last executing test programs: 2m28.632072257s ago: executing program 0 (id=245): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_clone(0x8021000, &(0x7f0000000000), 0x0, &(0x7f0000000100), 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1f4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000a80)=0x1, 0x4) r2 = syz_open_dev$loop(&(0x7f00000017c0), 0x9, 0x1) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000100)={r0, 0x0, {0x0, 0x0, 0x0, 0x1000007d, 0x5, 0x0, 0x0, 0x9, 0x1c, "b06ad408469882e96c82a52af26f6ab29cb10c18c8680ec9819e24948ccf67391105f6ad3f0800000006df1edc5edf0f7c3f2effce8c8c49286ccb9a97687534", "d7538c84e53ad718e1fbfa736d08c33e7db02c8dc71290b8e777d465fb23a027a9e2f47e2e7dc23809f8dc87fdff086327c203680e00000000000d00", "ea20822f425abb6a1ce430080a933d1fbe60cfc89eba00", [0x4008, 0x2a97]}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000053b000/0x4000)=nil, 0x4000, &(0x7f0000000080)='/dev/loop#\x00') r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) close(r2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) setsockopt(r3, 0x81, 0xe, &(0x7f0000000240)="249c65b4aab87f6589d72918ea1c4d00ef97de90cf7e9765c90033b1147076e225218a7523d5efafd9f4b66513e85bdf640e502bd04a1d3a70a97affc11a56ee1aed48aa5baa9d765fd35c9057891ae418cbf43393c4fab5533cdd1655ad986bdc7b77622e2b7deff50d9db1952fb545c5c8c1527c690701505bfac018aa64e3b22926e375c749c614d8543f881ebbeeb671ca5063205152867a1f998f0c8f8103df665bf658854898b61951d61711022e07d54ac8d7287c1b940141598d2fe59e44c7829a7e947d633b4faf0d4ad5642172a3cd73d5ff984a6b87bc742dfdc6", 0xe0) 2m28.492474629s ago: executing program 0 (id=249): capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x5f22}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 2m28.433599049s ago: executing program 0 (id=250): r0 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xb) r1 = socket$inet_udp(0x2, 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='!---\x00', 0x0, r1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4008054) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 2m25.381000857s ago: executing program 0 (id=271): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x2}, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x102) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000020240)='./file1\x00'}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') (async) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0, 0x35, 0x0, 0x1, 0x107}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000}, [@exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @tail_call]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x530dbdb7c0738e9c, 0x2c, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x7ffffff, &(0x7f0000000400)={0x5, 0x2, 0x660, 0x5a9}, 0x10}, 0x94) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) fspick(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1) (async) fspick(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') 2m25.33233412s ago: executing program 0 (id=273): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) truncate(&(0x7f00000001c0)='./file0\x00', 0x9) (async, rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a050000000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369040800e62807258a6d38caf4cb901d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4000000089140000001100010000000000000000000100000a"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x35, 0x4, 0x2}, 0x50) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000200)}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) (async) close(0x4) 2m24.983340243s ago: executing program 0 (id=275): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd21, 0x0, {0x2, 0x20, 0x14, 0x0, 0xff, 0x0, 0xfd, 0x5, 0x200}, [@RTA_IIF={0x8, 0x3, r3}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0xea5bc50b6199d7fe) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) r5 = fcntl$dupfd(r4, 0x0, r1) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={0x0, 0xb5, "8985b60ab0a578e41dd3468d00a91d05ce2e819be54cebf221b9ed6d659ed65d2a20598b0107e9d0a45c91510203c287993759c64d3b0f21215730cfd079450c51061a80b0f1da04be7fa1fa912fdfa48df091f1dbb7fc72ef81fcfa2672b3492d96770d849468a5bb209dfb6604860d37fc51495a217414daddaf589b2d85305549bb394cf5bd9c65126305fe29ea0fdab9785c47e3dfe82341a35ef229e95312103ada6e02d7997bc2ebc0bda764fe52505b4dc4"}, &(0x7f0000000240)=0xbd) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000280)={r6, 0x1}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) syz_open_dev$sndmidi(&(0x7f0000000000), 0x5e0, 0x430041) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) r9 = dup(r8) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r11, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r12}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r12}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, 0x0, 0x0, 0x2}, 0x20) (async) write$UHID_INPUT(r9, &(0x7f00000029c0)={0x8, {"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", 0x1000}}, 0x1006) 2m24.852782438s ago: executing program 32 (id=275): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd21, 0x0, {0x2, 0x20, 0x14, 0x0, 0xff, 0x0, 0xfd, 0x5, 0x200}, [@RTA_IIF={0x8, 0x3, r3}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0xea5bc50b6199d7fe) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) r5 = fcntl$dupfd(r4, 0x0, r1) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={0x0, 0xb5, "8985b60ab0a578e41dd3468d00a91d05ce2e819be54cebf221b9ed6d659ed65d2a20598b0107e9d0a45c91510203c287993759c64d3b0f21215730cfd079450c51061a80b0f1da04be7fa1fa912fdfa48df091f1dbb7fc72ef81fcfa2672b3492d96770d849468a5bb209dfb6604860d37fc51495a217414daddaf589b2d85305549bb394cf5bd9c65126305fe29ea0fdab9785c47e3dfe82341a35ef229e95312103ada6e02d7997bc2ebc0bda764fe52505b4dc4"}, &(0x7f0000000240)=0xbd) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000280)={r6, 0x1}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) syz_open_dev$sndmidi(&(0x7f0000000000), 0x5e0, 0x430041) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) r9 = dup(r8) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r11, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r12}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r12}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, 0x0, 0x0, 0x2}, 0x20) (async) write$UHID_INPUT(r9, &(0x7f00000029c0)={0x8, {"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", 0x1000}}, 0x1006) 2m5.903149184s ago: executing program 2 (id=505): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000180)={{0x0, 0x1}, 0x0, 0x0, 0x0, {0x9}}) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x100, 0x1) 2m5.902930782s ago: executing program 2 (id=506): capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x5f22}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff000000bfa300000000000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200c00000004604000001ed0000620300ff000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 2m5.843489372s ago: executing program 2 (id=507): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r1) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000000)={0x1, 0x1, [0x6, 0x1, 0x1, 0x451, 0x4, 0x80000000, 0xffffffff, 0xe]}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r1) (async) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000000)={0x1, 0x1, [0x6, 0x1, 0x1, 0x451, 0x4, 0x80000000, 0xffffffff, 0xe]}) (async) 2m2.971247151s ago: executing program 2 (id=513): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000280), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000000)=0xffffffffffffffff, 0x12) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x9) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 2m2.09334862s ago: executing program 2 (id=530): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') symlink(&(0x7f0000000200)='./file1\x00', &(0x7f0000000340)='./bus\x00') bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xd, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbe8}, [@call={0x85, 0x0, 0x0, 0x17}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0xf, r0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') (async) symlink(&(0x7f0000000200)='./file1\x00', &(0x7f0000000340)='./bus\x00') (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xd, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbe8}, [@call={0x85, 0x0, 0x0, 0x17}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0xf, r0}, 0x94) (async) 2m1.983551443s ago: executing program 2 (id=532): r0 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) r1 = socket$isdn(0x22, 0x2, 0x25) bind$isdn(r1, &(0x7f0000000200)={0x22, 0x7f, 0x6, 0x3, 0x5}, 0x6) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0cba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34201113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed00083fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f61e00"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x41, 0x3, 0x1c0, 0x0, 0x50020000, 0x0, 0x98, 0x0, 0x128, 0x1f0, 0x1f0, 0x128, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'syzkaller0\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x35}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x220) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r4}) io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) chmod(&(0x7f0000000300)='./file1\x00', 0xc) fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [{}], {0x4, 0x3}, [], {0x10, 0x7}}, 0x2c, 0x0) 1m46.812089207s ago: executing program 33 (id=532): r0 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) r1 = socket$isdn(0x22, 0x2, 0x25) bind$isdn(r1, &(0x7f0000000200)={0x22, 0x7f, 0x6, 0x3, 0x5}, 0x6) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0cba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34201113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed00083fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f61e00"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x41, 0x3, 0x1c0, 0x0, 0x50020000, 0x0, 0x98, 0x0, 0x128, 0x1f0, 0x1f0, 0x128, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'syzkaller0\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x35}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x220) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r4}) io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) chmod(&(0x7f0000000300)='./file1\x00', 0xc) fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [{}], {0x4, 0x3}, [], {0x10, 0x7}}, 0x2c, 0x0) 2.020474988s ago: executing program 4 (id=1716): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000740)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100), 0x0, 0xffff140f, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x8031, 0xffffffffffffffff, 0x0) 1.811212363s ago: executing program 4 (id=1723): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x8102) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) (async) recvfrom$ax25(r1, &(0x7f0000000100)=""/225, 0xe1, 0x40000040, 0x0, 0x0) (async) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000000)="47ad3d32240000006bdb74ecb9f7c342cc2c008d3ec3c2d2d5bbf6a4e41419ec3dc11a4f85980084665ea561e52d97fbe9e839a0", 0x34}], 0x1) 1.742018651s ago: executing program 4 (id=1724): r0 = socket$netlink(0x10, 0x3, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x104, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000004c0)=""/4096, &(0x7f00000000c0)=0x1000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) 1.73892188s ago: executing program 4 (id=1726): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000404, &(0x7f0000000100)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f00000001c0)=""/4105, 0x1009) 1.641565788s ago: executing program 4 (id=1730): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r1, 0x4b52, &(0x7f0000000100)={0x0, 0x89, 0x1, 0x7, 0x8, "e2d9e2202f3b325c0e5d9ee58252e4b19e600b"}) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x47b, 0x2) readv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/179, 0xb3}], 0x1) 1.359484932s ago: executing program 5 (id=1734): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x30}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x3c}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chmod(&(0x7f0000000300)='./file0\x00', 0x104) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000280), &(0x7f0000000340)=0x30) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x100000000000, 0x0, 0x0, 0x0, 0x4000, 0x3, 0xffffffffffffffff, r4, 0xffffffff, 0x20000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x21, 0xffffffff, 0x58339298, 0x1002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11}}, 0x50) 1.3008805s ago: executing program 1 (id=1735): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x18, 0x0, &(0x7f0000000340)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r5, 0x25, 0x8, @val=@iter={0x0}}, 0x20) splice(0xffffffffffffffff, 0x0, r6, &(0x7f0000000100)=0x100, 0x1, 0x7) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x8000) ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f0000000000)={0x13}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) 1.202280158s ago: executing program 5 (id=1736): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) (async) r1 = gettid() ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000040)={r1, 0x1, 0x1000}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000020c0)={r2}, 0x4) (async) read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) 1.201912976s ago: executing program 5 (id=1737): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000cc0)=@framed, &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x800, 0x0, 0x0, 0x0, 0x2}, {@in, 0x0, 0x32}, @in=@local, {0x3, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x158}}, 0x0) 1.102344187s ago: executing program 5 (id=1738): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) add_key(&(0x7f0000000ac0)='asymmetric\x00', &(0x7f0000000b00)={'syz', 0x2}, &(0x7f0000000b40)="fc479c5868cc5f3be60ca131267200c06c823825055e14240e97093029f9654a25f0f3013e2a3d99", 0xfffff, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=ANY=[@ANYBLOB="380000004800090329bd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="f9ffffff48000200020000001400010000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000240)={0xffffffffffffff5b, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@nested={0x0, 0xa}]}]}, 0x114}], 0x1}, 0x0) rt_sigpending(&(0x7f0000007f80), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000040)={0x3, r6, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r9, r8], 0x2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f00000001c0)={0x40, 0x0, r9}) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0xfe, 0xd, 0x3, 0x2a, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x1, 0xff, 0x7}}) sendto$packet(r3, &(0x7f0000000040)="be4e1e4cac394e6f0be3773e63e809e815dd7a3278795ba829697ecdbb922dbe4c63b188eac72d4bafabfae0159e5abdc8aa11507f5d157557d56f37c908f33c", 0x40, 0x811, &(0x7f0000000180)={0x11, 0x7, r10, 0x1, 0xff, 0x6, @remote}, 0x14) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x1, 0x2e, 0xf, 0x3, 0x7, 0x10, 0x6, 0xa0, 0x1}) 1.022297598s ago: executing program 5 (id=1739): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000200)) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x5e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}]}, 0x54}}, 0x0) 1.020932569s ago: executing program 5 (id=1740): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 682.49932ms ago: executing program 1 (id=1741): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="b7ceb6000100", @ANYRES32=0x0, @ANYBLOB="0001"], 0x38}}, 0x80) sendto$inet(r0, 0x0, 0x0, 0x6, &(0x7f0000000300)={0x2, 0x4e20, @private=0xa010102}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r2, 0x4b46, &(0x7f0000000140)) 682.17527ms ago: executing program 1 (id=1742): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000480)={&(0x7f0000000040)={{@hyper, 0x3}, {@host, 0x7f}, 0x400, "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"}, 0x418, 0xa}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000004c0)={0x1, 0x0, 0x102, 0x0, {0x9, 0xad, 0xfffffc01, 0xff}}) write$tcp_congestion(r0, &(0x7f0000000500)='cdg\x00', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000540), 0x44400, 0x0) close_range(r2, r1, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000580)={0x480, 0x7000, 0x9}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f00000005c0)={0x29c7, r0, 'id0\x00'}) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000640)) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0x4, 0xffffff00, {{0x16, 0x4, 0x0, 0x2e, 0x58, 0x68, 0x0, 0x1b, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp={0x44, 0x20, 0x25, 0x0, 0x2, [0x4, 0x1, 0x101, 0x8, 0xcc, 0x8001, 0x80]}, @lsrr={0x83, 0x23, 0xa2, [@empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @broadcast, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000800)={'sit0\x00', &(0x7f00000007c0)={'gretap0\x00', 