last executing test programs: 23.769376436s ago: executing program 0 (id=1036): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @raw_data="f210040fbc756187424138312bfac52370e3a80ce2d83cc3ab02a19ef300f39be6c49a56f6f1ab3326f93529c8638b6ca31251be3f023f281a3e60a98f4c6759800b8a4ee0d221fa1cc9d257fe8618afcaa64266e427705c1e60839bb4815a626ee41a04d3e7c4f5f0feb90ccb46897cec802a7807f971001d3c96939f554511221521bdaa90f4312622c36eb488a97ddb69f9718de293b79558e3b4c7ad8e9e0bb64f53c4ff85f1b0c84748007f3b54ff2b1dc14cbff1c832236c5f82dc31c725251361171e0159"}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x68, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4008800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000060000000410000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYRES8=r2, @ANYRES8=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095", @ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x17) 23.768682855s ago: executing program 0 (id=1038): syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f00000000c0)=0xb) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x36, 0x1, 0x0, r2}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@rr={0x7, 0x3, 0x1d}]}}, {0x4e26, 0x4e20, 0x4d, 0x0, @opaque="4cb32c17d9b24e7d2a25ab043110260ac0676ea92412bcd66247c2da783677ae6c8728e7f0ff42c4a414f9063664d204e4084e7aff0b2cd2b3d6269485315bba8415e606e8"}}}, 0x73) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x8, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0xb, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x1, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x808, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x4, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r6, 0x4068aea3, &(0x7f00000000c0)={0xed, 0x0, 0x10001}) syz_open_dev$sndmidi(&(0x7f0000000080), 0xffffffffffffffff, 0x204001) 23.55452331s ago: executing program 0 (id=1044): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x800) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x8}}], 0x30}, 0x0) 23.471401969s ago: executing program 0 (id=1046): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0xbc, 0x30, 0x1, 0x0, 0x21dfdbfb, {}, [{0xa8, 0x1, [@m_mpls={0xa4, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6a03}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_LABEL={0x8, 0x5, 0x46f83}]}, {0x5f, 0x4, "72979958d319283ffeb970bff29ce78635c564d5fe1e296a3887932a5552e006d5590b7a1d0ac35489c333c4e3c00f6a8d3c8d9799ea4984cb7da13dbcc2a40b7ad296ef089a93c931f1a682defa358fdb6cb52230b773cb03d4fc"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xbc}}, 0x40000) 23.469543298s ago: executing program 0 (id=1048): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='&C'], 0x1c}, 0x1, 0x0, 0x0, 0x45a3c1901f775339}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0xcf50, 0x2924, 0xffff, 0x9dff, 0x14, "8000000010002000"}) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffd, 0xfffffff9, 0xf, 0xf, "000000600000002b2400a14a5ea24f999600"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/156, 0x9c) ioctl$DVB_DEMUX_DMX_QUERYBUF(r3, 0xc0186f3d, &(0x7f00000006c0)={0x80000004, 0x7, 0x4, 0x7, 0x11, 0x4}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x800}}, &(0x7f0000000000)='GPL\x00', 0xfc0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1000005be26f0c097216ccd40004000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f0000000700)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept4(r8, &(0x7f0000000080), &(0x7f0000000100)=0x80, 0x800) 22.789145389s ago: executing program 0 (id=1054): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x1, 0xff14) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x1ec) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x80, 0x3, "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", 0xff, 0x7, 0x5, 0x41, 0x7, 0x1, 0x2, 0x1}, r4}}, 0x120) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0585605, &(0x7f0000000380)={0x0, 0x0, @stop_pts=0x4}) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x926}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42, 0x5c}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vxfs\x00', 0x208000, 0x0) 14.538802891s ago: executing program 3 (id=1149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2003}, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x20, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000054) 14.442715259s ago: executing program 3 (id=1151): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f00000025c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, 0xb7, 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, &(0x7f00000000c0)={0x20, r2, 0x1, 0x0, &(0x7f0000000040)=[{}]}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 14.442381239s ago: executing program 3 (id=1152): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x1c}}, 0x0) 13.472570522s ago: executing program 3 (id=1164): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000580)=@raw=[@alu={0xa, 0x0, 0x2, 0xa, 0x8, 0xfffffffffffffffc, 0x8}, @btf_id={0x18, 0xd, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000140)='GPL\x00', 0x2, 0xd7, &(0x7f0000000180)=""/215, 0x40f00, 0x0, '\x00', r1, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xd, 0x3}, 0x10, 0x28356, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x12, 0x2, 0x9, 0x2}], 0x10, 0x8}, 0x94) openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x4000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x74, r4, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x84000}, 0x80) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000096000a000200aaaaaaaaaa0c000006000500"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newroute={0x4c, 0x18, 0x200, 0x70bd27, 0x25dfdbfe, {0xa, 0x20, 0x0, 0x0, 0xfc, 0x1, 0x16f, 0x1, 0xc00}, [@RTA_IIF={0x8, 0x3, r3}, @RTA_OIF={0x8, 0x4, r1}, @RTA_IIF={0x8, 0x3, r1}, @RTA_IIF={0x8, 0x3, r1}, @RTA_OIF={0x8, 0x4, r1}, @RTA_IIF={0x8, 0x3, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x4040040) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xdd8}]}}}]}, 0x3c}}, 0x0) 13.397249386s ago: executing program 3 (id=1166): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x164, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x118, 0x8, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xfffffff7, @local, 0xada7}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0xfffffffffffffeae, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x58, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x164}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x4a0080) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x884) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000080)={0x0, 0x5}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000280)={r9, r9, 0x3, 0x8, &(0x7f0000000100)="81839c93f294064c", 0x9, 0xb, 0x6, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="04010000160001040000000000000000ac1414aa000000000000000000000000ff01000000000000000000000000000100000fd100040002020000000c000000", @ANYRES32, @ANYRES64=r10, @ANYBLOB="fc02000000000000000000000000000000000000330000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000080010000800000000000000000f3000000000000000000000000010100000000000000000000000000000000000000000000000800000000000004000000060000000004000000000000000000000a0000009400000000000000f5"], 0x104}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) 12.471224299s ago: executing program 3 (id=1180): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x101002, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='iso9660\x00', 0x204001, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cc, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='i\xacl*c\x822') syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) socket(0x15, 0x5, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000300)='./cgroup\x00', 0x0, 0x10}, 0x18) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x80000000) 6.33769978s ago: executing program 32 (id=1054): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x1, 0xff14) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x1ec) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x80, 0x3, "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", 0xff, 0x7, 0x5, 0x41, 0x7, 0x1, 0x2, 0x1}, r4}}, 0x120) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0585605, &(0x7f0000000380)={0x0, 0x0, @stop_pts=0x4}) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x926}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42, 0x5c}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vxfs\x00', 0x208000, 0x0) 1.513869846s ago: executing program 1 (id=1304): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) read(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x700, 0x700, 0xd, 0x10001, {{0xe, 0x4, 0x0, 0x37, 0x38, 0x64, 0x0, 0x3c, 0x2f, 0x0, @multicast1, @empty, {[@generic={0x44, 0xa, "0ee0475912ef20ee"}, @lsrr={0x83, 0x17, 0x0, [@multicast1, @dev={0xac, 0x14, 0x14, 0x26}, @multicast1, @broadcast, @broadcast]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x240, 0x12, 0x400, 0x70bd27, 0x25dfdbfb, {0x48, 0x9, 0x98, 0x6, {0x4e23, 0x4e21, [0x7, 0x113, 0x101, 0x72], [0x80000001, 0x5, 0xfffffffc], r3, [0xc, 0xa342]}, 0xf851d327, 0x3ff}, [@INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "3ce053d5aaf7c3a7a043f662a49407e2d1601687dc3e72978f86996583a052f24c61a365a2d507b1dfbc387ae4bd63ff059aeea7398de0915eb5e74079205234f8daa7a02c1d1b1bd6d7ccaf5075f9628ecbc8e13dffa215a85db39b9fdea7f1e13e9f981defdbfe794bcfd21f7478bcde76ca4c240f042a3233c6b5ee89a8296523b6c5ef4ad4d7299c55a9e2a3c0f65bb9063653cf5c28b6882d09403b67c9c6e7fd73924e2ce2cb8bdfedb578b0e92509b404b02ae4bed0a301e325ce"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "bc34a84bb5097da6115d799d547ac333abb30469810e5a5fc2f922fa71400f5cba303a8ede45aa813404a4cf0cb996c78d4fda5bb1689cbb6e34e1da5aeaa241a90ff937b8b9404fc27b3e71"}, @INET_DIAG_REQ_BYTECODE={0x81, 0x1, "2765442ae367f9b225a9e3cf2f92a3ccd0a158def56358aac821dd99cb9836ebb78bbe163757a42651349a7da88cee589e5ea239a6b1841737fc4ee936811fcb05976736839c51748b24a1237556181284826cf21d4e5667d2008c960bf2d5113fd5f2085b384b00cd16bb5027f540615fc49ca742eed1f9c9bf4968f1"}, @INET_DIAG_REQ_BYTECODE={0x5c, 0x1, "149d7992372ecdd77b89f062a92acc40ea242dd0aeef0c0a6aa2044592a6ccb49707680acaca682bccb9534f2458776a55d8380d535dbcc5d14758e193936c27cc4e2e09f831e43cdb4f4486e7157933275b5019af0f8c88"}]}, 0x240}, 0x1, 0x0, 0x0, 0x20044054}, 0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.449681492s ago: executing program 1 (id=1306): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100809, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x180) chdir(&(0x7f0000000140)='./file0/file0\x00') setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) 1.438327088s ago: executing program 1 (id=1308): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000ffff2bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000004002238030008000a00", @ANYRES32=r1, @ANYBLOB="6f02000009000100626f6e64000000000c00028005000d0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1.364526389s ago: executing program 1 (id=1310): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="e00000001000010025bd7000ffdbdf25647262675f6e6f70725f6374725f6165733139320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c000000000000000200000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f105368900ba0a"], 0xe0}, 0x1, 0x0, 0x0, 0x60000801}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, r0, 0xa25f1000) r1 = syz_io_uring_setup(0x55e9, &(0x7f00000002c0)={0x0, 0x5fd, 0x20, 0x1, 0x1aa}, &(0x7f0000000180), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000001640)={0xd, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/190, 0xbe}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/172, 0xac}, {&(0x7f0000001580)=""/172, 0xac}], &(0x7f0000000380)=[0x8, 0x0, 0x800], 0x4}, 0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$P9_RRENAME(r2, &(0x7f0000001680)={0x7, 0x15, 0x1}, 0x7) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) (async) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f0000000040)={0x0, 0x0, 0x7, 0xc68, 0xab6d}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x0, 0x1) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x1) (async) r4 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0xc0305720, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000016c0)='./file1/file0\x00', &(0x7f0000000280)='./file2\x00', 0x0, 0x12881, 0x0) (async) mount$bind(&(0x7f00000016c0)='./file1/file0\x00', &(0x7f0000000280)='./file2\x00', 0x0, 0x12881, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file2\x00') mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1.277701215s ago: executing program 4 (id=1313): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x61}, 0x1c) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000380)=@framed={{}, [@alu={0x4, 0x0, 0x9, 0xa}]}, &(0x7f00000003c0)='syzkaller\x00'}, 0x90) pipe2$9p(&(0x7f0000000000), 0x84880) r4 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) mkdirat(r5, &(0x7f0000000000)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r6, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x280030, &(0x7f00000001c0)={[{@default_permissions}, {@redirect_dir_nofollow}, {@userxattr}, {@redirect_dir_on}, {@nfs_export_on}, {@verity_off}, {@default_permissions}, {@redirect_dir_on}, {@uuid_null}]}) 1.270159518s ago: executing program 1 (id=1315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="f00000001a0001000000000000000000fc010000000000000000000000000000ff01000000000000000000000000000100000000000000000000000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000037000000003c0000007f00000100000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00b18cc81b869b56cc0000000000000000000000000000000000000000000000000000000100000000000000020000000000000000000000e1f0b66aa3e15b644fc419f101420ac26fb9eec578b8e492e657da5fb5b8a18d01cad7881d1e7adeffa6e45d057f4e623caa30f2fb6d18dc6ead5b9873a4789a30640d444b7d320e18a8daf22ec2b9473be97a9370615d9a74ae3dee97c25fcc1620939fd35c0b4826a97464dc7da33355316c10ce036b6e"], 0xf0}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x48) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r2, &(0x7f00000002c0)=""/153, 0x99) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r4, &(0x7f00000013c0)=[{&(0x7f0000000100)='}', 0xffffffd5}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000c5e000/0x3000)=nil, &(0x7f0000dc6000/0x2000)=nil, 0x3000, 0x1}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000002, 0x0, 0x2}, {0x40000002}]}) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000000)={&(0x7f00003e3000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000, 0x2}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r9, 0x0, 0x0, 0x40002003, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd500000000200060000002c0057800400020004000600040204000400040004000000000000000000003308000000000000005d270c6ab0369ec9aa7274e4664cc1162c64844d3582acb7a279d9"], 0x4c}}, 0x0) 1.183628678s ago: executing program 2 (id=1316): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100809, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, 0x0, &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x180) chdir(&(0x7f0000000140)='./file0/file0\x00') setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) 1.183293094s ago: executing program 4 (id=1317): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000020000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 1.119570036s ago: executing program 2 (id=1318): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x6}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x5}]}}]}, 0x48}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000004001500090002000000035c3b61c1d67f6f94007134cfce1e090000001fb791643a5ee4ce1b14d6d930ede1d9d322fe7c9f8775730d165ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3f09ad809d5e1cace81ed0bffece0b42a9ecbee5dd6e4edef3d93452a92954b4337000000008af26c8b7b55f4d2cb1df0966736a1dfe444c65ac5b348eac7c2ea475327557ba566236ceb0000000000", 0xd8}], 0x1}, 0x4000) 1.119218305s ago: executing program 4 (id=1319): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000140)=""/12, &(0x7f0000000180)=0xc) (async) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000140)=""/12, &(0x7f0000000180)=0xc) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x14}) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'cpuset'}, {0x2b, 'net_cls'}, {0x2b, 'freezer'}, {0x2d, 'blkio'}, {0x2d, 'net'}]}, 0x26) (async) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'cpuset'}, {0x2b, 'net_cls'}, {0x2b, 'freezer'}, {0x2d, 'blkio'}, {0x2d, 'net'}]}, 0x26) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="6e725f696e6f64657345e404097ebaba7bcfad80d108163d652c40"]) 1.117349098s ago: executing program 2 (id=1320): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) request_key(&(0x7f0000005ac0)='pkcs7_test\x00', &(0x7f0000005b00)={'syz', 0x2}, &(0x7f0000005b40)='(\x94%)*^\x00', 0xffffffffffffffff) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000c00)={0xa4, 0x0, 0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c03, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000001c0)='./file0\x00', 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8402, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x1fe, 0x0, 0x9000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c12, 0x400, 0x3, 0x288}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 1.045263907s ago: executing program 4 (id=1321): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x20) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000200)={&(0x7f00000000c0)=0x292, 0x6, &(0x7f0000000100)=[{}], &(0x7f00000001c0)}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0407"], 0x137) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000300), 0xc4fffffe) mprotect(&(0x7f000076f000/0x4000)=nil, 0x4000, 0xc) chdir(&(0x7f0000000340)='./cgroup\x00') rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 1.044329649s ago: executing program 2 (id=1322): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[], 0x61c}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x33) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00000000000000000000000000000500", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}}) 938.586321ms ago: executing program 2 (id=1323): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = accept(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) connect$unix(r1, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000940)=0xfffffff4, 0x4) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000240)="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", 0xfa}, {&(0x7f0000000340)="1253218bf6", 0x5}, {&(0x7f0000000380)="def6d80e9cd1833f1ba81dbc1550468b0c8a667c38e7a38d3ecaab8c85c78524768e653729d6ae0da13aaa62d66e64968dbbb2dfa329b31fdbf1034d5ce410754e3bcb660077d6422c0a7e1eee3385810906d9f50fd82ebdfe1303114a7239ef3475c082d631937118400fce27e7620ff45607fb9036069861dde8741e841c12736ce394d31e9b6a9cc8d12f48dd5422bba503a512b999c42f5fb2303f4bb4952fbd1824e0ada2176982fe2b07c9c439728f2a6cdbe99666e92e93a8d4dd6dcb044cb47796046d10e41d", 0xca}, {&(0x7f0000000480)="a47efc009c43e99e87a059b1f576c5c127c9e88774c4cb86e6ea02e2c857c3248266b3f1d132cbca4177b031af3a68625ad492c2a496716a3b0b7a6ea63e1ca1478cdf34b4e03601c437f14f89cdd278cd696bccdcaa774a1de71b840da1280a5663fde07aad1744f556588514415f48edd2c1f34a16447dff906f20257bbc1fac96d586e710b74d1c0cf48826b5ea67c8b340044ee55767f7d0", 0x9a}, {&(0x7f0000000540)="e9d8a001bf9ff532def184ff6366732abb5e44a58796e6ebc64fde55bc9810e2ce0f82815701824462d9f061adfe4a1ffbd95608f61b41e0bdfa7c95780b3fd7267a50088f34bdae2195e8200b51a4bfdabc88e9c22b4ba6a91389ddf3a7202551f4781e98a8d899f03d1ec3d65f332268687a228226ac560363e961e269b1f47ac588fd74e2f619cfbf5a2252311d3ced0831cc46714e7c9e9cf41e296c9b355b845065876f0f2af7f9", 0xaa}, {&(0x7f0000000600)="f9bc9557528e69d3cc188d268c1bef7f3bce9a40fb35061db0322ff41c37a68ba829334b173337a17bcc1fbc4aa07e480a9db57088495afd32674b0592a91905a2c242b0721f867775cc5ff6ad88d15b279da5e3cb3bae54c0ca6bca1e3f0b850fdad2376e9f2626352e5b6908c7330c04a01e8c92cda83b145298cb6a799275988914302bf393f7a53c4daa6351c7a3d908c83ee90ddb8aff211ad6cdd3aa53761f42e970ec8af8c4a97e30", 0xac}, {&(0x7f00000006c0)="922391b48e01a3eaf9b68252a13a4990755584089a707895310b14bc2dc45cb92e72270551b046ce443dccaffc151d832511c86424ba103c93a39f0f3eb06dfd39bbb41b67f5d2f506b90179e879858b85129b2fde3061be308cbbc3a18dfeed4b9117cab8f2f70d66d4685b77c414bb49313044600223ffefa425", 0x7b}], 0x7) shutdown(r0, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0xe, &(0x7f0000000880)=ANY=[@ANYRESDEC=r5], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0xfffffffd}, 0x8, 0x10, &(0x7f00000000c0)={0x4, 0x0, 0x19}, 0x10, 0x0, r0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001480)={0xffffffffffffffff, 0x20, &(0x7f0000001440)={&(0x7f0000001380)=""/45, 0x2d, 0x0, &(0x7f00000013c0)=""/104, 0x68}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x1b, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000", @ANYRES32=0x1, @ANYBLOB="000000000700000018560c00f0ffffff180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x99, &(0x7f00000012c0)=""/153, 0x41100, 0x4, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0xf, 0x7fffffff, 0x800}, 0x10, r8, r7, 0x0, 0x0, 0x0, 0x10, 0xbbf3}, 0x94) fcntl$dupfd(r0, 0x0, r1) 853.264936ms ago: executing program 4 (id=1324): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, r1, 0x301, 0x70bd30, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x3000000}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9a7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x200, 0x1, 0xffffffffffffffff, 0xeeb, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x10) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) statx(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x1000, 0x4, &(0x7f0000000980)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='pstore\x00', 0xa18045, 0x0) 852.773152ms ago: executing program 1 (id=1325): r0 = io_uring_setup(0x669, &(0x7f00000002c0)) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x51, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x1, 0x0, 0x8, 'n'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000040)={0x2, 0x2, 0x8, 0xfffffff7, 0xf, 0x5}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) setresuid(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x1000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x4c, r8, 0x1, 0x70bd2d, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0xfffffffc}}, {0x8, 0xb, 0xb6b}, {0x6}}]}, 0x4c}}, 0x4044040) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x14c, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x21}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x16, 0xfffa}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x63e2fc54}, {0x6, 0x16, 0x337}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x40009}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x10) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r10, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x5, 0x1d, 0x1af, &(0x7f0000000180)="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"}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 800.072069ms ago: executing program 4 (id=1326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4a24, @rand_addr=0x64010100}, {0x2, 0x4e22, @remote}, 0x7, 0x0, 0x0, 0x0, 0x2004, 0x0, 0xe, 0x2, 0x2}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4a24, @rand_addr=0x64010100}, {0x2, 0x4e22, @remote}, 0x7, 0x0, 0x0, 0x0, 0x2004, 0x0, 0xe, 0x2, 0x2}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) (async) 0s ago: executing program 2 (id=1327): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014000000000000a8829d0467c57dbc00", @ANYRES32=r0, @ANYBLOB="aeef8725"], 0x30, 0x4000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0xf76}) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x202, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000100)={0xc, r5}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r4, 0x3b70, &(0x7f00000000c0)={0x19}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002"], 0x0, 0x56}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_fuse_handle_req(r6, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x3, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r7, r8, 0xbc, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xa04004, &(0x7f0000000440)={[{@nofavordynmods}], [{@obj_user={'obj_user', 0x3d, 'nofavordynmods'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r7}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@appraise}, {@smackfstransmute}]}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) accept4(r11, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 86200 [ 94.159572][ T7328] uprobe: syz.2.390:7328 failed to unregister, leaking uprobe [ 94.230594][ T7340] fuse: Bad value for 'fd' [ 94.254247][ T7344] netlink: 'syz.2.396': attribute type 3 has an invalid length. [ 94.301801][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'. [ 94.304719][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.397'. [ 94.478810][ T7366] program syz.3.402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.528101][ T7370] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 94.530481][ T7370] overlayfs: failed to set xattr on upper [ 94.532812][ T7370] overlayfs: ...falling back to redirect_dir=nofollow. [ 94.535248][ T7370] overlayfs: ...falling back to index=off. [ 94.537298][ T7370] overlayfs: ...falling back to uuid=null. [ 94.539283][ T7370] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 94.552462][ T7370] pimreg: entered allmulticast mode [ 94.556427][ T7370] pimreg: left allmulticast mode [ 94.655447][ T7376] syzkaller0: entered promiscuous mode [ 94.657326][ T7376] syzkaller0: entered allmulticast mode [ 94.714791][ T7381] syz.0.409 uses obsolete (PF_INET,SOCK_PACKET) [ 94.766484][ T7384] /dev/sg0: Can't lookup blockdev [ 94.847562][ T7394] netlink: 'syz.3.413': attribute type 21 has an invalid length. [ 94.850132][ T7388] tipc: Started in network mode [ 94.850434][ T7394] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.852261][ T7388] tipc: Node identity ac1414aa, cluster identity 4711 [ 94.852667][ T7388] tipc: Enabled bearer , priority 10 [ 94.856419][ T7395] IPv6: NLM_F_CREATE should be specified when creating new route [ 95.104468][ T7429] loop1: detected capacity change from 0 to 7 [ 95.107647][ T7429] Dev loop1: unable to read RDB block 7 [ 95.109687][ T7429] loop1: unable to read partition table [ 95.111843][ T7429] loop1: partition table beyond EOD, truncated [ 95.114222][ T7429] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 95.227784][ T7435] xt_connbytes: Forcing CT accounting to be enabled [ 95.227784][ T7436] xt_connbytes: Forcing CT accounting to be enabled [ 95.228054][ T7436] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.230726][ T7435] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.913987][ T7464] fuse: Bad value for 'fd' [ 95.928477][ T5936] tipc: Node number set to 2886997162 [ 96.230418][ T7469] 9pnet_fd: p9_fd_create_unix (7469): problem connecting socket: ./file0: -111 [ 96.234933][ T7469] program syz.0.436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.498345][ T7478] erspan0: entered promiscuous mode [ 97.460380][ T7506] validate_nla: 2 callbacks suppressed [ 97.460397][ T7506] netlink: 'syz.0.449': attribute type 1 has an invalid length. [ 97.793410][ T9] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 97.802879][ T7514] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 97.802971][ T7515] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 97.818067][ T7513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.955692][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 97.958099][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 97.961405][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.965361][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 97.968843][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 97.973448][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 97.975984][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 97.979317][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.982941][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 97.986549][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 97.990932][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 97.993262][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 97.996677][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.000228][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 98.003626][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 98.009934][ T9] usb 5-1: string descriptor 0 read error: -22 [ 98.012030][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 98.014832][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.022633][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 98.194836][ T7517] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 98.237008][ T7508] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 98.240418][ T7508] SELinux: failed to load policy [ 98.284954][ T832] usb 5-1: USB disconnect, device number 7 [ 98.763385][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 98.912790][ T9] usb 6-1: device descriptor read/64, error -71 [ 98.974710][ T7554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.979919][ T7553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.073942][ T7562] netlink: 'syz.0.468': attribute type 12 has an invalid length. [ 99.168215][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 99.306854][ T9] usb 6-1: device descriptor read/64, error -71 [ 99.343132][ T7568] IPVS: set_ctl: invalid protocol: 51 172.20.20.37:32789 [ 99.346316][ T7568] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20001 [ 99.424226][ T9] usb usb6-port1: attempt power cycle [ 99.786486][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 99.808369][ T9] usb 6-1: device descriptor read/8, error -71 [ 100.009371][ T7575] netlink: 'syz.3.472': attribute type 3 has an invalid length. [ 100.011092][ T40] kauditd_printk_skb: 209 callbacks suppressed [ 100.011103][ T40] audit: type=1400 audit(1771264007.249:973): avc: denied { ioctl } for pid=7574 comm="syz.3.472" path="socket:[15004]" dev="sockfs" ino=15004 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.074094][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 100.096142][ T9] usb 6-1: device descriptor read/8, error -71 [ 100.119952][ T7584] overlay: filesystem on ./bus not supported [ 100.122468][ T40] audit: type=1400 audit(1771264007.362:974): avc: denied { mounton } for pid=7583 comm="syz.3.474" path="/bus" dev="autofs" ino=16256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 100.223458][ T9] usb usb6-port1: unable to enumerate USB device [ 100.274155][ T7591] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 100.305557][ T40] audit: type=1400 audit(1771264007.531:975): avc: denied { setopt } for pid=7593 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 100.312154][ T40] audit: type=1400 audit(1771264007.531:976): avc: denied { bind } for pid=7593 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 100.428010][ T7600] SELinux: security policydb version 17 (MLS) not backwards compatible [ 100.431006][ T7600] SELinux: failed to load policy [ 100.495516][ T7601] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 100.502349][ T7601] batman_adv: batadv0: Adding interface: gretap1 [ 100.505115][ T7601] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.515902][ T7601] batman_adv: batadv0: Interface activated: gretap1 [ 100.846571][ T7604] __nla_validate_parse: 8 callbacks suppressed [ 100.846589][ T7604] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.481'. [ 100.926414][ T7609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.483'. [ 100.931137][ T7611] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7611 comm=syz.0.483 [ 101.214571][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 101.395779][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 101.399232][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.402274][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.405310][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 