last executing test programs: 1m17.7202701s ago: executing program 2 (id=213): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010101}, 'virt_wifi0\x00'}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0xff, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000640)={0x40, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x200}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) 1m17.505723874s ago: executing program 2 (id=215): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1m16.626143578s ago: executing program 2 (id=216): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="09000000040000000800000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000700), &(0x7f0000000100)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0xf41, 0x2, 0x0, r0, 0xba7e}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000040)='B@', 0x0}, 0x20) r3 = syz_open_dev$sg(&(0x7f0000005980), 0x4000000000000000, 0x88201) write(r3, &(0x7f00000002c0)="19718f3d24000000a50c0000ed4a46b1ca9534b61f6aff497b583a578124db953db7a8c61275b693e0ed", 0x2a) 1m16.625691975s ago: executing program 2 (id=217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x4a1d8af2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r0, 0x2f, 0x1, 0xe, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r0, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x5d, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@cgroup, r0, 0x30, 0x28, r0, @void, @void, @void, @value=r2, r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0x6, 0x8}, {0x2ae, 0x6, 0x0, 0x5}}}}, 0x15) unshare(0x6a040000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@private, 0x0, 0xecdf, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000000}, {0x0, 0x800, 0x0, 0x7}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x158}}, 0x4050) unshare(0x30010200) 1m16.460848117s ago: executing program 2 (id=219): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0080, 0x800000000000003}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b9, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x0) write(r3, &(0x7f0000000400)='alg', 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) fcntl$getownex(r8, 0x10, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00'}) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m16.264332624s ago: executing program 2 (id=220): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000180000fe00000000000000000000000000002cfe8000000000000000000000000000bb330200000000000004017f04010005020453c204"], 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x10, 0x80000000, @vifc_lcl_addr=@multicast1, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) close(0x3) 1m1.184082264s ago: executing program 32 (id=220): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000180000fe00000000000000000000000000002cfe8000000000000000000000000000bb330200000000000004017f04010005020453c204"], 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x10, 0x80000000, @vifc_lcl_addr=@multicast1, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) close(0x3) 3.679577732s ago: executing program 4 (id=667): r0 = socket(0x2b, 0x1, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0}, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x1, 0x20002f7}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f00000002c0)) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r4, 0x1, 0x20000002, 0x25dfdc01, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_MAC={0xa}]]}, 0x44}, 0x1, 0x0, 0x0, 0x20040040}, 0x44804) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f00000005c0)={0x290, r4, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x54}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x5}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_TX_RATES={0x214, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x7, 0xbc76, 0x0, 0x8, 0xeb0, 0x29]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x9}, {0x1, 0x3}, {0x0, 0x7}, {0x3, 0x4}, {0x6, 0x4}, {}, {0x6, 0x5}, {0x1}, {0x2}, {0x1, 0x1}, {0x5, 0xa}, {0x5, 0x7}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x4}, {0x5, 0x7}, {0x6, 0x5}, {0x7, 0x7}, {0x1, 0x1}, {0x4, 0x2}, {0x7, 0x9}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x9}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0xa}, {0x4, 0x3}, {0x0, 0x3}, {0x0, 0x4}, {0x7, 0x5}, {0x4, 0x9}, {0x0, 0xa}, {0x1, 0x2}, {0x4, 0x5}, {0x0, 0x9}, {0x7, 0x1}, {0x3, 0xa}, {0x5, 0x9}, {0x1, 0x9}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x4}, {0x6, 0x7}, {0x7}, {0x4, 0x8}, {0x2, 0x3}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x4}, {0x0, 0x3}, {0x4, 0x2}, {0x4}, {0x7, 0x7}, {0x5, 0xa}, {0x5, 0x3}]}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6, 0x6, 0x60, 0x3, 0x9, 0x5, 0x5, 0x3, 0x3, 0x24, 0x60, 0x5, 0x64, 0x4, 0x60, 0x2, 0x5, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x4, 0x1ff, 0xffc0, 0x3, 0xfffb, 0x4, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x36, 0x0, 0x36, 0x1, 0x48, 0xb, 0x16, 0x48, 0x2, 0x48, 0x16, 0xd, 0xb, 0xb, 0x30, 0x60, 0x4]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0x9}, {0x2, 0x6}, {0x7, 0x7}, {0x0, 0xa}, {0x5, 0x9}, {0x6, 0x3}, {0x6, 0x5}, {0x4, 0x7}, {0x5, 0x3}, {0x2, 0x9}, {0x0, 0x3}, {0x6, 0x2}, {0x0, 0x8}, {0x6, 0x2}, {0x4, 0x1}, {0x6, 0x6}, {0x2, 0x5}, {0x2, 0x7}, {0x4, 0x6}, {0x1, 0x2}, {0x0, 0x5}, {0x3, 0x3}, {0x0, 0x5}, {0x3, 0xa}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x8}, {0x4, 0x7}, {0x1, 0x3}, {0x5, 0x5}, {0x4, 0xa}, {0x0, 0x6}, {0x2, 0x7}, {0x3, 0x3}, {0x0, 0x7}, {}, {0x2, 0x9}, {0x2, 0x9}, {0x5, 0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x5, 0x3}, {0x2, 0x7}, {0x5, 0x9}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x6}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x1}, {0x1, 0x5}, {0x4}, {0x1, 0x6}, {0x0, 0x7}, {0x5, 0x1}, {0x1, 0x2}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0x6}, {0x2, 0x2}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x36, 0x48, 0xb, 0x36, 0x0, 0x4, 0x16, 0x12, 0x5, 0x4, 0x18, 0x5]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x6, 0x36, 0x2, 0x9, 0x18, 0x4, 0x2, 0x6c]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0xa}, {0x1, 0x4}, {0x2, 0x2}, {0x0, 0x3}, {0x4, 0x9}, {0x3, 0x5}, {0x6, 0x7}, {0x1, 0x3}, {0x4, 0x6}, {0x4, 0x9}, {0x7, 0x5}, {0x3, 0x6}, {0x3, 0x9}, {0x7, 0x7}, {0x3}, {0x1, 0x6}, {0x3, 0x9}, {0x1, 0x3}, {0x1, 0xa}, {0x6, 0x1}, {0x4, 0x2}, {0x2, 0xa}, {0x7, 0x8}, {0x5, 0x1}, {0x5, 0x3}, {0x2, 0x2}, {0x4, 0x1}, {0x1}, {0x6, 0x9}, {0x4}, {0x1, 0x5}, {0x0, 0xa}, {0x7}, {0x3, 0x2}, {0x4, 0x2}, {0x4, 0xa}, {0x5, 0x7}, {0x4, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1d3, 0x6, 0x3, 0xd, 0x8000, 0x2, 0x5, 0x5]}}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x401, 0x6, 0xf, 0xddb, 0x9, 0x6, 0x741d]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6e, 0x2, 0x2fab, 0xfff8, 0x3d3a, 0xe, 0x7]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x4, 0x3}, {0x6, 0x2}, {0x1, 0x5}, {0x7, 0x3}, {0x7, 0x6}, {0x4, 0x5}, {0x6, 0x4}, {0x2, 0x9}, {0x4, 0x9}, {0x0, 0x4}, {0x1}, {0x0, 0x6}, {0x3, 0x6}, {0x1, 0x7}, {0x0, 0x3}, {0x3, 0x5}, {0x1}, {0x4, 0x5}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x5}, {0x4, 0x6}, {0x6, 0xa}, {0x1, 0x9}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x9}, {0x1, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0x9}, {0x5, 0x6}, {0x4, 0x9}, {}, {0x0, 0x1}, {0x7, 0x8}, {0x6, 0x8}, {0x6, 0x7}, {0x4, 0x3}, {0x5, 0x5}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x4}, {0x4, 0xa}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0x6}, {0x6, 0x7}, {0x5, 0x6}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0x36, 0x55, 0x5, 0x36, 0x4, 0x6, 0x12, 0x6, 0x1, 0x5, 0x6c]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0x6c, 0x3b, 0xc, 0x24, 0x16, 0x1, 0x18, 0x0, 0x4, 0x24, 0x30, 0x9, 0x16, 0xc, 0x36, 0x5, 0x16, 0x16, 0x9, 0x6, 0x18, 0x2, 0x36, 0x1b, 0x2d, 0x36, 0x1b]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x868}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]]}, 0x290}, 0x1, 0x0, 0x0, 0x4880}, 0x20008801) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e20, 0x3ffe, @loopback, 0x8}, 0x1c) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x4, &(0x7f0000000180)=ANY=[]) getpeername$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) 3.39563021s ago: executing program 3 (id=671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000300001801c000280080002007f000000080001001d0000000a000300ff0f00000d0001"], 0x44}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) 3.286697133s ago: executing program 3 (id=673): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="dc297bf1ce66483446d8201c47351c48446d35092c264952b8f5dc29101250a70dd587d7ce50b9d0498d730e2ebab5f00af36c7140005940a14d8ab9b12d393c3d0c4ee11a4d7387a436eae3fdf34c3066886a8e313cc51eb9b9202e0dfa69ff22f804a605555a9229ba5cf9a481032d85f29f418f14be1c5a5068f0e59e7dca13596a93002b768a2a9162dc177d1b696f0a20d8249cb3241b2cf5952a014e7ec0efbedcb8a132773999003dd76838", 0xaf}, {&(0x7f0000000800)="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", 0x509}], 0x2, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @broadcast}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x38}, 0x200000e0) 3.286379337s ago: executing program 3 (id=674): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) rmdir(&(0x7f0000000040)='./file0/file2\x00') r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000240)={{0x1, 0x0, 0x1000200, 0x0, 0x3ff}, 0x14, 0x6e91be07}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x4, 0x7}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x2, 0x1}, {}, {0xd, 0xfffffffe}, {0x10}, {0x1, 0x100005}]}]}}, 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f00000000c0)="37d5ffb22dca783e52cf1c5068dafe", &(0x7f0000000080)=""/10, 0x2}, 0x20) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002540)={0x50, 0x0, r5, {0x7, 0x2d, 0x5, 0x8010100, 0xe49, 0xf, 0x3, 0x4, 0x0, 0x0, 0x20, 0x8003}}, 0x50) r6 = syz_open_dev$dmmidi(&(0x7f0000000100), 0x6, 0x800) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0/file0\x00'}) 3.235143875s ago: executing program 3 (id=675): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) (async) r1 = getpgrp(0xffffffffffffffff) kcmp(r1, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 3.148150022s ago: executing program 3 (id=676): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x9, 0x40, 0x31008003, 0xfffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) pselect6(0x40, &(0x7f0000000240)={0x8c1, 0x0, 0xf, 0x8, 0x0, 0x4, 0x4, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5, 0x8}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5230, &(0x7f0000000080)={0x0, 0xcc1a, 0x10803, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000730400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@d, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 3.029049526s ago: executing program 1 (id=677): setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000100)={0x1, 0x0, 0x80, 0x0, 0xe}, 0xc) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006b", 0xc, 0xffffffffffffffff) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x84, @local, 0x4}, {0xa, 0x0, 0x3, @mcast1}, 0x0, {[0x2, 0x8, 0xa, 0x0, 0x0, 0x0, 0x7ff, 0x4]}}, 0x5c) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x2, @mcast2, 0x2}}, 0x24) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}) 2.967702177s ago: executing program 1 (id=678): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x40a8, 0x4) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) (async) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400df0325010ebc000000000000008000f0fffeffe809035300fff5dd0000001000020008000140040000006da2898e", 0x58}], 0x1) r7 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000c40), 0x5a2c1, 0x0) ioctl$PTP_ENABLE_PPS(r7, 0x40043d04, 0x1) (async) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "569142cc91061c00", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000000003400000000008510000002000000850000000500000095003300000a00000000a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r8 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmsg$inet(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="afc4e023fd1cd87036533f40bc55b3aa6cb3c62cfc859278fe56cef5e2785e778424c23b51f9cc841a7fa541b973a09f29d39094934efc00ffd6d7b2105c60cc71f60ebefd1eb84db600e29533738a371a265877d39fe99f2cb5cf9853a43ab98677e02703614a9c5956b9e63144c85aecc2b3133db5726a", 0x78}], 0x1}, 0x8000) 2.908797672s ago: executing program 1 (id=679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100025bd7000fbdbdf250a0000000898320080f847d6365c0db17140b3493670b11abe53aed7cdfbe6fd3a4467c5f7d69237194a17688f89da683f19594cd85fb28a5e12a0c2044a989ee5a639d5929d4fbdee823d783f13820394b9be8e7c2f399ebd5b16425e0901a2dd01ca78e13f0035aa07e51c03cf003f2a698ef474ac6ac4ff408804873c15f85fc64cc5856d58fc296017b700f2ac857b5b31432183ae7de73944c55f2034be673eec582655609ccc745fb9ae18541e03cf436151278d361808b944192b5dc7237f42e8046bb397800ab9fe8b"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8800) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x10, 0xf1, 0x40, 0x403, 0xd9a8, 0x2cbd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfc, 0x21, 0x60, 0x4, "", [{{0x9, 0x4, 0xf5, 0xf1, 0x0, 0xfe, 0xb1, 0x34, 0x8}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGPHYS(r4, 0x4008c001, &(0x7f0000000800)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000041000901feffffff00000000027c0000040042800c000180060006000806"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 976.076641ms ago: executing program 4 (id=688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0xe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8000000001002, 0x1, 0x6, 0x6, 0xffffffffffff0001, 0x4000002373, 0x80000000008bd9, 0xfffffffffffffefd, 0x7f, 0x20], 0x25000, 0x386343}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 652.131174ms ago: executing program 4 (id=689): setns(0xc9, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 650.326449ms ago: executing program 4 (id=690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x8000) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000000)={0x3}) dup2(r1, r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x10, @empty, 0x4}], 0x1c) sendto$inet6(r2, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x40}, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x56, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlock(&(0x7f0000ff8000/0x3000)=nil, 0x3000) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x4b, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x82000000}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 568.979474ms ago: executing program 0 (id=692): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x8, 0xf0, 0x401, 0x2e, 0x4000000000007, 0x2, 0x7, 0x80000000, 0x4, 0x600, 0xb55, 0x9, 0x5, 0x100000000036, 0x7fffffff, 0x6], 0x41000, 0x2a80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x80000001, 0x5, 0xfffffffffffffff8, 0xfffffffffffffffa, 0xa, 0x9, 0x1, 0x502a43b5, 0x5, 0x6, 0x3, 0x742, 0x10, 0x100, 0x2], 0x30000, 0x40}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x200000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000b40)="0fc79a57000000b8f5000000ba000000000f30f3ad0fc7ad9b000000b9310600000f32f10f12ee0f18ebd818b87a3326f60f23c80f21f835080010000f23f80f01c8", 0x4d}], 0x1, 0x7c, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) write$binfmt_aout(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad00000a"], 0x125) ioctl$KVM_RUN(r2, 0xae80, 0x0) 370.104065ms ago: executing program 1 (id=693): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@delnexthop={0x20, 0x69, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{0x8, 0x1, 0xffffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040081}, 0x8042) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x100000) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x46000, 0x0) ioctl$CDROM_NEXT_WRITABLE(r3, 0x5394, &(0x7f0000000040)) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCFLSH(r4, 0x80047437, 0xfffffffffffeffff) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2300000004000000040000000700000001000000", @ANYRES32, @ANYBLOB="de00000000f4ef209b6b00"/25, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="020000000100"/28], 0x50) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a0000000000000000000012", 0x2a}, {&(0x7f0000000280)="f012c7ce60085637bd4b9201802c47e45be5c44b928323df15ae38b067b2230701229e50710af56d4d11", 0x2a}], 0x2) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) close_range(r1, 0xffffffffffffffff, 0x100000000000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x731ff, 0x100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010100}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000100)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@delnexthop={0x20, 