0x0, 0x10, 0x7800, 0xc5b, 0x1, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x68, 0x0, 0x8, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@ra={0x94, 0x4}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xb0, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x72}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x51}, 0x4040891) r7 = socket$nl_generic(0x10, 0x3, 0x10) preadv2(r1, &(0x7f0000000d80)=[{&(0x7f0000000980)=""/124, 0x7c}, {&(0x7f0000000a00)=""/79, 0x4f}, {&(0x7f0000000a80)=""/19, 0x13}, {&(0x7f0000000ac0)=""/130, 0x82}, {&(0x7f0000000b80)=""/251, 0xfb}, {&(0x7f0000000c80)=""/195, 0xc3}], 0x6, 0x100, 0x5, 0xc) openat$userio(0xffffffffffffff9c, &(0x7f0000000e00), 0x40002, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000e40), r2) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000008, 0x4010, r7, 0x75bbc000) r8 = syz_create_resource$binfmt(&(0x7f0000000e80)='./file0\x00') r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x41, 0x1ff) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000ec0)={0x0, 0xc, 0x10, 0xfffffffffffffffe, 0x9}, &(0x7f0000000f00)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000f40)={r10, 0x9d}, 0x8) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x3c, r11, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x10, 0xa, "5e52a18194c69345d9682f25"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40055) write$USERIO_CMD_REGISTER(r2, &(0x7f0000001100)={0x0, 0x4}, 0x2) preadv2(r9, &(0x7f0000001300)=[{&(0x7f0000001140)=""/174, 0xae}, {&(0x7f0000001200)=""/182, 0xb6}, {&(0x7f00000012c0)=""/24, 0x18}], 0x3, 0x5, 0x3ff, 0x9) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000001340)) 602.240366ms ago: executing program 3 (id=1743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000500)}, 0x20) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) (async) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) 601.863357ms ago: executing program 1 (id=1744): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x3, 0xc8, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @loopback}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) 601.249285ms ago: executing program 3 (id=1745): setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x1, 0x0, "45f974d7fcebedb50221e3b14436683e6a6359e206b5c5d1785c3a4bb13944d53ca9416306e21b6d9a4b20e782f546ca1bab1f59f69f5ecdbd797b87ac38468d7febd97f6fdf458ee8a3fe5fc52300aa"}, 0xd8) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0x80800) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="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", 0xfe}, {&(0x7f00000002c0)="f44aaf7bf0e6d55df6dacc15ba97a30cbc31ab47911e2999", 0x18}, {&(0x7f0000000300)="4365f85921be291cd5", 0x9}, {&(0x7f0000000340)="c3251369a9ee45922959cb9386d48322b2f21b8109c43b1e3a3ff29cdd0f9c20b18fc8d8b5c7d83dbb9f304a16a55c7ed3a045f7cd113c6c4dcddb4b8bb4775a8db9a4fd25e56d9b9abb740e3ad48f2ff15a1604a944f6", 0x57}], 0x4}, 0x24000891) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000440)={0x40000001}) r1 = socket(0x11, 0x80000, 0x5) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000480), &(0x7f00000004c0)=0x4) recvmsg(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000000500)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/250, 0xfa}, {&(0x7f0000001680)=""/152, 0x98}, {&(0x7f0000001740)=""/155, 0x9b}, {&(0x7f0000001800)=""/190, 0xbe}], 0x5, &(0x7f0000001940)=""/230, 0xe6}, 0x1) ioctl(r1, 0x81, &(0x7f0000001a80)="239dabc75b661beb3a56e172f0fcb3b986e708ec343462e5fa9cd768caa4c1f57735148e426a89ee") r2 = syz_open_dev$dvb_frontend(&(0x7f0000001ac0), 0x4, 0x402) ioctl$FE_READ_STATUS(r2, 0x80046f45, &(0x7f0000001b00)) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000001b40)={@private0}, &(0x7f0000001b80)=0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001bc0), &(0x7f0000001c00)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d00)={r3, 0x58, &(0x7f0000001c80)}, 0x10) r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001e00)={r4, &(0x7f0000001d40)="e6cbf4202013619ed904d8741b226fb477fd37fbac2c9f3edb96573832fbaef1d460fbef01298443454d8fe3862b6e15a0798243cc19b78667e3059ce24bd78acf4c50cb2c97cd0145dcb3866fa88e38713fbc6a23ff8929f33212ef6b03b28ea591bc5579e22a2fc99f745ac5c1af0903730d27a91893ffca119c68b98c01e7fac8177f4102f91dc3689111dbdcff0073e7dca20433448d49466149"}, 0x20) r5 = pidfd_getfd(r4, r3, 0x0) read$sequencer(r5, &(0x7f0000001e40)=""/4096, 0x1000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002e80)=@generic={&(0x7f0000002e40)='./file0\x00', r5}, 0x18) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000002ec0)=0xffffffffffffffff) fcntl$setlease(r6, 0x400, 0x0) r7 = memfd_secret(0x80000) unlink(&(0x7f0000002f00)='./file0\x00') r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000030c0)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003080)={&(0x7f0000003000)={0x70, r8, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x7f}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x2}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4028051}, 0x40000) bind(r0, &(0x7f0000003100)=@llc={0x1a, 0x100, 0xbe, 0x10, 0xb, 0x6}, 0x80) mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0xa, 0x4000010, r5, 0x83000000) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000031c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x20, r10, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048805}, 0x4040000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 530.316059ms ago: executing program 1 (id=1746): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0xd) set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@mcast1, 0x4, 0x0, 0x4e21, 0x1, 0x0, 0x0, 0x0, 0x2e, 0x0, 0xee00}, {@in=@remote, 0x4d6, 0x32}, @in=@multicast2, {0x2, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x3f, 0x543}, {0x4, 0x7fffffffffffffff, 0xffffffffffffffff, 0x7}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r4}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x890}, 0x2014) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 530.012844ms ago: executing program 3 (id=1747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4048000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"/584], 0x248}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) pread64(r0, &(0x7f0000000540)=""/134, 0x86, 0x7) r1 = socket$inet(0x2, 0x3, 0x2) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r5, 0x8, 0x1ff}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000325bd060007004e2000000600040022fe000014000600fe8000000000000000000000000000aa2c000280080003000000000006000e004e20000006000b0002000000080005000002000008000100090000000000e0000000000000000000000000c3e3d29cdef97bbdb1ee14f2248e2c8a33bf129291e555077317d5a40ac4944d92103325266ac0d784c9850496b0c4290a5d39188b16eb5c097d176ae4dbda632114801bc118a67738e35c078f3c282cfd2305429fa0bf55ed093a0592dd038f3d95"], 0x70}, 0x1, 0x0, 0x0, 0x90}, 0x80800) 411.534268ms ago: executing program 1 (id=1748): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000240), 0xa0501, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x151883) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000100)={'\x00', 0x3, 0x8000c, 0x10, 0x3ffffffe, 0x2}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000000)={0x2, 0x8, 0xdd, 0x242, @vifc_lcl_ifindex=r5, @multicast1}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4a041, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000200)={'veth0_virt_wifi\x00', @remote}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xd7) 411.321611ms ago: executing program 3 (id=1749): prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='environ\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/235, 0xeb}], 0x1, 0x8000, 0xc) recvfrom$l2tp(r0, &(0x7f0000000180)=""/216, 0xd8, 0x100, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) 410.328442ms ago: executing program 3 (id=1750): syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x143882) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) epoll_create1(0x0) setuid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x1, &(0x7f00000007c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 212.154779ms ago: executing program 3 (id=1751): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x801) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x2, 0xfffffffd, 0x40000000, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x2}}) 0s ago: executing program 4 (id=1752): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[r2], 0x1}) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x84aebfbd6349b7f2}) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) write$sequencer(r7, &(0x7f0000002100)=ANY=[@ANYBLOB="04000000000000008108"], 0x10) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x1c, 0x1}, {}, {0xffe0, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80010001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x240488d0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000001c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): 280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.1.912" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f907f39aeb9 code=0x0 [ 149.265820][ T9454] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 149.274848][ T9454] bond3 (unregistering): Released all slaves [ 149.455562][ T9477] SELinux: security_context_str_to_sid (ֽ) failed with errno=-22 [ 149.621886][ T9493] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 149.626956][ T9493] CIFS mount error: No usable UNC path provided in device string! [ 149.626956][ T9493] [ 149.630925][ T9493] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 149.702394][ T40] audit: type=1804 audit(1770591012.265:26281): pid=9498 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.918" name="/newroot/72/file1" dev="fuse" ino=1 res=1 errno=0 [ 149.913527][ T40] audit: type=1400 audit(1770591012.485:26282): avc: denied { name_bind } for pid=9503 comm="syz.4.920" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 149.959387][ T9510] binder: 9509:9510 ioctl c0306201 2000000003c0 returned -14 [ 149.964582][ T9510] ocfs2: Unknown parameter 'usrquota' [ 150.048522][ T9517] binder: 9515:9517 ioctl c0306201 2000000003c0 returned -14 [ 150.368836][ T9539] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 150.560314][ T40] audit: type=1400 audit(1770591013.125:26283): avc: denied { ioctl } for pid=9546 comm="syz.1.933" path="socket:[29406]" dev="sockfs" ino=29406 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 150.736824][ T9565] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 150.787092][ T9572] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 150.787193][ T40] audit: type=1400 audit(1770591013.355:26284): avc: denied { mounton } for pid=9571 comm="syz.4.939" path="/181/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 150.796380][ T9572] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 150.801750][ T40] audit: type=1400 audit(1770591013.355:26285): avc: denied { search } for pid=9571 comm="syz.4.939" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 150.808905][ T9572] sctp: [Deprecated]: syz.4.939 (pid 9572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.808905][ T9572] Use struct sctp_sack_info instead [ 150.812240][ T40] audit: type=1400 audit(1770591013.355:26286): avc: denied { search } for pid=9571 comm="syz.4.939" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 150.827687][ T40] audit: type=1400 audit(1770591013.355:26287): avc: denied { read open } for pid=9571 comm="syz.4.939" path="/181/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 150.865022][ T9572] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 150.868818][ T9572] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 150.873036][ T9572] overlayfs: d_ino too big (181, ino=9223372036854776802, xinobits=3) [ 150.876872][ T9572] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 150.880817][ T9572] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 150.885265][ T9572] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 150.889006][ T9572] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 150.893047][ T9572] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 150.896970][ T9572] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 150.900742][ T9572] overlayfs: d_ino too big (instances, ino=4611686018427389128, xinobits=3) [ 150.981367][ T9574] input: syz0 as /devices/virtual/input/input15 [ 151.123068][ T9584] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.940'. [ 151.162407][ T9586] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 151.166889][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.943'. [ 151.170341][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.943'. [ 151.364775][ T5937] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 151.453316][ T9613] syzkaller1: entered promiscuous mode [ 151.454976][ T9613] syzkaller1: entered allmulticast mode [ 151.509442][ T9618] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.951'. [ 151.661248][ T9627] netlink: 16 bytes leftover after parsing attributes in process `syz.5.956'. [ 151.703178][ T9629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.931131][ T9641] IPVS: set_ctl: invalid protocol: 60 172.30.0.4:20001 [ 152.084377][ T9646] netlink: 36 bytes leftover after parsing attributes in process `syz.3.959'. [ 152.210273][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.961'. [ 152.246460][ T5937] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 152.246726][ T9658] IPVS: set_ctl: invalid protocol: 59 100.1.1.0:20000 [ 152.366663][ T9670] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 152.530197][ T9684] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.561733][ T9689] fuse: Bad value for 'fd' [ 152.608570][ T9696] kvm: kvm [9695]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 [ 152.616243][ T9698] binder_alloc: 9697: binder_alloc_buf, no vma [ 152.772093][ T9711] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 152.776125][ T9710] rtc_cmos 00:05: Alarms can be up to one day in the future [ 152.782882][ T53] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 152.912377][ T6026] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 152.929636][ T5975] rtc_cmos 00:05: Alarms can be up to one day in the future [ 152.932464][ T53] usb 9-1: Invalid ep0 maxpacket: 64 [ 152.935595][ T5975] rtc_cmos 00:05: Alarms can be up to one day in the future [ 152.938631][ T5975] rtc_cmos 00:05: Alarms can be up to one day in the future [ 152.941609][ T5975] rtc_cmos 00:05: Alarms can be up to one day in the future [ 152.944021][ T5975] rtc rtc0: __rtc_set_alarm: err=-22 [ 152.982397][ T34] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 153.062382][ T53] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 153.062385][ T6026] usb 10-1: Invalid ep0 maxpacket: 64 [ 153.133581][ T34] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 153.136835][ T34] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 153.140202][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 153.145699][ T34] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 153.148649][ T34] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 153.151216][ T34] usb 6-1: Manufacturer: syz [ 153.154845][ T34] usb 6-1: config 0 descriptor?? [ 153.192583][ T6026] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 153.222371][ T53] usb 9-1: Invalid ep0 maxpacket: 64 [ 153.224430][ T53] usb usb9-port1: attempt power cycle [ 153.342356][ T6026] usb 10-1: Invalid ep0 maxpacket: 64 [ 153.345040][ T6026] usb usb10-port1: attempt power cycle [ 153.367274][ T34] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 153.371588][ T34] usb 6-1: USB disconnect, device number 9 [ 153.562390][ T53] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 153.583093][ T53] usb 9-1: Invalid ep0 maxpacket: 64 [ 153.682922][ T6026] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 153.703098][ T6026] usb 10-1: Invalid ep0 maxpacket: 64 [ 153.713389][ T53] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 153.734955][ T53] usb 9-1: Invalid ep0 maxpacket: 64 [ 153.736942][ T53] usb usb9-port1: unable to enumerate USB device [ 153.740259][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 153.740269][ T40] audit: type=1400 audit(1770591272.301:26302): avc: denied { write } for pid=9723 comm="syz.3.985" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 153.832473][ T6026] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 153.853072][ T6026] usb 10-1: Invalid ep0 maxpacket: 64 [ 153.855118][ T6026] usb usb10-port1: unable to enumerate USB device [ 153.897092][ T40] audit: type=1400 audit(1770591272.461:26303): avc: denied { read } for pid=9729 comm="syz.1.986" lport=3100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.947313][ T40] audit: type=1400 audit(1770591272.511:26304): avc: denied { create } for pid=9731 comm="syz.3.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 153.978629][ T40] audit: type=1400 audit(1770591272.541:26305): avc: denied { bind } for pid=9734 comm="syz.3.