948796][T30874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10985'. [ 701.072117][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 701.072135][ T30] audit: type=1326 audit(701.047:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.3.10988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 701.237529][ T30] audit: type=1326 audit(701.087:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.3.10988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 701.314290][ T30] audit: type=1326 audit(701.087:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.3.10988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 701.380576][ T30] audit: type=1326 audit(701.087:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.3.10988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 701.512732][T30900] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11000'. [ 701.535017][T30900] netlink: 'syz.1.11000': attribute type 6 has an invalid length. [ 701.542860][T30900] netlink: 'syz.1.11000': attribute type 5 has an invalid length. [ 701.928052][T30921] netlink: 'syz.7.11009': attribute type 8 has an invalid length. [ 703.877974][ T30] audit: type=1400 audit(703.857:3677): avc: denied { accept } for pid=30973 comm="syz.1.11030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 709.784181][T31168] devpts: Bad value for 'max' [ 709.841852][T31173] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=31173 comm=syz.3.11119 [ 709.999842][T31182] netlink: 'syz.5.11122': attribute type 8 has an invalid length. [ 710.324439][T31195] __nla_validate_parse: 3 callbacks suppressed [ 710.324459][T31195] netlink: 108 bytes leftover after parsing attributes in process `syz.5.11130'. [ 710.360135][T31195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11130'. [ 710.868608][T31216] overlayfs: failed to clone upperpath [ 711.046285][T31222] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11143'. [ 711.586831][T31257] trusted_key: encrypted_key: insufficient parameters specified [ 713.568276][ T30] audit: type=1326 audit(713.548:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31311 comm="syz.5.11181" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32da58f6c9 code=0x0 [ 714.614735][T31339] devpts: Bad value for 'max' [ 715.136590][T31361] netlink: 'syz.5.11205': attribute type 25 has an invalid length. [ 715.224977][T31365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11207'. [ 715.267224][T31369] netlink: 88 bytes leftover after parsing attributes in process `syz.1.11210'. [ 715.757629][T31387] netlink: 'syz.5.11217': attribute type 1 has an invalid length. [ 716.512759][T31440] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11244'. [ 717.770285][T31474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11259'. [ 719.023448][T31524] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 719.354480][T31537] netlink: 240 bytes leftover after parsing attributes in process `syz.7.11284'. [ 719.487142][T31545] : renamed from bond_slave_0 [ 719.810695][T31565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11298'. [ 719.830131][T31568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31568 comm=syz.5.11299 [ 719.872001][T31565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11298'. [ 720.020566][T31581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11303'. [ 720.777303][T31630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11323'. [ 721.120329][T31654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 721.211693][T31660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11338'. [ 721.432000][T31678] x_tables: duplicate entry at hook 1 [ 721.611574][T31688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11352'. [ 721.745488][T31698] lo: Caught tx_queue_len zero misconfig [ 721.751255][T31698] netem: change failed [ 722.233120][T18224] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 722.413639][T18224] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 722.440026][T18224] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 722.451278][T18224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.461017][T18224] usb 3-1: Product: syz [ 722.490716][T18224] usb 3-1: Manufacturer: syz [ 722.495432][T18224] usb 3-1: SerialNumber: syz [ 722.739369][T31714] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 722.753274][T31752] vlan0: entered promiscuous mode [ 722.971778][T18224] cdc_ncm 3-1:1.0: bind() failure [ 722.985194][T18224] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 723.023226][T18224] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 723.049666][T18224] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 723.093326][T18224] usb 3-1: USB disconnect, device number 42 [ 724.197226][ T30] audit: type=1326 audit(724.178:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31785 comm="syz.5.11396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32da58f6c9 code=0x0 [ 724.583777][T31799] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11401'. [ 724.600424][T31799] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11401'. [ 724.643364][T31801] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11402'. [ 725.782122][T31866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11432'. [ 726.184922][T31886] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 726.235240][T31886] overlayfs: missing 'lowerdir' [ 726.614329][T31914] overlayfs: failed to resolve '/úòFoðÀÄ"á™ÅÁ cß': -2 [ 727.305338][T31949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11472'. [ 729.669824][T32048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11518'. [ 731.628232][ T7218] kworker/1:14 (7218) used greatest stack depth: 18184 bytes left [ 732.541887][T32163] netlink: 380 bytes leftover after parsing attributes in process `syz.3.11574'. [ 732.749345][T17189] tipc: Subscription rejected, illegal request [ 733.110494][T32190] netlink: 'syz.3.11587': attribute type 12 has an invalid length. [ 733.274850][T32199] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11589'. [ 733.416180][T32208] netlink: 'syz.1.11594': attribute type 10 has an invalid length. [ 733.452546][T32208] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11594'. [ 733.472853][T32208] dummy0: entered promiscuous mode [ 733.591083][T32216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11600'. [ 733.621569][T32218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11601'. [ 733.925066][T32236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11609'. [ 734.004616][T32239] bridge0: entered allmulticast mode [ 734.326683][ T30] audit: type=1400 audit(734.309:3680): avc: denied { ioctl } for pid=32256 comm="syz.3.11619" path="socket:[119168]" dev="sockfs" ino=119168 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 734.644594][T32274] netlink: 'syz.3.11627': attribute type 33 has an invalid length. [ 734.662648][T32274] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11627'. [ 734.941293][T32284] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 735.224465][T32302] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11641'. [ 735.247437][T32302] bridge: RTM_NEWNEIGH with invalid ether address [ 735.462488][ T30] audit: type=1400 audit(735.429:3681): avc: denied { mount } for pid=32313 comm="syz.2.11647" name="/" dev="pstore" ino=2900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 735.516618][ T30] audit: type=1400 audit(735.449:3682): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 735.863759][T32338] team0: left allmulticast mode [ 735.874639][T32338] bridge0: port 1(team0) entered disabled state [ 736.136773][T32338] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 736.178949][T32340] team0: No ports can be present during mode change [ 736.984119][ T30] audit: type=1326 audit(736.959:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32385 comm="syz.5.11681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32da58f6c9 code=0x7ffc0000 [ 737.029392][ T30] audit: type=1326 audit(736.959:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32385 comm="syz.5.11681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32da58f6c9 code=0x7ffc0000 [ 737.054344][ T30] audit: type=1326 audit(736.969:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32385 comm="syz.5.11681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f32da58f6c9 code=0x7ffc0000 [ 737.079222][ T30] audit: type=1326 audit(736.969:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32385 comm="syz.5.11681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32da58f6c9 code=0x7ffc0000 [ 737.104780][ T30] audit: type=1326 audit(736.969:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32385 comm="syz.5.11681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f32da58f6c9 code=0x7ffc0000 [ 737.177752][T32393] netlink: 57 bytes leftover after parsing attributes in process `syz.3.11683'. [ 737.182443][ T30] audit: type=1326 audit(736.969:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32385 comm="syz.5.11681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32da58f6c9 code=0x7ffc0000 [ 737.247547][ T30] audit: type=1326 audit(736.969:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32385 comm="syz.5.11681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f32da58f6c9 code=0x7ffc0000 [ 737.278213][T32397] netlink: 'syz.5.11686': attribute type 1 has an invalid length. [ 737.398524][T32397] 8021q: adding VLAN 0 to HW filter on device bond7 [ 737.613265][T32401] veth11: entered promiscuous mode [ 737.635501][T32401] bond7: (slave veth11): Enslaving as an active interface with a down link [ 737.711898][T32406] bond7: entered allmulticast mode [ 738.492971][T32449] 9pnet_fd: Insufficient options for proto=fd [ 739.306436][T32486] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 739.340425][T32486] overlayfs: missing 'lowerdir' [ 740.063908][T32523] lo speed is unknown, defaulting to 1000 [ 740.070791][T32523] lo speed is unknown, defaulting to 1000 [ 740.092742][T32523] lo speed is unknown, defaulting to 1000 [ 740.135706][T32523] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 740.202101][T32523] lo speed is unknown, defaulting to 1000 [ 740.242996][T32523] lo speed is unknown, defaulting to 1000 [ 740.252240][T32523] lo speed is unknown, defaulting to 1000 [ 740.262394][T32523] lo speed is unknown, defaulting to 1000 [ 740.272987][T32523] lo speed is unknown, defaulting to 1000 [ 740.308633][T32540] IPv6: Can't replace route, no match found [ 740.910391][T32563] 9p: Unknown access argument a: -22 [ 741.167382][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 741.167401][ T30] audit: type=1326 audit(741.129:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32574 comm="syz.1.11770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 741.253964][ T30] audit: type=1326 audit(741.129:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32574 comm="syz.1.11770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 741.286974][T32580] fuse: Invalid rootmode [ 741.311900][ T30] audit: type=1326 audit(741.199:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32574 comm="syz.1.11770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 741.384852][ T30] audit: type=1326 audit(741.199:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32574 comm="syz.1.11770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 741.537548][ T30] audit: type=1326 audit(741.199:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32574 comm="syz.1.11770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 741.564749][ T30] audit: type=1326 audit(741.209:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32574 comm="syz.1.11770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 