0x69, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{0x8, 0x1, 0xffffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040081}, 0x8042) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x100000) (async) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x46000, 0x0) (async) ioctl$CDROM_NEXT_WRITABLE(r3, 0x5394, &(0x7f0000000040)) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) (async) ioctl$TCFLSH(r4, 0x80047437, 0xfffffffffffeffff) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2300000004000000040000000700000001000000", @ANYRES32, @ANYBLOB="de00000000f4ef209b6b00"/25, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="020000000100"/28], 0x50) (async) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) (async) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a0000000000000000000012", 0x2a}, {&(0x7f0000000280)="f012c7ce60085637bd4b9201802c47e45be5c44b928323df15ae38b067b2230701229e50710af56d4d11", 0x2a}], 0x2) (async) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) (async) close_range(r1, 0xffffffffffffffff, 0x100000000000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x731ff, 0x100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010100}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000100)=0x1, 0x4) (async) 366.01685ms ago: executing program 0 (id=694): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143142, 0x103) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x700, 0x186) 331.838422ms ago: executing program 4 (id=695): syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x110, 0x7, 0x0, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x80080380, &(0x7f0000000040)="547fe55e0e559f3faaadff5717b39cd0c7ee59cbdcb5c1c1a4901fecfb5867ef94596b", 0x23, &(0x7f0000000280), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x20, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}]}) rmdir(&(0x7f0000000040)='./file1\x00') chdir(&(0x7f0000000000)='./bus\x00') unlink(&(0x7f0000000100)='./file0\x00') setresgid(0x0, 0x0, 0xee00) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000022000/0x1000)=nil, &(0x7f00001fd000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00002a3000/0x2000)=nil, &(0x7f00008c0000/0x4000)=nil, &(0x7f00007b2000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f00003d0000/0x4000)=nil, &(0x7f0000927000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x20001b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x0, 0xed}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x28c, 0x24, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x2, 0xb}, {0x1, 0x4}}, [@TCA_STAB={0x14c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf8, 0x5, 0x3, 0x1, 0x0, 0x3, 0x7, 0x2}}, {0x8, 0x2, [0x1ff, 0x80]}}, {{0x1c, 0x1, {0x3, 0x9, 0x4, 0x9, 0x0, 0x6, 0x4}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xff, 0x1, 0xfffffff7, 0x1, 0x7, 0x4, 0x5}}, {0xe, 0x2, [0x2, 0x7f, 0x7, 0x1000, 0x7]}}, {{0x1c, 0x1, {0x0, 0xf3, 0x7, 0x3, 0x2, 0x4, 0xaf6, 0x5}}, {0xe, 0x2, [0xfff8, 0xd, 0x1, 0xa000, 0x7fff]}}, {{0x1c, 0x1, {0xbb, 0x80, 0x2, 0x3, 0x2, 0x3, 0x8, 0x9}}, {0x16, 0x2, [0x8000, 0x7, 0xfff8, 0x0, 0xffff, 0xffff, 0x26f5, 0x3ff, 0xcfd]}}, {{0x1c, 0x1, {0x0, 0x0, 0xfff, 0x8, 0x1, 0xfffffff7, 0x0, 0x2}}, {0x8, 0x2, [0x8, 0x4]}}, {{0x1c, 0x1, {0xd, 0xb, 0x2, 0x6, 0x0, 0x0, 0x2, 0x1}}, {0x6, 0x2, [0x400]}}, {{0x1c, 0x1, {0x0, 0x4, 0x7, 0x4, 0x0, 0x2, 0x4, 0x7}}, {0x12, 0x2, [0x2, 0xa, 0xd, 0x800, 0x4, 0xb3fc, 0x9]}}]}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x7}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xffffffff}}, @TCA_STAB={0xf4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x3, 0x0, 0x218, 0x1, 0x4, 0x7fffffff}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x5, 0x2, 0xedb, 0x0, 0x1, 0x4, 0x3}}, {0xa, 0x2, [0x8, 0x9, 0x7]}}, {{0x1c, 0x1, {0xfc, 0xb0, 0xce, 0x6, 0x1, 0x3, 0x1, 0xa}}, {0x18, 0x2, [0xa, 0x200, 0xc, 0x6, 0x9, 0xfffe, 0x6, 0x4, 0x80, 0x7]}}, {{0x1c, 0x1, {0x5, 0xb, 0xe1da, 0x0, 0x2, 0x4, 0x0, 0x2}}, {0x8, 0x2, [0x4, 0x400]}}, {{0x1c, 0x1, {0xc2, 0x7, 0x7, 0x10001, 0x1, 0x1, 0x7, 0x6}}, {0x10, 0x2, [0x4, 0x2, 0xe016, 0x7, 0x22, 0xe6]}}, {{0x1c, 0x1, {0x3, 0x3, 0x40, 0x4, 0x2, 0xfffffff8, 0x100, 0x2}}, {0x8, 0x2, [0x10, 0x8634]}}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0/console\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x66, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x5}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 267.186536ms ago: executing program 0 (id=696): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) setresuid(0x0, 0xee00, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0xa, 0x8000000000000000, 0xff, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x18, 0x30, 0x95170262cd59954b, 0x70bd2d, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x2b, &(0x7f0000000040)=0x3, 0x4) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ba3000/0x3000)=nil, 0x3000, 0xa}) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r8, 0x8004af80, &(0x7f00000005c0)) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r9, &(0x7f00000004c0)=""/57, 0x39) 245.471707ms ago: executing program 0 (id=697): syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_req={{0x6, 0x24, 0x4}, {0x8001, 0xff}}]}}, 0x11) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) 185.256516ms ago: executing program 1 (id=698): setns(0xc9, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 184.910797ms ago: executing program 0 (id=699): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d3, &(0x7f0000000100)) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x3ff}, 0x8) personality(0x10) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_emit_vhci(&(0x7f00000030c0)=ANY=[@ANYRES64=r7, @ANYBLOB], 0x16) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r9, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@map=r10, r10, 0x2f, 0x18, 0x4, @void, @value, @void, @void, r11}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@map=r8, 0xb, 0x1, 0x9, &(0x7f0000000440)=[0x0], 0x1, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r6, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x0, 0x92, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x51, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@cgroup=r8, r6, 0x7, 0x8, 0xffffffffffffffff, @void, @value=0x0, @void, @void, r11}, 0x20) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r5, 0x403, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r14 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8000002, 0x3a10, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r14, r15, r16, r17, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f0000000340)) 174.330042ms ago: executing program 1 (id=700): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0xc0f85403, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000540)=0x9b, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) timer_gettime(r1, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000021c0)='./file0\x00', 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) 83.18712ms ago: executing program 0 (id=701): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x18, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x4000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x4, 0x200, 0x81, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x8, 0x4, 0x4}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x10, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000005) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) syz_emit_ethernet(0x56, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x10000, 0x0, 0x0]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4004890) 3.59755ms ago: executing program 4 (id=702): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x4, 0x10000) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="200100001a0007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc000000000000000000000000000001000000002b000000fc0000000000000000000000000000009a4a00000000000000000000000000000200000000000000e609000000000000000000000000000000000000000000009e1935f49f0000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000200040000000000e80a000000000000000000000a00020070000000000000001c0017000000000026bd70002bbd700029bd70002cbd70000100000014000e00"/221], 0x120}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) syz_emit_ethernet(0x9a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) (async) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) prlimit64(r1, 0x4, &(0x7f0000000080)={0x9, 0x53fb}, &(0x7f00000000c0)) 0s ago: executing program 3 (id=703): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0xfffffffc}], 0x1, 0x2000, 0x0) recvmmsg(r1, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}, 0x20005}], 0x1, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000180)=0x80, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) write(r0, &(0x7f0000000500)='0', 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000080)='4', 0x1) kernel console output (not intermixed with test programs): 70.921218][ T5948] overlayfs: failed lookup in lower (newroot/2, name='file1', err=-40): overlapping layers [ 70.958108][ T42] audit: type=1400 audit(1785260164.052:231): avc: denied { unmount } for pid=5743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.966339][ T42] audit: type=1400 audit(1785260164.052:232): avc: denied { unmount } for pid=5741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 70.981129][ T42] audit: type=1400 audit(1785260164.072:233): avc: denied { unmount } for pid=5741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.094857][ T5956] --map-set only usable from mangle table [ 71.256748][ T4558] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 71.416727][ T4558] usb 6-1: Using ep0 maxpacket: 16 [ 71.421876][ T4558] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 71.427673][ T4558] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.432506][ T4558] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.438264][ T4558] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.443502][ T4558] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.448733][ T4558] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.453666][ T4558] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.460526][ T4558] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.465297][ T4558] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.471561][ T4558] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 71.475428][ T4558] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 71.479235][ T4558] usb 6-1: SerialNumber: syz [ 71.491123][ T4558] usb 6-1: config 0 descriptor?? [ 71.510829][ T4558] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input5 [ 71.566764][ T5829] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 71.624362][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.629471][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.731593][ T5829] usb 7-1: config 61 has an invalid interface number: 3 but max is 1 [ 71.736659][ T5829] usb 7-1: config 61 has an invalid interface number: 155 but max is 1 [ 71.740397][ T5829] usb 7-1: config 61 has an invalid interface number: 149 but max is 1 [ 71.743954][ T5829] usb 7-1: config 61 has 3 interfaces, different from the descriptor's value: 2 [ 71.748577][ T5829] usb 7-1: config 61 has no interface number 0 [ 71.751865][ T5829] usb 7-1: config 61 has no interface number 1 [ 71.754586][ T5829] usb 7-1: config 61 has no interface number 2 [ 71.757700][ T5829] usb 7-1: config 61 interface 3 altsetting 3 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 71.762662][ T5829] usb 7-1: config 61 interface 3 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 71.768463][ T5829] usb 7-1: config 61 interface 3 altsetting 3 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 71.773287][ T5829] usb 7-1: config 61 interface 3 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 71.778591][ T5829] usb 7-1: too many endpoints for config 61 interface 155 altsetting 252: 127, using maximum allowed: 30 [ 71.785617][ T5829] usb 7-1: config 61 interface 155 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 127 [ 71.793483][ T5829] usb 7-1: config 61 interface 149 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 32 [ 71.799266][ T5829] usb 7-1: config 61 interface 149 altsetting 4 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 71.804401][ T5829] usb 7-1: config 61 interface 149 altsetting 4 has an endpoint descriptor with address 0x91, changing to 0x81 [ 71.811065][ T5829] usb 7-1: config 61 interface 149 altsetting 4 has a duplicate endpoint with address 0x81, skipping [ 71.815542][ T5829] usb 7-1: config 61 interface 149 altsetting 4 endpoint 0x4 has invalid maxpacket 1032, setting to 64 [ 71.821090][ T5829] usb 7-1: config 61 interface 149 altsetting 4 bulk endpoint 0xC has invalid maxpacket 16 [ 71.825484][ T5829] usb 7-1: config 61 interface 149 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 71.830767][ T5829] usb 7-1: config 61 interface 149 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 71.835689][ T5829] usb 7-1: config 61 interface 149 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 71.840946][ T5829] usb 7-1: config 61 interface 149 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 71.846904][ T5829] usb 7-1: config 61 interface 149 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 71.851849][ T5829] usb 7-1: config 61 interface 3 has no altsetting 0 [ 71.854756][ T5829] usb 7-1: config 61 interface 155 has no altsetting 0 [ 71.858706][ T5829] usb 7-1: config 61 interface 149 has no altsetting 0 [ 71.865621][ T5829] usb 7-1: Dual-Role OTG device on HNP port [ 71.869126][ T5829] usb 7-1: New USB device found, idVendor=06cb, idProduct=0001, bcdDevice=c9.31 [ 71.873008][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.876510][ T5829] usb 7-1: Product: ఌ [ 71.879008][ T5829] usb 7-1: Manufacturer: 〉 [ 71.881399][ T5829] usb 7-1: SerialNumber: ఁ [ 72.129973][ T5829] usb 7-1: selecting invalid altsetting 1 [ 72.147540][ T5829] usb 7-1: Can not set alternate setting to 1, error: -22 [ 72.154777][ T5829] synaptics_usb 7-1:61.3: probe with driver synaptics_usb failed with error -22 [ 72.175587][ T5829] usb 7-1: selecting invalid altsetting 1 [ 72.180587][ T5829] usb 7-1: Can not set alternate setting to 1, error: -22 [ 72.183756][ T5829] synaptics_usb 7-1:61.155: probe with driver synaptics_usb failed with error -22 [ 72.191734][ T5829] usb 7-1: selecting invalid altsetting 1 [ 72.196734][ T5829] usb 7-1: Can not set alternate setting to 1, error: -22 [ 72.204796][ T5829] synaptics_usb 7-1:61.149: probe with driver synaptics_usb failed with error -22 [ 72.240877][ T5829] usb 7-1: USB disconnect, device number 2 [ 72.258326][ T5097] Bluetooth: hci3: command tx timeout [ 72.260659][ T5097] Bluetooth: hci1: command tx timeout [ 72.267731][ T5747] Bluetooth: hci2: command tx timeout [ 72.269799][ T5097] Bluetooth: hci0: command tx timeout [ 72.734793][ T5997] syz.3.29 uses obsolete (PF_INET,SOCK_PACKET) [ 72.833316][ T6002] netlink: 40 bytes leftover after parsing attributes in process `syz.2.31'. [ 72.930844][ T6006] capability: warning: `syz.3.33' uses deprecated v2 capabilities in a way that may be insecure [ 73.029839][ T6011] random: crng reseeded on system resumption [ 73.312742][ T6016] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.321278][ T6016] block device autoloading is deprecated and will be removed. [ 73.322080][ T6013] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.329573][ T6013] block device autoloading is deprecated and will be removed. [ 73.495895][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35'. [ 73.529843][ T6013] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 73.532604][ T6013] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 73.539166][ T6013] vhci_hcd vhci_hcd.0: Device attached [ 73.550138][ T6013] macvlan2: entered promiscuous mode [ 73.552034][ T6013] macvlan2: entered allmulticast mode [ 73.631049][ T6022] vhci_hcd: connection closed [ 73.634084][ T5851] vhci_hcd vhci_hcd.2: stop threads [ 73.640723][ T6029] netlink: 40 bytes leftover after parsing attributes in process `syz.0.40'. [ 73.642010][ T5851] vhci_hcd vhci_hcd.2: release socket [ 73.658836][ T5851] vhci_hcd vhci_hcd.2: disconnect device [ 73.718553][ T5829] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 74.024333][ T5133] bcm5974 6-1:0.0: could not read from device [ 74.034787][ T5133] bcm5974 6-1:0.0: could not read from device [ 74.042458][ T5133] bcm5974 6-1:0.0: could not read from device [ 74.058301][ T4558] usb 6-1: USB disconnect, device number 2 [ 74.058482][ T5133] bcm5974 6-1:0.0: could not read from device [ 74.096705][ T5828] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 74.208626][ T6047] netlink: 'syz.2.46': attribute type 1 has an invalid length. [ 74.268077][ T5828] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 