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 153.985700][ T40] audit: type=1400 audit(1770591272.541:26306): avc: denied { setopt } for pid=9734 comm="syz.3.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 153.993175][ T40] audit: type=1400 audit(1770591272.541:26307): avc: denied { accept } for pid=9734 comm="syz.3.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 154.000070][ T40] audit: type=1400 audit(1770591272.541:26308): avc: denied { write } for pid=9734 comm="syz.3.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 154.007605][ T40] audit: type=1400 audit(1770591272.541:26309): avc: denied { read } for pid=9734 comm="syz.3.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 154.317694][ T40] audit: type=1400 audit(1770591272.881:26310): avc: denied { view } for pid=9753 comm="syz.3.993" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 154.451888][ T9764] __nla_validate_parse: 2 callbacks suppressed [ 154.451906][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.996'. [ 154.492952][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.996'. [ 154.766271][ T40] audit: type=1400 audit(1770591273.331:26311): avc: denied { write } for pid=9777 comm="syz.1.1000" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 154.767328][ T9782] dlm: non-version read from control device 0 [ 154.858832][ T9786] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1002'. [ 154.865993][ T9786] tmpfs: Bad value for 'mpol' [ 155.059084][ T9798] 9p: Bad value for 'version' [ 155.062982][ T9798] xt_hashlimit: size too large, truncated to 1048576 [ 155.690919][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1007'. [ 155.855328][ T9815] veth3: entered allmulticast mode [ 155.860308][ T9815] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 155.979398][ T9831] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1015'. [ 156.401775][ T9834] SELinux: failed to load policy [ 156.689732][ T9860] geneve2: entered promiscuous mode [ 156.691506][ T9860] geneve2: entered allmulticast mode [ 156.820113][ T9875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1028'. [ 156.888791][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1030'. [ 156.891451][ T9881] openvswitch: netlink: Flow actions attr not present in new flow. [ 156.955590][ T9870] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 157.665290][ T9898] netlink: 'syz.4.1035': attribute type 13 has an invalid length. [ 157.852460][ T6244] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 157.921011][ T9918] usb usb9: usbfs: process 9918 (syz.4.1041) did not claim interface 0 before use [ 157.963612][ T9922] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 158.015943][ T6244] usb 10-1: unable to get BOS descriptor or descriptor too short [ 158.019837][ T6244] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1088, setting to 1024 [ 158.026644][ T6244] usb 10-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 158.030084][ T6244] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.033501][ T6244] usb 10-1: Product: syz [ 158.035628][ T6244] usb 10-1: Manufacturer: syz [ 158.037555][ T6244] usb 10-1: SerialNumber: syz [ 158.043123][ T9896] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 158.127634][ T9929] sctp: [Deprecated]: syz.4.1045 (pid 9929) Use of int in max_burst socket option deprecated. [ 158.127634][ T9929] Use struct sctp_assoc_value instead [ 158.208388][ T9931] team0 (unregistering): Port device team_slave_0 removed [ 158.224066][ T9931] team0 (unregistering): Port device team_slave_1 removed [ 158.259869][ T6244] usbhid 10-1:1.0: can't add hid device: -71 [ 158.261878][ T6244] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 158.270873][ T6244] usb 10-1: USB disconnect, device number 6 [ 158.312486][ T34] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 158.323919][ T9939] netlink: 'syz.3.1049': attribute type 12 has an invalid length. [ 158.331263][ T9939] netlink: 'syz.3.1049': attribute type 29 has an invalid length. [ 158.334109][ T9939] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1049'. [ 158.338797][ T9939] netlink: 'syz.3.1049': attribute type 2 has an invalid length. [ 158.341944][ T9939] netlink: 'syz.3.1049': attribute type 3 has an invalid length. [ 158.344867][ T9939] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1049'. [ 158.464023][ T34] usb 6-1: config 252 has an invalid interface number: 100 but max is 0 [ 158.466698][ T34] usb 6-1: config 252 has no interface number 0 [ 158.468953][ T34] usb 6-1: too many endpoints for config 252 interface 100 altsetting 154: 59, using maximum allowed: 30 [ 158.473668][ T34] usb 6-1: config 252 interface 100 altsetting 154 has 0 endpoint descriptors, different from the interface descriptor's value: 59 [ 158.478862][ T34] usb 6-1: config 252 interface 100 has no altsetting 0 [ 158.481365][ T34] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 158.485016][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.517280][ T9949] gfs2: gfs2 mount does not exist [ 158.596787][ T9958] a: renamed from bond_slave_0 [ 158.625744][ T9961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46670 sclass=netlink_route_socket pid=9961 comm=syz.3.1059 [ 158.704632][ T9964] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2689438118 (5378876236 ns) > initial count (2190874760 ns). Using initial count to start timer. [ 158.841900][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 158.841912][ T40] audit: type=1400 audit(1770591277.401:26324): avc: denied { watch watch_reads } for pid=9970 comm="syz.5.1063" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 158.844142][ T9972] program syz.3.1062 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.907881][ T9975] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 159.008308][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1066'. [ 159.095351][ T40] audit: type=1400 audit(1770591277.661:26325): avc: denied { accept } for pid=9988 comm="syz.5.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 159.275939][T10009] only policy match revision 0 supported [ 159.275952][T10009] unable to load match [ 159.455389][T10035] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1074'. [ 159.602823][ T40] audit: type=1400 audit(1770591278.171:26326): avc: denied { shutdown } for pid=10067 comm="syz.5.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 159.683138][T10077] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1078'. [ 159.733383][T10081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1080'. [ 159.740021][T10083] erspan1: entered allmulticast mode [ 159.756744][T10068] erspan2: entered allmulticast mode [ 159.862163][ T40] audit: type=1400 audit(1770591278.421:26327): avc: denied { ioctl } for pid=10088 comm="syz.5.1084" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 159.890418][ T40] audit: type=1400 audit(1770591278.451:26328): avc: denied { watch watch_reads } for pid=10090 comm="syz.3.1083" path="/294/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 159.890883][T10091] xt_TCPMSS: Only works on TCP SYN packets [ 159.916428][ T40] audit: type=1400 audit(1770591278.481:26329): avc: denied { create } for pid=10094 comm="syz.4.1082" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 159.918126][T10096] loop6: detected capacity change from 0 to 524287999 [ 159.928147][ T8843] buffer_io_error: 23 callbacks suppressed [ 159.928160][ T8843] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.934358][ T8843] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.937767][ T8843] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.941065][ T8843] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.944589][ T8843] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.947221][ T8843] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.949824][ T8843] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.952571][ T8843] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.955043][ T8843] ldm_validate_partition_table(): Disk read failed. [ 159.957209][ T8843] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.959687][ T8843] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.962215][ T8843] Dev loop6: unable to read RDB block 0 [ 159.965248][ T8843] loop6: unable to read partition table [ 159.970053][T10096] ldm_validate_partition_table(): Disk read failed. [ 159.979639][ T40] audit: type=1400 audit(1770591278.541:26330): avc: denied { listen } for pid=10101 comm="syz.5.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.027473][T10096] Dev loop6: unable to read RDB block 0 [ 160.029431][T10096] loop6: unable to read partition table [ 160.031384][T10096] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 160.034962][ T8843] ldm_validate_partition_table(): Disk read failed. [ 160.037240][ T8843] Dev loop6: unable to read RDB block 0 [ 160.039519][ T8843] loop6: unable to read partition table [ 160.042059][T10100] ldm_validate_partition_table(): Disk read failed. [ 160.054153][T10100] Dev loop6: unable to read RDB block 0 [ 160.056326][T10100] loop6: unable to read partition table [ 160.063738][T10100] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 160.111094][ T40] audit: type=1400 audit(1770591278.671:26331): avc: denied { unlink } for pid=6909 comm="syz-executor" name="file0" dev="tmpfs" ino=1186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 160.128531][T10119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1089'. [ 160.132906][T10120] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1089'. [ 160.244796][T10136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.250297][T10136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.372530][T10048] batadv1: left promiscuous mode [ 160.730262][ T40] audit: type=1400 audit(1770591279.291:26332): avc: denied { unmount } for pid=6909 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 160.792175][T10162] tmpfs: Bad value for 'mpol' [ 160.829351][T10165] xfrm1: entered allmulticast mode [ 160.835688][ T40] audit: type=1400 audit(1770591279.401:26333): avc: denied { ioctl } for pid=10166 comm="syz.4.1103" path="socket:[35028]" dev="sockfs" ino=35028 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 161.072977][T10187] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1108'. [ 161.094581][ T34] usb 6-1: string descriptor 0 read error: -71 [ 161.103430][ T34] pvrusb2: Hardware description: Terratec Grabster AV400 [ 161.106020][ T34] pvrusb2: ********** [ 161.107304][ T34] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 161.110669][ T34] pvrusb2: Important functionality might not be entirely working. [ 161.113340][ T34] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 161.116863][ T34] pvrusb2: ********** [ 161.118373][ T34] usb 6-1: selecting invalid altsetting 0 [ 161.121563][ T2490] pvrusb2: Invalid write control endpoint [ 161.131993][ T34] usb 6-1: USB disconnect, device number 10 [ 161.170917][ T2490] pvrusb2: Invalid write control endpoint [ 161.173219][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 161.176205][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 161.178663][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 161.181961][ T2490] pvrusb2: Device being rendered inoperable [ 161.185446][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 161.188011][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 161.191684][ T2490] pvrusb2: Attached sub-driver cx25840 [ 161.193867][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 161.198042][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 161.310486][T10208] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 161.314165][T10208] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 161.330625][T10212] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 34 [ 161.356422][T10212] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 161.402656][T10219] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.409512][T10219] tmpfs: Bad value for 'mpol' [ 161.421377][T10224] overlayfs: statfs failed on './file0' [ 161.425722][T10227] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 161.429424][T10227] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 161.430923][T10227] vhci_hcd vhci_hcd.0: Device attached [ 161.452988][T10228] vhci_hcd: connection closed [ 161.455961][T10041] vhci_hcd vhci_hcd.3: stop threads [ 161.460697][T10041] vhci_hcd vhci_hcd.3: release socket [ 161.462994][T10041] vhci_hcd vhci_hcd.3: disconnect device [ 161.465925][T10231] Cannot find add_set index 0 as target [ 161.503854][T10045] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.506504][T10045] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.509273][T10045] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.512160][T10045] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.515496][T10234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1125'. [ 161.522670][T10234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1125'. [ 161.716576][T10244] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 161.730578][T10247] netlink: 'syz.4.1129': attribute type 12 has an invalid length. [ 161.733284][T10247] netlink: 'syz.4.1129': attribute type 29 has an invalid length. [ 161.735829][T10247] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1129'. [ 161.739441][T10247] netlink: 'syz.4.1129': attribute type 2 has an invalid length. [ 161.742213][T10247] netlink: 'syz.4.1129': attribute type 3 has an invalid length. [ 161.745698][T10247] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1129'. [ 161.994747][T10274] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10274 comm=syz.4.1137 [ 162.236850][T10299] Falling back ldisc for ttyS3. [ 162.852360][ T5975] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 163.003748][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.007351][ T5975] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 163.010262][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.015808][ T5975] usb 6-1: config 0 descriptor?? [ 163.222731][ T5975] usbhid 6-1:0.0: can't add hid device: -71 [ 163.224742][ T5975] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 163.228546][ T5975] usb 6-1: USB disconnect, device number 11 [ 163.652372][ T6026] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 163.804242][ T6026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.808698][ T6026] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 163.812821][ T6026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.818450][ T6026] usb 6-1: config 0 descriptor?? [ 164.231390][T10302] netlink: 'syz.1.1143': attribute type 13 has an invalid length. [ 164.234559][T10302] gretap0: refused to change device tx_queue_len [ 164.236689][T10302] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 164.244694][ T6026] usbhid 6-1:0.0: can't add hid device: -71 [ 164.246696][ T6026] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 164.251441][ T6026] usb 6-1: USB disconnect, device number 12 [ 165.029734][T10327] __nla_validate_parse: 65 callbacks suppressed [ 165.029748][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'. [ 165.034949][T10327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1148'. [ 165.047855][T10290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.172134][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 165.172150][ T40] audit: type=1400 audit(1770591283.731:26339): avc: denied { execute } for pid=10338 comm="syz.3.1152" name="file0" dev="ramfs" ino=35218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 165.187820][ T40] audit: type=1400 audit(1770591283.741:26340): avc: denied { nosuid_transition } for pid=10338 comm="syz.3.1152" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 165.196118][ T40] audit: type=1400 audit(1770591283.741:26341): avc: denied { transition } for pid=10338 comm="syz.3.1152" path="/file0" dev="ramfs" ino=35218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 165.203980][ T40] audit: type=1400 audit(1770591283.741:26342): avc: denied { entrypoint } for pid=10338 comm="syz.3.1152" path="/file0" dev="ramfs" ino=35218 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 165.211020][ T40] audit: type=1400 audit(1770591283.741:26343): avc: denied { noatsecure } for pid=10338 comm="syz.3.1152" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 165.223503][T10337] orangefs_devreq_write_iter: failed to copy head. [ 165.383061][ T40] audit: type=1400 audit(1770591283.941:26344): avc: denied { read } for pid=10359 comm="syz.3.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 165.395445][ T40] audit: type=1400 audit(1770591283.961:26345): avc: denied { setopt } for pid=10362 comm="syz.1.