741.602841][T32588] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 742.110249][T32590] bridge_slave_0: entered promiscuous mode [ 742.122603][T32588] CIFS mount error: No usable UNC path provided in device string! [ 742.122603][T32588] [ 742.142014][ T30] audit: type=1326 audit(741.209:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32574 comm="syz.1.11770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 742.142355][T32588] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 742.174864][ T30] audit: type=1326 audit(741.209:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32574 comm="syz.1.11770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 742.227378][ T30] audit: type=1326 audit(741.209:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32574 comm="syz.1.11770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 742.357071][ T30] audit: type=1326 audit(741.209:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32574 comm="syz.1.11770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 742.437215][T32600] sit0: Caught tx_queue_len zero misconfig [ 742.596245][T32608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11785'. [ 742.719547][T32616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11789'. [ 743.128129][T32639] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11801'. [ 743.677504][T32665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11812'. [ 743.955277][T32679] trusted_key: encrypted_key: master key parameter is missing [ 744.023069][T32686] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11823'. [ 744.114390][T32690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11825'. [ 745.246002][T32721] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11838'. [ 745.365139][T32729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11841'. [ 745.672103][T32745] netlink: 324 bytes leftover after parsing attributes in process `syz.2.11851'. [ 745.691488][T32745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11851'. [ 745.812710][T32749] netlink: 'syz.5.11848': attribute type 1 has an invalid length. [ 746.230408][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 746.230425][ T30] audit: type=1326 audit(746.210:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32764 comm="syz.2.11859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x0 [ 746.992095][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.153564][ T340] netlink: 'syz.2.11880': attribute type 13 has an invalid length. [ 747.336913][ T350] trusted_key: encrypted_key: master key parameter is missing [ 747.852347][ T367] __nla_validate_parse: 3 callbacks suppressed [ 747.852360][ T367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11893'. [ 747.872645][ T367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11893'. [ 748.019274][ T373] x_tables: duplicate underflow at hook 1 [ 748.085833][ T375] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11896'. [ 748.534878][ T397] 9pnet: Could not find request transport: fd.rfdno=79†åMß0¦·¢¢A[@}-žþ‹± [ 748.534878][ T397] [ 748.788575][ T412] netlink: 'syz.5.11914': attribute type 13 has an invalid length. [ 748.831954][ T1222] lo speed is unknown, defaulting to 1000 [ 748.838231][ T1222] syz2: Port: 1 Link ACTIVE [ 749.165737][ T434] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11924'. [ 749.913272][ T450] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11929'. [ 750.934761][ T506] netlink: 308 bytes leftover after parsing attributes in process `syz.3.11958'. [ 751.034280][ T513] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11961'. [ 753.596487][ T30] audit: type=1400 audit(753.580:3731): avc: denied { accept } for pid=610 comm="syz.1.12003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 753.707517][ T617] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12006'. [ 754.267988][ T649] tmpfs: Bad value for 'mpol' [ 754.331177][ T655] sit0: entered promiscuous mode [ 754.355358][ T655] netlink: 'syz.2.12026': attribute type 1 has an invalid length. [ 754.366653][ T655] netlink: 1 bytes leftover after parsing attributes in process `syz.2.12026'. [ 754.493947][ T663] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12029'. [ 754.559994][ T670] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12032'. [ 755.443559][ T675] xt_CT: You must specify a L4 protocol and not use inversions on it [ 755.663876][ T681] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12038'. [ 755.729715][ T685] overlay: Unknown parameter '/÷·Âí:²>Œ‚Ùw±ÀK£ [ 755.729715][ T685] ' [ 755.848255][ T691] dns_resolver: Unsupported content type (6) [ 755.848409][ T693] netem: change failed [ 756.017147][ T30] audit: type=1400 audit(756.000:3732): avc: denied { create } for pid=694 comm="syz.5.12046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 756.857615][ T744] overlayfs: overlapping lowerdir path [ 756.977843][ T752] netlink: 'syz.7.12070': attribute type 13 has an invalid length. [ 757.276535][ T768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12078'. [ 757.549747][ T780] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12084'. [ 757.756219][ T791] netlink: 'syz.1.12089': attribute type 13 has an invalid length. [ 757.945949][ T804] veth1_to_team: Caught tx_queue_len zero misconfig [ 759.694908][ T841] netlink: 'syz.5.12111': attribute type 13 has an invalid length. [ 759.708936][ T844] 9pnet_fd: Insufficient options for proto=fd [ 759.820846][ T30] audit: type=1326 audit(759.790:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.1.12114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 759.951086][ T30] audit: type=1326 audit(759.840:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.1.12114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 760.014912][ T30] audit: type=1326 audit(759.840:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.1.12114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 760.096130][ T30] audit: type=1326 audit(759.840:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.1.12114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 760.171003][ T30] audit: type=1326 audit(759.840:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.1.12114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1dda98df10 code=0x7ffc0000 [ 760.271867][ T30] audit: type=1326 audit(759.840:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.1.12114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1dda98df10 code=0x7ffc0000 [ 760.322678][ T30] audit: type=1326 audit(759.840:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.1.12114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 760.388679][ T30] audit: type=1326 audit(759.840:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.1.12114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 760.498897][ T30] audit: type=1326 audit(759.840:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.1.12114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 760.635184][ T30] audit: type=1326 audit(759.840:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.1.12114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 760.842720][ T895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12136'. [ 760.911459][ T895] 8021q: adding VLAN 0 to HW filter on device bond8 [ 761.172553][ T922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.224744][ T929] ref_ctr increment failed for inode: 0x723 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8880326d4080 [ 761.561611][ T934] lo speed is unknown, defaulting to 1000 [ 762.123976][ T979] netlink: 'syz.3.12165': attribute type 13 has an invalid length. [ 762.439398][ T991] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12172'. [ 763.234183][ T1035] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12190'. [ 763.260944][ T1035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12190'. [ 763.442640][ T1056] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12196'. [ 763.457220][ T1056] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12196'. [ 763.486933][ T1056] sit1: entered allmulticast mode [ 763.561463][ T1065] sit0: entered promiscuous mode [ 763.590348][ T1065] netlink: 'syz.3.12200': attribute type 1 has an invalid length. [ 763.618680][ T1065] netlink: 1 bytes leftover after parsing attributes in process `syz.3.12200'. [ 763.892162][ T1080] netlink: 'syz.3.12206': attribute type 12 has an invalid length. [ 764.339920][ T1114] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 764.359767][ T1114] overlayfs: missing 'lowerdir' [ 764.513603][ T1121] 8021q: adding VLAN 0 to HW filter on device bond5 [ 764.657950][ T1136] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12231'. [ 764.851617][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 764.851634][ T30] audit: type=1326 audit(16778209.839:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1145 comm="syz.5.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32da58f6c9 code=0x7ffc0000 [ 764.931168][ T30] audit: type=1326 audit(16778209.839:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1145 comm="syz.5.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32da58f6c9 code=0x7ffc0000 [ 765.010881][ T30] audit: type=1326 audit(16778209.879:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1145 comm="syz.5.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f32da58f6c9 code=0x7ffc0000 [ 765.070898][ T30] audit: type=1326 audit(16778209.879:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1145 comm="syz.5.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32da58f6c9 code=0x7ffc0000 [ 765.143775][ T30] audit: type=1326 audit(16778209.879:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1145 comm="syz.5.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32da58f6c9 code=0x7ffc0000 [ 765.171923][ T30] audit: type=1326 audit(16778209.889:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1145 comm="syz.5.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f32da58f6c9 code=0x7ffc0000 [ 765.288821][ T30] audit: type=1326 audit(16778209.889:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1145 comm="syz.5.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32da58f6c9 code=0x7ffc0000 [ 765.363819][ T30] audit: type=1326 audit(16778209.889:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1145 comm="syz.5.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32da58f6c9 code=0x7ffc0000 [ 765.420728][ T30] audit: type=1326 audit(16778209.889:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1145 comm="syz.5.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f32da58f6c9 code=0x7ffc0000 [ 765.501560][ T30] audit: type=1326 audit(16778209.889:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1145 comm="syz.5.