101.408904][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 101.412122][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.416485][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.426646][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.436955][ T9] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 101.486972][ T7627] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7627 comm=syz.3.488 [ 101.493764][ T7629] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7629 comm=syz.3.488 [ 101.657277][ T832] usb 5-1: USB disconnect, device number 8 [ 101.667223][ T7637] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 101.811750][ T40] audit: type=1400 audit(1771264008.948:977): avc: denied { setopt } for pid=7648 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 101.820198][ T40] audit: type=1400 audit(1771264008.948:978): avc: denied { listen } for pid=7648 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.026292][ T40] audit: type=1326 audit(1771264009.145:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7542 comm="syz.2.463" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685459bf79 code=0x7fc00000 [ 102.101157][ T40] audit: type=1400 audit(1771264009.220:980): avc: denied { ioctl } for pid=7662 comm="syz.1.498" path="socket:[15083]" dev="sockfs" ino=15083 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.235008][ T40] audit: type=1400 audit(1771264009.342:981): avc: denied { write } for pid=7669 comm="syz.0.502" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 102.241921][ T2298] IPVS: starting estimator thread 0... [ 102.341366][ T7674] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 102.344558][ T7671] IPVS: using max 42 ests per chain, 100800 per kthread [ 102.418672][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 102.557551][ T9] usb 6-1: device descriptor read/64, error -71 [ 102.648609][ T40] audit: type=1326 audit(1771264009.727:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.3.494" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa567f9bf79 code=0x7fc00000 [ 102.767110][ T7683] xt_hashlimit: invalid rate [ 102.834359][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 102.972868][ T9] usb 6-1: device descriptor read/64, error -71 [ 103.053090][ T7694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7694 comm=syz.2.508 [ 103.091985][ T9] usb usb6-port1: attempt power cycle [ 103.454977][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 103.476076][ T9] usb 6-1: device descriptor read/8, error -71 [ 103.540567][ T7710] SELinux: policydb magic number 0x980 does not match expected magic number 0xf97cff8c [ 103.543714][ T7710] SELinux: failed to load policy [ 103.700383][ T7712] /dev/sr0: Can't open blockdev [ 103.732151][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 103.752069][ T9] usb 6-1: device descriptor read/8, error -71 [ 103.868512][ T9] usb usb6-port1: unable to enumerate USB device [ 103.914497][ T7720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.516'. [ 104.044833][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.516'. [ 104.132350][ T7733] overlay: Bad value for 'workdir' [ 104.168490][ T7735] bond4: option downdelay: invalid value (18446744073709551615) [ 104.171949][ T7735] bond4: option downdelay: allowed values 0 - 2147483647 [ 104.178994][ T7735] bond4 (unregistering): Released all slaves [ 104.226348][ T7746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7746 comm=syz.2.523 [ 104.277247][ T7750] Illegal XDP return value 4294967262 on prog (id 65) dev N/A, expect packet loss! [ 104.292388][ T7753] fuse: Unknown parameter '' [ 104.335578][ T7758] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.527' resets device [ 104.414323][ T7767] netlink: 45 bytes leftover after parsing attributes in process `syz.0.530'. [ 104.419809][ T7768] loop1: detected capacity change from 0 to 7 [ 104.427644][ T7768] Dev loop1: unable to read RDB block 7 [ 104.430011][ T7768] loop1: unable to read partition table [ 104.432567][ T7768] loop1: partition table beyond EOD, truncated [ 104.435268][ T7768] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 104.471435][ T7776] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 104.516288][ T7775] tmpfs: Unknown parameter 'áÀoñ¯' [ 104.885622][ T7802] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 104.890144][ T7802] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.979425][ T7806] netlink: 'syz.2.543': attribute type 20 has an invalid length. [ 105.079677][ T7810] netlink: 'syz.2.544': attribute type 15 has an invalid length. [ 105.136928][ T7811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48401 sclass=netlink_route_socket pid=7811 comm=syz.2.544 [ 105.153295][ T29] erspan0 speed is unknown, defaulting to 1000 [ 105.379925][ T7821] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.547'. [ 105.464570][ T7827] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 105.840077][ T7803] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 105.883310][ T40] kauditd_printk_skb: 318 callbacks suppressed [ 105.883326][ T40] audit: type=1400 audit(1771264012.767:1301): avc: denied { kexec_image_load } for pid=7837 comm="syz.3.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 105.917776][ T40] audit: type=1400 audit(1771264012.795:1302): avc: denied { listen } for pid=7837 comm="syz.3.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.010512][ T60] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 106.148743][ T60] usb 5-1: device descriptor read/64, error -71 [ 106.239796][ T40] audit: type=1400 audit(1771264013.095:1303): avc: denied { write } for pid=7843 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.266883][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 106.415628][ T60] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 106.431269][ T7852] x_tables: duplicate underflow at hook 2 [ 106.434519][ T7852] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 106.437431][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 106.441147][ T34] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 106.444651][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.447744][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.484222][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 106.492976][ T7855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.561'. [ 106.575229][ T60] usb 5-1: device descriptor read/64, error -71 [ 106.654986][ T7877] loop1: detected capacity change from 0 to 7 [ 106.658498][ T7877] Dev loop1: unable to read RDB block 7 [ 106.660864][ T7877] loop1: unable to read partition table [ 106.663233][ T7877] loop1: partition table beyond EOD, truncated [ 106.665883][ T7877] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 106.690117][ T7861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7861 comm=syz.2.563 [ 106.692838][ T60] usb usb5-port1: attempt power cycle [ 106.742624][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.567'. [ 106.748676][ T7886] netlink: 'syz.2.567': attribute type 20 has an invalid length. [ 106.751990][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.567'. [ 106.755598][ T7886] netlink: 'syz.2.567': attribute type 20 has an invalid length. [ 106.767029][ T7889] Only authenc() type AEADs are supported by ESSIV [ 106.781597][ T7886] overlayfs: failed to resolve './file1': -2 [ 107.054604][ T63] Bluetooth: hci2: command 0x0401 tx timeout [ 107.065319][ T60] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 107.085589][ T7908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.573'. [ 107.089765][ T6022] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 107.093610][ T60] usb 5-1: device descriptor read/8, error -71 [ 107.107930][ T40] audit: type=1400 audit(1771264013.911:1304): avc: denied { lock } for pid=7904 comm="syz.2.573" path="socket:[15228]" dev="sockfs" ino=15228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 107.246855][ T6022] usb 6-1: device descriptor read/64, error -71 [ 107.353067][ T60] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 107.375150][ T60] usb 5-1: device descriptor read/8, error -71 [ 107.492392][ T60] usb usb5-port1: unable to enumerate USB device [ 107.502376][ T6022] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 107.652656][ T6022] usb 6-1: device descriptor read/64, error -71 [ 107.778729][ T6022] usb usb6-port1: attempt power cycle [ 108.152416][ T6022] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 108.174589][ T6022] usb 6-1: device descriptor read/8, error -71 [ 108.263968][ T7915] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 108.270302][ T7916] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 108.348881][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.578'. [ 108.351739][ T7922] netlink: 'syz.2.578': attribute type 20 has an invalid length. [ 108.354285][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.578'. [ 108.357302][ T7922] netlink: 'syz.2.578': attribute type 20 has an invalid length. [ 108.385181][ T7922] overlayfs: failed to resolve './file1': -2 [ 108.429758][ T6022] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 108.473020][ T6022] usb 6-1: device descriptor read/8, error -71 [ 108.479944][ T7931] netlink: 72 bytes leftover after parsing attributes in process `syz.2.581'. [ 108.589690][ T6022] usb usb6-port1: unable to enumerate USB device [ 108.722360][ T40] audit: type=1326 audit(1771264015.432:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7939 comm="syz.2.585" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f685459bf79 code=0x0 [ 109.212550][ T6022] usb 8-1: USB disconnect, device number 4 [ 109.242193][ T7946] netlink: 'syz.3.587': attribute type 1 has an invalid length. [ 109.245271][ T7946] netlink: 'syz.3.587': attribute type 4 has an invalid length. [ 109.248391][ T7946] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.587'. [ 109.348363][ T40] audit: type=1400 audit(1771264016.023:1306): avc: denied { ioctl } for pid=7950 comm="syz.3.588" path="socket:[17047]" dev="sockfs" ino=17047 ioctlcmd=0x8b21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.349980][ T7953] xt_TCPMSS: Only works on TCP SYN packets [ 109.358999][ T7952] netlink: 'syz.3.588': attribute type 1 has an invalid length. [ 109.374082][ T7952] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 109.377972][ T2298] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 109.503612][ T40] audit: type=1800 audit(1771264016.154:1307): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.590" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 109.508029][ T7959] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 109.510738][ T40] audit: type=1400 audit(1771264016.173:1308): avc: denied { map } for pid=7958 comm="syz.3.590" path="socket:[18700]" dev="sockfs" ino=18700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.518438][ T7959] cramfs: wrong magic [ 109.521154][ T40] audit: type=1400 audit(1771264016.173:1309): avc: denied { read } for pid=7958 comm="syz.3.590" path="socket:[18700]" dev="sockfs" ino=18700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.541598][ T2298] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 109.545271][ T2298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.548969][ T2298] usb 5-1: Product: syz [ 109.550705][ T2298] usb 5-1: Manufacturer: syz [ 109.569722][ T2298] usb 5-1: SerialNumber: syz [ 109.636138][ T7968] fuse: Bad value for 'fd' [ 109.704168][ T7973] loop1: detected capacity change from 0 to 7 [ 109.710112][ T7973] Dev loop1: unable to read RDB block 7 [ 109.712514][ T7973] loop1: unable to read partition table [ 109.715020][ T7973] loop1: partition table beyond EOD, truncated [ 109.727383][ T7973] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 109.737471][ T40] audit: type=1400 audit(1771264016.379:1310): avc: denied { execute } for pid=7969 comm="syz.2.594" dev="hugetlbfs" ino=18185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 109.838253][ T7984] /dev/nullb0: Can't lookup blockdev [ 109.840793][ T7982] netlink: 'syz.3.598': attribute type 10 has an invalid length. [ 109.849770][ T7982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.855940][ T7982] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 109.862619][ T7982] netlink: 40 bytes leftover after parsing attributes in process `syz.3.598'. [ 109.867686][ T7982] batadv0: entered promiscuous mode [ 109.870316][ T7982] batadv0: entered allmulticast mode [ 109.874327][ T7982] bond0: (slave batadv0): Releasing backup interface [ 109.880557][ T7982] bridge0: port 3(batadv0) entered blocking state [ 109.883389][ T7982] bridge0: port 3(batadv0) entered disabled state [ 110.088678][ T8009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.192305][ T8019] loop1: detected capacity change from 0 to 7 [ 110.196235][ T5940] Dev loop1: unable to read RDB block 7 [ 110.198661][ T5940] loop1: unable to read partition table [ 110.200911][ T5940] loop1: partition table beyond EOD, truncated [ 110.205476][ T8019] Dev loop1: unable to read RDB block 7 [ 110.207799][ T8019] loop1: unable to read partition table [ 110.211665][ T2298] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 110.212903][ T8019] loop1: partition table beyond EOD, truncated [ 110.216781][ T2298] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 110.222334][ T8019] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 110.222787][ T2298] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 110.230128][ T2298] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 110.236591][ T2298] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 110.255037][ T2298] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 110.273724][ T73] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 110.277512][ T73] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 110.282505][ T2298] usb 5-1: USB disconnect, device number 13 [ 110.365702][ T8039] bond0: option downdelay: invalid value (18446744073709551615) [ 110.368389][ T8039] bond0: option downdelay: allowed values 0 - 2147483647 [ 110.369059][ T8037] sp0: Synchronizing with TNC [ 110.374486][ T8039] bond0 (unregistering): Released all slaves [ 110.705116][ T63] Bluetooth: hci0: SCO packet for unknown connection handle 1792 [ 110.832133][ T8070] validate_nla: 1 callbacks suppressed [ 110.832149][ T8070] netlink: 'syz.2.615': attribute type 10 has an invalid length. [ 110.841876][ T8070] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 110.846211][ T8070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.915642][ T8075] openvswitch: netlink: Missing key (keys=40, expected=100) [ 111.379641][ T8103] vlan2: entered promiscuous mode [ 111.384904][ T8103] bridge0: entered promiscuous mode [ 111.450251][ T8107] xt_hashlimit: size too large, truncated to 1048576 [ 111.575198][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 111.575211][ T40] audit: type=1401 audit(1771264018.106:1321): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 111.888996][ T8135] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8135 comm=syz.1.634 [ 111.938296][ T8139] __nla_validate_parse: 7 callbacks suppressed [ 111.938307][ T8139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.636'. [ 112.127192][ T8046] Set syz1 is full, maxelem 65536 reached [ 112.213100][ T8150] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 112.218129][ T8153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.640'. [ 112.435142][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'. [ 112.489044][ T8172] loop1: detected capacity change from 0 to 7 [ 112.491859][ T8172] Dev loop1: unable to read RDB block 7 [ 112.493687][ T8172] loop1: unable to read partition table [ 112.495656][ T8172] loop1: partition table beyond EOD, truncated [ 112.497640][ T8172] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 112.688210][ T40] audit: type=1400 audit(1771264275.149:1322): avc: denied { append } for pid=8179 comm="syz.3.648" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 112.689177][ T8180] ceph: Path missing in source [ 112.841714][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 112.979596][ T40] audit: type=1400 audit(1771264275.421:1323): avc: denied { getopt } for pid=8195 comm="syz.3.