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 165.424058][T10368] gfs2: path_lookup on \\8< $$&6n @M initialized [ 168.643877][T10541] ufs: You didn't specify the type of your ufs filesystem [ 168.643877][T10541] [ 168.643877][T10541] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 168.643877][T10541] [ 168.643877][T10541] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 168.754224][ T5975] usb 6-1: USB disconnect, device number 13 [ 168.776580][T10551] option changes via remount are deprecated (pid=10550 comm=syz.5.1216) [ 168.779881][T10551] cgroup: option or name mismatch, new: 0x0 "none", old: 0x0 "" [ 168.803709][ T6244] usb 9-1: reset high-speed USB device number 9 using dummy_hcd [ 169.307790][T10572] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 169.311208][T10572] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 169.322423][T10572] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 169.326060][T10572] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 169.362526][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1221'. [ 169.621825][T10600] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1231'. [ 169.691023][T10609] IPv6: Can't replace route, no match found [ 169.700226][T10609] netlink: 'syz.4.1233': attribute type 17 has an invalid length. [ 169.703745][T10609] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1233'. [ 169.707206][T10609] macvtap0: entered allmulticast mode [ 169.709437][T10609] veth0_macvtap: entered allmulticast mode [ 169.712453][T10609] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 169.765256][ T5937] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.771128][T10616] fuse: Unknown parameter 'Q j[/‰X.aY' [ 169.800864][T10618] trusted_key: syz.4.1237 sent an empty control message without MSG_MORE. [ 170.307494][ T59] usb 9-1: USB disconnect, device number 9 [ 170.365909][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 170.365925][ T40] audit: type=1400 audit(1770591288.931:26356): avc: denied { read write } for pid=10625 comm="syz.5.1238" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 170.378990][ T40] audit: type=1400 audit(1770591288.931:26357): avc: denied { open } for pid=10625 comm="syz.5.1238" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 170.390436][ T40] audit: type=1400 audit(1770591288.931:26358): avc: denied { ioctl } for pid=10625 comm="syz.5.1238" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 170.551230][T10635] netlink: 'syz.5.1239': attribute type 3 has an invalid length. [ 170.555405][T10635] __nla_validate_parse: 1 callbacks suppressed [ 170.555415][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1239'. [ 170.561719][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1239'. [ 170.694165][T10651] tipc: Enabling not permitted [ 170.696015][T10651] tipc: Enabling of bearer rejected, failed to enable media [ 170.836929][ T59] hid-generic 0005:0002:5508.0004: hidraw1: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 170.904140][T10673] fido_id[10673]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 170.970801][T10676] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(71) [ 170.973013][T10676] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.976120][T10676] vhci_hcd vhci_hcd.0: Device attached [ 170.979276][T10676] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(74) [ 170.981543][T10676] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 170.984327][T10676] vhci_hcd vhci_hcd.0: Device attached [ 170.987264][T10676] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(76) [ 170.989412][T10676] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 170.991911][T10676] vhci_hcd vhci_hcd.0: Device attached [ 170.997180][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1249'. [ 171.000202][T10687] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1249'. [ 171.212631][ T6026] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 171.568746][T10689] netlink: 'syz.4.1252': attribute type 2 has an invalid length. [ 171.624527][T10693] netlink: 'syz.4.1254': attribute type 3 has an invalid length. [ 171.684305][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1255'. [ 171.725705][T10700] : entered promiscuous mode [ 171.790445][ T40] audit: type=1400 audit(1770591290.351:26359): avc: denied { read } for pid=10704 comm="syz.5.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 171.802629][ T40] audit: type=1400 audit(1770591290.371:26360): avc: denied { write } for pid=10704 comm="syz.5.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 171.838013][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 171.876103][T10717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.879088][T10717] IPv6: NLM_F_CREATE should be set when creating new route [ 171.881986][T10717] IPv6: NLM_F_CREATE should be set when creating new route [ 171.885054][T10717] IPv6: NLM_F_CREATE should be set when creating new route [ 171.918863][ T40] audit: type=1400 audit(1770591290.481:26361): avc: denied { bind } for pid=10715 comm="syz.1.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 171.930259][T10718] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.966454][ T40] audit: type=1400 audit(1770591290.531:26362): avc: denied { create } for pid=10724 comm="syz.4.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 171.982476][ T40] audit: type=1400 audit(1770591290.531:26363): avc: denied { bind } for pid=10724 comm="syz.4.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 172.201843][T10685] vhci_hcd: connection closed [ 172.201926][T10683] vhci_hcd: connection closed [ 172.203354][T10048] vhci_hcd vhci_hcd.3: stop threads [ 172.204202][T10681] vhci_hcd: connection reset by peer [ 172.206380][T10048] vhci_hcd vhci_hcd.3: release socket [ 172.211862][T10048] vhci_hcd vhci_hcd.3: disconnect device [ 172.213867][T10048] vhci_hcd vhci_hcd.3: stop threads [ 172.215482][T10048] vhci_hcd vhci_hcd.3: release socket [ 172.217645][T10048] vhci_hcd vhci_hcd.3: disconnect device [ 172.219677][T10048] vhci_hcd vhci_hcd.3: stop threads [ 172.221204][T10048] vhci_hcd vhci_hcd.3: release socket [ 172.223414][T10048] vhci_hcd vhci_hcd.3: disconnect device [ 176.314568][ T6026] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 185.685393][ T40] audit: type=1400 audit(1770591304.251:26364): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 185.694017][ T40] audit: type=1400 audit(1770591304.251:26365): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 186.896330][T10733] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 186.899263][T10733] overlayfs: failed to set xattr on upper [ 186.901075][T10733] overlayfs: ...falling back to redirect_dir=nofollow. [ 186.902446][T10734] ata1.00: invalid multi_count 128 ignored [ 186.904168][T10733] overlayfs: ...falling back to index=off. [ 186.910507][T10733] overlayfs: ...falling back to uuid=null. [ 186.914763][ T40] audit: type=1400 audit(1770591305.481:26366): avc: denied { ioctl } for pid=10727 comm="syz.4.1266" path="socket:[36291]" dev="sockfs" ino=36291 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 186.925170][T10733] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 186.929941][T10733] overlayfs: cleanup of 'bus/work' failed (-13) [ 186.933745][T10733] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 186.936953][T10733] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 186.940541][T10733] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 187.080661][T10744] ufs: You didn't specify the type of your ufs filesystem [ 187.080661][T10744] [ 187.080661][T10744] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 187.080661][T10744] [ 187.080661][T10744] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 187.112025][ T40] audit: type=1400 audit(1770591305.671:26367): avc: denied { watch } for pid=10746 comm="syz.5.1274" path="/167/file1/bus/file0" dev="overlay" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 187.117190][T10747] syzkaller0: entered promiscuous mode [ 187.120452][ T40] audit: type=1400 audit(1770591305.671:26368): avc: denied { watch_sb } for pid=10746 comm="syz.5.1274" path="/167/file1/bus/file0" dev="overlay" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 187.122462][T10747] syzkaller0: entered allmulticast mode [ 187.170961][T10749] netlink: 'syz.4.1275': attribute type 39 has an invalid length. [ 187.368018][ T40] audit: type=1400 audit(1770591305.931:26369): avc: denied { mounton } for pid=10759 comm="syz.3.1277" path="/344/file0" dev="tmpfs" ino=1870 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 187.390284][T10760] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1277'. [ 187.395032][T10760] syzkaller0: entered promiscuous mode [ 187.397270][T10760] syzkaller0: entered allmulticast mode [ 187.400391][ T40] audit: type=1400 audit(1770591305.961:26370): avc: denied { ioctl } for pid=10759 comm="syz.3.1277" path="socket:[37629]" dev="sockfs" ino=37629 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.526552][T10045] nci: nci_rsp_packet: unknown rsp opcode 0x229 [ 187.652011][T10773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.659152][T10774] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.783504][T10778] futex_wake_op: syz.3.1282 tries to shift op by -1; fix this program [ 188.036029][T10794] x_tables: duplicate underflow at hook 1 [ 188.903174][T10802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.907960][T10802] netlink: 'syz.5.1288': attribute type 2 has an invalid length. [ 189.594413][T10822] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1294'. [ 189.597538][T10822] 0: renamed from hsr0 [ 189.604535][T10822] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.608813][T10822] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.613660][T10822] 0: entered allmulticast mode [ 189.615695][T10822] hsr_slave_0: entered allmulticast mode [ 189.618079][T10822] hsr_slave_1: entered allmulticast mode [ 189.621744][T10822] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 189.872739][T10824] Bluetooth: MGMT ver 1.23 [ 190.292407][ T5975] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 190.442368][ T5975] usb 10-1: Using ep0 maxpacket: 32 [ 190.446124][ T5975] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 190.450915][ T5975] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 190.455668][ T5975] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.463182][ T5975] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 190.464156][T10762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.466922][ T5975] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 190.466943][ T5975] usb 10-1: Product: syz [ 190.466956][ T5975] usb 10-1: Manufacturer: syz [ 190.477172][ T5975] usb 10-1: SerialNumber: syz [ 190.493438][ T5975] input: appletouch as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/input/input21 [ 190.521619][T10833] fuse: Unknown parameter '0x0000000000000003YϋUe(5grr^斔.N.\dw1Z#?ZڻvSBiu4(Yb]+-(' [ 190.562437][ T40] audit: type=1804 audit(1770591309.121:26371): pid=10837 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1300" name="/newroot/358/file1" dev="tmpfs" ino=1949 res=1 errno=0 [ 190.583958][ T5937] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 190.588694][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1301'. [ 190.637910][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 190.661783][T10843] bond3: Invalid ad_actor_system MAC address. [ 190.665070][T10843] bond3: option ad_actor_system: invalid value (255) [ 190.668972][T10843] bond3 (unregistering): Released all slaves [ 190.803096][T10860] can0: slcan on ttynull. [ 190.819021][ T40] audit: type=1400 audit(1770591309.381:26372): avc: denied { ioctl } for pid=10859 comm="syz.1.1306" path="socket:[38277]" dev="sockfs" ino=38277 ioctlcmd=0x5012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 190.867483][ T6244] usb 10-1: USB disconnect, device number 7 [ 190.880429][ T6244] appletouch 10-1:1.0: input: appletouch disconnected [ 190.903906][T10859] can0 (unregistered): slcan off ttynull. [ 190.931415][T10858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1305'. [ 190.942912][T10043] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.949024][T10858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1305'. [ 190.954227][T10043] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.958036][T10043] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.965396][T10043] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.965436][T10858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1305'. [ 191.135040][T10044] nci: nci_rsp_packet: unknown rsp opcode 0x229 [ 191.170646][ T40] audit: type=1400 audit(1770591309.731:26373): avc: denied { module_load } for pid=10887 comm="syz.1.1311" path="/326/bus" dev="tmpfs" ino=1782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 191.171070][T10888] Invalid ELF header magic: != ELF [ 191.257449][T10892] macsec0: entered promiscuous mode [ 191.259326][T10892] macsec0: entered allmulticast mode [ 191.261160][T10892] veth1_macvtap: entered allmulticast mode [ 191.267633][T10892] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 191.268449][T10892] @0: renamed from bond_slave_1 [ 191.703931][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1318'. [ 191.752387][ T6018] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 191.902373][ T6018] usb 9-1: Using ep0 maxpacket: 8 [ 191.906149][ T6018] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.910147][ T6018] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 191.913311][ T6018] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.917515][ T6018] usb 9-1: config 0 descriptor?? [ 192.123098][ T6018] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 192.575184][T10899] SELinux: Context is not valid (left unmapped). [ 192.580652][ T6018] usb 9-1: USB disconnect, device number 10 [ 193.258133][ T40] audit: type=1326 audit(1770591311.821:26374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10915 comm="syz.4.1321" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f190979aeb9 code=0x0 [ 194.068720][T10875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.141208][ T40] audit: type=1400 audit(1770591312.701:26375): avc: denied { nlmsg_write } for pid=10922 comm="syz.3.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 194.151487][T10923] syz.5.1323 (10923): attempted to duplicate a private mapping with mremap. This is not supported. [ 194.316532][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1328'. [ 194.376931][T10937] team0: Port device team_slave_0 removed [ 194.419345][T10048] nci: nci_rsp_packet: unknown rsp opcode 0x229 [ 194.506667][T10958] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=10958 comm=syz.5.1334 [ 194.511361][T10958] syz.5.1334: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 195.069095][T10966] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1337'. [ 195.072155][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1337'. [ 195.134349][T10970] 9p: p9: multiple sources not supported [ 195.140691][T10970] 9p: p9: multiple sources not supported [ 195.188836][T10976] openvswitch: netlink: IP tunnel dst address not specified [ 197.318200][T10946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.401463][T10984] netlink: 'syz.1.1344': attribute type 30 has an invalid length. [ 197.417980][ T40] audit: type=1400 audit(1770591315.981:26376): avc: denied { getopt } for pid=10982 comm="syz.4.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 197.448084][ T6244] libceph: connect (1)[c::]:6789 error -101 [ 197.450909][ T6244] libceph: mon0 (1)[c::]:6789 connect error [ 197.487192][T10987] ceph: No mds server is up or the cluster is laggy [ 197.514267][ T40] audit: type=1400 audit(1770591316.081:26377): avc: denied { read } for pid=10999 comm="syz.5.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 197.687031][T11012] tipc: Started in network mode [ 197.688906][T11012] tipc: Node identity 1a3551b104ee, cluster identity 4711 [ 197.691297][T11012] tipc: Enabled bearer , priority 0 [ 197.698699][T11012] tipc: Disabling bearer [ 197.722171][T11016] team0: Device gtp0 is of different type [ 197.825524][ T40] audit: type=1400 audit(1770591316.391:26378): avc: denied { listen } for pid=11018 comm="syz.1.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 197.844211][ T40] audit: type=1400 audit(1770591316.391:26379): avc: denied { read } for pid=11018 comm="syz.1.