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32da58f6c9 code=0x7ffc0000 [ 765.597663][ T1189] lo: Caught tx_queue_len zero misconfig [ 765.895441][ T1206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12267'. [ 766.457279][ T1240] netlink: 'syz.7.12277': attribute type 19 has an invalid length. [ 767.244551][ T1284] netlink: 'syz.5.12299': attribute type 322 has an invalid length. [ 767.329976][ T1286] netlink: 'syz.7.12300': attribute type 5 has an invalid length. [ 767.341167][ T1289] netlink: 'syz.3.12301': attribute type 64 has an invalid length. [ 767.404622][ T1289] netlink: 5 bytes leftover after parsing attributes in process `syz.3.12301'. [ 767.916899][ T1330] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12319'. [ 768.375596][ T1330] team0 (unregistering): Port device team_slave_0 removed [ 768.387258][ T1330] team0 (unregistering): Port device team_slave_1 removed [ 768.616217][ T1350] mac80211_hwsim hwsim11 wlan1: Caught tx_queue_len zero misconfig [ 770.468786][ T1456] macsec0: entered promiscuous mode [ 770.484325][ T1456] macsec0: entered allmulticast mode [ 770.499523][ T1456] veth1_macvtap: entered allmulticast mode [ 770.970995][ T1487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.094441][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.504964][ T1515] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12406'. [ 771.777593][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 771.777611][ T30] audit: type=1326 audit(16778216.759:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1527 comm="syz.1.12413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x0 [ 772.429402][ T30] audit: type=1326 audit(16778217.409:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1537 comm="syz.3.12417" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d6278f6c9 code=0x0 [ 772.796945][ T1558] 9pnet_fd: p9_fd_create_tcp (1558): problem connecting socket to 127.0.0.1 [ 773.529138][ T1595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12442'. [ 773.611254][ T1580] bridge0: port 3(erspan0) entered disabled state [ 773.759232][ T1580] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.766965][ T1580] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.181857][ T1580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.471093][ T1580] sit1: left allmulticast mode [ 774.510366][T17198] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.519845][T31283] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.553675][T31283] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.594043][T31283] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.112990][ T30] audit: type=1400 audit(16778221.099:3780): avc: denied { lock } for pid=1698 comm="syz.5.12484" path="socket:[125701]" dev="sockfs" ino=125701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 777.234072][ T1775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12518'. [ 778.213111][ T1821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12524'. [ 778.662745][ T30] audit: type=1326 audit(16778223.639:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1846 comm="syz.2.12551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 778.689517][ T30] audit: type=1326 audit(16778223.639:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1846 comm="syz.2.12551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 778.730209][ T30] audit: type=1326 audit(16778223.639:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1846 comm="syz.2.12551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 778.793588][ T30] audit: type=1326 audit(16778223.639:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1846 comm="syz.2.12551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 778.820956][ T30] audit: type=1326 audit(16778223.639:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1846 comm="syz.2.12551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 778.847406][ T30] audit: type=1326 audit(16778223.639:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1846 comm="syz.2.12551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 778.879128][ T30] audit: type=1326 audit(16778223.679:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1846 comm="syz.2.12551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 778.902805][ T30] audit: type=1326 audit(16778223.679:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1846 comm="syz.2.12551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 778.938613][ T1857] IPv6: A: Disabled Multicast RS [ 779.003560][ T30] audit: type=1326 audit(16778223.679:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1846 comm="syz.2.12551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 779.027264][ T30] audit: type=1326 audit(16778223.679:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1846 comm="syz.2.12551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 779.460769][ T1891] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12573'. [ 779.470789][ T1891] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12573'. [ 780.346829][ T1946] netlink: 68 bytes leftover after parsing attributes in process `syz.5.12599'. [ 780.913725][ T1629] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 780.935422][ T1994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1994 comm=syz.1.12624 [ 780.949846][ T1994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12624'. [ 781.069831][ T1629] usb 8-1: Using ep0 maxpacket: 8 [ 781.079290][ T1629] usb 8-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 781.117753][ T1629] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.156070][ T1629] usb 8-1: Product: syz [ 781.221397][ T1629] usb 8-1: Manufacturer: syz [ 781.229189][ T1629] usb 8-1: SerialNumber: syz [ 781.760498][ T1629] usb 8-1: config 0 descriptor?? [ 781.767829][ T1629] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 782.343866][ T2022] No control pipe specified [ 783.232985][ T2054] vlan1: entered promiscuous mode [ 783.238041][ T2054] bridge0: entered promiscuous mode [ 783.467666][ T2070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12657'. [ 783.622776][ T2080] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 783.638813][ T2080] Error validating options; rc = [-22] [ 783.968419][ T2102] netlink: 'syz.5.12674': attribute type 1 has an invalid length. [ 783.981892][ T2102] netlink: 1 bytes leftover after parsing attributes in process `syz.5.12674'. [ 784.009841][ T1629] gspca_sonixj: reg_w1 err -71 [ 784.014697][ T1629] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 784.033767][ T1629] usb 8-1: USB disconnect, device number 4 [ 784.099152][ T2109] overlayfs: missing 'lowerdir' [ 784.284820][ T2115] lo: entered allmulticast mode [ 784.291943][ T2115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 784.729296][ T2128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12687'. [ 784.813322][ T2135] 9pnet_fd: Insufficient options for proto=fd [ 785.119404][ T2155] lo: left allmulticast mode [ 785.500268][ T2180] fuse: Bad value for 'group_id' [ 785.512170][ T2180] fuse: Bad value for 'group_id' [ 785.658319][ T2190] pim6reg: left allmulticast mode [ 786.432254][ T2233] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12736'. [ 787.114925][ T2264] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.12752'. [ 788.038336][ T2314] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12776'. [ 788.693279][ T2360] netlink: 'syz.2.12799': attribute type 1 has an invalid length. [ 788.701319][ T2360] netlink: 'syz.2.12799': attribute type 2 has an invalid length. [ 788.709243][ T2360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12799'. [ 789.073703][ T2378] bond1: invalid ARP target 0.0.0.0 specified for addition [ 789.103167][ T2378] bond1: option arp_ip_target: invalid value (0) [ 789.193897][ T2392] netlink: 84 bytes leftover after parsing attributes in process `syz.5.12814'. [ 789.200279][ T2378] bond1 (unregistering): Released all slaves [ 789.414599][ T2407] 9p: Unknown Cache mode or invalid value d [ 790.000796][ T2449] trusted_key: encrypted_key: insufficient parameters specified [ 790.248462][ T2470] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12844'. [ 790.695441][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 790.695452][ T30] audit: type=1326 audit(16778235.680:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2504 comm="syz.7.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382bb8f6c9 code=0x50000 [ 790.733122][ T30] audit: type=1326 audit(16778235.720:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2504 comm="syz.7.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382bb8f6c9 code=0x50000 [ 790.758326][ T30] audit: type=1326 audit(16778235.720:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2504 comm="syz.7.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382bb8f6c9 code=0x50000 [ 790.784409][ T30] audit: type=1326 audit(16778235.720:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2504 comm="syz.7.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382bb8f6c9 code=0x50000 [ 790.807701][ T30] audit: type=1326 audit(16778235.720:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2504 comm="syz.7.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382bb8f6c9 code=0x50000 [ 790.833444][ T30] audit: type=1326 audit(16778235.720:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2504 comm="syz.7.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382bb8f6c9 code=0x50000 [ 790.923543][ T30] audit: type=1326 audit(16778235.720:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2504 comm="syz.7.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382bb8f6c9 code=0x50000 [ 790.978065][ T30] audit: type=1326 audit(16778235.720:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2504 comm="syz.7.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382bb8f6c9 code=0x50000 [ 791.066474][ T30] audit: type=1326 audit(16778235.720:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2504 comm="syz.7.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382bb8f6c9 code=0x50000 [ 791.137023][ T30] audit: type=1326 audit(16778235.720:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2504 comm="syz.7.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382bb8f6c9 code=0x50000 [ 792.193883][ T2528] netlink: 388 bytes leftover after parsing attributes in process `syz.1.12865'. [ 792.331444][ T2530] Device name cannot be null; rc = [-22] [ 794.098892][ T2590] netlink: 248 bytes leftover after parsing attributes in process `syz.2.12884'. [ 795.438067][ T2646] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 795.457825][ T2646] overlayfs: missing 'lowerdir' [ 795.792344][T29789] Bluetooth: hci2: command 0x0406 tx timeout [ 795.908616][ T30] kauditd_printk_skb: 6959 callbacks suppressed [ 795.908633][ T30] audit: type=1326 audit(16778240.890:10788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.1.12917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 795.946152][ T30] audit: type=1326 audit(16778240.890:10789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.1.12917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 796.029050][ T30] audit: type=1326 audit(16778240.930:10790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.1.12917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 796.072135][ T30] audit: type=1326 audit(16778240.930:10791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.1.12917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 796.139296][ T30] audit: type=1326 audit(16778240.930:10792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.1.12917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 796.203270][ T2693] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 796.208933][ T30] audit: type=1326 audit(16778240.930:10793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.1.12917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 796.243400][ T30] audit: type=1326 audit(16778240.960:10794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.1.12917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 796.284323][ T30] audit: type=1326 audit(16778240.960:10795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.1.12917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 796.284728][ T2696] overlayfs: failed to clone lowerpath [ 796.335818][ T30] audit: type=1326 audit(16778240.960:10796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.1.12917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 796.377657][ T2691] netlink: 'syz.3.12911': attribute type 1 has an invalid length. [ 796.383314][ T30] audit: type=1326 audit(16778240.960:10797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.1.12917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dda98f6c9 code=0x7ffc0000 [ 796.436985][ T2691] netlink: 'syz.3.12911': attribute type 2 has an invalid length. [ 796.456501][ T2691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12911'. [ 797.194522][ T2739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12940'. [ 797.866638][ T2779] netlink: 13 bytes leftover after parsing attributes in process `syz.2.12954'. [ 798.589174][ T2821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12971'. [ 799.708192][ T2875] vlan1: entered promiscuous mode [ 799.898504][ T2886] netlink: 37 bytes leftover after parsing attributes in process `syz.2.12990'. [ 799.910865][ T2886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 799.918113][ T2886] IPv6: NLM_F_CREATE should be set when creating new route [ 799.925367][ T2886] IPv6: NLM_F_CREATE should be set when creating new route [ 800.139606][ T2894] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 800.260026][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 800.296158][ T2901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12999'. [ 800.560813][ T2912] cgroup: Invalid name [ 801.753128][ T2965] netlink: 120 bytes leftover after parsing attributes in process `syz.1.13028'. [ 802.761219][ T3016] IPVS: length: 112 != 8 [ 802.931383][ T3027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13055'. [ 802.960484][ T3028] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13056'. [ 803.388277][ T3053] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 803.388558][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 803.388573][ T30] audit: type=1400 audit(16778248.371:10816): avc: denied { getattr } for pid=3052 comm="syz.7.13071" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 803.487883][ T30] audit: type=1400 audit(16778248.471:10817): avc: denied { unmount } for pid=29788 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 803.711809][ T3075] can: request_module (can-proto-0) failed. [ 803.718319][ T3077] netlink: 204 bytes leftover after parsing attributes in process `syz.7.13082'. [ 803.929269][ T3092] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 804.761347][ T3151] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13116'. [ 804.861966][ T3157] netlink: 536 bytes leftover after parsing attributes in process `syz.2.13119'. [ 804.871179][ T3157] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13119'. [ 804.985785][ T3166] netlink: 'syz.7.13124': attribute type 11 has an invalid length. [ 804.994051][ T3166] netlink: 32 bytes leftover after parsing attributes in process `syz.7.13124'. [ 805.485799][ T3193] can: request_module (can-proto-0) failed. [ 806.208397][ T30] audit: type=1326 audit(16778251.191:10818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="syz.2.13142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 806.233233][ T30] audit: type=1326 audit(16778251.191:10819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="syz.2.13142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 806.261359][ T30] audit: type=1326 audit(16778251.221:10820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="syz.2.13142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 806.328707][ T30] audit: type=1326 audit(16778251.221:10821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="syz.2.13142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 806.353065][ T30] audit: type=1326 audit(16778251.221:10822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="syz.2.13142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 806.377709][ T30] audit: type=1326 audit(16778251.221:10823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="syz.2.13142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 806.438596][ T30] audit: type=1326 audit(16778251.221:10824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="syz.2.13142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 806.472321][ T30] audit: type=1326 audit(16778251.251:10825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="syz.2.13142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 806.629608][ T3238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13154'. [ 807.253412][ T3280] overlayfs: failed to resolve './file0': -2 [ 807.795073][ T3313] 9p: Unknown Cache mode or invalid value m [ 808.431959][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.660799][ T3356] IPv6: sit2: Disabled Multicast RS [ 809.343092][ T3386] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.13225'. [ 810.393306][ T3444] trusted_key: encrypted_key: master key parameter 'd' is invalid [ 810.852473][ T3466] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 810.869881][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 810.869898][ T30] audit: type=1400 audit(16778255.851:10830): avc: denied { relabelto } for pid=3464 comm="syz.7.13259" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 810.907522][ T30] audit: type=1400 audit(16778255.891:10831): avc: denied { associate } for pid=3464 comm="syz.7.13259" name="ptp0" dev="devtmpfs" ino=1265 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 811.025690][ T3477] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13263'. [ 811.185650][ T3485] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 811.882914][T31283] tipc: Subscription rejected, illegal request [ 812.182563][ T3535] input: syz1 as /devices/virtual/input/input84 [ 813.043005][ T3573] tipc: Enabling of bearer rejected, failed to enable media [ 813.394284][ T30] audit: type=1326 audit(16778258.381:10832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3590 comm="syz.2.13320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 813.478428][ T30] audit: type=1326 audit(16778258.381:10833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3590 comm="syz.2.13320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 813.547982][ T30] audit: type=1326 audit(16778258.411:10834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3590 comm="syz.2.13320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 813.618739][ T30] audit: type=1326 audit(16778258.411:10835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3590 comm="syz.2.13320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 813.688228][ T30] audit: type=1326 audit(16778258.411:10836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3590 comm="syz.2.13320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 813.724074][ T30] audit: type=1326 audit(16778258.421:10837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3590 comm="syz.2.13320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 813.749824][ T30] audit: type=1326 audit(16778258.421:10838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3590 comm="syz.2.13320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 813.774991][ T30] audit: type=1326 audit(16778258.421:10839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3590 comm="syz.2.13320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 814.550296][ T3640] 9p: Unknown Cache mode or invalid value m [ 814.580137][ T3642] netlink: 'syz.1.13345': attribute type 21 has an invalid length. [ 814.648148][ T3646] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13347'. [ 814.782473][ T3654] netlink: 100 bytes leftover after parsing attributes in process `syz.2.13349'. [ 814.854466][ T3651] 9pnet: Could not find request transport: 0xffffffffffffffff [ 814.915330][ T3660] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13353'. [ 815.253199][ T3675] fuse: Bad value for 'group_id' [ 815.268292][ T3675] fuse: Bad value for 'group_id' [ 815.951101][ T3707] 9pnet_fd: p9_fd_create_unix (3707): problem connecting socket: ./bus: -2 [ 816.298944][ T3732] __vm_enough_memory: pid: 3732, comm: syz.1.13386, bytes: 21199649869824 not enough memory for the allocation [ 817.258232][ T3780] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13407'. [ 818.301823][ T3816] netlink: 'syz.7.13424': attribute type 13 has an invalid length. [ 819.455087][ T3861] netlink: 'syz.2.13446': attribute type 4 has an invalid length. [ 821.007419][ T3913] netlink: 36 bytes leftover after parsing attributes in process `syz.7.13468'. [ 821.944624][ T3943] lo: Caught tx_queue_len zero misconfig [ 822.339836][ T3968] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 823.430727][T18224] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 823.439482][ T4011] overlayfs: missing 'lowerdir' [ 823.498685][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 823.498702][ T30] audit: type=1400 audit(16778524.487:10859): avc: denied { shutdown } for pid=4006 comm="syz.7.13512" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 823.608021][T18224] usb 3-1: Using ep0 maxpacket: 16 [ 823.614700][T18224] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 823.649823][T18224] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 823.683898][T18224] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 823.695629][T18224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.711788][T18224] usb 3-1: Product: syz [ 823.718203][T18224] usb 3-1: Manufacturer: syz [ 823.722804][T18224] usb 3-1: SerialNumber: syz [ 823.882681][ T30] audit: type=1326 audit(16778524.867:10860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.3.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 824.050788][ T3993] smc: net device bond0 applied user defined pnetid SYZ2 [ 824.063476][ T30] audit: type=1326 audit(16778524.867:10861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.3.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 824.118896][ T3993] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13503'. [ 824.172534][ T3993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.208202][ T30] audit: type=1326 audit(16778524.917:10862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.3.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 824.261556][ T30] audit: type=1326 audit(16778524.917:10863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.3.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 824.298539][ T3993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.312205][ T30] audit: type=1326 audit(16778524.917:10864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.3.