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 113.002739][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 113.008019][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 113.010827][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 113.014140][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.024031][ T9] usb 6-1: config 0 descriptor?? [ 113.042264][ T8202] loop1: detected capacity change from 0 to 7 [ 113.053547][ T6275] Dev loop1: unable to read RDB block 7 [ 113.056126][ T6275] loop1: unable to read partition table [ 113.058281][ T6275] loop1: partition table beyond EOD, truncated [ 113.067861][ T8202] Dev loop1: unable to read RDB block 7 [ 113.069712][ T8202] loop1: unable to read partition table [ 113.071886][ T8202] loop1: partition table beyond EOD, truncated [ 113.074803][ T8202] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 113.138492][ T8209] netlink: 'syz.0.658': attribute type 8 has an invalid length. [ 113.140936][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'. [ 113.148239][ T8209] bond0: entered promiscuous mode [ 113.149937][ T8209] bond_slave_0: entered promiscuous mode [ 113.152006][ T8209] bond_slave_1: entered promiscuous mode [ 113.154712][ T8209] bridge_slave_1: entered promiscuous mode [ 113.159559][ T8209] bond0: left promiscuous mode [ 113.162300][ T8209] bond_slave_0: left promiscuous mode [ 113.164195][ T8209] bond_slave_1: left promiscuous mode [ 113.166354][ T8209] bridge_slave_1: left promiscuous mode [ 113.193680][ T8217] netlink: 'syz.0.658': attribute type 8 has an invalid length. [ 113.196842][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'. [ 113.205838][ T8217] bond0: entered promiscuous mode [ 113.207963][ T8217] bond_slave_0: entered promiscuous mode [ 113.210450][ T8217] bond_slave_1: entered promiscuous mode [ 113.212990][ T8217] bridge_slave_1: entered promiscuous mode [ 113.217946][ T8217] bond0: left promiscuous mode [ 113.219967][ T8217] bond_slave_0: left promiscuous mode [ 113.222375][ T8217] bond_slave_1: left promiscuous mode [ 113.225503][ T8217] bridge_slave_1: left promiscuous mode [ 113.267450][ T40] audit: type=1400 audit(1771264275.684:1324): avc: denied { bind } for pid=8215 comm="syz.3.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 113.359561][ T40] audit: type=1400 audit(1771264275.778:1325): avc: denied { write } for pid=8215 comm="syz.3.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 113.503641][ T8221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25616 sclass=netlink_route_socket pid=8221 comm=syz.3.662 [ 113.598752][ T71] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 113.620962][ T8230] loop1: detected capacity change from 0 to 7 [ 113.624250][ T5940] Dev loop1: unable to read RDB block 7 [ 113.626163][ T5940] loop1: unable to read partition table [ 113.628081][ T5940] loop1: partition table beyond EOD, truncated [ 113.634251][ T8230] Dev loop1: unable to read RDB block 7 [ 113.636189][ T8230] loop1: unable to read partition table [ 113.638072][ T8230] loop1: partition table beyond EOD, truncated [ 113.640187][ T8230] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 113.677060][ T40] audit: type=1400 audit(1771264276.078:1326): avc: denied { read } for pid=8231 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.679244][ T8178] netlink: 108 bytes leftover after parsing attributes in process `syz.1.645'. [ 113.688851][ T8178] fuse: Unknown parameter 'ÿÿ0x00000000000000080x000000000000000500000000000000000000' [ 113.736990][ T71] usb 5-1: device descriptor read/64, error -71 [ 113.800825][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 113.802833][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 113.807110][ T8237] xt_hashlimit: size too large, truncated to 1048576 [ 113.810697][ T9] usb 6-1: USB disconnect, device number 20 [ 113.968394][ T40] audit: type=1400 audit(1771264276.350:1327): avc: denied { relabelfrom } for pid=8245 comm="syz.3.670" name="" dev="pipefs" ino=18904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 113.968684][ T8246] SELinux: Context system_u:object_r:var_log_t:s0 is not valid (left unmapped). [ 113.981199][ T40] audit: type=1400 audit(1771264276.360:1328): avc: denied { relabelto } for pid=8245 comm="syz.3.670" name="" dev="pipefs" ino=18904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:var_log_t:s0" [ 113.992816][ T71] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 114.131444][ T71] usb 5-1: device descriptor read/64, error -71 [ 114.187154][ T8250] fuse: Unknown parameter 'qd' [ 114.218599][ T8253] netlink: 'syz.2.673': attribute type 21 has an invalid length. [ 114.219799][ T8252] netlink: 'syz.2.673': attribute type 21 has an invalid length. [ 114.221509][ T8253] netlink: 156 bytes leftover after parsing attributes in process `syz.2.673'. [ 114.230816][ T8252] netlink: 156 bytes leftover after parsing attributes in process `syz.2.673'. [ 114.248749][ T71] usb usb5-port1: attempt power cycle [ 114.303642][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 114.461992][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 114.467092][ T29] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 114.471348][ T29] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.479249][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.488239][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 114.489356][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.493937][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.497743][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.512726][ T29] usbtmc 8-1:16.0: bulk endpoints not found [ 114.621664][ T71] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 114.643845][ T71] usb 5-1: device descriptor read/8, error -71 [ 114.846848][ T6022] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 114.898928][ T71] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 114.920564][ T71] usb 5-1: device descriptor read/8, error -71 [ 115.016821][ T6022] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 115.021529][ T6022] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.025108][ T6022] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.030236][ T6022] usb 6-1: config 0 interface 0 has no altsetting 0 [ 115.033852][ T6022] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.037644][ T71] usb usb5-port1: unable to enumerate USB device [ 115.037659][ T6022] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.044188][ T6022] usb 6-1: config 0 interface 0 has no altsetting 0 [ 115.047193][ T6022] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.050084][ T6022] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.051950][ T8276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.682'. [ 115.053529][ T6022] usb 6-1: config 0 interface 0 has no altsetting 0 [ 115.061106][ T6022] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.061594][ T8276] fuse: Unknown parameter 'f' [ 115.064125][ T6022] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.070011][ T6022] usb 6-1: config 0 interface 0 has no altsetting 0 [ 115.073020][ T6022] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.076046][ T6022] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.079725][ T6022] usb 6-1: config 0 interface 0 has no altsetting 0 [ 115.083397][ T6022] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.086673][ T6022] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.090393][ T6022] usb 6-1: config 0 interface 0 has no altsetting 0 [ 115.093633][ T6022] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.096625][ T6022] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.100512][ T6022] usb 6-1: config 0 interface 0 has no altsetting 0 [ 115.103777][ T6022] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.106672][ T6022] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.110093][ T6022] usb 6-1: config 0 interface 0 has no altsetting 0 [ 115.114090][ T6022] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 115.117292][ T6022] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 115.120139][ T6022] usb 6-1: Product: syz [ 115.121497][ T6022] usb 6-1: Manufacturer: syz [ 115.123120][ T6022] usb 6-1: SerialNumber: syz [ 115.131298][ T6022] usb 6-1: config 0 descriptor?? [ 115.138230][ T6022] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 115.358639][ T6022] usb 6-1: USB disconnect, device number 21 [ 115.362594][ T6022] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 115.930208][ T8287] loop1: detected capacity change from 0 to 7 [ 115.934869][ T5940] Dev loop1: unable to read RDB block 7 [ 115.937164][ T5940] loop1: unable to read partition table [ 115.939806][ T5940] loop1: partition table beyond EOD, truncated [ 115.944204][ T8287] Dev loop1: unable to read RDB block 7 [ 115.946233][ T8287] loop1: unable to read partition table [ 115.948228][ T8287] loop1: partition table beyond EOD, truncated [ 115.950295][ T8287] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 115.979023][ T40] audit: type=1400 audit(1771264278.236:1329): avc: denied { append } for pid=8288 comm="syz.1.686" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.988332][ T40] audit: type=1400 audit(1771264278.236:1330): avc: denied { ioctl } for pid=8288 comm="syz.1.686" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 116.105077][ T25] block nbd0: Possible stuck request ffff888029ca8000: control (read@0,1024B). Runtime 30 seconds [ 116.109166][ T25] block nbd0: Possible stuck request ffff888029ca8200: control (read@1024,1024B). Runtime 30 seconds [ 116.112655][ T25] block nbd0: Possible stuck request ffff888029ca8400: control (read@2048,1024B). Runtime 30 seconds [ 116.116224][ T25] block nbd0: Possible stuck request ffff888029ca8600: control (read@3072,1024B). Runtime 30 seconds [ 116.190196][ T8308] GUP no longer grows the stack in syz.2.692 (8308): 200000004000-200000005000 (200000001000) [ 116.193774][ T8308] CPU: 0 UID: 0 PID: 8308 Comm: syz.2.692 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.193803][ T8308] Tainted: [L]=SOFTLOCKUP [ 116.193807][ T8308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.193814][ T8308] Call Trace: [ 116.193819][ T8308] [ 116.193823][ T8308] dump_stack_lvl+0x100/0x190 [ 116.193858][ T8308] gup_vma_lookup.cold+0x83/0x96 [ 116.193875][ T8308] __get_user_pages+0x241/0x34d0 [ 116.193897][ T8308] ? down_read_killable+0x30e/0x4c0 [ 116.193922][ T8308] ? __lock_acquire+0x4a5/0x2630 [ 116.193940][ T8308] ? __pfx___get_user_pages+0x10/0x10 [ 116.193962][ T8308] __gup_longterm_locked+0x87d/0x16f0 [ 116.193983][ T8308] ? __pfx___gup_longterm_locked+0x10/0x10 [ 116.194002][ T8308] ? try_get_folio+0x262/0x750 [ 116.194018][ T8308] ? find_held_lock+0x2b/0x80 [ 116.194035][ T8308] gup_fast_fallback+0x18c6/0x2460 [ 116.194063][ T8308] ? __pfx_gup_fast_fallback+0x10/0x10 [ 116.194080][ T8308] ? __lock_acquire+0x4a5/0x2630 [ 116.194097][ T8308] ? finish_task_switch.isra.0+0x200/0xb80 [ 116.194113][ T8308] ? rcu_is_watching+0x12/0xc0 [ 116.194127][ T8308] get_user_pages_fast+0xa7/0xf0 [ 116.194144][ T8308] ? __pfx_get_user_pages_fast+0x10/0x10 [ 116.194165][ T8308] __iov_iter_get_pages_alloc+0x8ec/0x20d0 [ 116.194190][ T8308] ? pipe_lock+0x69/0x80 [ 116.194208][ T8308] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 116.194222][ T8308] ? __pfx___mutex_lock+0x10/0x10 [ 116.194237][ T8308] ? import_ubuf+0x1b6/0x220 [ 116.194251][ T8308] iov_iter_get_pages2+0xa3/0x100 [ 116.194264][ T8308] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 116.194276][ T8308] ? wait_for_space+0x2ca/0x3b0 [ 116.194298][ T8308] __do_sys_vmsplice+0x7eb/0x14f0 [ 116.194322][ T8308] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 116.194343][ T8308] ? __pfx_futex_wait+0x10/0x10 [ 116.194360][ T8308] ? up_write+0x290/0x4f0 [ 116.194389][ T8308] ? do_syscall_64+0x106/0xf80 [ 116.194402][ T8308] do_syscall_64+0x106/0xf80 [ 116.194415][ T8308] ? clear_bhb_loop+0x40/0x90 [ 116.194429][ T8308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.194440][ T8308] RIP: 0033:0x7f685459bf79 [ 116.194450][ T8308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.194460][ T8308] RSP: 002b:00007f68527f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 116.194471][ T8308] RAX: ffffffffffffffda RBX: 00007f6854815fa0 RCX: 00007f685459bf79 [ 116.194478][ T8308] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000005 [ 116.194484][ T8308] RBP: 00007f68546327e0 R08: 0000000000000000 R09: 0000000000000000 [ 116.194490][ T8308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.194497][ T8308] R13: 00007f6854816038 R14: 00007f6854815fa0 R15: 00007ffc96bae2e8 [ 116.194511][ T8308] [ 116.572649][ T8316] program syz.0.694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.093904][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 117.093921][ T40] audit: type=1400 audit(1771264279.277:1332): avc: denied { getopt } for pid=8317 comm="syz.1.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 117.229963][ T6017] usb 8-1: USB disconnect, device number 5 [ 117.242911][ T8328] random: crng reseeded on system resumption [ 117.244484][ T40] audit: type=1400 audit(1771264279.418:1333): avc: denied { write } for pid=8327 comm="syz.1.699" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 117.284078][ T40] audit: type=1400 audit(1771264279.418:1334): avc: denied { open } for pid=8327 comm="syz.1.699" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 117.315114][ T40] audit: type=1400 audit(1771264279.418:1335): avc: denied { mount } for pid=8322 comm="syz.0.697" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 117.324805][ T40] audit: type=1400 audit(1771264279.437:1336): avc: denied { ioctl } for pid=8327 comm="syz.1.699" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 117.335473][ T40] audit: type=1400 audit(1771264279.437:1337): avc: denied { connect } for pid=8322 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.347227][ T8344] netlink: 'syz.2.702': attribute type 1 has an invalid length. [ 117.348864][ T8343] __nla_validate_parse: 2 callbacks suppressed [ 117.348878][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.703'. [ 117.351009][ T8344] netlink: 'syz.2.702': attribute type 4 has an invalid length. [ 117.356046][ T8343] netlink: 'syz.1.703': attribute type 20 has an invalid length. [ 117.357343][ T8344] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.702'. [ 117.369745][ T1237] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.369842][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.703'. [ 117.374778][ T1237] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.376503][ T8343] netlink: 'syz.1.703': attribute type 20 has an invalid length. [ 117.379411][ T1237] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.379433][ T1237] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.395689][ T40] audit: type=1400 audit(1771264279.568:1338): avc: denied { map } for pid=8329 comm="syz.3.700" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.406542][ T40] audit: type=1400 audit(1771264279.568:1339): avc: denied { execute } for pid=8329 comm="syz.3.700" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.802790][ T8369] netlink: 76 bytes leftover after parsing attributes in process `syz.3.712'. [ 117.854964][ T40] audit: type=1400 audit(1771264280.000:1340): avc: denied { watch } for pid=8370 comm="syz.3.713" path="/200/file0" dev="tmpfs" ino=1097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.864173][ T40] audit: type=1400 audit(1771264280.000:1341): avc: denied { watch_sb watch_reads } for pid=8370 comm="syz.3.713" path="/200/file0" dev="tmpfs" ino=1097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.295394][ T8403] fuse: Bad value for 'fd' [ 118.298127][ T8404] fuse: Bad value for 'fd' [ 118.392450][ T8408] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 118.505300][ T8415] netlink: 'syz.2.725': attribute type 1 has an invalid length. [ 118.767912][ T2298] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 118.927767][ T2298] usb 5-1: Using ep0 maxpacket: 8 [ 118.930918][ T2298] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 118.934418][ T2298] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.938753][ T2298] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.941697][ T2298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.948444][ T2298] usbtmc 5-1:16.0: bulk endpoints not found [ 120.536427][ T8343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.638986][ T8435] netlink: 'syz.1.731': attribute type 30 has an invalid length. [ 120.664185][ T8437] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 120.669827][ T8437] overlayfs: missing 'lowerdir' [ 120.711488][ T8434] Set syz1 is full, maxelem 65536 reached [ 120.941705][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 121.012888][ T8462] erspan0 speed is unknown, defaulting to 1000 [ 121.153429][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.740'. [ 121.157282][ T8466] netlink: 'syz.2.740': attribute type 20 has an invalid length. [ 121.160546][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.740'. [ 121.164243][ T8466] netlink: 'syz.2.740': attribute type 20 has an invalid length. [ 121.230811][ T8470] tmpfs: Bad value for 'mpol' [ 121.253932][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'. [ 121.270230][ T8472] team0 (unregistering): Port device team_slave_0 removed [ 121.277029][ T8472] team0 (unregistering): Port device team_slave_1 removed [ 121.524977][ T8481] kAFS: unable to lookup cell 'syz1' [ 121.596835][ T8481] kvm: kvm [8480]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 121.600658][ T8481] kvm: kvm [8480]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 121.661087][ T8481] kvm_intel: kvm [8480]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 121.680443][ T8481] kvm: kvm [8480]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 121.683630][ T8481] kvm: kvm [8480]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 121.702404][ T2298] usb 5-1: USB disconnect, device number 18 [ 121.727698][ T8485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.747'. [ 121.732366][ T8485] netlink: 68 bytes leftover after parsing attributes in process `syz.0.747'. [ 121.810260][ T8487] netlink: 'syz.3.748': attribute type 8 has an invalid length. [ 121.813895][ T8487] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 121.860444][ T8490] netlink: 'syz.3.749': attribute type 20 has an invalid length. [ 122.690784][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 122.850189][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 122.853800][ T9] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 122.857902][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 122.862415][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 122.865973][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 122.871164][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.875031][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.884383][ T9] usbtmc 6-1:16.0: bulk endpoints not found [ 125.044972][ T8490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.104380][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 125.104392][ T40] audit: type=1400 audit(1771264286.802:1347): avc: denied { block_suspend } for pid=8520 comm="syz.0.758" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.185957][ T8529] __nla_validate_parse: 2 callbacks suppressed [ 125.185972][ T8529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.761'. [ 125.214843][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.761'. [ 125.221292][ T8529] netlink: 2 bytes leftover after parsing attributes in process `syz.0.761'. [ 125.285884][ T8531] sctp: [Deprecated]: syz.0.762 (pid 8531) Use of int in max_burst socket option. [ 125.285884][ T8531] Use struct sctp_assoc_value instead [ 125.300852][ T40] audit: type=1400 audit(1771264286.980:1348): avc: denied { mounton } for pid=8530 comm="syz.0.762" path="/181/file0" dev="hugetlbfs" ino=19131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 125.301183][ T8531] overlayfs: maximum fs stacking depth exceeded [ 125.314054][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.762'. [ 125.405993][ T8537] netlink: 40 bytes leftover after parsing attributes in process `syz.0.764'. [ 125.411378][ T8537] ALSA: mixer_oss: invalid OSS volume 'PHONEXÛ0ØIN' [ 125.636346][ T29] usb 6-1: USB disconnect, device number 22 [ 125.672888][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.768'. [ 125.675816][ T8547] validate_nla: 1 callbacks suppressed [ 125.675826][ T8547] netlink: 'syz.1.768': attribute type 20 has an invalid length. [ 125.680170][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.768'. [ 125.683037][ T8547] netlink: 'syz.1.768': attribute type 20 has an invalid length. [ 125.750374][ T40] audit: type=1400 audit(1771264287.412:1349): avc: denied { append } for pid=8551 comm="syz.0.769" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 125.803645][ T8559] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 128.869803][ T8547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.002923][ T8566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.772'. [ 129.044027][ T8574] IPv6: NLM_F_CREATE should be specified when creating new route [ 129.056673][ T8571] loop1: detected capacity change from 0 to 7 [ 129.072986][ T8571] Dev loop1: unable to read RDB block 7 [ 129.074981][ T8571] loop1: unable to read partition table [ 129.077032][ T8571] loop1: partition table beyond EOD, truncated [ 129.079145][ T8571] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 129.118772][ T8566] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8566 comm=syz.2.772 [ 129.119851][ T8572] program syz.3.774 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.126938][ T8566] cgroup: none used incorrectly [ 129.133201][ T40] audit: type=1400 audit(1771264290.583:1350): avc: denied { write } for pid=8568 comm="syz.3.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 129.165956][ T8581] cgroup2: Unknown parameter 'euid' [ 129.228977][ T8585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.780'. [ 129.243806][ T8587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.781'. [ 129.415939][ T29] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 129.447501][ T40] audit: type=1400 audit(1771264290.864:1351): avc: denied { create } for pid=8608 comm="syz.2.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 129.506841][ T8587] netlink: 'syz.1.781': attribute type 5 has an invalid length. [ 129.588636][ T29] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 129.592203][ T29] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 129.595681][ T29] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 129.599803][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.611469][ T8578] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.616575][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.653466][ T8630] netlink: 'syz.2.794': attribute type 20 has an invalid length. [ 129.656410][ T8630] netlink: 'syz.2.794': attribute type 20 has an invalid length. [ 129.693920][ T8632] xt_connbytes: Forcing CT accounting to be enabled [ 129.696316][ T8632] Cannot find set identified by id 0 to match [ 130.152632][ T8653] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 130.152936][ T8654] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 130.174283][ T8653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.191175][ T8652] bond2: (slave bridge1): making interface the new active one [ 130.195244][ T8652] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 130.206101][ T8653] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 130.209361][ T8652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=8652 comm=syz.3.800 [ 130.213177][ T8653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=8653 comm=syz.3.800 [ 130.314451][ T8669] loop1: detected capacity change from 0 to 7 [ 130.318099][ T5940] Dev loop1: unable to read RDB block 7 [ 130.319928][ T5940] loop1: unable to read partition table [ 130.321961][ T5940] loop1: partition table beyond EOD, truncated [ 130.324844][ T8669] Dev loop1: unable to read RDB block 7 [ 130.327374][ T8669] loop1: unable to read partition table [ 130.330085][ T8669] loop1: partition table beyond EOD, truncated [ 130.334736][ T8669] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 130.510263][ T8678] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 130.869039][ T8694] __nla_validate_parse: 12 callbacks suppressed [ 130.869055][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 130.883627][ T8694] bridge0: entered promiscuous mode [ 130.885947][ T8694] macsec1: entered allmulticast mode [ 130.888577][ T8694] bridge0: entered allmulticast mode [ 130.891478][ T8694] bridge0: port 4(macsec1) entered blocking state [ 130.893672][ T8694] bridge0: port 4(macsec1) entered disabled state [ 130.897920][ T8694] bridge0: left allmulticast mode [ 130.899522][ T8694] bridge0: left promiscuous mode [ 131.354931][ T8704] Cannot find add_set index 65532 as target [ 131.387673][ T8707] overlayfs: overlapping lowerdir path [ 131.388978][ T8708] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 131.392803][ T8708] overlayfs: missing 'lowerdir' [ 131.465370][ T40] audit: type=1400 audit(1771264292.769:1352): avc: denied { map } for pid=8712 comm="syz.3.819" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.472740][ T40] audit: type=1400 audit(1771264292.769:1353): avc: denied { execute } for pid=8712 comm="syz.3.819" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.549722][ T8717] loop1: detected capacity change from 0 to 7 [ 131.553689][ T8717] Dev loop1: unable to read RDB block 7 [ 131.556135][ T8717] loop1: unable to read partition table [ 131.558695][ T8717] loop1: partition table beyond EOD, truncated [ 131.565285][ T8717] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 131.749572][ T8724] erspan0 speed is unknown, defaulting to 1000 [ 132.142905][ T8732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.826'. [ 132.147530][ T8732] fuse: Bad value for 'fd' [ 132.356483][ T8743] loop1: detected capacity change from 0 to 7 [ 132.359949][ T8743] Dev loop1: unable to read RDB block 7 [ 132.362104][ T8743] loop1: unable to read partition table [ 132.364069][ T8743] loop1: partition table beyond EOD, truncated [ 132.366250][ T8743] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 132.367678][ T29] usb 5-1: USB disconnect, device number 19 [ 132.417362][ T8748] 8021q: VLANs not supported on ip6gre0 [ 132.420769][ T8748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.523253][ T40] audit: type=1400 audit(1771264293.754:1354): avc: denied { cmd } for pid=8751 comm="syz.3.833" path="socket:[21986]" dev="sockfs" ino=21986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 132.673453][ T8767] erspan0 speed is unknown, defaulting to 1000 [ 132.976709][ T40] audit: type=1400 audit(1771264294.176:1355): avc: denied { write } for pid=8771 comm="syz.0.839" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 133.023635][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.840'. [ 133.040135][ T40] audit: type=1400 audit(1771264294.251:1356): avc: denied { setopt } for pid=8776 comm="syz.1.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 133.218570][ T8786] fuse: Unknown parameter 'nd' [ 133.221844][ T8787] netlink: 72 bytes leftover after parsing attributes in process `syz.1.842'. [ 133.225779][ T8787] netlink: 96 bytes leftover after parsing attributes in process `syz.1.842'. [ 133.288845][ T40] audit: type=1400 audit(1771264294.476:1357): avc: denied { read } for pid=8779 comm="syz.1.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 133.518026][ T8671] orangefs_mount: mount request failed with -4 [ 133.569378][ T8801] dns_resolver: Unsupported server list version (0) [ 133.630307][ T8802] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 133.745107][ T2298] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 133.907140][ T2298] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 133.911060][ T2298] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.914613][ T2298] usb 8-1: Product: syz [ 133.916427][ T2298] usb 8-1: Manufacturer: syz [ 133.918404][ T2298] usb 8-1: SerialNumber: syz [ 133.922869][ T2298] usb 8-1: config 0 descriptor?? [ 134.135276][ T8806] netlink: 'syz.0.848': attribute type 1 has an invalid length. [ 134.139068][ T8806] netlink: 'syz.0.848': attribute type 3 has an invalid length. [ 134.142578][ T8806] netlink: 224 bytes leftover after parsing attributes in process `syz.0.848'. [ 134.151337][ T8806] netlink: 'syz.0.848': attribute type 39 has an invalid length. [ 134.333734][ T2298] airspy 8-1:0.0: usb_control_msg() failed -71 request 09 [ 134.340234][ T2298] airspy 8-1:0.0: Could not detect board [ 134.342732][ T2298] airspy 8-1:0.0: probe with driver airspy failed with error -71 [ 134.349423][ T2298] usb 8-1: USB disconnect, device number 6 [ 134.571527][ T8819] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 134.590446][ T40] audit: type=1400 audit(1771264295.696:1358): avc: denied { read } for pid=8814 comm="syz.0.852" lport=35424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.606927][ T40] audit: type=1400 audit(1771264295.705:1359): avc: denied { setattr } for pid=8814 comm="syz.0.852" name="timer" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 134.644030][ T8823] xt_hashlimit: overflow, rate too high: 0 [ 134.649758][ T40] audit: type=1400 audit(1771264295.762:1360): avc: denied { ioctl } for pid=8822 comm="syz.0.854" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 136.289100][ T8780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.346458][ T40] audit: type=1400 audit(1771264297.338:1361): avc: denied { append } for pid=8839 comm="syz.0.857" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 136.352115][ T8845] bridge_slave_1: left allmulticast mode [ 136.357439][ T8845] bridge_slave_1: left promiscuous mode [ 136.360491][ T8845] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.367133][ T8845] bridge_slave_0: left allmulticast mode [ 136.369617][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'. [ 136.370115][ T8845] bridge_slave_0: left promiscuous mode [ 136.372799][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 136.374721][ T8845] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.386825][ T8847] netlink: 'syz.2.860': attribute type 12 has an invalid length. [ 136.546964][ T8865] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 136.549947][ T8865] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 136.553309][ T8865] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 136.556583][ T8865] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 136.562105][ T8865] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 136.565124][ T8865] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 136.567971][ T8865] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 136.571879][ T8865] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 136.574658][ T8865] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 136.577433][ T8865] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 136.592121][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 136.601139][ T8866] : entered promiscuous mode [ 136.603521][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 136.609882][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 136.614660][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 136.619217][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 136.624358][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 136.629172][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 136.634205][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 136.808259][ T8890] xt_hashlimit: size too large, truncated to 1048576 [ 136.847269][ T8896] netlink: 'syz.2.873': attribute type 30 has an invalid length. [ 136.857984][ T8896] bond4: option arp_missed_max: invalid value (0) [ 136.860229][ T8896] bond4: option arp_missed_max: allowed values 1 - 255 [ 136.864357][ T8896] bond4 (unregistering): Released all slaves [ 137.103967][ T8903] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 137.259307][ T8912] dns_resolver: Unsupported server list version (0) [ 137.404740][ T8918] binder: 8917:8918 ioctl c00c620f 200000000500 returned -22 [ 137.413245][ T8923] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 139.860982][ T8873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.924873][ T8936] comedi comedi1: c6xdigio: I/O port conflict (0x9,3) [ 139.935000][ T8933] loop1: detected capacity change from 0 to 7 [ 139.949647][ T8933] Dev loop1: unable to read RDB block 7 [ 139.951972][ T8933] loop1: unable to read partition table [ 139.954191][ T8933] loop1: partition table beyond EOD, truncated [ 139.956605][ T8933] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 140.018811][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 140.018827][ T40] audit: type=1400 audit(1771264300.790:1370): avc: denied { getattr } for pid=8942 comm="syz.1.