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 198.357724][T11038] netlink: 'syz.4.1360': attribute type 1 has an invalid length. [ 198.373419][T11038] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.386326][T11038] vlan4: entered promiscuous mode [ 198.388443][T11038] bond4: entered promiscuous mode [ 198.390171][T11038] vlan4: entered allmulticast mode [ 198.391747][T11038] bond4: entered allmulticast mode [ 198.406431][ T40] audit: type=1400 audit(2000000000.359:26380): avc: denied { write } for pid=11037 comm="syz.4.1360" path="socket:[36666]" dev="sockfs" ino=36666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 198.413016][T11038] bond4: (slave bridge4): making interface the new active one [ 198.416566][T11038] bridge4: entered promiscuous mode [ 198.418727][T11038] bridge4: entered allmulticast mode [ 198.422078][T11038] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 198.551115][ T40] audit: type=1400 audit(2000000000.499:26381): avc: denied { ioctl } for pid=11045 comm="syz.3.1362" path="socket:[38700]" dev="sockfs" ino=38700 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 198.925523][T11062] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 198.928248][T11062] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 198.931591][T11062] vhci_hcd vhci_hcd.0: Device attached [ 198.940084][T11063] vhci_hcd: connection closed [ 198.942227][T10044] vhci_hcd vhci_hcd.5: stop threads [ 198.946713][T10044] vhci_hcd vhci_hcd.5: release socket [ 198.949031][T10044] vhci_hcd vhci_hcd.5: disconnect device [ 198.969317][ T40] audit: type=1804 audit(2000000000.919:26382): pid=11066 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1370" name="file0" dev="ramfs" ino=36756 res=1 errno=0 [ 199.135386][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.138061][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.160339][T11076] program syz.1.1372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.224389][ T5937] Bluetooth: unknown link type 128 [ 199.224952][ T40] audit: type=1400 audit(2000000001.179:26383): avc: denied { watch } for pid=11077 comm="syz.1.1373" path="pipe:[36766]" dev="pipefs" ino=36766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 199.237801][T11078] overlay: Unknown parameter 'euid<00000000000000000000' [ 199.241170][T11078] tmpfs: Unknown parameter 'grpquota_bl' [ 199.520496][T11087] : entered promiscuous mode [ 199.574389][ T5937] Bluetooth: hci1: unexpected event for opcode 0x2019 [ 199.578534][T11089] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 199.601730][T11091] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1378'. [ 199.657420][ T40] audit: type=1400 audit(2000000001.609:26384): avc: denied { setopt } for pid=11092 comm="syz.5.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 199.663823][T11093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.671860][T11093] overlay: Unknown parameter 'smackfsdef' [ 199.745804][ T40] audit: type=1400 audit(2000000001.699:26385): avc: denied { ioctl } for pid=11101 comm="syz.5.1381" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 199.793875][T11102] syzkaller0: entered promiscuous mode [ 199.796258][T11102] syzkaller0: entered allmulticast mode [ 199.822620][T11102] tipc: Started in network mode [ 199.824706][T11102] tipc: Node identity d6d97226d11a, cluster identity 4711 [ 199.827768][T11102] tipc: Enabled bearer , priority 0 [ 199.833741][T11101] tipc: Resetting bearer [ 199.863646][T11101] tipc: Disabling bearer [ 199.990642][T11125] bpf: Bad value for 'mode' [ 201.019031][T11164] syzkaller0: entered promiscuous mode [ 201.021456][T11164] syzkaller0: entered allmulticast mode [ 201.277097][T11182] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1408'. [ 201.284686][T11182] sg_write: data in/out 1031985166/160 bytes for SCSI command 0x28-- guessing data in; [ 201.284686][T11182] program syz.5.1408 not setting count and/or reply_len properly [ 201.538423][T11195] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.547372][T11195] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.550446][T11195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.637892][T11203] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1415'. [ 201.685027][T11206] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1417'. [ 202.111374][T11217] erofs (device loop4): cannot find valid erofs superblock [ 202.176337][T11219] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1420'. [ 202.281844][T11221] xt_socket: unknown flags 0x48 [ 202.476127][T11239] misc userio: Invalid payload size [ 202.621814][T11253] overlayfs: failed to resolve './file1': -2 [ 202.626905][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 202.626922][ T40] audit: type=1400 audit(2000000004.579:26389): avc: denied { watch } for pid=11252 comm="syz.4.1432" path="/305/bus/file0" dev="tmpfs" ino=1665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 202.848984][T11264] omfs: Invalid superblock (0) [ 202.909891][T11267] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 203.006719][ T40] audit: type=1400 audit(2000000004.959:26390): avc: denied { append } for pid=11277 comm="syz.4.1440" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 203.188456][T11283] vivid-000: ================= START STATUS ================= [ 203.192046][T11283] vivid-000: Test Pattern: 75% Colorbar [ 203.195812][T11283] vivid-000: Fill Percentage of Frame: 100 [ 203.198126][T11283] vivid-000: Horizontal Movement: No Movement [ 203.201649][T11283] vivid-000: Vertical Movement: Move Down Slow [ 203.204141][T11283] vivid-000: OSD Text Mode: All [ 203.205884][T11283] vivid-000: Show Border: false [ 203.207580][T11283] vivid-000: Show Square: false [ 203.209246][T11283] vivid-000: Sensor Flipped Horizontally: false [ 203.211304][T11283] vivid-000: Sensor Flipped Vertically: false [ 203.214259][T11283] vivid-000: Insert SAV Code in Image: false [ 203.216241][T11283] vivid-000: Insert EAV Code in Image: false [ 203.218283][T11283] vivid-000: Insert Video Guard Band: false [ 203.220297][T11283] vivid-000: Reduced Framerate: false [ 203.222117][T11283] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 203.225070][T11283] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 203.225512][T11291] 8021q: VLANs not supported on ip_vti0 [ 203.227776][T11283] vivid-000: Enable Capture Cropping: true grabbed [ 203.233915][T11283] vivid-000: Enable Capture Composing: false grabbed [ 203.236117][T11283] vivid-000: Enable Capture Scaler: true grabbed [ 203.238291][T11283] vivid-000: Timestamp Source: End of Frame [ 203.240274][T11283] vivid-000: Colorspace: sRGB [ 203.241886][T11283] vivid-000: Transfer Function: Default [ 203.244275][T11283] vivid-000: Y'CbCr Encoding: Default [ 203.246110][T11283] vivid-000: HSV Encoding: Hue 0-179 [ 203.247853][T11283] vivid-000: Quantization: Default [ 203.249588][T11283] vivid-000: Apply Alpha To Red Only: false [ 203.251543][T11283] vivid-000: Standard Aspect Ratio: 4x3 [ 203.254100][T11283] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 203.257155][T11283] vivid-000: DV Timings: 640x480p59 inactive [ 203.259248][T11283] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 203.261803][T11283] vivid-000: Maximum EDID Blocks: 2 [ 203.263994][T11283] vivid-000: Limited RGB Range (16-235): false [ 203.266215][T11283] vivid-000: Rx RGB Quantization Range: Automatic [ 203.268365][T11283] vivid-000: Power Present: 0x00000001 [ 203.270203][T11283] tpg source WxH: 320x240 (Y'CbCr) [ 203.271899][T11283] tpg field: 1 [ 203.284162][T11283] tpg crop: (0,0)/320x240 [ 203.286388][T11283] tpg compose: (0,0)/320x240 [ 203.293864][T11283] tpg colorspace: 8 [ 203.296288][T11283] tpg transfer function: 0/2 [ 203.298280][T11283] tpg Y'CbCr encoding: 0/1 [ 203.300182][T11283] tpg quantization: 0/2 [ 203.301983][T11283] tpg RGB range: 0/2 [ 203.304882][T11283] vivid-000: ================== END STATUS ================== [ 203.330802][T11300] 9pnet_fd: p9_fd_create_unix (11300): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 203.405335][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 203.440478][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1448'. [ 203.522325][ T40] audit: type=1400 audit(2000000005.469:26391): avc: denied { getopt } for pid=11306 comm="syz.5.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 203.564207][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 203.567999][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1448'. [ 203.672465][ T61] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 203.774996][T11310] veth7: entered allmulticast mode [ 203.784016][T11310] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1450'. [ 203.832399][ T61] usb 6-1: Using ep0 maxpacket: 8 [ 203.837797][ T61] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.840643][ T61] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 203.845419][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.851351][ T61] usb 6-1: config 0 descriptor?? [ 204.050021][ T40] audit: type=1400 audit(2000000005.999:26392): avc: denied { accept } for pid=11324 comm="syz.5.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 204.067662][T11320] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.071240][T11320] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.172160][T11320] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.176892][T11320] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.275933][ T61] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 204.278208][ T61] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 204.280405][ T61] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 204.292403][ T61] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 204.296264][ T61] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 204.299849][ T61] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 204.318694][T11320] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.323399][T11320] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.398212][T11346] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 204.424461][T11320] netdevsim netdevsim4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.428738][T11320] netdevsim netdevsim4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.503768][ T10] usb 6-1: USB disconnect, device number 14 [ 204.530136][T11353] Invalid option length (1048180) for dns_resolver key [ 204.550662][T11353] Invalid option length (1048180) for dns_resolver key [ 204.579945][T11353] Invalid option length (1048180) for dns_resolver key [ 204.605791][T10044] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.607084][T11353] Invalid option length (1048180) for dns_resolver key [ 204.608514][T10044] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.614000][T11353] Invalid option length (1048180) for dns_resolver key [ 204.617816][T11353] Invalid option length (1048180) for dns_resolver key [ 204.629835][T10047] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.631904][T11353] Invalid option length (1048180) for dns_resolver key [ 204.633199][T10047] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.637617][T11353] Invalid option length (1048180) for dns_resolver key [ 204.647122][T10047] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.650456][T10047] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.651313][T11353] Invalid option length (1048180) for dns_resolver key [ 204.669770][T10045] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.673993][T11353] Invalid option length (1048180) for dns_resolver key [ 204.674582][T10045] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.989983][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1467'. [ 204.998333][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1467'. [ 205.116545][T11379] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 205.119249][T11379] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 205.121840][T11379] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 205.152341][T11379] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 205.241017][T11384] ata1.00: invalid multi_count 128 ignored [ 205.712195][ T40] audit: type=1400 audit(2000000007.659:26393): avc: denied { bind } for pid=11410 comm="syz.3.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 205.714906][ T40] audit: type=1400 audit(2000000007.669:26394): avc: denied { write } for pid=11410 comm="syz.3.1479" path="socket:[43203]" dev="sockfs" ino=43203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 205.720391][T11412] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1478'. [ 205.832727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 205.928556][T11426] ata1.00: invalid multi_count 128 ignored [ 206.214439][ T40] audit: type=1400 audit(2000000008.169:26395): avc: denied { read } for pid=11428 comm="syz.3.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 206.728205][T11439] bond0: Error: Cannot enslave bond to itself. [ 206.922517][ T40] audit: type=1400 audit(2000000008.879:26396): avc: denied { listen } for pid=11448 comm="syz.5.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 207.089209][T11452] vlan0: entered allmulticast mode [ 207.091336][T11452] veth0_vlan: entered allmulticast mode [ 207.127407][T11455] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 207.130688][T11455] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 207.130707][ T40] audit: type=1400 audit(2000000009.079:26397): avc: denied { firmware_load } for pid=11454 comm="syz.5.1494" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 207.196410][T11463] dlm: no locking on control device [ 207.352362][ T40] audit: type=1400 audit(2000000009.299:26398): avc: denied { watch } for pid=11475 comm="syz.5.1501" path="/219/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 207.354434][T11476] mac80211_hwsim hwsim13 : renamed from wlan1 (while UP) [ 207.492406][ T61] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 207.642392][ T61] usb 9-1: Using ep0 maxpacket: 16 [ 207.645764][ T61] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 207.649635][ T61] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 207.653839][ T61] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.658523][ T61] usb 9-1: config 1 interface 0 has no altsetting 0 [ 207.663374][ T61] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 207.666252][ T61] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.669254][ T61] usb 9-1: Product: syz [ 207.670593][ T61] usb 9-1: Manufacturer: syz [ 207.672616][ T61] usb 9-1: SerialNumber: syz [ 207.680377][T10048] nci: nci_rsp_packet: unknown rsp opcode 0x229 [ 207.766277][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1507'. [ 207.784553][T11501] team0 (unregistering): Port device team_slave_1 removed [ 207.887192][ T61] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 207.930247][T11505] tmpfs: Unknown parameter 'grpquta_block_hardli' [ 207.936341][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 207.936355][ T40] audit: type=1400 audit(2000000009.889:26402): avc: denied { listen } for pid=11504 comm="syz.1.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 208.082093][ T40] audit: type=1400 audit(2000000010.029:26403): avc: denied { read write } for pid=11466 comm="syz.4.1497" name="lp0" dev="devtmpfs" ino=3343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 208.097886][ T40] audit: type=1400 audit(2000000010.029:26404): avc: denied { open } for pid=11466 comm="syz.4.1497" path="/dev/usb/lp0" dev="devtmpfs" ino=3343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 208.982149][ T40] audit: type=1400 audit(2000000010.929:26405): avc: denied { bind } for pid=11524 comm="syz.1.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 209.459020][T11545] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_vlan, syncid = 0, id = 0 [ 209.597678][T11552] SELinux: policydb version 1952859392 does not match my version range 15-35 [ 209.600505][T11552] SELinux: failed to load policy [ 209.602787][T11552] SELinux: failed to load policy [ 210.251108][ T61] usb 9-1: USB disconnect, device number 11 [ 210.257746][ T61] usblp0: removed [ 210.299914][T11558] netlink: 'syz.4.1522': attribute type 12 has an invalid length. [ 210.302863][T11558] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.1522'. [ 210.411947][T11558] syzkaller0: entered promiscuous mode [ 210.414206][T11558] syzkaller0: entered allmulticast mode [ 210.609973][T11493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.659048][T11561] wg1: left promiscuous mode [ 210.661321][T11561] macsec0: left promiscuous mode [ 210.665404][T11561] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 210.709144][T11566] netlink: 'syz.1.1525': attribute type 1 has an invalid length. [ 210.741376][T11571] ata1.00: invalid multi_count 128 ignored [ 210.764754][T11566] bond4: entered promiscuous mode [ 210.766456][T11566] bond4: entered allmulticast mode [ 210.768280][T11566] 8021q: adding VLAN 0 to HW filter on device bond4 [ 210.984316][T11588] ptrace attach of "/syz-executor exec"[11589] was attempted by "/syz-executor exec"[11588] [ 211.037781][T11588] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1531'. [ 211.074961][T11590] netlink: 'syz.4.1530': attribute type 4 has an invalid length. [ 211.946198][T11646] batman_adv: batadv0: Adding interface: gretap2 [ 211.948257][T11646] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.957277][T11646] batman_adv: batadv0: Interface activated: gretap2 [ 212.004945][T11649] team_slave_1: entered promiscuous mode [ 212.043503][ T40] audit: type=1400 audit(2000000013.999:26406): avc: denied { setopt } for pid=11656 comm="syz.5.