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 824.315480][T18224] usb 3-1: 0:2 : does not exist [ 824.370779][T18224] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 824.538818][T18224] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 824.559294][T18224] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 824.575465][T18224] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 824.638186][T18224] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 824.651033][T18224] usb 3-1: USB disconnect, device number 43 [ 824.810789][ T4061] netlink: 9 bytes leftover after parsing attributes in process `syz.1.13537'. [ 824.888807][ T4067] netlink: 756 bytes leftover after parsing attributes in process `syz.1.13540'. [ 824.961494][ T4070] overlayfs: failed to clone lowerpath [ 825.206753][ T4088] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13552'. [ 825.700891][ T4118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13566'. [ 825.792088][ T4123] trusted_key: encrypted_key: insufficient parameters specified [ 826.859577][ T4162] bridge_slave_0: invalid flags given to default FDB implementation [ 826.989782][ T4171] netlink: 'syz.7.13588': attribute type 39 has an invalid length. [ 827.686340][ T4194] netlink: 'syz.7.13597': attribute type 1 has an invalid length. [ 827.714254][ T4196] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13599'. [ 827.734516][ T4194] random: crng reseeded on system resumption [ 828.143688][ T4227] netlink: 'syz.2.13613': attribute type 64 has an invalid length. [ 828.157055][ T4227] netlink: 5 bytes leftover after parsing attributes in process `syz.2.13613'. [ 828.166471][ T4227] gretap0: entered allmulticast mode [ 828.172534][ T4227] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 828.463662][ T4245] netlink: 'syz.5.13622': attribute type 4 has an invalid length. [ 828.484930][T18224] lo speed is unknown, defaulting to 1000 [ 828.491079][T18224] syz2: Port: 1 Link DOWN [ 828.495999][ T4245] netlink: 'syz.5.13622': attribute type 4 has an invalid length. [ 828.517131][T18224] lo speed is unknown, defaulting to 1000 [ 828.523341][T18224] syz2: Port: 1 Link ACTIVE [ 828.721772][ T4259] netlink: 'syz.7.13629': attribute type 4 has an invalid length. [ 828.734424][ T4259] netlink: 3649 bytes leftover after parsing attributes in process `syz.7.13629'. [ 828.946063][ T4274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13637'. [ 829.580582][ T4306] netlink: 536 bytes leftover after parsing attributes in process `syz.7.13653'. [ 829.589867][ T4306] netlink: 124 bytes leftover after parsing attributes in process `syz.7.13653'. [ 829.902683][ T4324] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13662'. [ 830.173529][ T4335] netlink: 'syz.7.13666': attribute type 32 has an invalid length. [ 830.737218][ T4360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=4360 comm=syz.1.13674 [ 830.769597][ T4360] netlink: 72 bytes leftover after parsing attributes in process `syz.1.13674'. [ 830.823142][ T4366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13678'. [ 831.584450][ T4419] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 831.592987][ T4419] overlayfs: missing 'lowerdir' [ 832.290730][ T30] audit: type=1400 audit(16778533.277:10865): avc: denied { create } for pid=4452 comm="syz.2.13719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 832.388355][ T30] audit: type=1400 audit(16778533.287:10866): avc: denied { write } for pid=4452 comm="syz.2.13719" path="socket:[136442]" dev="sockfs" ino=136442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 832.481903][ T30] audit: type=1400 audit(16778533.297:10867): avc: denied { read } for pid=4452 comm="syz.2.13719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 832.678984][ T4472] netlink: 'syz.1.13727': attribute type 25 has an invalid length. [ 832.742909][ T30] audit: type=1326 audit(16778533.727:10868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.7.13729" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f382bb8f6c9 code=0x0 [ 833.533951][ T4515] netlink: 'syz.5.13744': attribute type 10 has an invalid length. [ 833.584079][ T4519] vlan1: entered allmulticast mode [ 833.588199][ T4515] netlink: 17 bytes leftover after parsing attributes in process `syz.5.13744'. [ 833.591671][ T4519] bridge_slave_0: entered allmulticast mode [ 833.871069][ T4532] netlink: 188 bytes leftover after parsing attributes in process `syz.2.13755'. [ 833.913324][ T4533] @: renamed from vlan0 [ 834.296990][ T4563] netlink: 84 bytes leftover after parsing attributes in process `syz.1.13768'. [ 834.941338][ T4598] netlink: 72 bytes leftover after parsing attributes in process `syz.7.13784'. [ 835.326521][ T30] audit: type=1326 audit(16778536.307:10869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.13798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 835.368892][ T30] audit: type=1326 audit(16778536.337:10870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.13798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 835.414140][ T30] audit: type=1326 audit(16778536.347:10871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.13798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 835.438105][ T30] audit: type=1326 audit(16778536.347:10872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.13798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 835.488094][ T30] audit: type=1326 audit(16778536.347:10873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.13798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 835.557984][ T30] audit: type=1326 audit(16778536.357:10874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.13798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 835.699005][ T4635] netlink: 288 bytes leftover after parsing attributes in process `syz.7.13805'. [ 836.575764][ T4695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13833'. [ 836.829057][ T4715] sit0: Caught tx_queue_len zero misconfig [ 837.305304][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 837.305321][ T30] audit: type=1400 audit(16778538.287:10880): avc: denied { getopt } for pid=4746 comm="syz.7.13857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 837.963235][ T4783] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13874'. [ 838.098196][ T30] audit: type=1400 audit(16778539.067:10881): avc: denied { mounton } for pid=4784 comm="syz.1.13875" path="/file0" dev="rootfs" ino=137320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 838.220292][ T4798] mmap: syz.2.13881 (4798): VmData 37453824 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 838.287605][ T30] audit: type=1400 audit(16778539.267:10882): avc: denied { create } for pid=4799 comm="syz.5.13877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 838.321768][ T4802] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13882'. [ 838.381175][ T4787] lo speed is unknown, defaulting to 1000 [ 838.491913][ T30] audit: type=1400 audit(16778539.477:10883): avc: denied { associate } for pid=4811 comm="syz.1.13875" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 838.558894][ T4815] x_tables: duplicate underflow at hook 1 [ 838.581279][ T30] audit: type=1401 audit(16778539.567:10884): op=fscreate invalid_context=CFA7 [ 839.852465][ T4856] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13908'. [ 840.375681][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13926'. [ 840.936344][ T4932] openvswitch: netlink: Missing valid actions attribute. [ 840.945611][ T4932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 841.132634][ T4943] trusted_key: encrypted_key: insufficient parameters specified [ 841.165763][ T4947] netlink: 96 bytes leftover after parsing attributes in process `syz.7.13953'. [ 841.289764][ T4950] cgroup2: Unknown parameter '18446744073709551615' [ 841.402941][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13961'. [ 841.412165][ T4964] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13961'. [ 841.639752][ T4984] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 841.653576][ T4984] Error validating options; rc = [-22] [ 841.777512][ T4975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13968'. [ 841.801127][ T4995] bpf: Bad value for 'gid' [ 841.801913][ T4996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13977'. [ 842.271937][ T5024] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13991'. [ 842.365559][ T5033] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13994'. [ 842.561173][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14001'. [ 842.723170][ T5058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14005'. [ 843.329899][ T5100] can: request_module (can-proto-0) failed. [ 843.612970][ T5125] netlink: 'syz.2.14038': attribute type 4 has an invalid length. [ 844.761909][ T5196] lo: Caught tx_queue_len zero misconfig [ 845.470881][ T5251] __nla_validate_parse: 4 callbacks suppressed [ 845.470909][ T5251] netlink: 84 bytes leftover after parsing attributes in process `syz.1.14093'. [ 845.487812][ T5251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14093'. [ 845.977750][ T5257] xt_CT: You must specify a L4 protocol and not use inversions on it [ 848.912426][ T5362] netlink: 388 bytes leftover after parsing attributes in process `syz.1.14144'. [ 849.657086][ T5404] netlink: 84 bytes leftover after parsing attributes in process `syz.1.14164'. [ 849.742590][ T5409] netlink: 'syz.1.14167': attribute type 10 has an invalid length. [ 850.310193][ T30] audit: type=1326 audit(16778807.297:10885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.2.14179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 850.353433][ T30] audit: type=1326 audit(16778807.317:10886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.2.14179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 850.404652][ T30] audit: type=1326 audit(16778807.317:10887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.2.14179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 850.438682][ T30] audit: type=1326 audit(16778807.317:10888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.2.14179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 850.462616][ T30] audit: type=1326 audit(16778807.317:10889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.2.14179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 850.901790][T29789] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 851.168832][ T5489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14200'. [ 851.778435][ T5502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14207'. [ 851.818582][ T5504] netlink: 260 bytes leftover after parsing attributes in process `syz.2.14208'. [ 852.511499][ T5551] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5551 comm=syz.2.14228 [ 852.852347][ T5610] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14239'. [ 853.013603][ T5623] netlink: 'syz.7.14242': attribute type 28 has an invalid length. [ 853.289724][ T1585] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 853.459260][ T1585] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.477986][ T1585] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.493477][ T1585] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 853.502914][ T1585] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.514226][ T1585] usb 8-1: config 0 descriptor?? [ 853.726340][ T1585] usbhid 8-1:0.0: can't add hid device: -71 [ 853.748188][ T1585] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 853.785110][ T1585] usb 8-1: USB disconnect, device number 5 [ 854.064077][ T5673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14262'. [ 854.833122][ T5728] fuse: Invalid rootmode [ 855.144619][ T30] audit: type=1400 audit(16778812.127:10890): avc: denied { listen } for pid=5708 comm="syz.3.14278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 855.315607][ T5761] netlink: 'syz.7.14307': attribute type 4 has an invalid length. [ 855.325782][ T5763] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14309'. [ 855.576783][ T5774] xt_l2tp: unknown flags: 51 [ 855.895206][ T30] audit: type=1400 audit(16778812.877:10891): avc: denied { mount } for pid=5793 comm="syz.2.14324" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 856.017816][ T5810] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14328'. [ 856.026970][ T5810] netlink: 51 bytes leftover after parsing attributes in process `syz.2.14328'. [ 856.036088][ T5810] netlink: 'syz.2.14328': attribute type 4 has an invalid length. [ 856.590799][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14346'. [ 857.099472][ T30] audit: type=1326 audit(16778814.077:10892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.2.14351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 857.220429][ T30] audit: type=1326 audit(16778814.077:10893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.2.14351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 858.982119][ T5947] netlink: 84 bytes leftover after parsing attributes in process `syz.7.14378'. [ 858.991364][ T5947] netlink: 68 bytes leftover after parsing attributes in process `syz.7.14378'. [ 859.419204][ T5961] 9pnet: Unknown protocol version 9 [ 861.252207][ T6033] netlink: 'syz.7.14417': attribute type 63 has an invalid length. [ 861.260400][ T6033] netlink: 5 bytes