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.035755][ T40] audit: type=1400 audit(1771264300.809:1371): avc: denied { read } for pid=8942 comm="syz.1.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.039183][ T8940] openvswitch: netlink: IPv4 tunnel dst address is zero [ 140.060149][ T63] Bluetooth: hci2: Invalid handle: 0xc48a > 0x0eff [ 140.195978][ T40] audit: type=1400 audit(1771264300.959:1372): avc: denied { accept } for pid=8970 comm="syz.2.897" lport=58593 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.259135][ T8975] tmpfs: Unknown parameter 'q ' [ 140.463713][ T8981] netlink: 'syz.0.900': attribute type 1 has an invalid length. [ 140.484904][ T8981] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.506276][ T8981] bond4: (slave gretap1): making interface the new active one [ 140.510402][ T8981] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 140.654170][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.656135][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.718799][ T8992] netlink: 'syz.3.904': attribute type 21 has an invalid length. [ 140.774023][ T8992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8992 comm=syz.3.904 [ 140.778618][ T8992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=8992 comm=syz.3.904 [ 140.783439][ T8992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8992 comm=syz.3.904 [ 140.787643][ T8992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=8992 comm=syz.3.904 [ 140.791892][ T8992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=8992 comm=syz.3.904 [ 140.795843][ T8992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=8992 comm=syz.3.904 [ 140.799916][ T8992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=8992 comm=syz.3.904 [ 140.803837][ T8992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=8992 comm=syz.3.904 [ 140.807814][ T8992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=8992 comm=syz.3.904 [ 143.296816][ T8960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.300051][ T8993] netlink: 'syz.3.904': attribute type 10 has an invalid length. [ 143.303736][ T8993] __nla_validate_parse: 27 callbacks suppressed [ 143.303749][ T8993] netlink: 224 bytes leftover after parsing attributes in process `syz.3.904'. [ 143.367382][ T9005] QAT: failed to copy from user cfg_data. [ 143.404397][ T9010] overlayfs: failed to clone upperpath [ 143.476192][ T40] audit: type=1400 audit(1771264304.036:1373): avc: denied { mount } for pid=9023 comm="syz.2.914" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 143.512744][ T9026] geneve1: entered allmulticast mode [ 143.616209][ T40] audit: type=1400 audit(1771264304.168:1374): avc: denied { write } for pid=9036 comm="syz.1.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 143.637786][ T40] audit: type=1400 audit(1771264304.187:1375): avc: denied { ioctl } for pid=9039 comm="syz.2.920" path="socket:[23142]" dev="sockfs" ino=23142 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.677375][ T6017] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 143.687802][ T9043] f2fs: Unknown parameter 'nrquota¾"î‘k‡ Cû2·ý' [ 143.847861][ T6017] usb 5-1: Using ep0 maxpacket: 8 [ 143.851915][ T6017] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 143.855247][ T6017] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.857588][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'. [ 143.859314][ T6017] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.862185][ T9057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.928'. [ 143.866239][ T6017] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.873766][ T6017] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.873789][ T9057] erspan1: entered promiscuous mode [ 143.879208][ T6017] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.881153][ T9057] erspan1: entered allmulticast mode [ 143.891629][ T6017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.898588][ T9057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9057 comm=syz.2.928 [ 143.901324][ T832] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 144.061456][ T832] usb 8-1: Using ep0 maxpacket: 8 [ 144.067624][ T832] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 144.073160][ T832] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 144.077039][ T832] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 144.080873][ T832] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 144.085563][ T832] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.090729][ T832] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.096389][ T832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.104514][ T832] usbtmc 8-1:16.0: probe with driver usbtmc failed with error -22 [ 144.122218][ T6017] usb 5-1: GET_CAPABILITIES returned 0 [ 144.124458][ T6017] usbtmc 5-1:16.0: can't read capabilities [ 144.146744][ T40] audit: type=1400 audit(1771264304.665:1376): avc: denied { mounton } for pid=9076 comm="syz.1.934" path="/syzcgroup/unified/syz1" dev="gadgetfs" ino=10293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 144.151874][ T9079] ntfs3(sr0): Primary boot signature is not NTFS. [ 144.160642][ T9079] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 144.205904][ T9083] netlink: 'syz.1.936': attribute type 4 has an invalid length. [ 144.208444][ T9083] netlink: 76 bytes leftover after parsing attributes in process `syz.1.936'. [ 144.229744][ T9083] netlink: 36 bytes leftover after parsing attributes in process `syz.1.936'. [ 144.239882][ T9085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.291488][ T9089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.354450][ T832] usb 5-1: USB disconnect, device number 20 [ 144.395613][ T9099] sit0: entered promiscuous mode [ 144.404948][ T9099] netlink: 'syz.0.940': attribute type 1 has an invalid length. [ 144.408446][ T9099] netlink: 1 bytes leftover after parsing attributes in process `syz.0.940'. [ 144.913152][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.941'. [ 144.917768][ T9102] hsr_slave_0: left promiscuous mode [ 144.920112][ T9102] hsr_slave_1: left promiscuous mode [ 145.011778][ T9105] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 145.135576][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.945'. [ 146.844197][ T832] usb 8-1: USB disconnect, device number 7 [ 146.865630][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 146.978428][ T9136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.982206][ T9136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.987462][ T9136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.989905][ T9136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.010097][ T9133] hfsplus: unable to find HFS+ superblock [ 147.234509][ T40] audit: type=1400 audit(1771264307.555:1377): avc: denied { read } for pid=9138 comm="syz.3.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.473736][ T9087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.581694][ T40] audit: type=1400 audit(1771264307.892:1378): avc: denied { bind } for pid=9150 comm="syz.0.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 147.595716][ T40] audit: type=1400 audit(1771264307.902:1379): avc: denied { setopt } for pid=9152 comm="syz.1.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 147.619961][ T9151] overlayfs: failed lookup in lower (newroot/229, name='bus', err=-40): overlapping layers [ 147.635189][ T9151] evm: overlay not supported [ 147.759815][ T9172] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 147.806753][ T9170] netlink: 'syz.0.960': attribute type 1 has an invalid length. [ 147.881975][ T40] audit: type=1400 audit(1771264308.165:1380): avc: denied { bind } for pid=9180 comm="syz.2.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 147.889649][ T40] audit: type=1400 audit(1771264308.174:1381): avc: denied { setopt } for pid=9180 comm="syz.2.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 147.993227][ T5340] pmem0: [POWERTEC] [ 148.026346][ T60] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 148.164497][ T25] block nbd0: Possible stuck request ffff888029ca8000: control (read@0,1024B). Runtime 60 seconds [ 148.169554][ T25] block nbd0: Possible stuck request ffff888029ca8200: control (read@1024,1024B). Runtime 60 seconds [ 148.175067][ T25] block nbd0: Possible stuck request ffff888029ca8400: control (read@2048,1024B). Runtime 60 seconds [ 148.175271][ T60] usb 6-1: device descriptor read/64, error -71 [ 148.179757][ T25] block nbd0: Possible stuck request ffff888029ca8600: control (read@3072,1024B). Runtime 60 seconds [ 148.292948][ T40] audit: type=1400 audit(1771264308.559:1382): avc: denied { ioctl } for pid=9208 comm="syz.2.972" path="socket:[25708]" dev="sockfs" ino=25708 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 148.431371][ T60] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 148.580722][ T60] usb 6-1: device descriptor read/64, error -71 [ 148.698167][ T60] usb usb6-port1: attempt power cycle [ 149.071076][ T60] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 149.104017][ T60] usb 6-1: device descriptor read/8, error -71 [ 149.369028][ T60] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 149.390816][ T60] usb 6-1: device descriptor read/8, error -71 [ 149.508200][ T60] usb usb6-port1: unable to enumerate USB device [ 151.285750][ T9200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 151.363815][ T9231] netlink: 'syz.2.978': attribute type 1 has an invalid length. [ 151.411404][ T40] audit: type=1400 audit(1771264311.476:1383): avc: denied { read } for pid=9235 comm="syz.3.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 151.417201][ T9236] netlink: 68 bytes leftover after parsing attributes in process `syz.3.981'. [ 151.421582][ T40] audit: type=1400 audit(1771264311.476:1384): avc: denied { ioctl } for pid=9237 comm="syz.1.982" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 151.425662][ T9238] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 151.447526][ T40] audit: type=1400 audit(1771264311.514:1385): avc: denied { ioctl } for pid=9239 comm="syz.0.983" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x54dc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 151.504512][ T9253] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 151.520657][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'. [ 151.526533][ T9255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.987'. [ 151.567056][ T9259] fuse: Bad value for 'fd' [ 151.572366][ T9259] fuse: Bad value for 'fd' [ 151.630037][ T9269] set match dimension is over the limit! [ 151.691230][ T9269] netlink: 52 bytes leftover after parsing attributes in process `syz.0.991'. [ 151.701348][ T40] audit: type=1400 audit(1771264311.748:1386): avc: denied { bind } for pid=9277 comm="syz.3.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.762432][ T9281] erspan0 speed is unknown, defaulting to 1000 [ 151.793136][ T9286] mkiss: ax0: crc mode is auto. [ 151.835202][ T9286] tipc: Enabling of bearer rejected, already enabled [ 151.840985][ T9286] loop2: detected capacity change from 0 to 7 [ 151.846661][ T9286] Dev loop2: unable to read RDB block 7 [ 151.849235][ T9286] loop2: unable to read partition table [ 151.852020][ T9286] loop2: partition table beyond EOD, truncated [ 151.855306][ T9286] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 151.910037][ T9288] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 151.912725][ T9288] overlayfs: failed to set xattr on upper [ 151.914703][ T9288] overlayfs: ...falling back to redirect_dir=nofollow. [ 151.919121][ T9288] overlayfs: ...falling back to index=off. [ 151.922369][ T9288] overlayfs: ...falling back to uuid=null. [ 151.924363][ T9288] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 152.019813][ T9290] ceph: No mds server is up or the cluster is laggy [ 152.079318][ T5943] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 152.084533][ T5943] Bluetooth: hci0: Injecting HCI hardware error event [ 152.088398][ T5943] Bluetooth: hci0: hardware error 0x00 [ 152.235078][ T9290] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 152.501161][ T9333] erspan0 speed is unknown, defaulting to 1000 [ 152.525515][ T9343] fuse: Bad value for 'fd' [ 152.576067][ T9348] selinux_netlink_send: 1 callbacks suppressed [ 152.576085][ T9348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=9348 comm=syz.2.1012 [ 152.809627][ T9359] loop1: detected capacity change from 0 to 7 [ 152.816289][ T9359] Dev loop1: unable to read RDB block 7 [ 152.818430][ T9359] loop1: unable to read partition table [ 152.820317][ T9359] loop1: partition table beyond EOD, truncated [ 152.822656][ T9359] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 153.304450][ T9389] No buffer was provided with the request [ 153.583044][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 153.583062][ T40] audit: type=1400 audit(1771264313.522:1398): avc: denied { mount } for pid=9401 comm="syz.0.1028" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 153.608062][ T9400] bond5: invalid ARP target 0.0.0.0 specified for addition [ 153.611260][ T9400] bond5: option arp_ip_target: invalid value (0) [ 153.615624][ T9400] bond5 (unregistering): Released all slaves [ 153.780211][ T40] audit: type=1400 audit(1771264313.700:1399): avc: denied { connect } for pid=9411 comm="syz.0.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 153.801902][ T9415] netlink: 'syz.2.1031': attribute type 21 has an invalid length. [ 153.805091][ T9415] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1031'. [ 153.920094][ T40] audit: type=1326 audit(1771264313.831:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.1033" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9ddf9bf79 code=0x0 [ 153.993336][ T9428] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 154.005637][ T9430] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1037'. [ 154.044656][ T9434] syzkaller1: entered promiscuous mode [ 154.046480][ T9434] syzkaller1: entered allmulticast mode [ 154.105133][ T9436] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1040' sets config #1 [ 154.304583][ T5943] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 154.479709][ T6022] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 154.490196][ T40] audit: type=1400 audit(1771264314.366:1401): avc: denied { accept } for pid=9452 comm="syz.0.1048" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.655830][ T6022] usb 8-1: Using ep0 maxpacket: 8 [ 154.660133][ T6022] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 154.663768][ T6022] usb 8-1: config 0 has no interface number 0 [ 154.667010][ T6022] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 154.671660][ T6022] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 154.676350][ T6022] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 154.681729][ T6022] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 50, changing to 9 [ 154.686537][ T6022] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.695244][ T6022] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 154.699774][ T6022] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.703268][ T6022] usb 8-1: Product: syz [ 154.705078][ T6022] usb 8-1: Manufacturer: syz [ 154.707115][ T6022] usb 8-1: SerialNumber: syz [ 154.711689][ T6022] usb 8-1: config 0 descriptor?? [ 154.744694][ T40] audit: type=1400 audit(1771264314.610:1402): avc: denied { module_request } for pid=9466 comm="syz.2.1051" kmod=6E65742D70662D31362D70726F746F2D31362D66616D696C792D0C scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 154.777374][ T40] audit: type=1400 audit(1771264314.638:1403): avc: denied { bpf } for pid=9472 comm="syz.1.1052" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.784136][ T40] audit: type=1400 audit(1771264314.638:1404): avc: denied { perfmon } for pid=9472 comm="syz.1.1052" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.806509][ T40] audit: type=1400 audit(1771264314.666:1405): avc: denied { setattr } for pid=9472 comm="syz.1.1052" name="/" dev="9p" ino=72613947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.932670][ T6022] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 155.030279][ T40] audit: type=1400 audit(1771264314.882:1406): avc: denied { set_context_mgr } for pid=9476 comm="syz.1.