74.270516][ T6048] can0: slcan on ptm0. [ 74.272399][ T5828] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 74.279325][ T5828] usb 8-1: Product: syz [ 74.281162][ T5828] usb 8-1: Manufacturer: syz [ 74.283223][ T5828] usb 8-1: SerialNumber: syz [ 74.289894][ T5828] usb 8-1: config 0 descriptor?? [ 74.305551][ T5828] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 74.311893][ T5828] dvb-usb: bulk message failed: -22 (2/0) [ 74.321852][ T6053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.46'. [ 74.330770][ T5828] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 74.334940][ T5828] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 74.337680][ T5097] Bluetooth: hci0: command tx timeout [ 74.338098][ T5747] Bluetooth: hci2: command tx timeout [ 74.338628][ T64] Bluetooth: hci1: command tx timeout [ 74.338654][ T64] Bluetooth: hci3: command tx timeout [ 74.345148][ T5828] usb 8-1: media controller created [ 74.352885][ T6047] veth3: entered promiscuous mode [ 74.355999][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 74.617292][ T6048] can0 (unregistered): slcan off ptm0. [ 74.662690][ T6076] netlink: 40 bytes leftover after parsing attributes in process `syz.1.49'. [ 74.679301][ T6036] cxusb: i2c wr: len=80 is too big! [ 74.679301][ T6036] [ 74.722843][ T6079] netlink: 240 bytes leftover after parsing attributes in process `syz.2.50'. [ 74.768589][ T5828] cxusb: set interface failed [ 74.770216][ T5828] dvb-usb: bulk message failed: -22 (1/0) [ 74.811350][ T5828] DVB: Unable to find symbol mt352_attach() [ 74.813393][ T5828] dvb-usb: bulk message failed: -22 (5/0) [ 74.830902][ T5828] zl10353_read_register: readreg error (reg=127, ret==-121) [ 74.836116][ T6091] Cannot find set identified by id 65534 to match [ 74.843184][ T5828] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 74.939319][ T5828] rc_core: IR keymap rc-dvico-mce not found [ 74.949436][ T5828] Registered IR keymap rc-empty [ 74.959300][ T5828] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 74.966470][ T5828] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input6 [ 74.971847][ T5828] dvb-usb: schedule remote query interval to 100 msecs. [ 74.974705][ T5828] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 74.988621][ T5828] usb 8-1: USB disconnect, device number 2 [ 75.083987][ T6098] netlink: 6 bytes leftover after parsing attributes in process `syz.1.55'. [ 75.100782][ T5828] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 75.103337][ T6098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.232080][ T6111] hfsplus: unable to find HFS+ superblock [ 75.272839][ T6119] xt_socket: unknown flags 0x58 [ 75.306441][ T6122] netlink: 168 bytes leftover after parsing attributes in process `syz.0.63'. [ 75.492662][ T6135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.787473][ T5828] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 75.790028][ T42] kauditd_printk_skb: 122 callbacks suppressed [ 75.790053][ T42] audit: type=1400 audit(1785260168.882:356): avc: denied { create } for pid=6145 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.802454][ T42] audit: type=1400 audit(1785260168.882:357): avc: denied { ioctl } for pid=6145 comm="syz.1.71" path="socket:[8180]" dev="sockfs" ino=8180 ioctlcmd=0x8992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.856747][ T5829] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.947037][ T5828] usb 8-1: Using ep0 maxpacket: 32 [ 75.950280][ T5828] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 75.955314][ T5828] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 75.959333][ T5828] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 75.962056][ T5828] usb 8-1: Product: syz [ 75.963926][ T5828] usb 8-1: Manufacturer: syz [ 75.966064][ T5828] usb 8-1: SerialNumber: syz [ 75.969669][ T5828] usb 8-1: config 0 descriptor?? [ 75.973027][ T6138] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.978723][ T5828] hub 8-1:0.0: bad descriptor, ignoring hub [ 75.981054][ T5828] hub 8-1:0.0: probe with driver hub failed with error -5 [ 76.004341][ T42] audit: type=1400 audit(1785260169.092:358): avc: denied { sqpoll } for pid=6149 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.017056][ T5829] usb 5-1: Using ep0 maxpacket: 8 [ 76.021332][ T5829] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 76.024888][ T5829] usb 5-1: config 0 has no interface number 0 [ 76.027901][ T5829] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 76.032462][ T5829] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 76.036353][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.042531][ T5829] usb 5-1: config 0 descriptor?? [ 76.052101][ T5829] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 76.138850][ T42] audit: type=1400 audit(1785260169.232:359): avc: denied { create } for pid=6153 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 76.144912][ T6154] lo speed is unknown, defaulting to 1000 [ 76.147573][ T42] audit: type=1400 audit(1785260169.232:360): avc: denied { ioctl } for pid=6153 comm="syz.2.74" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x6442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 76.149953][ T6154] lo speed is unknown, defaulting to 1000 [ 76.161551][ T42] audit: type=1400 audit(1785260169.232:361): avc: denied { write } for pid=6153 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 76.170569][ T6154] lo speed is unknown, defaulting to 1000 [ 76.172114][ T42] audit: type=1400 audit(1785260169.242:362): avc: denied { read write } for pid=5743 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.178669][ T6154] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 76.180538][ T6138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.182131][ T6138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.187331][ T42] audit: type=1400 audit(1785260169.242:363): avc: denied { open } for pid=5743 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.193207][ T6154] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 76.196276][ T42] audit: type=1400 audit(1785260169.242:364): avc: denied { ioctl } for pid=5743 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.199151][ T6154] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 76.228651][ T6159] binder: BINDER_SET_CONTEXT_MGR already set [ 76.235442][ T6159] binder: 6158:6159 ioctl 4018620d 2000000000c0 returned -16 [ 76.238152][ T6154] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 76.239142][ T42] audit: type=1400 audit(1785260169.322:365): avc: denied { map } for pid=6158 comm="syz.1.76" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 76.245856][ T6154] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 76.252131][ T6160] binder: BINDER_SET_CONTEXT_MGR already set [ 76.253179][ T5829] usb 5-1: USB disconnect, device number 2 [ 76.259769][ T6160] binder: 6158:6160 ioctl 4018620d 200000000040 returned -16 [ 76.263115][ T6159] binder: 6158:6159 unknown command 0 [ 76.265387][ T6159] binder: 6158:6159 ioctl c0306201 2000000003c0 returned -22 [ 76.294771][ T6154] lo speed is unknown, defaulting to 1000 [ 76.299688][ T6154] lo speed is unknown, defaulting to 1000 [ 76.305061][ T6154] lo speed is unknown, defaulting to 1000 [ 76.308971][ T6154] lo speed is unknown, defaulting to 1000 [ 76.431258][ T6172] netlink: 'syz.1.81': attribute type 10 has an invalid length. [ 76.442832][ T6172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.447032][ T6172] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 76.451704][ T6172] netlink: 14 bytes leftover after parsing attributes in process `syz.1.81'. [ 76.456997][ T5844] usb 8-1: USB disconnect, device number 3 [ 76.468943][ T6172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.480503][ T6172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.487399][ T6172] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 76.495168][ T6172] bond0 (unregistering): Released all slaves [ 76.757728][ T5829] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.906746][ T5829] usb 5-1: Using ep0 maxpacket: 8 [ 76.918556][ T5829] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 76.920950][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.82'. [ 76.922582][ T5829] usb 5-1: config 0 has no interface number 0 [ 76.928484][ T5829] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 76.933375][ T5829] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 76.937726][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.944241][ T5829] usb 5-1: config 0 descriptor?? [ 76.958187][ T5829] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 76.978591][ T6177] bond1 (unregistering): Released all slaves [ 77.138138][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.87'. [ 77.142571][ T6190] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 77.252559][ T6204] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2518702126 (10074808504 ns) > initial count (5008490536 ns). Using initial count to start timer. [ 77.280758][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 77.284339][ T6209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.91'. [ 77.310331][ T6209] geneve2: entered promiscuous mode [ 77.315427][ T6209] geneve2: entered allmulticast mode [ 77.364864][ T6214] NILFS (nbd1): device size too small [ 77.371845][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 77.494488][ T6228] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 77.501350][ T6228] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 77.512640][ T6228] CIFS mount error: No usable UNC path provided in device string! [ 77.512640][ T6228] [ 77.518515][ T6228] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 77.693184][ T6243] openvswitch: netlink: Flow key attr not present in new flow. [ 77.742312][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 78.166093][ T6260] capability: warning: `syz.1.105' uses 32-bit capabilities (legacy support in use) [ 78.219182][ T6262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.223952][ T6262] mac80211_hwsim hwsim2 : renamed from wlan0 (while UP) [ 78.255629][ T6262] hpfs: Bad magic ... probably not HPFS [ 78.299154][ T6270] netlink: 96 bytes leftover after parsing attributes in process `syz.2.107'. [ 78.562604][ T56] bridge0: entered promiscuous mode [ 78.730689][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 78.832641][ T6293] lo speed is unknown, defaulting to 1000 [ 78.885215][ T56] usb 5-1: USB disconnect, device number 3 [ 79.272367][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'. [ 79.602258][ T6317] syzkaller0: entered promiscuous mode [ 79.604744][ T6317] syzkaller0: entered allmulticast mode [ 79.612727][ T6317] tipc: Started in network mode [ 79.616239][ T6317] tipc: Node identity 7a9d481f1a34, cluster identity 4711 [ 79.621698][ T6317] tipc: Enabled bearer , priority 0 [ 79.639893][ T6320] netlink: 'syz.2.122': attribute type 6 has an invalid length. [ 79.644469][ T6320] netlink: 'syz.2.122': attribute type 5 has an invalid length. [ 79.644499][ T6320] netlink: 'syz.2.122': attribute type 4 has an invalid length. [ 79.663284][ T6323] tipc: Resetting bearer [ 79.680583][ T6323] tipc: Disabling bearer [ 79.809794][ T6329] tmpfs: Bad value for 'mpol' [ 79.831872][ T6329] ======================================================= [ 79.831872][ T6329] WARNING: The mand mount option has been deprecated and [ 79.831872][ T6329] and is ignored by this kernel. Remove the mand [ 79.831872][ T6329] option from the mount to silence this warning. [ 79.831872][ T6329] ======================================================= [ 79.862303][ T6329] overlayfs: failed to resolve '/ge_slave_1': -2 [ 79.932933][ T6340] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 80.126133][ T6360] fuse: Unknown parameter 'dax' [ 80.851823][ T42] kauditd_printk_skb: 74 callbacks suppressed [ 80.851848][ T42] audit: type=1400 audit(1785260173.942:440): avc: denied { create } for pid=6399 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.074243][ T42] audit: type=1400 audit(1785260174.162:441): avc: denied { read } for pid=6410 comm="syz.0.149" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 81.092843][ T42] audit: type=1400 audit(1785260174.162:442): avc: denied { open } for pid=6410 comm="syz.0.149" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 81.111597][ T42] audit: type=1400 audit(1785260174.172:443): avc: denied { ioctl } for pid=6410 comm="syz.0.149" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 81.275128][ T6425] netlink: 'syz.1.153': attribute type 16 has an invalid length. [ 81.303392][ T42] audit: type=1400 audit(1785260174.392:444): avc: denied { read write } for pid=6410 comm="syz.0.149" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 81.321070][ T42] audit: type=1400 audit(1785260174.392:445): avc: denied { open } for pid=6410 comm="syz.0.149" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 81.323152][ T6428] ip6gre0: Master is either lo or non-ether device [ 81.336378][ T42] audit: type=1400 audit(1785260174.422:446): avc: denied { create } for pid=6422 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.346789][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 81.397395][ T42] audit: type=1400 audit(1785260174.482:447): avc: denied { bind } for pid=6431 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.518509][ T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 81.523030][ T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 81.527295][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 81.530243][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.536760][ T6414] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 81.544000][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 81.587169][ T6440] __nla_validate_parse: 6 callbacks suppressed [ 81.587188][ T6440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.156'. [ 81.598580][ T6440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.156'. [ 81.705750][ T42] audit: type=1400 audit(1785260174.792:448): avc: denied { write } for pid=6443 comm="syz.3.158" name="netfilter" dev="proc" ino=4026533018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 81.716878][ T42] audit: type=1400 audit(1785260174.802:449): avc: denied { add_name } for pid=6443 comm="syz.3.158" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 81.809852][ T4558] usb 7-1: USB disconnect, device number 3 [ 82.244012][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.173'. [ 82.326757][ T5844] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.468995][ T6508] process 'syz.2.177' launched './file0' with NULL argv: empty string added [ 82.508449][ T6508] warning: `syz.2.177' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.685555][ T6512] gadgetfs: bound to dummy_udc driver [ 82.796773][ T55] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 82.952291][ T55] usb 6-1: unable to get BOS descriptor or descriptor too short [ 82.956483][ T55] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 82.960342][ T55] usb 6-1: can't read configurations, error -71 [ 83.362463][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.184'. [ 83.909069][ T6550] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 83.914144][ T6550] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 83.922611][ T6550] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 83.932138][ T6555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.189'. [ 83.937345][ T6550] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 83.940053][ T6550] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.952761][ T6550] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.958835][ T6550] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.961838][ T6550] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.966348][ T6550] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.977275][ T6550] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 83.979842][ T6550] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 83.986421][ T6550] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 84.045447][ T6557] syzkaller1: entered promiscuous mode [ 84.046430][ T6554] evm: overlay not supported [ 84.049373][ T6557] syzkaller1: entered allmulticast mode [ 84.195582][ T6559] syzkaller1: entered promiscuous mode [ 84.198549][ T6559] syzkaller1: entered allmulticast mode [ 84.291939][ T6562] tmpfs: Unknown parameter 'nr_o' [ 84.519338][ T6569] overlay: ./file2 is not a directory [ 84.576395][ T6586] ata1.00: invalid multi_count 128 ignored [ 84.604584][ T6583] SELinux: failed to load policy [ 84.716214][ T6598] cgroup: Need name or subsystem set [ 84.801743][ T6604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.205'. [ 84.973906][ T5747] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 85.627455][ T6604] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.630224][ T6604] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.632969][ T6604] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.635660][ T6604] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.805446][ T6627] openvswitch: netlink: Duplicate key (type 6). [ 85.852039][ T6629] netlink: 'syz.2.213': attribute type 12 has an invalid length. [ 85.864443][ T6631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 85.887889][ T4558] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 86.037640][ T4558] usb 8-1: Using ep0 maxpacket: 8 [ 86.038675][ T6636] netdevsim netdevsim2: Direct firmware load for . [ 86.038675][ T6636] failed with error -2 [ 86.043519][ T4558] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 86.046345][ T6636] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 86.046345][ T6636] [ 86.046348][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 86.046436][ T42] audit: type=1400 audit(1785260179.132:484): avc: denied { firmware_load } for pid=6635 comm="syz.2.215" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 86.047740][ T4558] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 86.067107][ T4558] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 86.071842][ T4558] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 86.076874][ T4558] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 86.080814][ T4558] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.086079][ T4558] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.089928][ T4558] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.299631][ T4558] usb 8-1: GET_CAPABILITIES returned 0 [ 86.302009][ T4558] usbtmc 8-1:16.0: can't read capabilities [ 86.502546][ T42] audit: type=1400 audit(1785260179.592:485): avc: denied { mount } for pid=6609 comm="syz.3.206" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 86.516338][ T55] usb 8-1: USB disconnect, device number 4 [ 86.942348][ T5747] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 86.958117][ T6641] lo speed is unknown, defaulting to 1000 [ 86.979503][ T5747] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.987575][ T41] cfg80211: failed to load regulatory.db [ 87.035354][ T42] audit: type=1400 audit(1785260180.122:486): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 87.073420][ T42] audit: type=1400 audit(1785260180.162:487): avc: denied { setopt } for pid=6644 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.254963][ T6652] netlink: 92 bytes leftover after parsing attributes in process `syz.3.218'. [ 87.326356][ T42] audit: type=1400 audit(1785260180.412:488): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 87.433450][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 87.475654][ T42] audit: type=1400 audit(1785260180.562:489): avc: denied { map } for pid=6659 comm="syz.3.223" path="socket:[12251]" dev="sockfs" ino=12251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.486445][ T42] audit: type=1400 audit(1785260180.572:490): avc: denied { ioctl } for pid=6659 comm="syz.3.223" path="/dev/input/event1" dev="devtmpfs" ino=943 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 87.497662][ T42] audit: type=1400 audit(1785260180.572:491): avc: denied { map } for pid=6659 comm="syz.3.223" path="/dev/video3" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 87.507756][ T5844] usb 5-1: device descriptor read/64, error -110 [ 87.508090][ T42] audit: type=1400 audit(1785260180.572:492): avc: denied { execute } for pid=6659 comm="syz.3.223" path="/dev/video3" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 87.698708][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.698749][ T5097] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.698848][ T5758] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.757581][ T5844] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 87.771901][ T42] audit: type=1400 audit(1785260180.862:493): avc: denied { mount } for pid=6670 comm="syz.3.226" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 87.916828][ T5844] usb 5-1: device descriptor read/64, error -32 [ 88.029547][ T5844] usb usb5-port1: attempt power cycle [ 88.318200][ T5844] raw-gadget.0 gadget.0: failed to queue resume event [ 88.376755][ T5844] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 88.396968][ C3] raw-gadget.0 gadget.0: ignoring, device is not running [ 88.400009][ T5844] usb 5-1: device descriptor read/8, error -32 [ 88.506865][ T5844] raw-gadget.0 gadget.0: failed to queue suspend event [ 88.510841][ T5844] raw-gadget.0 gadget.0: failed to queue reset event [ 88.589437][ T5844] raw-gadget.0 gadget.0: failed to queue resume event [ 88.656810][ T5844] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 88.676954][ C3] raw-gadget.0 gadget.0: ignoring, device is not running [ 88.679752][ T5844] usb 5-1: device descriptor read/8, error -32 [ 88.786786][ T5844] raw-gadget.0 gadget.0: failed to queue suspend event [ 88.789693][ T5844] usb usb5-port1: unable to enumerate USB device [ 88.793281][ T6483] raw-gadget.0 gadget.0: failed to queue disconnect event [ 88.883600][ T6681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65530 sclass=netlink_route_socket pid=6681 comm=syz.0.229 [ 88.941626][ T6683] dns_resolver: Unsupported content type (234) [ 88.958948][ T6683] lo speed is unknown, defaulting to 1000 [ 88.997449][ T6685] netlink: 32 bytes leftover after parsing attributes in process `syz.1.230'. [ 89.013206][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.231'. [ 89.068824][ T5747] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.083649][ T6690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.233'. [ 89.148201][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 89.272542][ T6695] binder: BINDER_SET_CONTEXT_MGR already set [ 89.276150][ T6695] binder: 6694:6695 ioctl 4018620d 200000000100 returned -16 [ 89.279468][ T6695] binder: BINDER_SET_CONTEXT_MGR already set [ 89.281459][ T6695] binder: 6694:6695 ioctl 4018620d 200000000100 returned -16 [ 89.284150][ T6695] binder: BINDER_SET_CONTEXT_MGR already set [ 89.286399][ T6695] binder: 6694:6695 ioctl 4018620d 200000000100 returned -16 [ 89.376852][ T5844] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 89.552631][ T5844] usb 6-1: Using ep0 maxpacket: 8 [ 89.559587][ T5844] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.565256][ T5844] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.571676][ T5844] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 89.578413][ T5844] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 89.583005][ T5844] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 89.587064][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.596549][ T5844] hub 6-1:1.0: bad descriptor, ignoring hub [ 89.599577][ T5844] hub 6-1:1.0: probe with driver hub failed with error -5 [ 89.603209][ T5844] cdc_wdm 6-1:1.0: skipping garbage [ 89.605475][ T5844] cdc_wdm 6-1:1.0: skipping garbage [ 89.609792][ T5844] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 89.612344][ T5844] cdc_wdm 6-1:1.0: Unknown control protocol [ 89.777813][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.777898][ T5097] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.780463][ T5758] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.911124][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'. [ 90.038978][ T6729] 9p: Bad value for 'wfdno' [ 90.040675][ T6728] 9p: Bad value for 'wfdno' [ 90.077685][ T4558] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 90.229782][ T4558] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 90.235864][ T4558] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 90.243474][ T4558] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.247133][ T4558] usb 8-1: Product: syz [ 90.249199][ T4558] usb 8-1: Manufacturer: syz [ 90.251319][ T4558] usb 8-1: SerialNumber: syz [ 90.475575][ T6717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.695217][ T6748] syzkaller1: entered promiscuous mode [ 90.697476][ T6748] syzkaller1: entered allmulticast mode [ 90.755774][ T6748] kvm: emulating exchange as write [ 91.136898][ T5747] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.643366][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 91.643396][ T42] audit: type=1400 audit(1785260184.732:506): avc: denied { append } for pid=6765 comm="syz.0.254" name="pmem0" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.713496][ T42] audit: type=1400 audit(1785260184.802:507): avc: denied { open } for pid=6765 comm="syz.0.254" path="/dev/ptyq4" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 91.856786][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.857868][ T5758] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.857912][ T5097] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.058030][ T42] audit: type=1400 audit(1785260185.152:508): avc: denied { execute } for pid=6772 comm="syz.0.256" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 92.102086][ T6773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6773 comm=syz.0.256 [ 92.133886][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 92.136319][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 92.137052][ T5907] usb 6-1: USB disconnect, device number 5 [ 92.138613][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 92.174284][ T6778] dlm: no locking on control device [ 92.194162][ T4558] usblp 8-1:1.0: usblp1: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 92.237390][ T4558] usb 8-1: USB disconnect, device number 5 [ 92.249420][ T4558] usblp1: removed [ 92.278789][ T42] audit: type=1400 audit(1785260185.372:509): avc: denied { create } for pid=6787 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.287488][ T42] audit: type=1400 audit(1785260185.372:510): avc: denied { append } for pid=6787 comm="syz.1.260" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 92.712519][ T6798] netlink: 'syz.3.263': attribute type 13 has an invalid length. [ 92.906293][ T42] audit: type=1400 audit(1785260185.992:511): avc: denied { ioctl } for pid=6805 comm="syz.0.265" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 93.146829][ T42] audit: type=1400 audit(1785260186.232:512): avc: denied { create } for pid=6820 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 93.371174][ T6831] syzkaller0: entered promiscuous mode [ 93.373695][ T6831] syzkaller0: entered allmulticast mode [ 93.461733][ T42] audit: type=1400 audit(1785260186.552:513): avc: denied { create } for pid=6834 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 93.487563][ T2324] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 93.636807][ T2324] usb 5-1: Using ep0 maxpacket: 32 [ 93.639887][ T2324] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 93.641376][ T6835] SELinux: context truncated [ 93.642747][ T2324] usb 5-1: config 0 has no interface number 0 [ 93.644612][ T6835] SELinux: invalid ocon [ 93.647207][ T2324] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 93.652843][ T2324] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 93.657637][ T2324] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 93.661339][ T2324] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 93.665201][ T2324] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.671937][ T2324] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 93.674983][ T2324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.677479][ T2324] usb 5-1: Product: syz [ 93.678668][ T2324] usb 5-1: Manufacturer: syz [ 93.680024][ T2324] usb 5-1: SerialNumber: syz [ 93.683515][ T2324] usb 5-1: config 0 descriptor?? [ 93.691982][ T2324] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input8 [ 93.702078][ T42] audit: type=1400 audit(1785260186.792:514): avc: denied { read } for pid=5133 comm="acpid" name="mouse2" dev="devtmpfs" ino=2913 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.719869][ T42] audit: type=1400 audit(1785260186.792:515): avc: denied { open } for pid=5133 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2913 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.805237][ T6835] SELinux: failed to load policy [ 94.046886][ T5844] usb 5-1: USB disconnect, device number 8 [ 94.171361][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 94.696727][ T149] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 94.827187][ T5844] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 94.846786][ T149] usb 8-1: Using ep0 maxpacket: 8 [ 94.850950][ T149] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 94.854614][ T149] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.859430][ T149] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.863606][ T149] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.868558][ T149] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.875259][ T149] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.879307][ T149] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.978612][ T5844] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 94.982026][ T5844] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 94.987225][ T5844] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.992458][ T5844] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 94.997787][ T5844] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 95.003830][ T5844] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 95.007278][ T5844] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 95.011726][ T5844] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.016871][ T5844] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 95.021805][ T5844] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 95.029975][ T5844] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 95.033398][ T5844] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 95.038084][ T5844] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.042941][ T5844] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 95.047671][ T5844] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 95.055264][ T5844] usb 6-1: string descriptor 0 read error: -22 [ 95.058461][ T5844] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 95.062321][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.089325][ T149] usb 8-1: usb_control_msg returned -32 [ 95.091913][ T149] usbtmc 8-1:16.0: can't read capabilities [ 95.093207][ T5844] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 95.107906][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.288621][ T5844] usb 6-1: USB disconnect, device number 6 [ 95.492467][ T6877] adutux: No device or device unplugged -19 [ 97.457413][ T5844] usb 8-1: USB disconnect, device number 6 [ 97.694197][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.298'. [ 97.699550][ T42] kauditd_printk_skb: 421 callbacks suppressed [ 97.699575][ T42] audit: type=1400 audit(1785260190.792:937): avc: denied { shutdown } for pid=6926 comm="syz.1.298" laddr=fe80::b lport=52880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.773708][ T6933] netlink: 'syz.3.300': attribute type 1 has an invalid length. [ 97.781177][ T6933] netlink: 224 bytes leftover after parsing attributes in process `syz.3.300'. [ 98.044428][ T6939] /dev/sr0: Can't open blockdev [ 98.667189][ T55] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 98.818115][ T6967] veth0_macvtap: entered allmulticast mode [ 98.823478][ T6967] tipc: Started in network mode [ 98.825592][ T6967] tipc: Node identity f2316f5a5738, cluster identity 4711 [ 98.827466][ T55] usb 6-1: Invalid ep0 maxpacket: 32 [ 98.828747][ T6967] tipc: Enabled bearer , priority 0 [ 98.837513][ T6967] tipc: Resetting bearer [ 98.843423][ T6966] tipc: Disabling bearer [ 98.941964][ T42] audit: type=1400 audit(1785260192.032:938): avc: denied { mmap_zero } for pid=6968 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 98.966796][ T55] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 99.126717][ T55] usb 6-1: Invalid ep0 maxpacket: 32 [ 99.130898][ T55] usb usb6-port1: attempt power cycle [ 99.310601][ T6982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.314'. [ 99.329516][ T42] audit: type=1400 audit(1785260192.422:939): avc: denied { cmd } for pid=6981 comm="syz.0.314" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=io_uring permissive=1 [ 99.482209][ T55] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 99.507351][ T55] usb 6-1: Invalid ep0 maxpacket: 32 [ 99.541230][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.581540][ T6996] 8021q: VLANs not supported on sit0 [ 99.585008][ T42] audit: type=1400 audit(1785260192.672:940): avc: denied { getopt } for pid=6995 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.633842][ T7002] binder: 7001:7002 ioctl c0306201 200000000080 returned -22 [ 99.646778][ T55] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 99.669811][ T55] usb 6-1: Invalid ep0 maxpacket: 32 [ 99.677959][ T55] usb usb6-port1: unable to enumerate USB device [ 99.686957][ T7006] SELinux: policydb string length 0 does not match expected length 8 [ 99.692547][ T7006] SELinux: failed to load policy [ 99.784294][ T42] audit: type=1400 audit(1785260192.872:941): avc: denied { listen } for pid=7013 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.799570][ T42] audit: type=1400 audit(1785260192.872:942): avc: denied { setopt } for pid=7013 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.847813][ T7020] netlink: 36 bytes leftover after parsing attributes in process `syz.0.327'. [ 99.853597][ T42] audit: type=1400 audit(1785260192.942:943): avc: denied { write } for pid=7019 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.903948][ T42] audit: type=1400 audit(1785260192.992:944): avc: denied { read } for pid=7026 comm="syz.3.