leftover after parsing attributes in process `syz.7.14417'. [ 861.269615][ T6033] gretap0: entered allmulticast mode [ 861.276439][ T6033] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 861.673339][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14431'. [ 861.690154][ T6062] SET target dimension over the limit! [ 861.780913][ T6069] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14435'. [ 862.371094][ T6083] bond0: left allmulticast mode [ 862.376147][ T6083] bond_slave_0: left allmulticast mode [ 862.403235][ T6083] bond_slave_1: left allmulticast mode [ 862.443463][ T6083] dummy0: left promiscuous mode [ 862.539419][ T6096] comedi comedi0: no devices specified [ 862.799803][ T6083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.864080][ T6083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.071192][ T6083] veth1_macvtap: left allmulticast mode [ 863.076849][ T6083] macsec0: left promiscuous mode [ 863.090222][ T6083] macsec0: left allmulticast mode [ 863.112781][ T6083] veth9: left promiscuous mode [ 863.183129][ T6083] vlan2: left allmulticast mode [ 863.206155][ T6083] veth1: left allmulticast mode [ 863.794547][ T6134] netlink: 48 bytes leftover after parsing attributes in process `syz.7.14463'. [ 864.034920][ T6148] dummy0: Caught tx_queue_len zero misconfig [ 864.595104][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14482'. [ 865.274604][ T6205] netlink: 40 bytes leftover after parsing attributes in process `syz.7.14497'. [ 865.353629][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14499'. [ 865.689521][ T6224] netlink: 'syz.2.14505': attribute type 4 has an invalid length. [ 865.697411][ T6224] netlink: 17 bytes leftover after parsing attributes in process `syz.2.14505'. [ 867.278996][ T6299] netdevsim netdevsim7: Direct firmware load for . [ 867.278996][ T6299] failed with error -2 [ 867.292237][ T30] audit: type=1400 audit(16778824.277:10894): avc: denied { firmware_load } for pid=6298 comm="syz.7.14541" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 867.312987][ T6299] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 867.312987][ T6299] [ 867.484535][ T6301] xt_limit: Overflow, try lower: 1207959552/384 [ 867.546152][ T6303] netlink: 96 bytes leftover after parsing attributes in process `syz.1.14543'. [ 868.045190][ T6323] netlink: 312 bytes leftover after parsing attributes in process `syz.1.14551'. [ 868.304557][ T30] audit: type=1400 audit(16778825.287:10895): avc: denied { map } for pid=6335 comm="syz.2.14559" path="pipe:[4509]" dev="pipefs" ino=4509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 868.478134][ T1629] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 868.524383][ T6329] lo speed is unknown, defaulting to 1000 [ 868.792707][ T1629] usb 8-1: config 0 has no interfaces? [ 868.806819][ T1629] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 868.859358][ T1629] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.895921][ T1629] usb 8-1: Product: syz [ 868.915229][ T1629] usb 8-1: Manufacturer: syz [ 868.939745][ T1629] usb 8-1: SerialNumber: syz [ 869.044977][ T1629] usb 8-1: config 0 descriptor?? [ 869.535906][ T6329] netdevsim netdevsim7 netdevsim0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 869.550346][ T6375] tmpfs: Bad value for 'huge' [ 869.562658][ T1629] usb 8-1: USB disconnect, device number 6 [ 869.586910][ T6366] lo speed is unknown, defaulting to 1000 [ 869.862781][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.638309][ T6406] netlink: 260 bytes leftover after parsing attributes in process `syz.7.14589'. [ 870.750944][ T6412] netlink: 'syz.1.14590': attribute type 4 has an invalid length. [ 870.763338][ T6412] netlink: 'syz.1.14590': attribute type 5 has an invalid length. [ 870.772801][ T6412] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.14590'. [ 871.203432][ T6424] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14595'. [ 871.991199][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14614'. [ 872.010237][ T6459] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14614'. [ 872.491063][ T30] audit: type=1326 audit(16778829.477:10896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.14619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 872.588092][ T30] audit: type=1326 audit(16778829.567:10897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.14619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 872.628237][ T30] audit: type=1326 audit(16778829.567:10898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.14619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 872.663748][ T30] audit: type=1326 audit(16778829.567:10899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.14619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 872.716946][ T30] audit: type=1326 audit(16778829.687:10900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.14619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 872.746198][ T30] audit: type=1326 audit(16778829.687:10901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.14619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 872.771324][ T30] audit: type=1326 audit(16778829.687:10902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.14619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 872.880260][ T30] audit: type=1326 audit(16778829.867:10903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.14619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 872.923061][ T30] audit: type=1326 audit(16778829.867:10904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.14619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 872.956413][ T30] audit: type=1326 audit(16778829.867:10905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.14619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6278f6c9 code=0x7ffc0000 [ 873.105482][ T6490] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14628'. [ 873.146741][ T6493] IPVS: stopping master sync thread 31524 ... [ 873.225505][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14631'. [ 874.293628][ T6569] tmpfs: Bad value for 'huge' [ 874.823379][ T6601] netlink: 48 bytes leftover after parsing attributes in process `syz.5.14681'. [ 875.388706][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14694'. [ 875.407625][ T6631] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14694'. [ 875.567515][ T6641] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 875.582430][ T6641] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 875.606826][ T6643] netlink: 'syz.3.14697': attribute type 17 has an invalid length. [ 875.657787][ T6645] IPv6: NLM_F_REPLACE set, but no existing node found! [ 875.939670][ T6660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6660 comm=syz.7.14707 [ 876.453220][ T6675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.464950][ T6736] netlink: 172 bytes leftover after parsing attributes in process `syz.2.14743'. [ 877.475075][ T6736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14743'. [ 878.073128][ T6775] netlink: 52 bytes leftover after parsing attributes in process `syz.7.14760'. [ 878.133341][ T6781] x_tables: duplicate underflow at hook 1 [ 878.318864][ T6793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14768'. [ 879.035668][ T6839] netlink: 'syz.2.14793': attribute type 4 has an invalid length. [ 879.043625][ T6839] netlink: 152 bytes leftover after parsing attributes in process `syz.2.14793'. [ 879.116030][ T6843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14794'. [ 879.214481][ T6854] netlink: 'syz.2.14798': attribute type 4 has an invalid length. [ 879.225176][ T6854] netlink: 17 bytes leftover after parsing attributes in process `syz.2.14798'. [ 879.374652][ T6865] netlink: 140 bytes leftover after parsing attributes in process `syz.2.14802'. [ 879.482014][ T6872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14806'. [ 880.350689][ T6919] ip6tnl0: Caught tx_queue_len zero misconfig [ 880.356801][ T6919] netlink: 'syz.1.14828': attribute type 3 has an invalid length. [ 880.723027][ T6945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=6945 comm=syz.1.14841 [ 880.737265][ T6945] netlink: 72 bytes leftover after parsing attributes in process `syz.1.14841'. [ 880.844399][ T6955] 9pnet_fd: Insufficient options for proto=fd [ 881.210506][ T6970] netlink: 'syz.5.14852': attribute type 1 has an invalid length. [ 881.394436][ T6973] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14852'. [ 881.560412][ T6972] bond9: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 881.646789][ T6973] bond9 (unregistering): (slave ip6gretap3): Releasing backup interface [ 881.661720][ T6973] bond9 (unregistering): Released all slaves [ 881.688669][ T6976] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14850'. [ 882.338908][ T1629] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 882.502377][ T1629] usb 3-1: Using ep0 maxpacket: 32 [ 882.520166][ T1629] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 882.540029][ T1629] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.555087][ T1629] usb 3-1: config 0 has no interface number 0 [ 882.561791][ T1629] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 882.573818][ T1629] usb 3-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 882.587397][ T1629] usb 3-1: config 0 interface 196 has no altsetting 0 [ 882.619067][ T1629] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 882.628891][ T1629] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 882.636979][ T1629] usb 3-1: Product: syz [ 882.641818][ T1629] usb 3-1: Manufacturer: syz [ 882.647243][ T1629] usb 3-1: SerialNumber: syz [ 882.655345][ T1629] usb 3-1: config 0 descriptor?? [ 882.938941][ T1629] ipheth 3-1:0.196: Unable to find endpoints [ 882.948536][ T1629] usb 3-1: USB disconnect, device number 44 [ 884.266478][ T7095] netlink: 72 bytes leftover after parsing attributes in process `syz.7.14908'. [ 884.607165][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14918'. [ 884.823164][ T7120] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14917'. [ 884.857450][ T7119] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14919'. [ 884.867458][ T7119] netlink: 59 bytes leftover after parsing attributes in process `syz.1.14919'. [ 884.876917][ T7119] netlink: 59 bytes leftover after parsing attributes in process `syz.1.14919'. [ 885.031157][ T7115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 885.063713][ T7115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 885.127507][ T7115] bond0 (unregistering): Released all slaves [ 885.682972][ T7139] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14925'. [ 885.741544][ T7143] netlink: 268 bytes leftover after parsing attributes in process `syz.3.14926'. [ 886.218617][ T7170] raw_sendmsg: syz.3.14940 forgot to set AF_INET. Fix it! [ 886.237058][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14930'. [ 886.247038][ T7168] erspan0: default FDB implementation only supports local addresses [ 886.276362][ T7175] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 887.060294][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 887.060311][ T30] audit: type=1326 audit(16778844.047:10916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.14968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 887.093171][ T30] audit: type=1326 audit(16778844.047:10917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.14968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 887.117645][ T30] audit: type=1326 audit(16778844.077:10918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.14968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 887.142246][ T30] audit: type=1326 