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 212.132525][ T9] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 212.283597][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.286868][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.290995][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.294166][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.312334][ T10] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 212.472311][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 212.475875][ T10] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 212.479023][ T10] usb 10-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.483543][ T10] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 212.487092][ T10] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 212.490631][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 212.499363][ T10] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 212.503301][ T9] usb 6-1: usb_control_msg returned -32 [ 212.505095][ T9] usbtmc 6-1:16.0: can't read capabilities [ 212.507270][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.509802][ T10] usb 10-1: Product: syz [ 212.511115][ T10] usb 10-1: Manufacturer: syz [ 212.513086][ T10] usb 10-1: SerialNumber: syz [ 212.522907][ T10] usb 10-1: config 0 descriptor?? [ 212.527898][T11657] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 212.712816][T11666] program syz.3.1553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.740185][T11657] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 212.746643][ T10] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input23 [ 212.934165][ T40] audit: type=1326 audit(2000000014.889:26407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.3.1556" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6683f9aeb9 code=0x0 [ 212.995719][T11680] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1549'. [ 213.056754][ T6018] usb 10-1: USB disconnect, device number 8 [ 213.222427][T11685] kvm: emulating exchange as write [ 213.613918][T11697] IPVS: sync thread started: state = MASTER, mcast_ifn = bond0, syncid = -2, id = 0 [ 213.635214][T11698] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1561'. [ 213.653420][T11698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.660034][T11698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.666337][T11698] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 213.671169][T11698] bond0 (unregistering): Released all slaves [ 214.293329][T11713] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1567'. [ 214.445729][T11717] ata1.00: invalid multi_count 128 ignored [ 214.841107][T11729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61968 sclass=netlink_route_socket pid=11729 comm=syz.3.1572 [ 214.848586][T11727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.880091][ T5975] usb 6-1: USB disconnect, device number 15 [ 215.215995][ T40] audit: type=1400 audit(2000000017.169:26408): avc: denied { execute } for pid=11744 comm="syz.5.1578" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 215.218166][T11745] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 215.509889][T10043] nci: nci_rsp_packet: unknown rsp opcode 0x229 [ 215.642461][ T6244] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 215.794063][ T6244] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 215.798962][ T6244] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.804055][ T6244] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.808343][ T6244] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 215.815404][ T6244] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 215.819508][ T6244] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 215.823293][ T6244] usb 10-1: Manufacturer: syz [ 215.830751][ T6244] usb 10-1: config 0 descriptor?? [ 215.886614][T10044] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 215.890436][T10044] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 215.894515][T10044] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 215.897925][T11763] loop2: detected capacity change from 0 to 7 [ 215.898190][T10044] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 215.911299][T10831] Dev loop2: unable to read RDB block 7 [ 215.922876][T10831] loop2: AHDI p1 p2 p3 [ 215.924273][T10831] loop2: partition table partially beyond EOD, truncated [ 215.927028][T10831] loop2: p1 start 1601398130 is beyond EOD, truncated [ 215.929242][T10831] loop2: p2 start 1702059890 is beyond EOD, truncated [ 215.937786][T11763] Dev loop2: unable to read RDB block 7 [ 215.941130][T11763] loop2: AHDI p1 p2 p3 [ 215.943260][T11763] loop2: partition table partially beyond EOD, truncated [ 215.946321][T11763] loop2: p1 start 1601398130 is beyond EOD, truncated [ 215.949196][T11763] loop2: p2 start 1702059890 is beyond EOD, truncated [ 216.239069][ T6244] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 216.247047][ T6244] appleir 0003:05AC:8243.0006: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 216.742687][ T6244] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 216.902467][ T6244] usb 6-1: Using ep0 maxpacket: 32 [ 216.905938][ T6244] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 216.912133][ T6244] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 216.915619][ T6244] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 216.918713][ T6244] usb 6-1: Product: syz [ 216.920086][ T6244] usb 6-1: Manufacturer: syz [ 216.921933][ T6244] usb 6-1: SerialNumber: syz [ 216.925297][ T6244] usb 6-1: config 0 descriptor?? [ 216.927623][T11766] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 216.931562][ T6244] hub 6-1:0.0: bad descriptor, ignoring hub [ 216.934223][ T6244] hub 6-1:0.0: probe with driver hub failed with error -5 [ 217.133368][T11766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1584'. [ 217.644773][T11766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.649582][T11766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.702526][ T6244] usb 10-1: reset high-speed USB device number 9 using dummy_hcd [ 217.764992][ T9] usb 6-1: USB disconnect, device number 16 [ 218.438082][T11757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.441539][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1577'. [ 218.445399][T11743] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1577'. [ 218.449207][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1577'. [ 218.555784][T11778] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 218.617524][ T40] audit: type=1400 audit(2000000020.569:26409): avc: denied { map } for pid=11784 comm="syz.3.1590" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 218.665065][T11790] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1591'. [ 218.814982][T11797] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1594'. [ 218.818767][ T40] audit: type=1400 audit(2000000020.769:26410): avc: denied { nlmsg_read } for pid=11796 comm="syz.3.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 218.858036][T11803] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 218.868567][T11803] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 218.883238][T11804] netem: incorrect ge model size [ 218.889219][T11804] netem: change failed [ 219.013501][T11810] FAULT_INJECTION: forcing a failure. [ 219.013501][T11810] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 219.017973][T11810] CPU: 2 UID: 0 PID: 11810 Comm: syz.5.1598 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.017992][T11810] Tainted: [L]=SOFTLOCKUP [ 219.017996][T11810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.018003][T11810] Call Trace: [ 219.018007][T11810] [ 219.018012][T11810] dump_stack_lvl+0x100/0x190 [ 219.018059][T11810] should_fail_ex.cold+0x5/0xa [ 219.018071][T11810] strncpy_from_user+0x3b/0x2d0 [ 219.018096][T11810] getname_flags.part.0+0x8f/0x540 [ 219.018115][T11810] user_path_at+0x9b/0x100 [ 219.018128][T11810] __x64_sys_mount+0x1fb/0x310 [ 219.018145][T11810] ? __pfx___x64_sys_mount+0x10/0x10 [ 219.018165][T11810] do_syscall_64+0xc9/0xf80 [ 219.018189][T11810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.018201][T11810] RIP: 0033:0x7f80e439aeb9 [ 219.018210][T11810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.018221][T11810] RSP: 002b:00007f80e5343028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 219.018232][T11810] RAX: ffffffffffffffda RBX: 00007f80e4615fa0 RCX: 00007f80e439aeb9 [ 219.018239][T11810] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000200000000080 [ 219.018245][T11810] RBP: 00007f80e5343090 R08: 00002000000001c0 R09: 0000000000000000 [ 219.018252][T11810] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 219.018258][T11810] R13: 00007f80e4616038 R14: 00007f80e4615fa0 R15: 00007ffc8c9290e8 [ 219.018271][T11810] [ 219.073854][T11812] 9pnet_virtio: no channels available for device ./file0 [ 219.074398][ T40] audit: type=1400 audit(2000000021.029:26411): avc: denied { mounton } for pid=11811 comm="syz.3.1599" path="/411/file0" dev="tmpfs" ino=2232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 219.128907][T11817] netlink: 'syz.5.1601': attribute type 1 has an invalid length. [ 219.145217][T11817] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.186148][T11817] bond2: (slave veth0_to_bond): making interface the new active one [ 219.190866][T11817] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 219.211412][T11817] hsr_slave_0: left promiscuous mode [ 219.215372][T11817] hsr_slave_1: left promiscuous mode [ 219.243423][ T59] usb 10-1: USB disconnect, device number 9 [ 219.415686][T11824] netlink: 'syz.5.1604': attribute type 10 has an invalid length. [ 219.437612][T11824] bond0: (slave ): Enslaving as an active interface with an up link [ 219.568673][ T40] audit: type=1400 audit(2000000021.519:26412): avc: denied { ioctl } for pid=11837 comm="syz.5.1606" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 219.582071][T11838] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.695779][T11848] FAULT_INJECTION: forcing a failure. [ 219.695779][T11848] name failslab, interval 1, probability 0, space 0, times 1 [ 219.701148][T11848] CPU: 2 UID: 0 PID: 11848 Comm: syz.4.1609 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.701173][T11848] Tainted: [L]=SOFTLOCKUP [ 219.701179][T11848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.701189][T11848] Call Trace: [ 219.701194][T11848] [ 219.701200][T11848] dump_stack_lvl+0x100/0x190 [ 219.701228][T11848] should_fail_ex.cold+0x5/0xa [ 219.701246][T11848] should_failslab+0xc2/0x120 [ 219.701273][T11848] ? tomoyo_encode2+0xfb/0x3c0 [ 219.701290][T11848] __kmalloc_noprof+0xf6/0x9c0 [ 219.701313][T11848] ? tomoyo_encode2+0xfb/0x3c0 [ 219.701328][T11848] tomoyo_encode2+0xfb/0x3c0 [ 219.701349][T11848] tomoyo_encode+0x29/0x50 [ 219.701366][T11848] tomoyo_mount_acl+0x14c/0x8b0 [ 219.701383][T11848] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 219.701407][T11848] ? is_bpf_text_address+0x94/0x1a0 [ 219.701433][T11848] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 219.701448][T11848] ? unwind_get_return_address+0x59/0xa0 [ 219.701495][T11848] ? tomoyo_domain+0xb2/0x150 [ 219.701515][T11848] ? tomoyo_profile+0x47/0x60 [ 219.701538][T11848] tomoyo_mount_permission+0x214/0x460 [ 219.701554][T11848] ? tomoyo_mount_permission+0x1f6/0x460 [ 219.701572][T11848] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 219.701603][T11848] security_sb_mount+0xdd/0x270 [ 219.701630][T11848] path_mount+0x158/0x23c0 [ 219.701652][T11848] ? rcu_is_watching+0x12/0xc0 [ 219.701675][T11848] ? __pfx_path_mount+0x10/0x10 [ 219.701698][T11848] ? kmem_cache_free+0x143/0x720 [ 219.701713][T11848] ? strncpy_from_user+0x19d/0x2d0 [ 219.701732][T11848] ? putname+0xf5/0x1a0 [ 219.701757][T11848] ? putname+0xf5/0x1a0 [ 219.701775][T11848] ? putname+0xfa/0x1a0 [ 219.701798][T11848] ? __x64_sys_mount+0x293/0x310 [ 219.701819][T11848] __x64_sys_mount+0x293/0x310 [ 219.701842][T11848] ? __pfx___x64_sys_mount+0x10/0x10 [ 219.701870][T11848] do_syscall_64+0xc9/0xf80 [ 219.701890][T11848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.701906][T11848] RIP: 0033:0x7f190979aeb9 [ 219.701921][T11848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.701935][T11848] RSP: 002b:00007f190a712028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 219.701951][T11848] RAX: ffffffffffffffda RBX: 00007f1909a15fa0 RCX: 00007f190979aeb9 [ 219.701962][T11848] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000200000000080 [ 219.701971][T11848] RBP: 00007f190a712090 R08: 00002000000001c0 R09: 0000000000000000 [ 219.701981][T11848] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 219.701991][T11848] R13: 00007f1909a16038 R14: 00007f1909a15fa0 R15: 00007ffcaed47918 [ 219.702013][T11848] [ 219.808208][T11850] trusted_key: encrypted_key: key trusted:syz not found [ 219.841562][T11853] overlayfs: workdir and upperdir must reside under the same mount [ 219.883701][T11854] kvm: MWAIT instruction emulated as NOP! [ 219.907678][T10048] Bluetooth: hci2: Frame reassembly failed (-84) [ 220.020729][T11857] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 220.147526][ T40] audit: type=1400 audit(2000000022.099:26413): avc: denied { map } for pid=11876 comm="syz.1.1617" path="socket:[44440]" dev="sockfs" ino=44440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 220.301590][ T40] audit: type=1400 audit(2000000022.249:26414): avc: denied { map } for pid=11890 comm="syz.4.1619" path="socket:[45289]" dev="sockfs" ino=45289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 220.361874][ T40] audit: type=1400 audit(2000000022.309:26415): avc: denied { bind } for pid=11890 comm="syz.4.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 220.421635][T11896] FAULT_INJECTION: forcing a failure. [ 220.421635][T11896] name failslab, interval 1, probability 0, space 0, times 0 [ 220.427788][T11896] CPU: 0 UID: 0 PID: 11896 Comm: syz.4.1620 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.427818][T11896] Tainted: [L]=SOFTLOCKUP [ 220.427824][T11896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.427834][T11896] Call Trace: [ 220.427841][T11896] [ 220.427849][T11896] dump_stack_lvl+0x100/0x190 [ 220.427877][T11896] should_fail_ex.cold+0x5/0xa [ 220.427898][T11896] should_failslab+0xc2/0x120 [ 220.427921][T11896] ? tomoyo_realpath_from_path+0xb6/0x690 [ 220.427941][T11896] __kmalloc_noprof+0xf6/0x9c0 [ 220.427967][T11896] ? tomoyo_realpath_from_path+0xb6/0x690 [ 220.427986][T11896] tomoyo_realpath_from_path+0xb6/0x690 [ 220.428012][T11896] tomoyo_mount_acl+0x1b6/0x8b0 [ 220.428031][T11896] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 220.428059][T11896] ? is_bpf_text_address+0x94/0x1a0 [ 220.428087][T11896] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 220.428103][T11896] ? unwind_get_return_address+0x59/0xa0 [ 220.428154][T11896] ? tomoyo_domain+0xb2/0x150 [ 220.428182][T11896] ? tomoyo_profile+0x47/0x60 [ 220.428207][T11896] tomoyo_mount_permission+0x214/0x460 [ 220.428225][T11896] ? tomoyo_mount_permission+0x1f6/0x460 [ 220.428244][T11896] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 220.428277][T11896] security_sb_mount+0xdd/0x270 [ 220.428307][T11896] path_mount+0x158/0x23c0 [ 220.428332][T11896] ? rcu_is_watching+0x12/0xc0 [ 220.428359][T11896] ? __pfx_path_mount+0x10/0x10 [ 220.428382][T11896] ? kmem_cache_free+0x143/0x720 [ 220.428401][T11896] ? strncpy_from_user+0x19d/0x2d0 [ 220.428419][T11896] ? putname+0xf5/0x1a0 [ 220.428439][T11896] ? putname+0xf5/0x1a0 [ 220.428459][T11896] ? putname+0xfa/0x1a0 [ 220.428483][T11896] ? __x64_sys_mount+0x293/0x310 [ 220.428505][T11896] __x64_sys_mount+0x293/0x310 [ 220.428530][T11896] ? __pfx___x64_sys_mount+0x10/0x10 [ 220.428561][T11896] do_syscall_64+0xc9/0xf80 [ 220.428581][T11896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.428599][T11896] RIP: 0033:0x7f190979aeb9 [ 220.428611][T11896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.428626][T11896] RSP: 002b:00007f190a712028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 220.428643][T11896] RAX: ffffffffffffffda RBX: 00007f1909a15fa0 RCX: 00007f190979aeb9 [ 220.428653][T11896] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000200000000080 [ 220.428662][T11896] RBP: 00007f190a712090 R08: 00002000000001c0 R09: 0000000000000000 [ 220.428671][T11896] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000002 [ 220.428680][T11896] R13: 00007f1909a16038 R14: 00007f1909a15fa0 R15: 00007ffcaed47918 [ 220.428701][T11896] [ 220.428708][T11896] ERROR: Out of memory at tomoyo_realpath_from_path. [ 220.566835][T11898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1621'. [ 220.843216][T11911] openvswitch: netlink: EtherType 50a is less than min 600 [ 220.905297][ T40] audit: type=1404 audit(2000000022.859:26416): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 220.927764][ T40] audit: type=1404 audit(2000000022.879:26417): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 220.949229][ T40] audit: type=1400 audit(2000000022.899:26418): avc: denied { write } for pid=11910 comm="syz.3.