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.103410][ T7037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.332'. [ 100.194535][ T7043] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 100.212327][ T7043] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 100.331556][ T42] audit: type=1400 audit(1785260193.422:945): avc: denied { write } for pid=7047 comm="syz.0.336" name="raw6" dev="proc" ino=4026532972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 100.391340][ T7049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62992 sclass=netlink_route_socket pid=7049 comm=syz.0.336 [ 100.400044][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 100.404254][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.336'. [ 100.552978][ T7051] netlink: 68 bytes leftover after parsing attributes in process `syz.0.337'. [ 100.597462][ T42] audit: type=1400 audit(1785260193.692:946): avc: denied { ioctl } for pid=7052 comm="syz.0.338" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.887075][ T7070] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 100.939551][ T7072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.991071][ T7074] binder: 7073:7074 ioctl c0306201 200000000480 returned -14 [ 101.230884][ T7082] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 101.289333][ T7084] openvswitch: netlink: Flow actions attr not present in new flow. [ 101.698504][ T5907] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 101.754593][ T7100] Invalid logical block size (-3) [ 101.848330][ T5907] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 101.850920][ T5907] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.853905][ T5907] usb 5-1: config 0 has no interfaces? [ 101.855809][ T5907] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 101.860260][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.864981][ T5907] usb 5-1: config 0 descriptor?? [ 102.020909][ T5828] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 102.181956][ T5828] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 102.196179][ T5828] usb 6-1: can't read configurations, error -61 [ 102.272738][ T7118] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.329963][ T5828] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 102.401587][ T7121] pim6reg1: entered promiscuous mode [ 102.404657][ T7121] pim6reg1: entered allmulticast mode [ 102.473915][ T5747] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.481202][ T5747] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.493533][ T5747] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.518528][ T5747] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.519755][ T5828] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 102.524262][ T5828] usb 6-1: can't read configurations, error -61 [ 102.525720][ T5747] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.527643][ T5828] usb usb6-port1: attempt power cycle [ 102.777806][ T7122] lo speed is unknown, defaulting to 1000 [ 102.877327][ T5828] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 102.900853][ T5828] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 102.903355][ T5828] usb 6-1: can't read configurations, error -61 [ 102.915563][ T7149] netlink: 'syz.3.366': attribute type 5 has an invalid length. [ 103.062970][ T5828] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 103.087345][ T5828] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 103.090387][ T5828] usb 6-1: can't read configurations, error -61 [ 103.093265][ T5828] usb usb6-port1: unable to enumerate USB device [ 103.117337][ T7122] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.120358][ T7122] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.120469][ T7166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55056 sclass=netlink_route_socket pid=7166 comm=syz.3.369 [ 103.123461][ T7122] bridge_slave_0: entered allmulticast mode [ 103.133214][ T7122] bridge_slave_0: entered promiscuous mode [ 103.141571][ T7122] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.144494][ T7122] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.148306][ T7122] bridge_slave_1: entered allmulticast mode [ 103.152252][ T7122] bridge_slave_1: entered promiscuous mode [ 103.203947][ T7122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.212588][ T7122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.244968][ T7122] team0: Port device team_slave_0 added [ 103.245621][ T7170] No source specified [ 103.250864][ T7122] team0: Port device team_slave_1 added [ 103.281793][ T7122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.284680][ T7122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.295814][ T7122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.302348][ T7122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.305225][ T7122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.313597][ T7172] loop9: detected capacity change from 0 to 255852544 [ 103.315321][ T7122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.360930][ T7122] hsr_slave_0: entered promiscuous mode [ 103.364044][ T7122] hsr_slave_1: entered promiscuous mode [ 103.366682][ T7122] debugfs: 'hsr0' already exists in 'hsr' [ 103.368931][ T7122] Cannot create hsr debugfs directory [ 103.388746][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 103.388803][ T42] audit: type=1400 audit(1785784484.437:960): avc: denied { append } for pid=7171 comm="syz.3.372" name="pfkey" dev="proc" ino=4026533119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 103.394400][ T7172] loop9: detected capacity change from 255852544 to 524287999 [ 103.463982][ T5758] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 103.464098][ T5758] Bluetooth: hci1: Malformed LE Event: 0x02 [ 103.480037][ T7175] netlink: 'syz.3.373': attribute type 9 has an invalid length. [ 103.487125][ T7175] netlink: 216 bytes leftover after parsing attributes in process `syz.3.373'. [ 103.631368][ T7122] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.638881][ T7122] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.643210][ T7122] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.651246][ T7122] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.656953][ T7122] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.663183][ T7122] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.666963][ T7122] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.677174][ T7122] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.769877][ T7122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.790039][ T7122] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.804136][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.807266][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.828468][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.831465][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.145073][ T7122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.362774][ T7122] veth0_vlan: entered promiscuous mode [ 104.374157][ T7122] veth1_vlan: entered promiscuous mode [ 104.401234][ T7122] veth0_macvtap: entered promiscuous mode [ 104.408385][ T7122] veth1_macvtap: entered promiscuous mode [ 104.426146][ T7122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.436794][ T7122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.446654][ T5826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.450689][ T5826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.450847][ T5907] usb 5-1: string descriptor 0 read error: -71 [ 104.456241][ T5907] usb 5-1: USB disconnect, device number 9 [ 104.462365][ T5826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.471047][ T5826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.486182][ T42] audit: type=1400 audit(1785784485.506:961): avc: denied { create } for pid=7210 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 104.496166][ T42] audit: type=1400 audit(1785784485.506:962): avc: denied { ioctl } for pid=7210 comm="syz.0.377" path="socket:[20507]" dev="sockfs" ino=20507 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 104.560213][ T7211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.377'. [ 104.643777][ T7209] /dev/sr0: Can't open blockdev [ 104.658394][ T5758] Bluetooth: hci4: command tx timeout [ 104.730207][ T7215] block nbd1: Receive control failed (result -32) [ 104.731001][ T6833] block nbd1: Receive control failed (result -32) [ 104.744647][ T7217] syz.0.378: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 104.756987][ T7217] CPU: 1 UID: 0 PID: 7217 Comm: syz.0.378 Not tainted syzkaller #0 PREEMPT(full) [ 104.757018][ T7217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.757040][ T7217] Call Trace: [ 104.757057][ T7217] [ 104.757065][ T7217] dump_stack_lvl+0x100/0x190 [ 104.757146][ T7217] warn_alloc.cold+0x94/0xa8 [ 104.757169][ T7217] ? __pfx_warn_alloc+0x10/0x10 [ 104.757212][ T7217] ? kasan_save_stack+0x3f/0x50 [ 104.757244][ T7217] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 104.757274][ T7217] ? xskq_create+0x52/0x1d0 [ 104.757382][ T7217] ? xsk_setsockopt+0x743/0xab0 [ 104.757412][ T7217] ? do_sock_setsockopt+0xf3/0x1d0 [ 104.757554][ T7217] ? __sys_setsockopt+0x195/0x220 [ 104.757577][ T7217] ? __x64_sys_setsockopt+0xbd/0x160 [ 104.757599][ T7217] ? do_syscall_64+0x115/0x870 [ 104.757633][ T7217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.757660][ T7217] ? xskq_create+0xfb/0x1d0 [ 104.757680][ T7217] __vmalloc_node_range_noprof+0x136c/0x1630 [ 104.757720][ T7217] ? xskq_create+0xfb/0x1d0 [ 104.757746][ T7217] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.757779][ T7217] ? kasan_save_track+0x14/0x30 [ 104.757801][ T7217] ? __kasan_kmalloc+0xaa/0xb0 [ 104.757835][ T7217] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 104.757867][ T7217] ? xskq_create+0xfb/0x1d0 [ 104.757886][ T7217] vmalloc_user_noprof+0x9e/0xe0 [ 104.757913][ T7217] ? xskq_create+0xfb/0x1d0 [ 104.757932][ T7217] xskq_create+0xfb/0x1d0 [ 104.757953][ T7217] xsk_setsockopt+0x743/0xab0 [ 104.757984][ T7217] ? __pfx_xsk_setsockopt+0x10/0x10 [ 104.758015][ T7217] ? find_held_lock+0x2b/0x80 [ 104.758064][ T7217] ? __fget_files+0x215/0x3d0 [ 104.758101][ T7217] ? selinux_socket_setsockopt+0x6a/0x80 [ 104.758136][ T7217] ? __pfx_xsk_setsockopt+0x10/0x10 [ 104.758169][ T7217] do_sock_setsockopt+0xf3/0x1d0 [ 104.758199][ T7217] __sys_setsockopt+0x195/0x220 [ 104.758227][ T7217] __x64_sys_setsockopt+0xbd/0x160 [ 104.758250][ T7217] ? do_syscall_64+0x90/0x870 [ 104.758271][ T7217] ? lockdep_hardirqs_on+0x78/0x100 [ 104.758291][ T7217] do_syscall_64+0x115/0x870 [ 104.758309][ T7217] ? clear_bhb_loop+0x40/0x90 [ 104.758332][ T7217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.758351][ T7217] RIP: 0033:0x7f1287f9de99 [ 104.758368][ T7217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.758387][ T7217] RSP: 002b:00007f1288de1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 104.758420][ T7217] RAX: ffffffffffffffda RBX: 00007f1288226090 RCX: 00007f1287f9de99 [ 104.758433][ T7217] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 104.758445][ T7217] RBP: 00007f1288033eaf R08: 0000000000000029 R09: 0000000000000000 [ 104.758457][ T7217] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.758468][ T7217] R13: 00007f1288226128 R14: 00007f1288226090 R15: 00007ffe874eb928 [ 104.758494][ T7217] [ 104.759909][ T7217] Mem-Info: [ 104.764207][ T335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.768687][ T335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.771315][ T7217] active_anon:9993 inactive_anon:5 isolated_anon:0 [ 104.771315][ T7217] active_file:1494 inactive_file:57197 isolated_file:0 [ 104.771315][ T7217] unevictable:1771 dirty:63 writeback:0 [ 104.771315][ T7217] slab_reclaimable:8458 slab_unreclaimable:71340 [ 104.771315][ T7217] mapped:24775 shmem:2322 pagetables:3547 [ 104.771315][ T7217] sec_pagetables:293 bounce:0 [ 104.771315][ T7217] kernel_misc_reclaimable:0 [ 104.771315][ T7217] free:450676 free_pcp:13048 free_cma:0 [ 104.818604][ T335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.823454][ T7217] Node 0 active_anon:38808kB inactive_anon:20kB active_file:5976kB inactive_file:227696kB unevictable:3548kB isolated(anon):0kB isolated(file):0kB mapped:95128kB dirty:252kB writeback:0kB shmem:5752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13440kB pagetables:13132kB sec_pagetables:1172kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 104.823526][ T7217] Node 1 active_anon:1164kB inactive_anon:0kB active_file:0kB inactive_file:1092kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:4096kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:1056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 104.823617][ T7217] Node 0 DMA free:13180kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 104.823676][ T7217] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 104.823716][ T7217] Node 0 DMA32 free:156744kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38804kB inactive_anon:20kB active_file:5976kB inactive_file:227696kB unevictable:3548kB writepending:252kB zspages:0kB present:2080628kB managed:1255244kB mlocked:12kB bounce:0kB free_pcp:47560kB local_pcp:10432kB free_cma:0kB [ 104.823771][ T7217] lowmem_reserve[]: 0 0 0 0 0 [ 104.823811][ T7217] Node 1 Normal free:1632652kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1164kB inactive_anon:0kB active_file:0kB inactive_file:1092kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:4868kB local_pcp:1132kB free_cma:0kB [ 104.825402][ T335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.827259][ T7217] lowmem_reserve[]: [ 104.894553][ T42] audit: type=1400 audit(1785784485.875:963): avc: denied { create } for pid=7220 comm="syz.3.380" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.910858][ T7217] 0 [ 104.923465][ T42] audit: type=1400 audit(1785784485.875:964): avc: denied { mounton } for pid=7220 comm="syz.3.380" path="/124/file0" dev="tmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.927526][ T7217] 0 0 0 0 [ 104.927569][ T7217] Node 0 DMA: 9*4kB [ 104.943509][ T42] audit: type=1400 audit(1785784485.924:965): avc: denied { mounton } for pid=7122 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 104.953411][ T7217] (UM) 9*8kB (UM) 9*16kB (UM) 12*32kB (UM) 6*64kB (UM) 7*128kB (UM) 6*256kB (UM) 5*512kB (UM) 5*1024kB (UM) 1*2048kB (M) 0*4096kB = 13180kB [ 104.953545][ T7217] Node 0 DMA32: 960*4kB (UME) 252*8kB (UME) 248*16kB (UME) 221*32kB (UME) 287*64kB (UME) 174*128kB (UME) 106*256kB (UME) 57*512kB (UM) 15*1024kB (M) 5*2048kB (UM) 4*4096kB (U) = 155840kB [ 104.953687][ T7217] Node 1 Normal: 108*4kB (UME) 210*8kB (UME) 185*16kB (UME) 216*32kB (UME) 197*64kB (UME) 199*128kB (UME) 166*256kB (UME) 160*512kB (UME) 130*1024kB (UM) 15*2048kB (UME) 316*4096kB (M) = 1632656kB [ 104.953842][ T7217] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.953857][ T7217] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.953870][ T7217] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.953884][ T7217] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.953897][ T7217] 61009 total pagecache pages [ 104.953904][ T7217] 0 pages in swap cache [ 104.953909][ T7217] Free swap = 124996kB [ 104.953915][ T7217] Total swap = 124996kB [ 104.953923][ T7217] 1048443 pages RAM [ 104.953945][ T7217] 0 pages HighMem/MovableOnly [ 104.953951][ T7217] 285321 pages reserved [ 104.953957][ T7217] 0 pages cma reserved [ 105.040453][ T7228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.359'. [ 105.043361][ T42] audit: type=1400 audit(1785784485.924:966): avc: denied { mounton } for pid=7122 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 105.228236][ T7251] xt_ipcomp: unknown flags 1D [ 105.352355][ T42] audit: type=1400 audit(1785784486.343:967): avc: denied { getopt } for pid=7264 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.357549][ T7256] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.410605][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.390'. [ 105.536604][ T7269] lo speed is unknown, defaulting to 1000 [ 105.640481][ T42] audit: type=1400 audit(1785784486.625:968): avc: denied { write } for pid=7283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.664646][ T41] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 105.727431][ T7267] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.755068][ T42] audit: type=1400 audit(1785784486.732:969): avc: denied { write } for pid=7296 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.825749][ T7267] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.869919][ T41] usb 9-1: Using ep0 maxpacket: 32 [ 105.874365][ T41] usb 9-1: config index 0 descriptor too short (expected 15270, got 18) [ 105.882429][ T7294] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 105.885105][ T41] usb 9-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 105.888416][ T7294] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 105.895112][ T41] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.907052][ T7294] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 105.912138][ T41] usb 9-1: Product: syz [ 105.914162][ T41] usb 9-1: Manufacturer: syz [ 105.916462][ T41] usb 9-1: SerialNumber: syz [ 105.930052][ T41] usb 9-1: config 0 descriptor?? [ 105.932318][ T7294] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 105.957246][ T41] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 105.963105][ T41] dvb-usb: bulk message failed: -22 (4/0) [ 105.971258][ T41] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 105.993803][ T41] dvb-usb: bulk message failed: -22 (5/0) [ 105.997062][ T41] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 106.017459][ T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.017892][ T7267] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.022989][ T41] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 106.024231][ T41] usb 9-1: media controller created [ 106.050895][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.073407][ T41] usb 9-1: selecting invalid altsetting 3 [ 106.077863][ T41] ttusb2: set interface to alts=3 failed [ 106.122993][ T41] DVB: Unable to find symbol tda10086_attach() [ 106.128171][ T41] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 106.139894][ T41] dvb-usb: bulk message failed: -22 (4/0) [ 106.142612][ T41] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 106.154311][ T41] dvb-usb: bulk message failed: -22 (5/0) [ 106.154920][ T7313] 0x000000000000-0x000000020000 : "" [ 106.163383][ T41] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 106.168355][ T41] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 106.206292][ T7269] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 106.208824][ T7313] ftl_cs: FTL header not found. [ 106.210152][ T7269] dvb-usb: bulk message failed: -22 (7/0) [ 106.214817][ T7269] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 106.239350][ T7269] ttusb2: i2c transfer failed. [ 106.266756][ T7271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.277608][ T7271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.306136][ T41] usb 9-1: USB disconnect, device number 2 [ 106.308451][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.432618][ T41] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 106.458014][ T104] smbdirect: ib_dev[syz2] removed [ 106.480914][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.512989][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.538613][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.596987][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 106.614375][ T7324] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.619413][ T7324] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.652589][ T7324] vlan2: entered promiscuous mode [ 106.654773][ T7324] bridge0: entered promiscuous mode [ 106.688360][ T7330] bond1: (slave bond_slave_1): Device is not our slave [ 106.692301][ T7330] bond1: option active_slave: invalid value (bond_slave_1) [ 106.698361][ T7330] bond1 (unregistering): Released all slaves [ 106.722511][ T7334] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 106.727954][ T7328] sd 0:0:0:0: PR command failed: 1026 [ 106.734292][ T7328] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 106.737438][ T7324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.404'. [ 106.743768][ T7328] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 106.794600][ T5758] Bluetooth: hci4: command 0x041b tx timeout [ 106.929189][ T7347] netlink: 'syz.4.410': attribute type 10 has an invalid length. [ 106.941884][ T7347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.947239][ T7347] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 107.133968][ T7362] xt_hashlimit: invalid interval [ 107.138950][ T5758] Bluetooth: hci0: ACL packet for unknown connection handle 85 [ 107.142185][ T5758] Bluetooth: hci0: ACL packet for unknown connection handle 85 [ 107.220640][ T7373] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 107.242688][ T7375] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 107.355933][ T7384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.421'. [ 107.516253][ T7396] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7396 comm=syz.4.425 [ 107.672968][ T5901] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 107.802008][ T7407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.428'. [ 107.838406][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.843411][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.847860][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.853683][ T5901] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.857705][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.863688][ T5901] usb 5-1: config 0 descriptor?? [ 108.564651][ T7419] netlink: 112 bytes leftover after parsing attributes in process `syz.3.431'. [ 108.598349][ T7421] ufs: You didn't specify the type of your ufs filesystem [ 108.598349][ T7421] [ 108.598349][ T7421] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 108.598349][ T7421] [ 108.598349][ T7421] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 108.611835][ T7421] ufs: ufstype=old is supported read-only [ 108.617956][ T7421] ufs: ufs_fill_super(): bad magic number [ 108.658585][ T7423] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 108.667841][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 108.667909][ T42] audit: type=1400 audit(1785784489.585:989): avc: denied { connect } for pid=7422 comm="syz.3.433" lport=61766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.702898][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 108.722315][ T5901] usbhid 5-1:0.0: can't add hid device: -71 [ 108.728928][ T5901] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 108.743912][ T5901] usb 5-1: USB disconnect, device number 10 [ 108.921409][ T5758] Bluetooth: hci4: command 0x041b tx timeout [ 108.994790][ T42] audit: type=1400 audit(1785784489.898:990): avc: denied { name_bind } for pid=7439 comm="syz.3.439" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 109.049414][ T42] audit: type=1400 audit(1785784489.957:991): avc: denied { write } for pid=7443 comm="syz.3.440" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 109.078018][ T42] audit: type=1400 audit(1785784489.986:992): avc: denied { getopt } for pid=7435 comm="syz.1.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.143681][ T7449] lo speed is unknown, defaulting to 1000 [ 109.463377][ T42] audit: type=1400 audit(1785784490.359:993): avc: denied { map } for pid=7452 comm="syz.4.442" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 109.472643][ T42] audit: type=1400 audit(1785784490.359:994): avc: denied { execute } for pid=7452 comm="syz.4.442" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 109.508792][ T7467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.445'. [ 109.590441][ T7472] bridge1: entered promiscuous mode [ 111.041245][ T5758] Bluetooth: hci4: command 0x041b tx timeout [ 113.157367][ T5758] Bluetooth: hci4: command 0x041b tx timeout [ 133.509970][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.257544][ T42] audit: type=1400 audit(1785784514.898:995): avc: denied { ioctl } for pid=7483 comm="syz.0.449" path="socket:[21699]" dev="sockfs" ino=21699 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.281631][ T5858] IPVS: starting estimator thread 0... [ 134.288364][ T7487] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 134.334350][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'. [ 134.343749][ T7494] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.382051][ T7491] IPVS: using max 44 ests per chain, 105600 per kthread [ 134.391369][ T7508] bridge0: port 3(syz_tun) entered blocking state [ 134.398386][ T7508] bridge0: port 3(syz_tun) entered disabled state [ 134.402063][ T7508] syz_tun: entered allmulticast mode [ 134.421892][ T7508] syz_tun: entered promiscuous mode [ 134.435597][ T7508] bridge0: port 3(syz_tun) entered blocking state [ 134.439406][ T7508] bridge0: port 3(syz_tun) entered forwarding state [ 134.447509][ T42] audit: type=1400 audit(1785784515.097:996): avc: denied { append } for pid=7510 comm="syz.0.456" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 134.517313][ T42] audit: type=1400 audit(1785784515.167:997): avc: denied { ioctl } for pid=7522 comm="syz.0.459" path="socket:[21824]" dev="sockfs" ino=21824 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 134.547212][ T42] audit: type=1400 audit(1785784515.197:998): avc: denied { write } for pid=7524 comm="syz.4.460" name="cluster" dev="configfs" ino=3088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.555866][ T42] audit: type=1400 audit(1785784515.197:999): avc: denied { add_name } for pid=7524 comm="syz.4.460" name="mycluster" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.564255][ T42] audit: type=1400 audit(1785784515.197:1000): avc: denied { create } for pid=7524 comm="syz.4.460" name="mycluster" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 134.565826][ T7525] uhci_hcd 0000:00:1d.0: remove, state 4 [ 134.571533][ T42] audit: type=1400 audit(1785784515.207:1001): avc: denied { write } for pid=7524 comm="syz.4.460" name="node" dev="configfs" ino=20387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.571581][ T42] audit: type=1400 audit(1785784515.207:1002): avc: denied { read write } for pid=7524 comm="syz.4.460" name="num" dev="configfs" ino=20390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 134.571610][ T42] audit: type=1400 audit(1785784515.207:1003): avc: denied { open } for pid=7524 comm="syz.4.460" path="/21/config/cluster/mycluster/node/mynode/num" dev="configfs" ino=20390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 134.571642][ T42] audit: type=1800 audit(1785784515.217:1004): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.460" name="num" dev="configfs" ino=20390 res=0 errno=0 [ 134.608277][ T7525] usb usb1: USB disconnect, device number 1 [ 134.674602][ T7525] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 134.694797][ T56] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 134.702705][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.462'. [ 134.843447][ T56] usb 8-1: Using ep0 maxpacket: 32 [ 134.845819][ T7527] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 134.847339][ T56] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 134.859819][ T7527] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 134.868216][ T56] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 134.875278][ T56] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 134.883966][ T56] usb 8-1: Product: syz [ 134.885688][ T56] usb 8-1: Manufacturer: syz [ 134.889502][ T56] usb 8-1: SerialNumber: syz [ 134.894575][ T7527] pci 0000:00:1d.0: Adding to iommu group 7 [ 134.899707][ T56] usb 8-1: config 0 descriptor?? [ 134.905535][ T7516] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 134.910398][ T7527] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 134.923231][ T56] hub 8-1:0.0: bad descriptor, ignoring hub [ 134.931348][ T56] hub 8-1:0.0: probe with driver hub failed with error -5 [ 134.980199][ T7527] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 62729 usecs [ 135.031274][ T7527] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 135.041740][ T7527] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 135.045483][ T7527] uhci_hcd 0000:00:1d.0: detected 2 ports [ 135.052510][ T7527] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 135.060487][ T7527] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 135.065118][ T7527] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 135.068326][ T7527] usb usb1: Product: UHCI Host Controller [ 135.070735][ T7527] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 135.073446][ T7527] usb usb1: SerialNumber: 0000:00:1d.0 [ 135.120237][ T7527] hub 1-0:1.0: USB hub found [ 135.125708][ T7527] hub 1-0:1.0: 2 ports detected [ 135.270177][ T7565] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 135.797575][ T7589] nfs: Bad value for 'port' [ 135.890407][ T7592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.476'. [ 135.904948][ T7593] autofs4:pid:7593:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 136.196633][ T7617] fuse: Invalid rootmode [ 136.205271][ T7612] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 136.210005][ T7612] SELinux: failed to load policy [ 136.527979][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 136.561385][ T7645] netlink: 'syz.0.491': attribute type 1 has an invalid length. [ 136.594436][ T7649] netlink: 'syz.1.492': attribute type 1 has an invalid length. [ 136.608489][ T7645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.644481][ T7649] bond0: entered promiscuous mode [ 136.647106][ T7649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.687841][ T7645] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 136.709395][ T7649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.714393][ T5826] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 136.721048][ T7649] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 136.725331][ T7649] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 136.745358][ T7649] bond0: (slave vti0): making interface the new active one [ 136.748058][ T7649] vti0: entered promiscuous mode [ 136.753413][ T7649] bond0: (slave vti0): Enslaving as an active interface with an up link [ 136.821372][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 136.834530][ T7669] netlink: 32 bytes leftover after parsing attributes in process `syz.4.496'. [ 136.985150][ T7676] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 137.005492][ T7676] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 137.013723][ T7676] mmap: syz.1.498 (7676) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 137.112027][ T2324] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 137.150757][ T7678] tls_set_device_offload: netdev not found [ 137.274177][ T2324] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 137.277642][ T2324] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 137.282079][ T2324] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.287074][ T2324] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 137.291456][ T2324] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 137.297230][ T2324] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 137.300369][ T2324] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 137.304785][ T2324] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.309934][ T2324] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 137.315339][ T2324] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 137.321080][ T2324] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 137.324930][ T2324] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 137.329620][ T2324] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.334561][ T2324] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 137.339156][ T2324] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 137.346777][ T2324] usb 9-1: string descriptor 0 read error: -22 [ 137.349722][ T2324] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 137.354164][ T2324] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.364548][ T2324] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 137.650242][ T7670] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 138.180912][ T5844] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 138.368281][ T5844] usb 6-1: config 3 has an invalid interface number: 110 but max is 3 [ 138.371466][ T5844] usb 6-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 138.374668][ T5844] usb 6-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 138.377996][ T5844] usb 6-1: config 3 has no interface number 0 [ 138.380429][ T5844] usb 6-1: config 3 interface 110 altsetting 2 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 138.384886][ T5844] usb 6-1: config 3 interface 110 altsetting 2 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 138.389609][ T5844] usb 6-1: config 3 interface 110 altsetting 2 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 138.393824][ T5844] usb 6-1: config 3 interface 110 altsetting 2 endpoint 0x7 has an invalid bInterval 190, changing to 7 [ 138.401532][ T5844] usb 6-1: config 3 interface 110 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 138.404658][ T5844] usb 6-1: config 3 interface 110 altsetting 2 has 7 endpoint descriptors, different from the interface descriptor's value: 14 [ 138.409481][ T5844] usb 6-1: config 3 interface 110 has no altsetting 0 [ 138.414339][ T5844] usb 6-1: New USB device found, idVendor=1934, idProduct=1202, bcdDevice=d6.14 [ 138.417810][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.420783][ T5844] usb 6-1: Product: ㍹郡䐲⅘ࢺ褱ಞꛉ᯾篾熄쭀夀枃⋍ [ 138.423473][ T5844] usb 6-1: Manufacturer: っ椇냀Ⅳ皱衲㖾× [ 138.425610][ T5844] usb 6-1: SerialNumber: 㱺 [ 138.641610][ T7701] Cannot find del_set index 4 as target [ 138.650584][ T56] usb 8-1: USB disconnect, device number 7 [ 138.657123][ T5844] f81534 6-1:3.110: required endpoints missing [ 138.681967][ T5901] usb 9-1: USB disconnect, device number 3 [ 138.703164][ T5844] usb 6-1: USB disconnect, device number 15 [ 138.745395][ T7737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.770628][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'. [ 138.779443][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'. [ 138.822327][ T7738] netlink: 'syz.3.513': attribute type 10 has an invalid length. [ 138.854948][ T7738] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 138.877615][ T5758] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.310330][ T56] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 139.324298][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 139.324330][ T42] audit: type=1400 audit(1785784519.950:1026): avc: denied { write } for pid=7749 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.353311][ T7752] IPv6: sit1: Disabled Multicast RS [ 139.356561][ T7752] sit1: entered allmulticast mode [ 139.413135][ T42] audit: type=1400 audit(1785784520.040:1027): avc: denied { write } for pid=7754 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.480694][ T56] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 139.488398][ T56] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 139.501450][ T56] usb 9-1: config 0 interface 0 has no altsetting 0 [ 139.508366][ T56] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 139.512714][ T56] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 139.516290][ T56] usb 9-1: Product: syz [ 139.518149][ T56] usb 9-1: Manufacturer: syz [ 139.527049][ T56] usb 9-1: SerialNumber: syz [ 139.528100][ T7761] xt_connbytes: Forcing CT accounting to be enabled [ 139.534260][ T42] audit: type=1400 audit(1785784520.160:1028): avc: denied { write } for pid=7756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.544798][ T56] usb 9-1: config 0 descriptor?? [ 139.568357][ T56] hub 9-1:0.0: bad descriptor, ignoring hub [ 139.579935][ T56] hub 9-1:0.0: probe with driver hub failed with error -5 [ 139.594531][ T56] usb 9-1: selecting invalid altsetting 0 [ 139.627616][ T42] audit: type=1400 audit(1785784520.249:1029): avc: denied { write } for pid=7764 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.654252][ T7767] netlink: 'syz.3.521': attribute type 21 has an invalid length. [ 139.684475][ T5844] IPVS: starting estimator thread 0... [ 139.790503][ T7768] IPVS: using max 28 ests per chain, 67200 per kthread [ 139.828438][ T7776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.522'. [ 139.867006][ T7778] netlink: 'syz.1.520': attribute type 10 has an invalid length. [ 139.938019][ T7782] xt_hashlimit: size too large, truncated to 1048576 [ 140.055294][ T42] audit: type=1400 audit(1785784520.678:1030): avc: denied { append } for pid=7789 comm="syz.3.526" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 140.078637][ T42] audit: type=1400 audit(1785784520.678:1031): avc: denied { map } for pid=7789 comm="syz.3.526" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 140.106462][ T42] audit: type=1400 audit(1785784520.678:1032): avc: denied { execute } for pid=7789 comm="syz.3.526" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 140.151375][ T41] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 140.306230][ T41] usb 6-1: not running at top speed; connect to a high speed hub [ 140.311107][ T41] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 140.319703][ T41] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 140.323323][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.326424][ T41] usb 6-1: Product: syz [ 140.328122][ T41] usb 6-1: Manufacturer: syz [ 140.329745][ T41] usb 6-1: SerialNumber: syz [ 140.337484][ T41] oti6858 6-1:1.0: oti6858 converter detected [ 140.354431][ T41] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 140.579537][ T42] audit: type=1400 audit(1785784521.207:1033): avc: denied { getopt } for pid=7797 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.855811][ T42] audit: type=1400 audit(1785784521.486:1034): avc: denied { append } for pid=7812 comm="syz.0.530" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 140.865809][ T7813] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 140.952413][ T7813] geneve1: entered allmulticast mode [ 140.965527][ T7813] netlink: 'syz.0.530': attribute type 11 has an invalid length. [ 141.211111][ T7827] overlay: filesystem on ./file0 not supported as upperdir [ 141.681781][ T42] audit: type=1400 audit(1785784522.304:1035): avc: denied { write } for pid=7842 comm="syz.3.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 141.951403][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.540'. [ 142.712262][ T7877] netlink: 'syz.0.544': attribute type 1 has an invalid length. [ 142.715648][ T7877] netlink: 232 bytes leftover after parsing attributes in process `syz.0.544'. [ 142.719586][ T7877] netlink: 'syz.0.544': attribute type 1 has an invalid length. [ 142.740736][ T5758] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 142.927800][ T41] usb 6-1: USB disconnect, device number 16 [ 142.953240][ T41] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 142.962653][ T41] oti6858 6-1:1.0: device disconnected [ 143.141056][ T56] usb 9-1: USB disconnect, device number 4 [ 143.339508][ T7885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.380630][ T5844] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 143.384375][ T5844] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 143.403255][ T61] wlan1: authenticated [ 143.404501][ T7889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.412281][ T61] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 143.412764][ T7885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.415011][ T61] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 143.424256][ T61] wlan1: associated [ 143.543335][ T7897] netlink: 'syz.0.553': attribute type 10 has an invalid length. [ 143.559962][ T7897] netlink: 40 bytes leftover after parsing attributes in process `syz.0.553'. [ 143.564466][ T7897] batadv0: entered promiscuous mode [ 143.566826][ T7897] batadv0: entered allmulticast mode [ 143.572313][ T7897] bridge0: port 3(batadv0) entered blocking state [ 143.580162][ T7897] bridge0: port 3(batadv0) entered disabled state [ 143.588086][ T7897] bridge0: port 3(batadv0) entered blocking state [ 143.591063][ T7897] bridge0: port 3(batadv0) entered forwarding state [ 143.927172][ T7928] program syz.1.559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.011595][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 144.017725][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 144.029004][ T7937] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7937 comm=syz.3.563 [ 144.195382][ T7952] netlink: 36 bytes leftover after parsing attributes in process `syz.3.569'. [ 144.204706][ T7952] openvswitch: netlink: Flow key attr not present in new flow. [ 144.208034][ T7952] netlink: 36 bytes leftover after parsing attributes in process `syz.3.569'. [ 144.211624][ T7952] openvswitch: netlink: Flow key attr not present in new flow. [ 144.299983][ T7960] vlan2: entered promiscuous mode [ 144.302762][ T7960] vlan2: entered allmulticast mode [ 144.304946][ T7960] bridge0: entered allmulticast mode [ 144.395386][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 144.395403][ T42] audit: type=1400 audit(1785784525.017:1046): avc: denied { watch_with_perm } for pid=7965 comm="syz.4.573" path="/41/bus" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.416192][ T7970] netlink: 'syz.0.574': attribute type 15 has an invalid length. [ 144.424195][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.574'. [ 144.442882][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 144.447043][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 144.450919][ T7970] netlink: 'syz.0.574': attribute type 15 has an invalid length. [ 144.452477][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 144.455432][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.574'. [ 144.461988][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 144.498711][ T42] audit: type=1400 audit(1785784525.117:1047): avc: denied { setattr } for pid=7977 comm="syz.4.577" path="/dev/video36" dev="devtmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 144.571598][ T42] audit: type=1400 audit(1785784525.187:1048): avc: denied { listen } for pid=7977 comm="syz.4.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.596814][ T42] audit: type=1400 audit(1785784525.217:1049): avc: denied { listen } for pid=7986 comm="syz.3.579" laddr=100.1.1.1 lport=9999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.756082][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 144.765198][ T42] audit: type=1400 audit(1785784525.377:1050): avc: denied { write } for pid=7997 comm="syz.3.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 144.847166][ T7998] netlink: 48 bytes leftover after parsing attributes in process `syz.3.583'. [ 144.851177][ T8008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8008 comm=syz.1.584 [ 145.171764][ T42] audit: type=1400 audit(1785784525.786:1051): avc: denied { connect } for pid=8026 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.266081][ T5828] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 145.425574][ T5828] usb 8-1: Using ep0 maxpacket: 16 [ 145.435215][ T5828] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.439286][ T5828] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.442775][ T5828] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 145.447955][ T5828] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 145.451634][ T5828] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.461408][ T5828] usb 8-1: config 0 descriptor?? [ 145.468969][ T8035] gfs2: error -5 reading superblock [ 145.507816][ T8035] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 145.538869][ T8035] /dev/nullb0: Can't open blockdev [ 145.556766][ T8034] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 145.571184][ T42] audit: type=1400 audit(1785784526.185:1052): avc: denied { connect } for pid=8036 comm="syz.1.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 145.582302][ T42] audit: type=1400 audit(1785784526.185:1053): avc: denied { ioctl } for pid=8036 comm="syz.1.593" path="socket:[25712]" dev="sockfs" ino=25712 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 145.594691][ T42] audit: type=1400 audit(1785784526.195:1054): avc: denied { nlmsg_tty_audit } for pid=8036 comm="syz.1.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 145.660122][ T42] audit: type=1400 audit(1785784526.275:1055): avc: denied { create } for pid=8038 comm="syz.1.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 145.675461][ T8040] /dev/nullb0: Can't open blockdev [ 145.886054][ T5828] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 145.888418][ T5828] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 145.890882][ T5828] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 145.893254][ T5828] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 145.895714][ T5828] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 145.900439][ T5828] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 145.972122][ T5828] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 145.981366][ T5828] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 146.079047][ T8024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.084429][ T8024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.099063][ T8024] netlink: 504 bytes leftover after parsing attributes in process `syz.3.589'. [ 146.114402][ T5909] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 146.114783][ T5844] usb 8-1: USB disconnect, device number 8 [ 146.119642][ T5909] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 146.135325][ T5909] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 146.141622][ T5909] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 146.434652][ T8086] binder: BINDER_SET_CONTEXT_MGR already set [ 146.439609][ T8086] binder: 8084:8086 ioctl 4018620d 200000003280 returned -16 [ 146.442407][ T8085] binder: 8084:8085 ioctl c0306201 200000000080 returned -14 [ 146.449526][ T8085] binder_alloc: binder_alloc_mmap_handler: 8084 200000ffd000-200001000000 already mapped failed -16 [ 146.450019][ T8088] x_tables: duplicate underflow at hook 3 [ 146.464854][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'. [ 146.499983][ T8085] team0: Port device team_slave_0 removed [ 146.623078][ T8093] tmpfs: Bad value for 'mpol' [ 147.014919][ T8123] syz.4.614 (8123) used greatest stack depth: 19400 bytes left [ 147.189816][ T8131] Illegal XDP return value 4025874317 on prog (id 52) dev N/A, expect packet loss! [ 147.210247][ T5909] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 147.353211][ T8152] loop5: detected capacity change from 0 to 2640 [ 147.360461][ T8152] Buffer I/O error on dev loop5, logical block 0, async page read [ 147.361661][ T5909] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.364204][ T8152] Buffer I/O error on dev loop5, logical block 0, async page read [ 147.372054][ T8152] Buffer I/O error on dev loop5, logical block 0, async page read [ 147.378247][ T5909] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.378592][ T8152] Buffer I/O error on dev loop5, logical block 0, async page read [ 147.384239][ T5909] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 147.384877][ T8152] Buffer I/O error on dev loop5, logical block 0, async page read [ 147.391652][ T8152] Buffer I/O error on dev loop5, logical block 0, async page read [ 147.393430][ T5909] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.394223][ T8152] Buffer I/O error on dev loop5, logical block 0, async page read [ 147.401014][ T8152] Buffer I/O error on dev loop5, logical block 0, async page read [ 147.403530][ T8152] ldm_validate_partition_table(): Disk read failed. [ 147.404025][ T5909] usb 8-1: config 0 descriptor?? [ 147.406604][ T8152] Buffer I/O error on dev loop5, logical block 0, async page read [ 147.412065][ T8154] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 147.414890][ T8152] Dev loop5: unable to read RDB block 8 [ 147.417078][ T8152] loop5: unable to read partition table [ 147.422416][ T8152] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 147.773457][ T8191] program syz.4.631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.827149][ T8120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.836700][ T8120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.841694][ T8120] netlink: 'syz.3.613': attribute type 1 has an invalid length. [ 147.871338][ T8120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.876839][ T8198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.900070][ T8120] vlan3: entered allmulticast mode [ 147.902429][ T8120] macsec0: entered allmulticast mode [ 147.904621][ T8120] veth1_macvtap: entered allmulticast mode [ 147.907757][ T8120] bond1: (slave vlan3): Error -34 calling dev_set_mtu [ 147.933240][ T8198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.956307][ T8198] bridge0: port 3(syz_tun) entered disabled state [ 147.959280][ T8198] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.000576][ T5909] usbhid 8-1:0.0: can't add hid device: -71 [ 148.003044][ T5909] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 148.012237][ T5758] Bluetooth: hci4: link tx timeout [ 148.015273][ T5909] usb 8-1: USB disconnect, device number 9 [ 148.016792][ T5758] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.271324][ T5758] Bluetooth: hci4: link tx timeout [ 148.274632][ T5758] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.278224][ T8213] netlink: 'syz.0.636': attribute type 9 has an invalid length. [ 148.282635][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'. [ 148.509530][ T5909] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 148.681444][ T5909] usb 6-1: Using ep0 maxpacket: 8 [ 148.695130][ T5909] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 148.698978][ T5909] usb 6-1: config 179 has no interface number 0 [ 148.704070][ T5909] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 148.708770][ T5909] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 148.714299][ T149] e1000 0000:00:06.0 eth0: Reset adapter [ 148.723483][ T5909] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 148.733261][ T5909] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 148.738124][ T5909] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 148.744914][ T5909] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 148.748796][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.755420][ T8211] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 148.809992][ T55] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 148.965895][ T8236] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 148.972255][ T55] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 148.976231][ T55] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 148.980792][ T55] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 148.984643][ T55] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 148.993413][ T55] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 149.001572][ T55] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 149.004521][ T55] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 149.007136][ T55] usb 8-1: Product: syz [ 149.008489][ T55] usb 8-1: Manufacturer: syz [ 149.039203][ T55] cdc_wdm 8-1:1.0: skipping garbage [ 149.043487][ T55] cdc_wdm 8-1:1.0: skipping garbage [ 149.047264][ T55] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 149.057141][ T55] cdc_wdm 8-1:1.0: Unknown control protocol [ 149.106541][ T5758] Bluetooth: hci4: link tx timeout [ 149.108820][ T5758] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 149.115345][ T8241] netlink: 'syz.0.643': attribute type 4 has an invalid length. [ 149.115599][ T149] e1000 0000:00:06.0 eth0: Reset adapter [ 149.128848][ T5828] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input10 [ 149.136470][ T8241] netlink: 'syz.0.643': attribute type 4 has an invalid length. [ 149.357458][ T849] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 149.359211][ T55] usb 6-1: USB disconnect, device number 17 [ 149.359296][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 149.359329][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 149.365704][ T8261] ieee802154 phy1 wpan1: encryption failed: -22 [ 149.392845][ T8261] loop5: detected capacity change from 0 to 7 [ 149.412789][ T8261] Dev loop5: unable to read RDB block 7 [ 149.421061][ T8261] loop5: unable to read partition table [ 149.423638][ T8261] loop5: partition table beyond EOD, truncated [ 149.426255][ T8261] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 149.455875][ T5758] Bluetooth: hci4: link tx timeout [ 149.458117][ T5758] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 149.471618][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 149.471636][ T42] audit: type=1400 audit(1785784530.078:1092): avc: denied { write } for pid=8264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.553531][ T42] audit: type=1400 audit(1785784530.158:1093): avc: denied { write } for pid=8273 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.655948][ T55] usb 8-1: USB disconnect, device number 10 [ 149.661465][ T5758] Bluetooth: hci4: link tx timeout [ 149.663638][ T5758] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 149.676357][ T42] audit: type=1400 audit(1785784530.278:1094): avc: denied { write } for pid=8277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.746435][ T42] audit: type=1400 audit(1785784530.348:1095): avc: denied { write } for pid=8280 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.830550][ T42] audit: type=1400 audit(1785784530.427:1096): avc: denied { write } for pid=8282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.887403][ T42] audit: type=1400 audit(1785784530.497:1097): avc: denied { write } for pid=8285 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.956047][ T42] audit: type=1400 audit(1785784530.567:1098): avc: denied { write } for pid=8287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.021188][ T42] audit: type=1400 audit(1785784530.627:1099): avc: denied { write } for pid=8290 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.022372][ T5758] Bluetooth: hci4: command 0x041b tx timeout [ 151.305023][ T5828] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 158.112540][ T42] audit: type=1400 audit(1785784538.708:1100): avc: denied { write } for pid=8301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.179309][ T42] audit: type=1400 audit(1785784538.768:1101): avc: denied { write } for pid=8304 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.723787][ T8310] syzkaller0: entered promiscuous mode [ 158.726850][ T8310] syzkaller0: entered allmulticast mode [ 158.733782][ T8310] tipc: Started in network mode [ 158.736015][ T8310] tipc: Node identity 02f427fe3a0a, cluster identity 4711 [ 158.746795][ T8310] tipc: Enabled bearer , priority 0 [ 158.804144][ T8307] tipc: Resetting bearer [ 158.842746][ T8307] tipc: Disabling bearer [ 158.902993][ T8338] netlink: 14 bytes leftover after parsing attributes in process `syz.3.655'. [ 159.003420][ T8346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=557 sclass=netlink_route_socket pid=8346 comm=syz.3.657 [ 159.016822][ T8348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=8348 comm=syz.4.659 [ 159.025699][ T42] audit: type=1400 audit(1785784539.627:1102): avc: denied { map } for pid=8347 comm="syz.4.659" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 159.053076][ T42] audit: type=1400 audit(1785784539.627:1103): avc: denied { execute } for pid=8347 comm="syz.4.659" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 159.123352][ T5747] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 159.299354][ T42] audit: type=1400 audit(1785784539.897:1104): avc: denied { write } for pid=8359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.315769][ T149] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 159.364306][ T42] audit: type=1400 audit(1785784539.967:1105): avc: denied { write } for pid=8362 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.464597][ T149] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 159.468359][ T149] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.473770][ T149] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.478237][ T149] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.488123][ T149] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.492065][ T149] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.506849][ T149] usb 6-1: config 0 descriptor?? [ 159.669678][ T42] audit: type=1400 audit(1785784540.266:1106): avc: denied { link } for pid=8369 comm="syz.0.663" name="#26" dev="tmpfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 159.679513][ T42] audit: type=1400 audit(1785784540.266:1107): avc: denied { rename } for pid=8369 comm="syz.0.663" name="#27" dev="tmpfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 159.918946][ T42] audit: type=1400 audit(1785784540.516:1108): avc: denied { ioctl } for pid=8379 comm="syz.4.667" path="socket:[25079]" dev="sockfs" ino=25079 ioctlcmd=0x582d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.964591][ T149] usbhid 6-1:0.0: can't add hid device: -71 [ 159.968733][ T149] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 159.972201][ T42] audit: type=1400 audit(1785784540.516:1109): avc: denied { write } for pid=8379 comm="syz.4.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.988308][ T149] usb 6-1: USB disconnect, device number 18 [ 160.198408][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 160.290426][ T8409] 9pnet_virtio: no channels available for device syz [ 160.340835][ T8412] netlink: 666 bytes leftover after parsing attributes in process `syz.3.675'. [ 160.863714][ T5909] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 161.013701][ T5909] usb 6-1: Using ep0 maxpacket: 8 [ 161.018091][ T5909] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 161.021598][ T5909] usb 6-1: config 0 has no interface number 0 [ 161.024944][ T5909] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.029848][ T5909] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 161.036525][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.067217][ T5909] usb 6-1: config 0 descriptor?? [ 161.082338][ T5909] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 161.276073][ T4558] usb 6-1: USB disconnect, device number 19 [ 161.678344][ T8448] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 161.714173][ T4558] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 161.715351][ T8448] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0xf [ 161.724467][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 161.728601][ T8448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.685'. [ 161.866299][ T4558] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 161.869731][ T4558] usb 6-1: config 0 has no interface number 0 [ 161.872424][ T4558] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 161.877411][ T4558] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 161.881245][ T4558] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.888185][ T4558] usb 6-1: config 0 descriptor?? [ 161.895036][ T4558] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 161.943607][ T8457] openvswitch: netlink: Actions may not be safe on all matching packets [ 161.967501][ T8454] hfs: unable to load iocharset "io#harset" [ 162.023453][ T8459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8459 comm=syz.0.687 [ 162.051110][ T8459] input: syz0 as /devices/virtual/input/input11 [ 162.449746][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'. [ 162.452861][ T8463] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 162.653167][ T4558] usb 6-1: USB disconnect, device number 20 [ 163.158536][ T5747] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 163.163548][ T5747] Bluetooth: hci1: Injecting HCI hardware error event [ 163.169213][ T5747] Bluetooth: hci1: hardware error 0x00 [ 163.272514][ T8484] sit1: entered promiscuous mode [ 163.289836][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 163.289858][ T42] audit: type=1400 audit(1785784543.884:1127): avc: denied { create } for pid=8485 comm="syz.0.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 163.445712][ T42] audit: type=1400 audit(1785784544.034:1128): avc: denied { setopt } for pid=8482 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 163.488301][ T8503] netlink: 'syz.0.701': attribute type 2 has an invalid length. [ 163.499265][ T8503] block nbd0: NBD_DISCONNECT [ 163.508277][ T6832] block nbd0: Wrong magic (0x25609513) [ 163.524390][ T6830] block nbd0: Disconnected due to user request. [ 163.527712][ T8503] block nbd0: Send disconnect failed -32 [ 163.532530][ T8503] block nbd0: Send disconnect failed -32 [ 163.557158][ T48] ------------[ cut here ]------------ [ 163.559363][ T48] !sta [ 163.559376][ T48] WARNING: net/mac80211/mlme.c:4898 at ieee80211_mgd_probe_ap_send+0x3dd/0x4b0, CPU#1: kworker/u33:2/48 [ 163.565080][ T48] Modules linked in: [ 163.568120][ T48] CPU: 1 UID: 0 PID: 48 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 163.572466][ T48] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.576512][ T48] Workqueue: events_unbound cfg80211_wiphy_work [ 163.578994][ T48] RIP: 0010:ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 163.581616][ T48] Code: 00 31 ff 41 89 c5 89 c6 e8 d0 98 bf f6 45 85 ed 0f 85 ad fc ff ff e8 52 9e bf f6 90 0f 0b 90 e9 9f fc ff ff e8 44 9e bf f6 90 <0f> 0b 90 e9 ef fc ff ff 48 c7 c7 a4 ab 22 91 e8 bf 26 30 f7 e9 5f [ 163.589213][ T48] RSP: 0018:ffffc90000a1fb60 EFLAGS: 00010293 [ 163.591691][ T48] RAX: 0000000000000000 RBX: ffff888038fe8ec0 RCX: ffffc90000a1fafc [ 163.595033][ T48] RDX: ffff88801cb0a540 RSI: ffffffff8b4ac1fc RDI: ffff88801cb0aa04 [ 163.599023][ T48] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 163.602129][ T48] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888038fe9920 [ 163.604727][ T48] R13: ffff888038feacc2 R14: 0000000000000001 R15: 0000000000000000 [ 163.607449][ T48] FS: 0000000000000000(0000) GS:ffff8880d5edc000(0000) knlGS:0000000000000000 [ 163.610882][ T48] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.613731][ T48] CR2: 000000110c35035b CR3: 000000002eb4b000 CR4: 0000000000352ef0 [ 163.616673][ T48] Call Trace: [ 163.617825][ T48] [ 163.618769][ T48] ieee80211_mgd_probe_ap+0x35e/0x420 [ 163.619841][ T8505] netlink: 60 bytes leftover after parsing attributes in process `syz.0.704'. [ 163.620636][ T48] ieee80211_beacon_connection_loss_work+0xdb/0x110 [ 163.620663][ T48] cfg80211_wiphy_work+0x2b7/0x550 [ 163.624790][ T8505] unsupported nlmsg_type 40 [ 163.627482][ T48] process_one_work+0xa23/0x1940 [ 163.633639][ T48] ? __pfx_process_one_work+0x10/0x10 [ 163.636465][ T48] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 163.638666][ T48] worker_thread+0x5ef/0xe50 [ 163.640720][ T48] ? kthread+0x13a/0x450 [ 163.642422][ T48] ? __pfx_worker_thread+0x10/0x10 [ 163.644289][ T48] kthread+0x370/0x450 [ 163.645983][ T48] ? __pfx_kthread+0x10/0x10 [ 163.647376][ T48] ret_from_fork+0x72b/0xd50 [ 163.649126][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 163.651102][ T48] ? __switch_to+0x800/0x10f0 [ 163.652936][ T48] ? __pfx_kthread+0x10/0x10 [ 163.654594][ T48] ret_from_fork_asm+0x1a/0x30 [ 163.657356][ T48] [ 163.658625][ T48] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 163.661332][ T48] CPU: 1 UID: 0 PID: 48 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 163.664926][ T48] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.668406][ T48] Workqueue: events_unbound cfg80211_wiphy_work [ 163.670879][ T48] Call Trace: [ 163.672184][ T48] [ 163.673205][ T48] dump_stack_lvl+0x100/0x190 [ 163.674883][ T48] vpanic+0x552/0x970 [ 163.676706][ T48] ? __pfx_vpanic+0x10/0x10 [ 163.678658][ T48] panic+0xd1/0xe0 [ 163.680067][ T48] ? __pfx_panic+0x10/0x10 [ 163.681532][ T48] ? check_panic_on_warn+0x1f/0x90 [ 163.683442][ T48] check_panic_on_warn.cold+0x19/0x34 [ 163.685439][ T48] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 163.687514][ T48] __warn.cold+0x191/0x318 [ 163.688953][ T48] __report_bug+0x30f/0x440 [ 163.690764][ T48] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 163.693058][ T48] ? __pfx___report_bug+0x10/0x10 [ 163.695044][ T48] ? do_raw_spin_lock+0x128/0x260 [ 163.696742][ T48] ? find_held_lock+0x2b/0x80 [ 163.698464][ T48] ? __lock_acquire+0x49f/0x1a40 [ 163.700510][ T48] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 163.702824][ T48] report_bug+0xb2/0x220 [ 163.704174][ T48] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 163.706281][ T48] handle_bug+0x16a/0x2a0 [ 163.707810][ T48] exc_invalid_op+0x17/0x50 [ 163.709363][ T48] asm_exc_invalid_op+0x1a/0x20 [ 163.711108][ T48] RIP: 0010:ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 163.713443][ T48] Code: 00 31 ff 41 89 c5 89 c6 e8 d0 98 bf f6 45 85 ed 0f 85 ad fc ff ff e8 52 9e bf f6 90 0f 0b 90 e9 9f fc ff ff e8 44 9e bf f6 90 <0f> 0b 90 e9 ef fc ff ff 48 c7 c7 a4 ab 22 91 e8 bf 26 30 f7 e9 5f [ 163.720123][ T48] RSP: 0018:ffffc90000a1fb60 EFLAGS: 00010293 [ 163.722125][ T48] RAX: 0000000000000000 RBX: ffff888038fe8ec0 RCX: ffffc90000a1fafc [ 163.724771][ T48] RDX: ffff88801cb0a540 RSI: ffffffff8b4ac1fc RDI: ffff88801cb0aa04 [ 163.727820][ T48] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 163.730907][ T48] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888038fe9920 [ 163.733387][ T48] R13: ffff888038feacc2 R14: 0000000000000001 R15: 0000000000000000 [ 163.736048][ T48] ? ieee80211_mgd_probe_ap_send+0x3dc/0x4b0 [ 163.738177][ T48] ieee80211_mgd_probe_ap+0x35e/0x420 [ 163.740165][ T48] ieee80211_beacon_connection_loss_work+0xdb/0x110 [ 163.742425][ T48] cfg80211_wiphy_work+0x2b7/0x550 [ 163.744103][ T48] process_one_work+0xa23/0x1940 [ 163.745748][ T48] ? __pfx_process_one_work+0x10/0x10 [ 163.747451][ T48] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 163.749448][ T48] worker_thread+0x5ef/0xe50 [ 163.751041][ T48] ? kthread+0x13a/0x450 [ 163.752361][ T48] ? __pfx_worker_thread+0x10/0x10 [ 163.753976][ T48] kthread+0x370/0x450 [ 163.755345][ T48] ? __pfx_kthread+0x10/0x10 [ 163.756931][ T48] ret_from_fork+0x72b/0xd50 [ 163.758432][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 163.760359][ T48] ? __switch_to+0x800/0x10f0 [ 163.762394][ T48] ? __pfx_kthread+0x10/0x10 [ 163.764333][ T48] ret_from_fork_asm+0x1a/0x30 [ 163.766354][ T48] [ 163.768350][ T48] Kernel Offset: disabled [ 163.770124][ T48] Rebooting in 86400 seconds..