audit(16778844.077:10919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.14968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 887.168489][ T30] audit: type=1326 audit(16778844.077:10920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.14968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 887.192642][ T30] audit: type=1326 audit(16778844.107:10921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.14968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 887.257360][ T30] audit: type=1326 audit(16778844.107:10922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.14968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 887.281474][ T30] audit: type=1326 audit(16778844.107:10923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.14968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 887.305666][ T30] audit: type=1326 audit(16778844.127:10924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.14968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 887.329615][ T30] audit: type=1326 audit(16778844.127:10925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.14968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970f58f6c9 code=0x7ffc0000 [ 887.463002][ T7235] lo speed is unknown, defaulting to 1000 [ 887.493837][ T7248] netlink: 'syz.1.14974': attribute type 28 has an invalid length. [ 889.883776][ T7335] syz.1.15010: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 889.915425][ T7335] CPU: 1 UID: 0 PID: 7335 Comm: syz.1.15010 Not tainted syzkaller #0 PREEMPT(full) [ 889.915458][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 889.915472][ T7335] Call Trace: [ 889.915479][ T7335] [ 889.915489][ T7335] dump_stack_lvl+0x16c/0x1f0 [ 889.915519][ T7335] warn_alloc+0x248/0x3a0 [ 889.915554][ T7335] ? __pfx_warn_alloc+0x10/0x10 [ 889.915582][ T7335] ? __pfx_stack_trace_save+0x10/0x10 [ 889.915605][ T7335] ? kasan_save_stack+0x42/0x60 [ 889.915616][ T7335] ? kasan_save_stack+0x33/0x60 [ 889.915626][ T7335] ? kasan_save_track+0x14/0x30 [ 889.915637][ T7335] ? xskq_create+0x52/0x1d0 [ 889.915650][ T7335] ? xsk_setsockopt+0x74e/0x9a0 [ 889.915669][ T7335] ? do_sock_setsockopt+0xf3/0x1d0 [ 889.915688][ T7335] ? xskq_create+0xfb/0x1d0 [ 889.915704][ T7335] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 889.915726][ T7335] ? xskq_create+0xfb/0x1d0 [ 889.915744][ T7335] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 889.915764][ T7335] ? xskq_create+0xfb/0x1d0 [ 889.915778][ T7335] vmalloc_user_noprof+0x9e/0xe0 [ 889.915793][ T7335] ? xskq_create+0xfb/0x1d0 [ 889.915808][ T7335] xskq_create+0xfb/0x1d0 [ 889.915824][ T7335] xsk_setsockopt+0x74e/0x9a0 [ 889.915839][ T7335] ? __pfx_xsk_setsockopt+0x10/0x10 [ 889.915853][ T7335] ? find_held_lock+0x2b/0x80 [ 889.915870][ T7335] ? selinux_socket_setsockopt+0x6a/0x80 [ 889.915882][ T7335] ? __pfx_xsk_setsockopt+0x10/0x10 [ 889.915897][ T7335] do_sock_setsockopt+0xf3/0x1d0 [ 889.915918][ T7335] __sys_setsockopt+0x1a0/0x230 [ 889.915936][ T7335] __x64_sys_setsockopt+0xbd/0x160 [ 889.915949][ T7335] ? do_syscall_64+0x91/0xfa0 [ 889.915960][ T7335] ? lockdep_hardirqs_on+0x7c/0x110 [ 889.915970][ T7335] do_syscall_64+0xcd/0xfa0 [ 889.915982][ T7335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.915994][ T7335] RIP: 0033:0x7f1dda98f6c9 [ 889.916005][ T7335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.916017][ T7335] RSP: 002b:00007f1ddb744038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 889.916028][ T7335] RAX: ffffffffffffffda RBX: 00007f1ddabe5fa0 RCX: 00007f1dda98f6c9 [ 889.916035][ T7335] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 889.916042][ T7335] RBP: 00007f1ddaa11f91 R08: 0000000000000004 R09: 0000000000000000 [ 889.916049][ T7335] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.916057][ T7335] R13: 00007f1ddabe6038 R14: 00007f1ddabe5fa0 R15: 00007fffc187c448 [ 889.916073][ T7335] [ 889.916914][ T7335] Mem-Info: [ 890.228398][ T7335] active_anon:75018 inactive_anon:0 isolated_anon:0 [ 890.228398][ T7335] active_file:8253 inactive_file:54449 isolated_file:0 [ 890.228398][ T7335] unevictable:17644 dirty:823 writeback:0 [ 890.228398][ T7335] slab_reclaimable:13748 slab_unreclaimable:112268 [ 890.228398][ T7335] mapped:30844 shmem:68502 pagetables:2123 [ 890.228398][ T7335] sec_pagetables:0 bounce:0 [ 890.228398][ T7335] kernel_misc_reclaimable:0 [ 890.228398][ T7335] free:1160779 free_pcp:23142 free_cma:0 [ 890.278116][ T7335] Node 0 active_anon:300072kB inactive_anon:0kB active_file:33012kB inactive_file:217500kB unevictable:69040kB isolated(anon):0kB isolated(file):0kB mapped:123324kB dirty:3272kB writeback:0kB shmem:272472kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:14648kB pagetables:8352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 890.344248][ T7335] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:296kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:20kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 890.417943][ T7335] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 890.512979][ T7335] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 890.532662][ T7335] Node 0 DMA32 free:715200kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:303172kB inactive_anon:0kB active_file:33012kB inactive_file:217500kB unevictable:69040kB writepending:3272kB zspages:0kB present:3129332kB managed:2544856kB mlocked:0kB bounce:0kB free_pcp:91024kB local_pcp:18536kB free_cma:0kB [ 890.634645][ T7335] lowmem_reserve[]: 0 0 1 1 1 [ 890.647980][ T7335] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 890.765031][ T7335] lowmem_reserve[]: 0 0 0 0 0 [ 890.771320][ T7335] Node 1 Normal free:3911056kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:296kB unevictable:1536kB writepending:20kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 890.824848][ T7339] netlink: 260 bytes leftover after parsing attributes in process `syz.2.15012'. [ 890.834035][ T7335] lowmem_reserve[]: 0 0 0 0 0 [ 890.834080][ T7335] Node 0 DMA: [ 890.839453][ T7339] netlink: 104 bytes leftover after parsing attributes in process `syz.2.15012'. [ 890.852592][ T7339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15012'. [ 890.865078][ T7335] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 890.881336][ T7335] Node 0 DMA32: 1304*4kB (ME) 859*8kB (UME) 749*16kB (UME) 829*32kB (UME) 437*64kB (UME) 301*128kB (UM) 179*256kB (UM) 40*512kB (UM) 37*1024kB (UME) 8*2048kB (UM) 119*4096kB (UM) = 725096kB [ 890.905997][ T7335] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 890.923738][ T7335] Node 1 Normal: 152*4kB (UE) 46*8kB (UME) 38*16kB (UME) 211*32kB (UME) 84*64kB (UME) 32*128kB (UME) 8*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 4*2048kB (ME) 946*4096kB (M) = 3911056kB [ 890.948328][ T7335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 890.963117][ T7335] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 890.973440][ T7335] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 890.983686][ T7335] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 890.993968][ T7335] 148277 total pagecache pages [ 890.998837][ T7335] 0 pages in swap cache [ 891.002982][ T7335] Free swap = 124996kB [ 891.007220][ T7335] Total swap = 124996kB [ 891.011470][ T7335] 2097051 pages RAM [ 891.015337][ T7335] 0 pages HighMem/MovableOnly [ 891.020218][ T7335] 428747 pages reserved [ 891.024446][ T7335] 0 pages cma reserved [ 891.187855][ T7351] overlayfs: failed to resolve '/úòFoðÀÄ"á™ÅÁ cß': -2 [ 891.295046][ T7359] netlink: 'syz.1.15021': attribute type 4 has an invalid length. [ 891.512809][ T7375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15028'. [ 891.533963][ T7377] vxcan3: entered allmulticast mode [ 893.329185][ T7451] fuse: Bad value for 'fd' [ 893.624927][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15068'. [ 893.730868][ T7465] tmpfs: Bad value for 'mpol' [ 893.817746][ T7469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15073'. [ 894.880974][ T7534] netlink: 20 bytes leftover after parsing attributes in process `syz.7.15103'. [ 894.893587][ T7534] netlink: 20 bytes leftover after parsing attributes in process `syz.7.15103'. [ 894.957302][ T7534] netlink: 20 bytes leftover after parsing attributes in process `syz.7.15103'. [ 894.966585][ T7534] netlink: 20 bytes leftover after parsing attributes in process `syz.7.15103'. [ 897.463384][ T7668] kAFS: unable to lookup cell '(,' [ 897.558285][ T7672] __nla_validate_parse: 2 callbacks suppressed [ 897.558303][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15166'. [ 897.686170][ T7677] netlink: 128 bytes leftover after parsing attributes in process `syz.5.15168'. [ 897.701577][ T7683] overlayfs: conflicting options: userxattr,redirect_dir=on [ 897.903607][ T7691] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15174'. [ 897.955535][ T7697] netlink: 268 bytes leftover after parsing attributes in process `syz.2.15178'. [ 897.957012][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15180'. [ 898.626504][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15191'. [ 899.722900][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 899.722917][ T30] audit: type=1804 audit(16778856.707:10945): pid=7759 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.15204" name="file0" dev="ramfs" ino=148813 res=1 errno=0 [ 899.865757][ T30] audit: type=1400 audit(16778856.847:10946): avc: denied { bind } for pid=7762 comm="syz.7.15207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 900.480485][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15221'. [ 900.498223][ T7793] tc_dump_action: action bad kind [ 900.603248][ T7798] netlink: 'syz.5.15222': attribute type 4 has an invalid length. [ 900.612749][ T7798] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.15222'. [ 901.418860][ T7832] netlink: 24 bytes leftover after parsing attributes in process `syz.7.15241'. [ 901.953974][ T7858] netlink: 'syz.7.15253': attribute type 21 has an invalid length. [ 902.185919][ T7872] netlink: 'syz.2.15259': attribute type 9 has an invalid length. [ 902.306711][ T30] audit: type=1400 audit(16778859.287:10947): avc: denied { audit_read } for pid=7877 comm="syz.2.15262" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 902.397993][ T847] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 902.558020][ T847] usb 8-1: Using ep0 maxpacket: 32 [ 902.571418][ T847] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 902.581020][ T847] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 902.591871][ T847] usb 8-1: config 0 has no interface number 0 [ 902.598319][ T847] usb 8-1: config 0 interface 196 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 902.611410][ T847] usb 8-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 902.627120][ T847] usb 8-1: config 0 interface 196 has no altsetting 0 [ 902.636707][ T847] usb 8-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 902.646238][ T847] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 902.654395][ T847] usb 8-1: Product: syz [ 902.658793][ T847] usb 8-1: Manufacturer: syz [ 902.663393][ T847] usb 8-1: SerialNumber: syz [ 902.676728][ T847] usb 8-1: config 0 descriptor?? [ 902.913678][ T847] ipheth 8-1:0.196: Unable to find endpoints [ 902.929505][ T847] usb 8-1: USB disconnect, device number 7 [ 904.190835][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15303'. [ 904.383555][ T7966] lo speed is unknown, defaulting to 1000 [ 904.508325][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15309'. [ 906.289128][ T8033] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 906.312492][ T8033] Error validating options; rc = [-22] [ 906.478678][ T8043] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 906.681003][ T8050] netlink: 'syz.7.15338': attribute type 4 has an invalid length. [ 906.689204][ T8050] netlink: 17 bytes leftover after parsing attributes in process `syz.7.15338'. [ 907.966270][ T8106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.233697][ T8121] tipc: Enabling of bearer rejected, failed to enable media [ 908.574547][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15378'. [ 908.737554][ T8157] Invalid ELF header len 16 [ 909.064426][ T8174] netlink: 84 bytes leftover after parsing attributes in process `syz.1.15394'. [ 909.073617][ T8174] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15394'. [ 909.180988][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15375'. [ 909.398561][ T8191] netlink: 52 bytes leftover after parsing attributes in process `syz.7.15402'. [ 909.437827][ T8193] overlayfs: missing 'lowerdir' [ 910.020899][ T8231] x_tables: unsorted underflow at hook 1 [ 910.136856][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15425'. [ 910.161705][ T8239] netlink: 'syz.7.15426': attribute type 4 has an invalid length. [ 910.188136][ T8239] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.15426'. [ 910.664573][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15443'. [ 910.818962][ T8282] netlink: 92 bytes leftover after parsing attributes in process `syz.5.15447'. [ 910.835885][ T8284] Device name cannot be null; rc = [-22] [ 911.748491][ T8310] netlink: 72 bytes leftover after parsing attributes in process `syz.2.15459'. [ 912.112217][ T8338] atomic_op ffff88806bbd4198 conn xmit_atomic 0000000000000000 [ 912.187982][ T1625] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 912.347975][ T1625] usb 3-1: Using ep0 maxpacket: 16 [ 912.354812][ T1625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.388475][ T1625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.400801][ T1625] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 912.413839][ T1625] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 912.424961][ T1625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.435445][ T1625] usb 3-1: config 0 descriptor?? [ 912.597269][ T8367] netlink: 'syz.5.15485': attribute type 2 has an invalid length. [ 912.666571][ T8369] netlink: 'syz.5.15486': attribute type 32 has an invalid length. [ 912.714812][ T8363] lo speed is unknown, defaulting to 1000 [ 912.856923][ T1625] input: HID 0955:7214 Haptics as /devices/virtual/input/input85 [ 912.934200][ T1625] shield 0003:0955:7214.0038: Registered Thunderstrike controller [ 912.964754][ T1625] shield 0003:0955:7214.0038: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 913.050866][ T8328] random: crng reseeded on system resumption [ 913.053294][ T30] audit: type=1400 audit(16778870.037:10948): avc: denied { write } for pid=8325 comm="syz.2.15467" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 913.105329][ T8328] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15467'. [ 913.119542][ T8328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.128832][ T8328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.160332][ T1625] shield 0003:0955:7214.0038: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 913.171604][ T1629] usb 3-1: USB disconnect, device number 45 [ 913.185818][ T1629] ------------[ cut here ]------------ [ 913.191288][ T1629] workqueue: work disable count underflowed [ 913.197240][ T1629] WARNING: CPU: 0 PID: 1629 at kernel/workqueue.c:4355 enable_work+0x2f8/0x340 [ 913.206201][ T1629] Modules linked in: [ 913.210451][ T1629] CPU: 0 UID: 0 PID: 1629 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT(full) [ 913.219823][ T1629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 913.229876][ T1629] Workqueue: usb_hub_wq hub_event [ 913.234905][ T1629] RIP: 0010:enable_work+0x2f8/0x340 [ 913.240097][ T1629] Code: 89 ee e8 3b b8 38 00 45 84 ed 0f 85 29 fe ff ff e8 4d bd 38 00 c6 05 da 67 e6 0e 01 90 48 c7 c7 20 29 8c 8b e8 a9 f0 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 d7 60 a1 00 e9 aa fe ff ff [ 913.259695][ T1629] RSP: 0018:ffffc9000417f3b0 EFLAGS: 00010086 [ 913.265753][ T1629] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9001aa42000 [ 913.273715][ T1629] RDX: 0000000000100000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 913.281672][ T1629] RBP: ffff8880296a7738 R08: 0000000000000001 R09: 0000000000000000 [ 913.289627][ T1629] R10: 0000000000000000 R11: fffffffffffd5078 R12: 1ffff9200082fe77 [ 913.297582][ T1629] R13: 0000000000000000 R14: ffff8880296a7698 R15: ffff8880296a7730 [ 913.305540][ T1629] FS: 0000000000000000(0000) GS:ffff888124a05000(0000) knlGS:0000000000000000 [ 913.314461][ T1629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 913.321029][ T1629] CR2: 00000000000000da CR3: 0000000068c00000 CR4: 00000000003526f0 [ 913.328986][ T1629] Call Trace: [ 913.332248][ T1629] [ 913.335168][ T1629] ? __pfx_enable_work+0x10/0x10 [ 913.340104][ T1629] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 913.345908][ T1629] __cancel_work_sync+0xe7/0x130 [ 913.350839][ T1629] thermal_zone_device_unregister+0x28e/0x4d0 [ 913.356899][ T1629] ? __pfx_shield_remove+0x10/0x10 [ 913.362016][ T1629] power_supply_unregister+0x10a/0x150 [ 913.367489][ T1629] shield_remove+0x75/0x130 [ 913.372002][ T1629] ? __pfx_shield_remove+0x10/0x10 [ 913.377195][ T1629] hid_device_remove+0xd1/0x260 [ 913.382042][ T1629] ? __pfx_hid_device_remove+0x10/0x10 [ 913.387500][ T1629] device_remove+0xcb/0x170 [ 913.391997][ T1629] device_release_driver_internal+0x44b/0x620 [ 913.398066][ T1629] bus_remove_device+0x22f/0x420 [ 913.403012][ T1629] device_del+0x396/0x9f0 [ 913.407340][ T1629] ? __pfx_device_del+0x10/0x10 [ 913.412177][ T1629] ? do_raw_spin_lock+0x12c/0x2b0 [ 913.417198][ T1629] hid_destroy_device+0x19c/0x240 [ 913.422215][ T1629] usbhid_disconnect+0xa0/0xe0 [ 913.426974][ T1629] usb_unbind_interface+0x1dd/0x9e0 [ 913.432198][ T1629] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 913.437835][ T1629] ? __pfx_usb_unbind_interface+0x10/0x10 [ 913.443568][ T1629] device_remove+0x125/0x170 [ 913.448153][ T1629] device_release_driver_internal+0x44b/0x620 [ 913.454221][ T1629] bus_remove_device+0x22f/0x420 [ 913.459161][ T1629] device_del+0x396/0x9f0 [ 913.463497][ T1629] ? __pfx_device_del+0x10/0x10 [ 913.468339][ T1629] ? kobject_put+0x210/0x5a0 [ 913.472936][ T1629] usb_disable_device+0x355/0x7d0 [ 913.477976][ T1629] usb_disconnect+0x2e1/0x9c0 [ 913.482657][ T1629] hub_event+0x1c81/0x4fe0 [ 913.487090][ T1629] ? __lock_acquire+0xb8a/0x1c90 [ 913.492021][ T1629] ? __pfx_hub_event+0x10/0x10 [ 913.496783][ T1629] ? assoc_array_destroy_subtree.part.0+0x2c0/0x4d0 [ 913.503382][ T1629] ? rcu_is_watching+0x12/0xc0 [ 913.508149][ T1629] process_one_work+0x9cf/0x1b70 [ 913.513089][ T1629] ? __pfx_process_one_work+0x10/0x10 [ 913.518460][ T1629] ? assign_work+0x1a0/0x250 [ 913.523044][ T1629] worker_thread+0x6c8/0xf10 [ 913.527630][ T1629] ? __kthread_parkme+0x19e/0x250 [ 913.532651][ T1629] ? __pfx_worker_thread+0x10/0x10 [ 913.537752][ T1629] kthread+0x3c5/0x780 [ 913.541814][ T1629] ? __pfx_kthread+0x10/0x10 [ 913.546395][ T1629] ? rcu_is_watching+0x12/0xc0 [ 913.551166][ T1629] ? __pfx_kthread+0x10/0x10 [ 913.555762][ T1629] ret_from_fork+0x675/0x7d0 [ 913.560350][ T1629] ? __pfx_kthread+0x10/0x10 [ 913.564939][ T1629] ret_from_fork_asm+0x1a/0x30 [ 913.569719][ T1629] [ 913.572727][ T1629] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 913.579994][ T1629] CPU: 0 UID: 0 PID: 1629 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT(full) [ 913.589353][ T1629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 913.599408][ T1629] Workqueue: usb_hub_wq hub_event [ 913.604429][ T1629] Call Trace: [ 913.607692][ T1629] [ 913.610607][ T1629] dump_stack_lvl+0x3d/0x1f0 [ 913.615185][ T1629] vpanic+0x640/0x6f0 [ 913.619165][ T1629] ? enable_work+0x2f8/0x340 [ 913.623747][ T1629] panic+0xca/0xd0 [ 913.627463][ T1629] ? __pfx_panic+0x10/0x10 [ 913.631886][ T1629] check_panic_on_warn+0xab/0xb0 [ 913.636811][ T1629] __warn+0xf6/0x3c0 [ 913.640686][ T1629] ? __pfx_vprintk_emit+0x10/0x10 [ 913.645701][ T1629] ? enable_work+0x2f8/0x340 [ 913.650283][ T1629] report_bug+0x3c3/0x580 [ 913.654610][ T1629] ? enable_work+0x2f8/0x340 [ 913.659188][ T1629] handle_bug+0x184/0x210 [ 913.663507][ T1629] exc_invalid_op+0x17/0x50 [ 913.667995][ T1629] asm_exc_invalid_op+0x1a/0x20 [ 913.672830][ T1629] RIP: 0010:enable_work+0x2f8/0x340 [ 913.678015][ T1629] Code: 89 ee e8 3b b8 38 00 45 84 ed 0f 85 29 fe ff ff e8 4d bd 38 00 c6 05 da 67 e6 0e 01 90 48 c7 c7 20 29 8c 8b e8 a9 f0 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 d7 60 a1 00 e9 aa fe ff ff [ 913.697605][ T1629] RSP: 0018:ffffc9000417f3b0 EFLAGS: 00010086 [ 913.703656][ T1629] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9001aa42000 [ 913.711609][ T1629] RDX: 0000000000100000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 913.719561][ T1629] RBP: ffff8880296a7738 R08: 0000000000000001 R09: 0000000000000000 [ 913.727522][ T1629] R10: 0000000000000000 R11: fffffffffffd5078 R12: 1ffff9200082fe77 [ 913.735492][ T1629] R13: 0000000000000000 R14: ffff8880296a7698 R15: ffff8880296a7730 [ 913.743459][ T1629] ? __warn_printk+0x1a5/0x350 [ 913.748226][ T1629] ? __pfx_enable_work+0x10/0x10 [ 913.753154][ T1629] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 913.758952][ T1629] __cancel_work_sync+0xe7/0x130 [ 913.763879][ T1629] thermal_zone_device_unregister+0x28e/0x4d0 [ 913.769936][ T1629] ? __pfx_shield_remove+0x10/0x10 [ 913.775038][ T1629] power_supply_unregister+0x10a/0x150 [ 913.780488][ T1629] shield_remove+0x75/0x130 [ 913.784979][ T1629] ? __pfx_shield_remove+0x10/0x10 [ 913.790078][ T1629] hid_device_remove+0xd1/0x260 [ 913.794913][ T1629] ? __pfx_hid_device_remove+0x10/0x10 [ 913.800359][ T1629] device_remove+0xcb/0x170 [ 913.804846][ T1629] device_release_driver_internal+0x44b/0x620 [ 913.810907][ T1629] bus_remove_device+0x22f/0x420 [ 913.815840][ T1629] device_del+0x396/0x9f0 [ 913.820155][ T1629] ? __pfx_device_del+0x10/0x10 [ 913.824988][ T1629] ? do_raw_spin_lock+0x12c/0x2b0 [ 913.830007][ T1629] hid_destroy_device+0x19c/0x240 [ 913.835022][ T1629] usbhid_disconnect+0xa0/0xe0 [ 913.839780][ T1629] usb_unbind_interface+0x1dd/0x9e0 [ 913.844977][ T1629] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 913.850593][ T1629] ? __pfx_usb_unbind_interface+0x10/0x10 [ 913.856304][ T1629] device_remove+0x125/0x170 [ 913.860879][ T1629] device_release_driver_internal+0x44b/0x620 [ 913.866940][ T1629] bus_remove_device+0x22f/0x420 [ 913.871881][ T1629] device_del+0x396/0x9f0 [ 913.876202][ T1629] ? __pfx_device_del+0x10/0x10 [ 913.881038][ T1629] ? kobject_put+0x210/0x5a0 [ 913.885622][ T1629] usb_disable_device+0x355/0x7d0 [ 913.890646][ T1629] usb_disconnect+0x2e1/0x9c0 [ 913.895319][ T1629] hub_event+0x1c81/0x4fe0 [ 913.899754][ T1629] ? __lock_acquire+0xb8a/0x1c90 [ 913.904679][ T1629] ? __pfx_hub_event+0x10/0x10 [ 913.909436][ T1629] ? assoc_array_destroy_subtree.part.0+0x2c0/0x4d0 [ 913.916032][ T1629] ? rcu_is_watching+0x12/0xc0 [ 913.920791][ T1629] process_one_work+0x9cf/0x1b70 [ 913.925731][ T1629] ? __pfx_process_one_work+0x10/0x10 [ 913.931096][ T1629] ? assign_work+0x1a0/0x250 [ 913.935673][ T1629] worker_thread+0x6c8/0xf10 [ 913.940262][ T1629] ? __kthread_parkme+0x19e/0x250 [ 913.945283][ T1629] ? __pfx_worker_thread+0x10/0x10 [ 913.950378][ T1629] kthread+0x3c5/0x780 [ 913.954434][ T1629] ? __pfx_kthread+0x10/0x10 [ 913.959010][ T1629] ? rcu_is_watching+0x12/0xc0 [ 913.963762][ T1629] ? __pfx_kthread+0x10/0x10 [ 913.968336][ T1629] ret_from_fork+0x675/0x7d0 [ 913.972908][ T1629] ? __pfx_kthread+0x10/0x10 [ 913.977480][ T1629] ret_from_fork_asm+0x1a/0x30 [ 913.982252][ T1629] [ 913.985619][ T1629] Kernel Offset: disabled [ 913.989921][ T1629] Rebooting in 86400 seconds..