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.557247][ T40] audit: type=1400 audit(2000000023.509:26419): avc: denied { recv } for pid=5917 comm="syz-executor" saddr=127.0.0.1 src=51904 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 221.570606][ T40] audit: type=1400 audit(2000000023.509:26420): avc: denied { read write } for pid=6909 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.575575][T11914] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 221.581268][ T40] audit: type=1400 audit(2000000023.509:26421): avc: denied { open } for pid=6909 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.589563][ T40] audit: type=1400 audit(2000000023.509:26422): avc: denied { ioctl } for pid=6909 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.599007][ T40] audit: type=1400 audit(2000000023.539:26423): avc: denied { mount } for pid=11913 comm="syz.4.1626" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 221.691727][T11915] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1626'. [ 221.933902][ T5937] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 221.933908][ T5947] Bluetooth: hci2: command 0xfc11 tx timeout [ 222.101578][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1628'. [ 222.258064][T11923] binder: 11922:11923 ioctl c0306201 200000000640 returned -22 [ 222.271864][T11923] bridge0: port 2(veth0_to_bridge) entered blocking state [ 222.274354][T11923] bridge0: port 2(veth0_to_bridge) entered disabled state [ 222.276653][T11923] veth0_to_bridge: entered allmulticast mode [ 222.279836][T11923] veth0_to_bridge: entered promiscuous mode [ 222.299861][ T5975] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 222.316367][T11925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1631'. [ 222.324639][T11927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.354187][T11933] FAULT_INJECTION: forcing a failure. [ 222.354187][T11933] name failslab, interval 1, probability 0, space 0, times 0 [ 222.358641][T11933] CPU: 3 UID: 0 PID: 11933 Comm: syz.4.1630 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.358661][T11933] Tainted: [L]=SOFTLOCKUP [ 222.358664][T11933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.358671][T11933] Call Trace: [ 222.358676][T11933] [ 222.358681][T11933] dump_stack_lvl+0x100/0x190 [ 222.358701][T11933] should_fail_ex.cold+0x5/0xa [ 222.358714][T11933] should_failslab+0xc2/0x120 [ 222.358729][T11933] ? tomoyo_encode2+0xfb/0x3c0 [ 222.358742][T11933] __kmalloc_noprof+0xf6/0x9c0 [ 222.358757][T11933] ? tomoyo_encode2+0xfb/0x3c0 [ 222.358768][T11933] tomoyo_encode2+0xfb/0x3c0 [ 222.358783][T11933] tomoyo_encode+0x29/0x50 [ 222.358799][T11933] tomoyo_realpath_from_path+0x18c/0x690 [ 222.358824][T11933] tomoyo_mount_acl+0x1b6/0x8b0 [ 222.358844][T11933] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 222.358874][T11933] ? is_bpf_text_address+0x94/0x1a0 [ 222.358905][T11933] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 222.358924][T11933] ? unwind_get_return_address+0x59/0xa0 [ 222.358956][T11933] ? tomoyo_domain+0xb2/0x150 [ 222.358970][T11933] ? tomoyo_profile+0x47/0x60 [ 222.358985][T11933] tomoyo_mount_permission+0x214/0x460 [ 222.358996][T11933] ? tomoyo_mount_permission+0x1f6/0x460 [ 222.359008][T11933] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 222.359027][T11933] security_sb_mount+0xdd/0x270 [ 222.359047][T11933] path_mount+0x158/0x23c0 [ 222.359063][T11933] ? rcu_is_watching+0x12/0xc0 [ 222.359080][T11933] ? __pfx_path_mount+0x10/0x10 [ 222.359095][T11933] ? kmem_cache_free+0x143/0x720 [ 222.359106][T11933] ? strncpy_from_user+0x19d/0x2d0 [ 222.359119][T11933] ? putname+0xf5/0x1a0 [ 222.359136][T11933] ? putname+0xf5/0x1a0 [ 222.359149][T11933] ? putname+0xfa/0x1a0 [ 222.359168][T11933] ? __x64_sys_mount+0x293/0x310 [ 222.359183][T11933] __x64_sys_mount+0x293/0x310 [ 222.359199][T11933] ? __pfx___x64_sys_mount+0x10/0x10 [ 222.359219][T11933] do_syscall_64+0xc9/0xf80 [ 222.359234][T11933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.359246][T11933] RIP: 0033:0x7f190979aeb9 [ 222.359255][T11933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.359266][T11933] RSP: 002b:00007f190a712028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 222.359276][T11933] RAX: ffffffffffffffda RBX: 00007f1909a15fa0 RCX: 00007f190979aeb9 [ 222.359283][T11933] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000200000000080 [ 222.359289][T11933] RBP: 00007f190a712090 R08: 00002000000001c0 R09: 0000000000000000 [ 222.359296][T11933] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000002 [ 222.359302][T11933] R13: 00007f1909a16038 R14: 00007f1909a15fa0 R15: 00007ffcaed47918 [ 222.359315][T11933] [ 222.359327][T11933] ERROR: Out of memory at tomoyo_realpath_from_path. [ 222.462400][ T5975] usb 10-1: Using ep0 maxpacket: 8 [ 222.477741][ T5975] usb 10-1: config 0 has no interfaces? [ 222.480064][ T5975] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 222.484508][ T5975] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.489224][ T5975] usb 10-1: config 0 descriptor?? [ 222.549499][T11950] fuse: Unknown parameter 'rootm *ة.ode' [ 222.571710][T11952] loop7: detected capacity change from 0 to 7 [ 222.575263][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.578756][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 222.582028][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.585841][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 222.589830][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.593645][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 222.597161][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.600843][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 222.606581][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.610378][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 222.614250][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.617956][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 222.621322][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.624525][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 222.627060][T11075] ldm_validate_partition_table(): Disk read failed. [ 222.631199][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.634429][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 222.695142][T11953] support for the xor transformation has been removed. [ 222.698539][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.699042][T11917] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1627'. [ 222.702724][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 222.703153][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.709100][T11917] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1627'. [ 222.709911][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 222.716532][T11917] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1627'. [ 222.718359][T11075] Dev loop7: unable to read RDB block 0 [ 222.720881][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1627'. [ 222.725196][T11075] loop7: unable to read partition table [ 222.730942][T11075] loop7: partition table beyond EOD, truncated [ 222.735324][ T10] usb 10-1: USB disconnect, device number 10 [ 222.747950][T11952] ldm_validate_partition_table(): Disk read failed. [ 222.751517][T11952] Dev loop7: unable to read RDB block 0 [ 222.756906][T11952] loop7: unable to read partition table [ 222.759226][T11952] loop7: partition table beyond EOD, truncated [ 222.761375][T11952] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 222.783701][T11962] SELinux: failed to load policy [ 222.865896][T11969] syzkaller0: entered promiscuous mode [ 222.868224][T11969] syzkaller0: entered allmulticast mode [ 223.109172][T11985] FAULT_INJECTION: forcing a failure. [ 223.109172][T11985] name failslab, interval 1, probability 0, space 0, times 0 [ 223.115595][T11985] CPU: 0 UID: 0 PID: 11985 Comm: syz.1.1645 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.115623][T11985] Tainted: [L]=SOFTLOCKUP [ 223.115630][T11985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.115642][T11985] Call Trace: [ 223.115648][T11985] [ 223.115655][T11985] dump_stack_lvl+0x100/0x190 [ 223.115684][T11985] should_fail_ex.cold+0x5/0xa [ 223.115704][T11985] should_failslab+0xc2/0x120 [ 223.115727][T11985] kmem_cache_alloc_noprof+0x83/0x780 [ 223.115751][T11985] ? getname_kernel+0x52/0x370 [ 223.115780][T11985] ? getname_kernel+0x52/0x370 [ 223.115802][T11985] getname_kernel+0x52/0x370 [ 223.115826][T11985] kern_path+0x1d/0x50 [ 223.115846][T11985] tomoyo_mount_acl+0x2f4/0x8b0 [ 223.115864][T11985] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 223.115896][T11985] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 223.115914][T11985] ? unwind_get_return_address+0x59/0xa0 [ 223.115964][T11985] ? tomoyo_domain+0xb2/0x150 [ 223.115986][T11985] ? tomoyo_profile+0x47/0x60 [ 223.116012][T11985] tomoyo_mount_permission+0x214/0x460 [ 223.116028][T11985] ? tomoyo_mount_permission+0x1f6/0x460 [ 223.116049][T11985] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 223.116082][T11985] security_sb_mount+0xdd/0x270 [ 223.116113][T11985] path_mount+0x158/0x23c0 [ 223.116138][T11985] ? rcu_is_watching+0x12/0xc0 [ 223.116168][T11985] ? __pfx_path_mount+0x10/0x10 [ 223.116192][T11985] ? kmem_cache_free+0x143/0x720 [ 223.116209][T11985] ? strncpy_from_user+0x19d/0x2d0 [ 223.116229][T11985] ? putname+0xf5/0x1a0 [ 223.116253][T11985] ? putname+0xf5/0x1a0 [ 223.116272][T11985] ? putname+0xfa/0x1a0 [ 223.116297][T11985] ? __x64_sys_mount+0x293/0x310 [ 223.116320][T11985] __x64_sys_mount+0x293/0x310 [ 223.116344][T11985] ? __pfx___x64_sys_mount+0x10/0x10 [ 223.116374][T11985] do_syscall_64+0xc9/0xf80 [ 223.116394][T11985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.116410][T11985] RIP: 0033:0x7f907f39aeb9 [ 223.116425][T11985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.116440][T11985] RSP: 002b:00007f908024c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 223.116457][T11985] RAX: ffffffffffffffda RBX: 00007f907f615fa0 RCX: 00007f907f39aeb9 [ 223.116467][T11985] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000200000000080 [ 223.116478][T11985] RBP: 00007f908024c090 R08: 00002000000001c0 R09: 0000000000000000 [ 223.116488][T11985] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000002 [ 223.116496][T11985] R13: 00007f907f616038 R14: 00007f907f615fa0 R15: 00007ffd637c00d8 [ 223.116519][T11985] [ 223.238832][T11987] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1646'. [ 223.265559][ T5937] Bluetooth: hci1: unexpected event for opcode 0x0404 [ 223.416575][T11993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.713799][T12010] a: renamed from bond_slave_0 (while UP) [ 223.899688][T12027] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 223.996071][T12034] FAULT_INJECTION: forcing a failure. [ 223.996071][T12034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.012386][T12034] CPU: 2 UID: 0 PID: 12034 Comm: syz.5.1662 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.012415][T12034] Tainted: [L]=SOFTLOCKUP [ 224.012421][T12034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.012432][T12034] Call Trace: [ 224.012437][T12034] [ 224.012444][T12034] dump_stack_lvl+0x100/0x190 [ 224.012496][T12034] should_fail_ex.cold+0x5/0xa [ 224.012517][T12034] _copy_to_user+0x32/0xd0 [ 224.012552][T12034] simple_read_from_buffer+0xcb/0x170 [ 224.012574][T12034] proc_fail_nth_read+0x1af/0x230 [ 224.012598][T12034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.012622][T12034] ? rw_verify_area+0xce/0x6d0 [ 224.012638][T12034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.012661][T12034] vfs_read+0x1e4/0xb30 [ 224.012682][T12034] ? __pfx_vfs_read+0x10/0x10 [ 224.012699][T12034] ? find_held_lock+0x2b/0x80 [ 224.012722][T12034] ? __fget_files+0x215/0x3d0 [ 224.012747][T12034] ? __fget_files+0x21f/0x3d0 [ 224.012775][T12034] ksys_read+0x12a/0x250 [ 224.012793][T12034] ? __pfx_ksys_read+0x10/0x10 [ 224.012819][T12034] do_syscall_64+0xc9/0xf80 [ 224.012848][T12034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.012866][T12034] RIP: 0033:0x7f80e435b78e [ 224.012880][T12034] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 224.012896][T12034] RSP: 002b:00007f80e5342fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 224.012937][T12034] RAX: ffffffffffffffda RBX: 00007f80e53436c0 RCX: 00007f80e435b78e [ 224.012955][T12034] RDX: 000000000000000f RSI: 00007f80e53430a0 RDI: 0000000000000004 [ 224.012966][T12034] RBP: 00007f80e5343090 R08: 0000000000000000 R09: 0000000000000000 [ 224.012976][T12034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.012986][T12034] R13: 00007f80e4616038 R14: 00007f80e4615fa0 R15: 00007ffc8c9290e8 [ 224.013011][T12034] [ 224.077296][T12039] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1665'. [ 224.133602][T12039] macvlan2: entered promiscuous mode [ 224.167978][T12046] Bluetooth: MGMT ver 1.23 [ 224.173792][T12049] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 224.178919][T12051] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 224.190856][T12052] syzkaller0: entered promiscuous mode [ 224.194419][T12052] syzkaller0: entered allmulticast mode [ 224.199132][T12049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1667'. [ 224.199132][T12051] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1667'. [ 224.199151][T12051] openvswitch: netlink: Flow key attr not present in new flow. [ 224.201913][T12049] openvswitch: netlink: Flow key attr not present in new flow. [ 224.269644][ T5937] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 224.273236][ T5937] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 224.488614][T12071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1675'. [ 224.683522][T12091] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 224.733377][T12094] kAFS: unable to lookup cell '(,cL' [ 224.735577][T12094] kAFS: unable to lookup cell '(,' [ 224.916462][T12100] syzkaller1: entered promiscuous mode [ 224.918418][T12100] syzkaller1: entered allmulticast mode [ 225.252585][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 225.358281][ T40] kauditd_printk_skb: 175 callbacks suppressed [ 225.358295][ T40] audit: type=1400 audit(2000000027.309:26599): avc: denied { map } for pid=12129 comm="syz.5.1692" path="socket:[45637]" dev="sockfs" ino=45637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 225.371924][ T40] audit: type=1400 audit(2000000027.319:26600): avc: denied { create } for pid=12129 comm="syz.5.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 225.391051][ T40] audit: type=1400 audit(2000000027.339:26601): avc: denied { create } for pid=12129 comm="syz.5.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 225.397443][ T40] audit: type=1400 audit(2000000027.339:26602): avc: denied { ioctl } for pid=12129 comm="syz.5.1692" path="socket:[44875]" dev="sockfs" ino=44875 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 225.404083][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 225.409188][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 225.413235][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.415176][ T40] audit: type=1400 audit(2000000027.369:26603): avc: denied { sqpoll } for pid=12129 comm="syz.5.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 225.432714][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 225.435088][ T10] pvrusb2: ********** [ 225.436347][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 225.439470][ T10] pvrusb2: Important functionality might not be entirely working. [ 225.441913][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 225.447545][ T10] pvrusb2: ********** [ 225.471420][T12134] syzkaller0: entered promiscuous mode [ 225.473275][T12134] syzkaller0: entered allmulticast mode [ 225.481040][T12134] PM: Enabling pm_trace changes system date and time during resume. [ 225.481040][T12134] PM: Correct system time has to be restored manually after resume. [ 225.619549][ T40] audit: type=1400 audit(2000000027.569:26604): avc: denied { connect } for pid=12144 comm="syz.3.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.626574][ T40] audit: type=1400 audit(2000000027.569:26605): avc: denied { name_connect } for pid=12144 comm="syz.3.1699" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 225.633975][ T2490] pvrusb2: Invalid write control endpoint [ 225.641456][ T40] audit: type=1400 audit(2000000027.589:26606): avc: denied { listen } for pid=12144 comm="syz.3.1699" lport=33069 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.648870][ T40] audit: type=1400 audit(2000000027.589:26607): avc: denied { accept } for pid=12144 comm="syz.3.1699" lport=33069 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.656211][ T40] audit: type=1400 audit(2000000027.589:26608): avc: denied { getopt } for pid=12144 comm="syz.3.1699" lport=33069 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 225.688135][ T2490] pvrusb2: Invalid write control endpoint [ 225.690741][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 225.695322][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 225.698614][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 225.703055][ T2490] pvrusb2: Device being rendered inoperable [ 225.705611][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 225.708867][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 225.719817][ T2490] pvrusb2: Attached sub-driver cx25840 [ 225.722336][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 225.726525][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 225.870372][T12104] fuse: Unknown parameter '0x000000000000000d' [ 225.953802][ T61] usb 6-1: USB disconnect, device number 17 [ 225.997960][T12174] cgroup: No subsys list or none specified [ 226.003111][ T5937] Bluetooth: hci4: command 0x0406 tx timeout [ 226.221906][T12185] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 226.650607][T12202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=12202 comm=syz.1.1715 [ 226.823527][ T1116] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 226.825696][T12233] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 226.832364][ T1116] ata1: failed to read log page 10h (errno=-5) [ 226.834934][T12233] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 226.857349][T12233] ovl_remap_lower_ino: 34 callbacks suppressed [ 226.857367][T12233] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 226.865573][T12233] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 226.869663][T12233] overlayfs: d_ino too big (393, ino=9223372036854777945, xinobits=3) [ 226.874180][T12233] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 226.880091][T12233] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 226.884950][T12233] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 226.889474][T12233] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 226.894475][T12233] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 226.898529][T12233] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 226.902687][T12233] overlayfs: d_ino too big (instances, ino=4611686018427389128, xinobits=3) [ 227.038018][T12251] vcan1: entered allmulticast mode [ 227.084047][T12248] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 227.090840][T12248] geneve3: entered promiscuous mode [ 227.094247][T10036] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 227.097566][T10036] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 227.100408][T10036] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 227.104789][T10036] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 227.202436][ T59] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 227.274591][T12260] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 227.279966][T12260] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 227.371693][T12260] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 227.373733][ T59] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.376996][T12260] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 227.378539][ T59] usb 9-1: config 0 has no interface number 0 [ 227.384669][ T59] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.388199][ T59] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.391293][ T59] usb 9-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 227.394524][ T59] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.399802][ T59] usb 9-1: config 0 descriptor?? [ 227.450990][T12260] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 227.460724][T12273] __nla_validate_parse: 5 callbacks suppressed [ 227.460743][T12273] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1738'. [ 227.461434][T12260] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 227.473656][T12273] rtc_cmos 00:05: Alarms can be up to one day in the future [ 227.518563][T12276] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 227.547877][T12260] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 227.552045][T12260] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 227.643506][T10033] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.647006][T10033] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 227.658575][T10033] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.662087][T10033] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 227.677379][T10039] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.680233][T10039] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 227.688543][T10032] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.691823][T10032] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 227.816277][ T34] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 227.835273][ T59] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.1/0003:04D9:A055.0007/input/input25 [ 227.855624][T12281] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1741'. [ 227.933641][ T59] holtek_kbd 0003:04D9:A055.0007: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 227.972469][ T34] usb 10-1: Using ep0 maxpacket: 8 [ 227.978916][ T34] usb 10-1: config 0 has no interfaces? [ 227.981846][ T34] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 227.986575][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.992106][ T34] usb 10-1: config 0 descriptor?? [ 228.012402][ T61] usb 9-1: USB disconnect, device number 12 [ 228.023629][T12295] netlink: 'syz.1.1746': attribute type 10 has an invalid length. [ 228.032382][T12295] veth0_to_bridge: left allmulticast mode [ 228.035083][T12295] veth0_to_bridge: left promiscuous mode [ 228.041682][T12297] netlink: 320 bytes leftover after parsing attributes in process `syz.3.1747'. [ 228.044050][T12295] bridge0: port 2(veth0_to_bridge) entered disabled state [ 228.056407][T12295] bridge_slave_0: left allmulticast mode [ 228.058832][T12295] bridge_slave_0: left promiscuous mode [ 228.061368][T12295] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.068904][T12295] bond0: (slave bridge_slave_1): Releasing backup interface [ 228.073804][T12295] bond0: (slave bond_slave_0): Releasing backup interface [ 228.078563][T12295] bond0: (slave c@0): Releasing backup interface [ 228.086097][T12295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.090122][T12295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.095264][T12295] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 228.324228][ T5947] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 228.327426][ T5947] Bluetooth: hci1: Injecting HCI hardware error event [ 228.331284][ T5947] Bluetooth: hci1: hardware error 0x00 [ 228.354627][T12308] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 228.359757][T12308] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 228.382432][ T61] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 228.533323][ T1116] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 228.536133][ T1116] ata1: failed to read log page 10h (errno=-5) [ 228.538990][ T1116] ata1.00: exception Emask 0x1 SAct 0x400 SErr 0x0 action 0x0 [ 228.542574][ T1116] ata1.00: irq_stat 0x40000000 [ 228.544852][ T61] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 228.548494][ T1116] ata1.00: failed command: WRITE FPDMA QUEUED [ 228.551459][ T1116] ata1.00: cmd 61/78:50:36:a1:08/00:00:00:00:00/40 tag 10 ncq dma 61440 out [ 228.551459][ T1116] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 228.559021][ T1116] ata1.00: status: { DRDY } [ 228.563698][ T1116] ata1.00: error: { ABRT } [ 228.565753][ T61] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 228.568860][ T61] usb 6-1: can't read configurations, error -61 [ 228.573096][ T1116] ata1.00: configured for UDMA/100 [ 228.577301][ T1116] ata1: EH complete [ 228.580829][T12310] ------------[ cut here ]------------ [ 228.582863][T12310] 1 [ 228.582869][T12310] WARNING: mm/page_alloc.c:5216 at __alloc_frozen_pages_noprof+0x1e8a/0x2410, CPU#3: syz.4.1752/12310 [ 228.587120][T12310] Modules linked in: [ 228.588838][T12310] CPU: 3 UID: 0 PID: 12310 Comm: syz.4.1752 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.593450][T12310] Tainted: [L]=SOFTLOCKUP [ 228.595091][T12310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.599234][T12310] RIP: 0010:__alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 228.602042][T12310] Code: 48 8d bb 70 05 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 84 0f fa ff ff e8 13 bd 0d 00 e9 05 fa ff ff c6 05 91 42 3c 0e 01 90 <0f> 0b 90 e9 bd e4 ff ff 65 48 8b 05 2e db 80 11 48 8d b8 98 09 00 [ 228.610484][T12310] RSP: 0018:ffffc900038cf7b0 EFLAGS: 00010246 [ 228.613452][T12310] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 228.616784][T12310] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000040cc0 [ 228.620195][T12310] RBP: 0000000000000014 R08: 0000000000000005 R09: 0000000000000009 [ 228.623916][T12310] R10: 0000000000000014 R11: 0000000000000000 R12: 0000000000040cc0 [ 228.627499][T12310] R13: 1ffff92000719f3e R14: 1ffff92000719f0c R15: 0000000000000014 [ 228.630182][T12311] input: syz1 as /devices/virtual/input/input26 [ 228.630717][T12310] FS: 00007f190a7126c0(0000) GS:ffff8880d68d9000(0000) knlGS:0000000000000000 [ 228.630754][T12310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.639338][T12310] CR2: 0000001b2ed24224 CR3: 00000000352ac000 CR4: 0000000000352ef0 [ 228.642682][T12310] Call Trace: [ 228.644098][T12310] [ 228.645386][T12310] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 228.647852][T12310] ? is_bpf_text_address+0x94/0x1a0 [ 228.649790][T12310] ? kernel_text_address+0x8d/0x100 [ 228.651735][T12310] ? __kernel_text_address+0xd/0x30 [ 228.653842][T12310] ? unwind_get_return_address+0x59/0xa0 [ 228.656076][T12310] ? arch_stack_walk+0xa6/0xf0 [ 228.657654][T12310] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 228.659625][T12310] ? stack_trace_save+0x8e/0xc0 [ 228.661199][T12310] ? stack_depot_save_flags+0x27/0x9c0 [ 228.663085][T12310] ? __lock_acquire+0x4a5/0x2630 [ 228.664701][T12310] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 228.666630][T12310] ? policy_nodemask+0xed/0x4f0 [ 228.668182][T12310] alloc_pages_mpol+0x1fb/0x550 [ 228.669708][T12310] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 228.671198][T12310] ___kmalloc_large_node+0x104/0x150 [ 228.672783][T12310] __kmalloc_large_node_noprof+0x1c/0x70 [ 228.674351][T12310] ? drm_syncobj_array_find+0x35/0x3a0 [ 228.675860][T12310] __kmalloc_noprof+0x6b1/0x9c0 [ 228.677386][T12310] ? __lock_acquire+0x4a5/0x2630 [ 228.678963][T12310] ? drm_syncobj_array_find+0x35/0x3a0 [ 228.680682][T12310] drm_syncobj_array_find+0x35/0x3a0 [ 228.682545][T12310] drm_syncobj_signal_ioctl+0x20b/0x460 [ 228.684302][T12310] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 228.686232][T12310] ? drm_dev_exit+0x41/0x60 [ 228.687695][T12310] ? drm_dev_exit+0x41/0x60 [ 228.689161][T12310] drm_ioctl_kernel+0x1f3/0x3e0 [ 228.690709][T12310] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 228.692778][T12310] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 228.694516][T12310] drm_ioctl+0x5e6/0xc60 [ 228.695876][T12310] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 228.697823][T12310] ? __pfx_drm_ioctl+0x10/0x10 [ 228.699351][T12310] ? selinux_file_ioctl+0x139/0x290 [ 228.701044][T12310] ? selinux_file_ioctl+0xb4/0x290 [ 228.702460][ T61] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 228.702778][T12310] ? __pfx_drm_ioctl+0x10/0x10 [ 228.707488][T12310] __x64_sys_ioctl+0x18e/0x210 [ 228.709032][T12310] do_syscall_64+0xc9/0xf80 [ 228.710509][T12310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.712417][T12310] RIP: 0033:0x7f190979aeb9 [ 228.713920][T12310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.720809][T12310] RSP: 002b:00007f190a712028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.724222][T12310] RAX: ffffffffffffffda RBX: 00007f1909a15fa0 RCX: 00007f190979aeb9 [ 228.727337][T12310] RDX: 0000200000000100 RSI: 00000000c01064c5 RDI: 0000000000000004 [ 228.730546][T12310] RBP: 00007f1909808c1f R08: 0000000000000000 R09: 0000000000000000 [ 228.733778][T12310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.736909][T12310] R13: 00007f1909a16038 R14: 00007f1909a15fa0 R15: 00007ffcaed47918 [ 228.740006][T12310] [ 228.741305][T12310] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 228.744224][T12310] CPU: 3 UID: 0 PID: 12310 Comm: syz.4.1752 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.748539][T12310] Tainted: [L]=SOFTLOCKUP [ 228.750296][T12310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.754353][T12310] Call Trace: [ 228.755741][T12310] [ 228.757007][T12310] dump_stack_lvl+0x100/0x190 [ 228.758982][T12310] vpanic+0x20d/0x630 [ 228.760671][T12310] panic+0xd1/0xd1 [ 228.762238][T12310] ? __pfx_panic+0x10/0x10 [ 228.764174][T12310] ? check_panic_on_warn+0x1f/0x90 [ 228.766364][T12310] check_panic_on_warn.cold+0x19/0x34 [ 228.768674][T12310] ? __alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 228.771289][T12310] __warn.cold+0x191/0x2f8 [ 228.773285][T12310] __report_bug+0x296/0x3d0 [ 228.775239][T12310] ? __alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 228.777689][T12310] ? __pfx___report_bug+0x10/0x10 [ 228.779307][T12310] ? __lock_acquire+0x4a5/0x2630 [ 228.780977][T12310] ? __alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 228.782961][T12310] report_bug+0xb2/0x220 [ 228.784316][T12310] ? __alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 228.786311][T12310] handle_bug+0x166/0x2a0 [ 228.787646][T12310] exc_invalid_op+0x17/0x50 [ 228.789105][T12310] asm_exc_invalid_op+0x1a/0x20 [ 228.790652][T12310] RIP: 0010:__alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 228.792793][T12310] Code: 48 8d bb 70 05 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 84 0f fa ff ff e8 13 bd 0d 00 e9 05 fa ff ff c6 05 91 42 3c 0e 01 90 <0f> 0b 90 e9 bd e4 ff ff 65 48 8b 05 2e db 80 11 48 8d b8 98 09 00 [ 228.798861][T12310] RSP: 0018:ffffc900038cf7b0 EFLAGS: 00010246 [ 228.800772][T12310] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 228.803294][T12310] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000040cc0 [ 228.805782][T12310] RBP: 0000000000000014 R08: 0000000000000005 R09: 0000000000000009 [ 228.808287][T12310] R10: 0000000000000014 R11: 0000000000000000 R12: 0000000000040cc0 [ 228.810775][T12310] R13: 1ffff92000719f3e R14: 1ffff92000719f0c R15: 0000000000000014 [ 228.813283][T12310] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 228.815221][T12310] ? is_bpf_text_address+0x94/0x1a0 [ 228.816912][T12310] ? kernel_text_address+0x8d/0x100 [ 228.818760][T12310] ? __kernel_text_address+0xd/0x30 [ 228.820479][T12310] ? unwind_get_return_address+0x59/0xa0 [ 228.822262][T12310] ? arch_stack_walk+0xa6/0xf0 [ 228.823789][T12310] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 228.825785][T12310] ? stack_trace_save+0x8e/0xc0 [ 228.827348][T12310] ? stack_depot_save_flags+0x27/0x9c0 [ 228.829077][T12310] ? __lock_acquire+0x4a5/0x2630 [ 228.830622][T12310] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 228.832981][T12310] ? policy_nodemask+0xed/0x4f0 [ 228.834733][T12310] alloc_pages_mpol+0x1fb/0x550 [ 228.836304][T12310] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 228.838034][T12310] ___kmalloc_large_node+0x104/0x150 [ 228.839700][T12310] __kmalloc_large_node_noprof+0x1c/0x70 [ 228.841483][T12310] ? drm_syncobj_array_find+0x35/0x3a0 [ 228.843222][T12310] __kmalloc_noprof+0x6b1/0x9c0 [ 228.844748][T12310] ? __lock_acquire+0x4a5/0x2630 [ 228.846321][T12310] ? drm_syncobj_array_find+0x35/0x3a0 [ 228.848031][T12310] drm_syncobj_array_find+0x35/0x3a0 [ 228.849709][T12310] drm_syncobj_signal_ioctl+0x20b/0x460 [ 228.851466][T12310] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 228.853419][T12310] ? drm_dev_exit+0x41/0x60 [ 228.854855][T12310] ? drm_dev_exit+0x41/0x60 [ 228.856292][T12310] drm_ioctl_kernel+0x1f3/0x3e0 [ 228.857839][T12310] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 228.859748][T12310] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 228.861445][T12310] drm_ioctl+0x5e6/0xc60 [ 228.862815][T12310] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 228.864712][T12310] ? __pfx_drm_ioctl+0x10/0x10 [ 228.866241][T12310] ? selinux_file_ioctl+0x139/0x290 [ 228.867881][T12310] ? selinux_file_ioctl+0xb4/0x290 [ 228.869508][T12310] ? __pfx_drm_ioctl+0x10/0x10 [ 228.871017][T12310] __x64_sys_ioctl+0x18e/0x210 [ 228.872560][T12310] do_syscall_64+0xc9/0xf80 [ 228.874008][T12310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.875862][T12310] RIP: 0033:0x7f190979aeb9 [ 228.877322][T12310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.883263][T12310] RSP: 002b:00007f190a712028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.885874][T12310] RAX: ffffffffffffffda RBX: 00007f1909a15fa0 RCX: 00007f190979aeb9 [ 228.888330][T12310] RDX: 0000200000000100 RSI: 00000000c01064c5 RDI: 0000000000000004 [ 228.890791][T12310] RBP: 00007f1909808c1f R08: 0000000000000000 R09: 0000000000000000 [ 228.893286][T12310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.895736][T12310] R13: 00007f1909a16038 R14: 00007f1909a15fa0 R15: 00007ffcaed47918 [ 228.898193][T12310] [ 228.899825][T12310] Kernel Offset: disabled [ 228.901204][T12310] Rebooting in 86400 seconds..