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 155.038138][ T40] audit: type=1400 audit(1771264314.882:1407): avc: denied { call } for pid=9476 comm="syz.1.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 155.101070][ T9479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1056'. [ 155.147195][ T60] usb 8-1: USB disconnect, device number 8 [ 155.179474][ T9443] option changes via remount are deprecated (pid=9441 comm=syz.3.1043) [ 155.182479][ T9443] cgroup: option or name mismatch, new: 0x0 "none", old: 0x0 "" [ 155.673506][ T9511] netlink: zone id is out of range [ 155.675278][ T9511] netlink: zone id is out of range [ 155.677562][ T9511] netlink: set zone limit has 8 unknown bytes [ 155.895647][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1067'. [ 156.021572][ T2298] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 156.105429][ T9527] netlink: 'syz.2.1071': attribute type 11 has an invalid length. [ 156.180012][ T2298] usb 8-1: Using ep0 maxpacket: 8 [ 156.184075][ T2298] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 156.188217][ T2298] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.203293][ T2298] pvrusb2: Hardware description: Terratec Grabster AV400 [ 156.205960][ T2298] pvrusb2: ********** [ 156.207453][ T2298] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 156.212386][ T2298] pvrusb2: Important functionality might not be entirely working. [ 156.216010][ T2298] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 156.221323][ T2298] pvrusb2: ********** [ 156.414468][ T2493] pvrusb2: Invalid write control endpoint [ 156.467802][ T2493] pvrusb2: Invalid write control endpoint [ 156.469605][ T2493] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 156.472406][ T2493] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 156.474684][ T2493] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 156.477778][ T2493] pvrusb2: Device being rendered inoperable [ 156.499789][ T2493] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 156.502658][ T2493] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 156.505416][ T2493] pvrusb2: Attached sub-driver cx25840 [ 156.507086][ T2493] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 156.510276][ T2493] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 156.634804][ T9514] pvrusb2: Attempted to execute control transfer when device not ok [ 156.646773][ T9] usb 8-1: USB disconnect, device number 9 [ 158.084265][ T9551] overlayfs: failed to clone upperpath [ 158.229829][ T9563] loop1: detected capacity change from 0 to 7 [ 158.233458][ T5940] Dev loop1: unable to read RDB block 7 [ 158.235468][ T5940] loop1: unable to read partition table [ 158.241846][ T5940] loop1: partition table beyond EOD, truncated [ 158.246899][ T9563] Dev loop1: unable to read RDB block 7 [ 158.250386][ T9563] loop1: unable to read partition table [ 158.252804][ T9563] loop1: partition table beyond EOD, truncated [ 158.258376][ T9563] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 158.273390][ T9565] overlayfs: failed to clone upperpath [ 158.358187][ T9571] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1086'. [ 158.363488][ T9571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1086'. [ 158.372093][ T9571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1086'. [ 158.404422][ T9573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1087'. [ 158.408374][ T9573] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 158.546450][ T2298] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 158.555549][ T9584] ip6t_rpfilter: unknown options [ 158.738108][ T2298] usb 8-1: Using ep0 maxpacket: 32 [ 158.741707][ T2298] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 158.745016][ T2298] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 158.748878][ T2298] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.752349][ T2298] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 158.758402][ T2298] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 158.761408][ T2298] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.763941][ T2298] usb 8-1: Product: syz [ 158.765334][ T2298] usb 8-1: Manufacturer: syz [ 158.766850][ T2298] usb 8-1: SerialNumber: syz [ 158.773804][ C2] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 158.779207][ T2298] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input7 [ 158.821455][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'. [ 158.824393][ T9587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1091'. [ 158.878141][ T9589] No control pipe specified [ 158.916130][ T9592] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 159.004596][ T2298] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 159.007347][ T2298] (id 0x00) [ 159.053453][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1097'. [ 159.056254][ T9604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1097'. [ 159.059510][ T2298] rc_core: IR keymap rc-imon-pad not found [ 159.061451][ T2298] Registered IR keymap rc-empty [ 159.063077][ T2298] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 159.066743][ T2298] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 159.069157][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1097'. [ 159.073489][ T9604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1097'. [ 159.109521][ T5943] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 159.121015][ T9606] /dev/nullb0: Can't lookup blockdev [ 159.218798][ T2298] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 159.229089][ T2298] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input8 [ 159.236784][ T2298] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:10> initialized [ 159.363435][ T9617] erspan0 speed is unknown, defaulting to 1000 [ 159.421562][ T6017] usb 8-1: USB disconnect, device number 10 [ 159.590876][ T9626] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.646795][ T9633] kAFS: unable to lookup cell '(,c¾ûL' [ 159.655019][ T9633] kAFS: unable to lookup cell '\,' [ 159.724544][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 159.724560][ T40] audit: type=1400 audit(1771264319.282:1417): avc: denied { read } for pid=9644 comm="syz.3.1108" dev="nsfs" ino=4026533318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 159.734789][ T40] audit: type=1400 audit(1771264319.282:1418): avc: denied { open } for pid=9644 comm="syz.3.1108" path="net:[4026533318]" dev="nsfs" ino=4026533318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 159.759063][ T9648] overlayfs: failed to clone upperpath [ 159.768412][ T9649] overlay: ./file0 is not a directory [ 159.769531][ T9645] tipc: Can't bind to reserved service type 2 [ 159.926538][ T40] audit: type=1400 audit(1771264319.470:1419): avc: denied { map } for pid=9664 comm="syz.2.1114" path="socket:[25400]" dev="sockfs" ino=25400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.267180][ T40] audit: type=1400 audit(1771264319.789:1420): avc: denied { read } for pid=9672 comm="syz.3.1116" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 160.277430][ T40] audit: type=1400 audit(1771264319.789:1421): avc: denied { open } for pid=9672 comm="syz.3.1116" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 161.458668][ T9689] openvswitch: netlink: IP tunnel dst address not specified [ 161.490948][ T9694] tipc: Started in network mode [ 161.492502][ T9694] tipc: Node identity 84e, cluster identity 4711 [ 161.494608][ T9694] tipc: Node number set to 2126 [ 161.587023][ T9700] overlay: Unknown parameter 'uid' [ 161.634823][ T40] audit: type=1400 audit(1771264321.065:1422): avc: denied { map } for pid=9701 comm="syz.2.1126" path="socket:[24495]" dev="sockfs" ino=24495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 161.750598][ T9718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20128 sclass=netlink_route_socket pid=9718 comm=syz.3.1131 [ 161.759713][ T9711] overlayfs: failed to resolve './file0': -2 [ 161.799997][ T9725] netlink: 'syz.2.1133': attribute type 3 has an invalid length. [ 161.803910][ T9725] netlink: 'syz.2.1133': attribute type 3 has an invalid length. [ 161.847608][ T40] audit: type=1400 audit(1771264321.271:1423): avc: denied { write } for pid=9730 comm="syz.2.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 161.901508][ T9739] fuse: Unknown parameter 'grop_id' [ 162.015708][ T9749] sp0: Synchronizing with TNC [ 162.035627][ T9749] xfrm0: entered promiscuous mode [ 162.037314][ T9749] xfrm0: entered allmulticast mode [ 162.254770][ T40] audit: type=1400 audit(1771264321.646:1424): avc: denied { open } for pid=9752 comm="syz.3.1143" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=25489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 162.257445][ T9753] 9p: Bad value for 'rfdno' [ 162.959590][ T6022] IPVS: starting estimator thread 0... [ 162.964288][ T9761] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 162.966918][ T9761] tipc: Enabled bearer , priority 10 [ 163.065564][ T9762] IPVS: using max 27 ests per chain, 64800 per kthread [ 163.108215][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 163.246436][ T40] audit: type=1400 audit(1771264322.575:1425): avc: denied { firmware_load } for pid=9769 comm="syz.3.1149" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 163.326562][ T9774] geneve2: entered promiscuous mode [ 163.328950][ T9774] geneve2: entered allmulticast mode [ 163.406625][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 163.524029][ T60] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 163.615379][ T9780] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 163.696188][ T60] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 163.700272][ T60] usb 6-1: config 0 interface 0 has no altsetting 0 [ 163.705176][ T60] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 163.708929][ T60] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 163.712368][ T60] usb 6-1: Product: syz [ 163.714158][ T60] usb 6-1: Manufacturer: syz [ 163.716453][ T60] usb 6-1: SerialNumber: syz [ 163.720572][ T60] usb 6-1: config 0 descriptor?? [ 163.727039][ T60] usb 6-1: selecting invalid altsetting 0 [ 163.840237][ T9796] __nla_validate_parse: 15 callbacks suppressed [ 163.840256][ T9796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1158'. [ 163.864352][ T9796] bond5 (unregistering): Released all slaves [ 163.962616][ T29] usb 6-1: USB disconnect, device number 27 [ 163.971567][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 164.303620][ T9818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9818 comm=syz.3.1164 [ 164.408782][ T9832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'. [ 164.415361][ T9832] macsec2: entered allmulticast mode [ 164.417169][ T9832] bridge0: entered allmulticast mode [ 164.420189][ T9832] bridge0: port 3(macsec2) entered blocking state [ 164.422487][ T9832] bridge0: port 3(macsec2) entered disabled state [ 164.426472][ T9832] bridge0: left allmulticast mode [ 164.433971][ T40] audit: type=1400 audit(1771264323.701:1426): avc: denied { connect } for pid=9823 comm="syz.3.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.449885][ T6017] hid-generic 0005:0006:5508.0004: hidraw1: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 164.474077][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1166'. [ 164.509266][ T9835] fido_id[9835]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 164.519474][ T9837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1169'. [ 164.541130][ T9837] 8021q: adding VLAN 0 to HW filter on device bond5 [ 164.554830][ T9837] bond5: (slave batadv1): Opening slave failed [ 164.605331][ T9839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9839 comm=syz.2.1169 [ 164.757180][ T9844] fuse: Unknown parameter '000000000000000000030x0000000000000003' [ 164.822802][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'. [ 164.852019][ T9856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.856919][ T9856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1174'. [ 165.004763][ T9865] erspan0 speed is unknown, defaulting to 1000 [ 165.122694][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 165.205501][ T9870] CUSE: unknown device info "" [ 165.207256][ T9870] CUSE: zero length info key specified [ 165.495686][ T6022] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 165.525441][ T9874] tipc: Invalid UDP bearer configuration [ 165.525466][ T9874] tipc: Enabling of bearer rejected, failed to enable media [ 165.533021][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 165.538136][ T9874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1181'. [ 165.541541][ T9874] netlink: 'syz.2.1181': attribute type 10 has an invalid length. [ 165.678248][ T6022] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 165.681863][ T6022] usb 6-1: config 0 interface 0 has no altsetting 0 [ 165.689442][ T6022] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 165.692486][ T6022] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 165.695624][ T6022] usb 6-1: Product: syz [ 165.696992][ T6022] usb 6-1: Manufacturer: syz [ 165.699260][ T6022] usb 6-1: SerialNumber: syz [ 165.702102][ T6022] usb 6-1: config 0 descriptor?? [ 165.713210][ T6022] usb 6-1: selecting invalid altsetting 0 [ 165.933245][ T6017] usb 6-1: USB disconnect, device number 28 [ 166.148426][ T9913] No control pipe specified [ 166.231205][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 166.502289][ T40] audit: type=1400 audit(1771264325.634:1427): avc: denied { mount } for pid=9924 comm="syz.2.1196" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 166.516058][ T9927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.534130][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1198'. [ 166.537481][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1198'. [ 167.339670][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 167.477566][ T9941] ip6gre1: entered promiscuous mode [ 167.480274][ T9941] ip6gre1: entered allmulticast mode [ 167.548081][ T9945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62224 sclass=netlink_route_socket pid=9945 comm=syz.2.1203 [ 167.883441][ T6022] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 168.053751][ T6022] usb 6-1: Using ep0 maxpacket: 8 [ 168.056994][ T6022] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 168.061643][ T6022] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 168.066163][ T6022] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.070468][ T6022] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.075899][ T6022] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.079140][ T6022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.148947][ T40] audit: type=1400 audit(1771264327.182:1428): avc: denied { name_bind } for pid=9951 comm="syz.2.1206" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 168.297807][ T6022] usb 6-1: usb_control_msg returned -32 [ 168.299877][ T6022] usbtmc 6-1:16.0: can't read capabilities [ 168.448183][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 168.672781][ T9954] FAULT_INJECTION: forcing a failure. [ 168.672781][ T9954] name failslab, interval 1, probability 0, space 0, times 1 [ 168.676833][ T9954] CPU: 1 UID: 0 PID: 9954 Comm: syz.1.1205 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.676850][ T9954] Tainted: [L]=SOFTLOCKUP [ 168.676854][ T9954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.676861][ T9954] Call Trace: [ 168.676865][ T9954] [ 168.676869][ T9954] dump_stack_lvl+0x100/0x190 [ 168.676903][ T9954] should_fail_ex.cold+0x5/0xa [ 168.676917][ T9954] ? tomoyo_realpath_from_path+0xb6/0x690 [ 168.676944][ T9954] should_failslab+0xc2/0x120 [ 168.676961][ T9954] __kmalloc_noprof+0xe0/0x850 [ 168.676977][ T9954] tomoyo_realpath_from_path+0xb6/0x690 [ 168.676998][ T9954] tomoyo_path_number_perm+0x23c/0x580 [ 168.677012][ T9954] ? tomoyo_path_number_perm+0x22e/0x580 [ 168.677027][ T9954] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 168.677056][ T9954] ? find_held_lock+0x2b/0x80 [ 168.677074][ T9954] ? __fget_files+0x215/0x3d0 [ 168.677096][ T9954] ? hook_file_ioctl_common+0x146/0x410 [ 168.677122][ T9954] ? __fget_files+0x21f/0x3d0 [ 168.677153][ T9954] security_file_ioctl+0xd3/0x230 [ 168.677178][ T9954] __x64_sys_ioctl+0xb7/0x210 [ 168.677193][ T9954] do_syscall_64+0x106/0xf80 [ 168.677217][ T9954] ? clear_bhb_loop+0x40/0x90 [ 168.677231][ T9954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.677242][ T9954] RIP: 0033:0x7fe9ddf9bf79 [ 168.677252][ T9954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.677294][ T9954] RSP: 002b:00007fe9dedae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.677306][ T9954] RAX: ffffffffffffffda RBX: 00007fe9de216090 RCX: 00007fe9ddf9bf79 [ 168.677313][ T9954] RDX: 0000200000000040 RSI: 00000000c0145b0d RDI: 0000000000000005 [ 168.677319][ T9954] RBP: 00007fe9dedae090 R08: 0000000000000000 R09: 0000000000000000 [ 168.677325][ T9954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.677331][ T9954] R13: 00007fe9de216128 R14: 00007fe9de216090 R15: 00007fff1d265d68 [ 168.677350][ T9954] [ 168.677355][ T9954] ERROR: Out of memory at tomoyo_realpath_from_path. [ 169.072752][ T9957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.556759][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 170.666724][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 170.715935][ T9975] Invalid option length (1784) for dns_resolver key [ 170.859830][ T5976] usb 6-1: USB disconnect, device number 29 [ 170.892055][ T9982] netlink: 'syz.2.1217': attribute type 1 has an invalid length. [ 170.985441][ T40] audit: type=1400 audit(1771264329.837:1429): avc: denied { execute } for pid=9986 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 170.993157][ T40] audit: type=1400 audit(1771264329.837:1430): avc: denied { execute_no_trans } for pid=9986 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 171.150292][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.156263][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.160854][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.164648][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.169502][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.221782][ T9991] erspan0 speed is unknown, defaulting to 1000 [ 171.518208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 171.568031][ T9988] __nla_validate_parse: 2 callbacks suppressed [ 171.568049][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 171.658464][ T9991] chnl_net:caif_netlink_parms(): no params data found [ 171.672354][T10001] autofs: Unknown parameter '00000000000000000000' [ 171.719162][T10004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.747084][ T9991] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.749502][ T9991] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.751877][ T9991] bridge_slave_0: entered allmulticast mode [ 171.754823][ T9991] bridge_slave_0: entered promiscuous mode [ 171.758030][ T9991] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.760300][ T9991] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.762664][ T9991] bridge_slave_1: entered allmulticast mode [ 171.765781][ T9991] bridge_slave_1: entered promiscuous mode [ 171.773630][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 171.782297][ T9991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.786841][ T9991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.802440][ T9991] team0: Port device team_slave_0 added [ 171.806073][ T9991] team0: Port device team_slave_1 added [ 171.819098][ T9991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.821348][ T9991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.829640][ T9991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.833962][ T9991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.836268][ T9991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.844457][ T9991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.858920][ T6017] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 171.867105][ T9991] hsr_slave_0: entered promiscuous mode [ 171.869598][ T9991] hsr_slave_1: entered promiscuous mode [ 171.871730][ T9991] debugfs: 'hsr0' already exists in 'hsr' [ 171.873523][ T9991] Cannot create hsr debugfs directory [ 171.969156][ T9991] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.973788][ T9991] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.982114][ T9991] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.986564][ T9991] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.000836][ T9991] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.003181][ T9991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.005636][ T9991] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.007945][ T9991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.029666][ T6017] usb 6-1: Using ep0 maxpacket: 8 [ 172.033697][ T6017] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 172.038021][ T9991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.038536][ T6017] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 172.045116][ T6017] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.049146][ T6017] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.053960][ T6017] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.054859][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.057850][ T6017] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.064902][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.073950][ T9991] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.079622][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.082125][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.098345][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.100671][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.212225][ T9991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.289558][ T6017] usb 6-1: usb_control_msg returned -32 [ 172.291585][ T6017] usbtmc 6-1:16.0: can't read capabilities [ 172.368989][ T9991] veth0_vlan: entered promiscuous mode [ 172.374462][ T9991] veth1_vlan: entered promiscuous mode [ 172.394007][ T9991] veth0_macvtap: entered promiscuous mode [ 172.398848][ T9991] veth1_macvtap: entered promiscuous mode [ 172.408234][ T9991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.417679][ T9991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.423057][ T102] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.426064][ T102] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.432045][ T102] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.436432][ T102] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.496081][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.509059][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.526472][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.529016][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.557975][ T40] audit: type=1400 audit(1771264331.319:1431): avc: denied { mounton } for pid=9991 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 172.565674][ T40] audit: type=1400 audit(1771264331.319:1432): avc: denied { mounton } for pid=9991 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 172.646124][T10037] ref_ctr_offset mismatch. inode: 0x17 offset: 0x0 ref_ctr_offset(old): 0x34 ref_ctr_offset(new): 0x0 [ 172.721064][T10047] loop1: detected capacity change from 0 to 7 [ 172.724260][ T5940] Dev loop1: unable to read RDB block 7 [ 172.726123][ T5940] loop1: unable to read partition table [ 172.728156][ T5940] loop1: partition table beyond EOD, truncated [ 172.734743][T10047] Dev loop1: unable to read RDB block 7 [ 172.736575][T10047] loop1: unable to read partition table [ 172.738478][T10047] loop1: partition table beyond EOD, truncated [ 172.739516][T10046] autofs: Unknown parameter '00000000000000000000' [ 172.740636][T10047] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 172.827240][T10050] gfs2: not a GFS2 filesystem [ 172.849725][T10059] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1235'. [ 172.882264][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 172.984270][ T40] audit: type=1400 audit(1771264331.723:1433): avc: denied { listen } for pid=10071 comm="syz.2.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.050906][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'. [ 173.054959][T10078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1241'. [ 173.055031][T10080] loop1: detected capacity change from 0 to 7 [ 173.057979][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'. [ 173.061753][ T5940] Dev loop1: unable to read RDB block 7 [ 173.063144][T10078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1241'. [ 173.065634][ T5940] loop1: unable to read partition table [ 173.071073][ T5940] loop1: partition table beyond EOD, truncated [ 173.075905][T10080] Dev loop1: unable to read RDB block 7 [ 173.078039][T10080] loop1: unable to read partition table [ 173.079981][T10080] loop1: partition table beyond EOD, truncated [ 173.090192][T10080] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 173.115360][T10082] veth0_to_team: entered promiscuous mode [ 173.393925][ T5943] Bluetooth: hci4: command tx timeout [ 174.001449][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 174.359693][T10101] 9p: Bad value for 'rfdno' [ 174.390552][T10110] loop1: detected capacity change from 0 to 7 [ 174.393925][T10110] Dev loop1: unable to read RDB block 7 [ 174.395912][T10110] loop1: unable to read partition table [ 174.397802][T10110] loop1: partition table beyond EOD, truncated [ 174.399809][T10110] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 174.435920][T10112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.472895][ T40] audit: type=1400 audit(1771264333.121:1434): avc: denied { listen } for pid=10115 comm="syz.4.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 174.491382][T10120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1256'. [ 174.547707][ T40] audit: type=1400 audit(1771264333.186:1435): avc: denied { mounton } for pid=10123 comm="syz.4.1258" path="/17/file0" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 174.585843][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'. [ 174.588819][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 174.591618][T10120] netlink: 'syz.2.1256': attribute type 7 has an invalid length. [ 174.593632][ T40] audit: type=1400 audit(1771264333.233:1436): avc: denied { getopt } for pid=10129 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 174.594359][T10120] netlink: 'syz.2.1256': attribute type 13 has an invalid length. [ 174.608905][T10130] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1259'. [ 174.705946][ T5943] Bluetooth: hci3: connection err: -111 [ 174.821292][ T5976] usb 6-1: USB disconnect, device number 30 [ 174.852024][T10155] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 174.859339][T10155] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 174.861408][T10143] kvm: kvm [10142]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 174.868736][T10143] kvm: kvm [10142]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 175.099170][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 175.116065][T10174] overlay: filesystem on ./file0 not supported as upperdir [ 175.127560][T10172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.141378][T10172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.151339][T10172] bond1: (slave bond0): making interface the new active one [ 175.157195][T10172] bond1: (slave bond0): Enslaving as an active interface with an up link [ 175.209946][ T40] audit: type=1400 audit(1771264333.806:1437): avc: denied { wake_alarm } for pid=10178 comm="syz.1.1275" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 175.381235][T10187] bridge0: entered promiscuous mode [ 175.383365][T10187] macvlan2: entered promiscuous mode [ 175.454983][ T40] audit: type=1400 audit(1771264334.040:1438): avc: denied { write } for pid=10191 comm="syz.1.1279" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 175.462969][ T40] audit: type=1400 audit(1771264334.040:1439): avc: denied { accept } for pid=10191 comm="syz.1.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.462997][ T40] audit: type=1400 audit(1771264334.040:1440): avc: denied { ioctl } for pid=10191 comm="syz.1.1279" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 175.473982][T10194] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 175.582660][T10205] autofs: Unknown parameter 'fd00000000000000000000' [ 175.610851][ T5943] Bluetooth: hci4: command tx timeout [ 175.730204][T10223] loop1: detected capacity change from 0 to 7 [ 175.733402][T10223] Dev loop1: unable to read RDB block 7 [ 175.735668][T10223] loop1: unable to read partition table [ 175.738151][T10223] loop1: partition table beyond EOD, truncated [ 175.740907][T10223] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 175.871494][T10240] macsec2: entered promiscuous mode [ 175.875391][T10237] autofs: Unknown parameter 'fd00000000000000000000' [ 175.922302][T10242] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 176.193423][T10259] syz_tun: entered allmulticast mode [ 176.204111][T10261] loop1: detected capacity change from 0 to 7 [ 176.210009][T10261] Dev loop1: unable to read RDB block 7 [ 176.211917][T10261] loop1: unable to read partition table [ 176.214011][T10261] loop1: partition table beyond EOD, truncated [ 176.216481][T10261] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 176.218402][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 176.241120][T10252] syz_tun: left allmulticast mode [ 176.267852][T10263] netlink: 'syz.1.1304': attribute type 4 has an invalid length. [ 176.337093][T10270] autofs: Unknown parameter 'fd00000000000000000000' [ 176.545330][T10293] trusted_key: syz.2.1314 sent an empty control message without MSG_MORE. [ 176.645714][T10303] netlink: 'syz.2.1318': attribute type 11 has an invalid length. [ 176.669894][T10306] tmpfs: Unknown parameter 'nr_inodesEä ~ºº{Ï­€Ñ' [ 176.737382][T10296] netlink: 'syz.1.1315': attribute type 87 has an invalid length. [ 176.744787][ T5943] Bluetooth: hci4: unexpected event 0x07 length: 308 > 255 [ 176.831963][T10318] futex_wake_op: syz.4.1321 tries to shift op by -1; fix this program [ 176.903986][T10319] netlink: 'syz.2.1323': attribute type 1 has an invalid length. [ 176.936137][T10319] bond7: (slave geneve2): making interface the new active one [ 176.940431][T10319] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 176.943980][ T102] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 176.947236][ T102] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 176.949894][ T102] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 176.953373][ T102] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 176.981984][T10326] syzkaller1: entered promiscuous mode [ 176.984461][T10326] syzkaller1: entered allmulticast mode [ 177.220292][ T29] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 177.245091][ T832] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 177.316290][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 177.392436][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.396158][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.399384][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.404247][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.407252][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.411157][ T29] usb 6-1: config 0 descriptor?? [ 177.413073][ T832] usb 9-1: Using ep0 maxpacket: 16 [ 177.425319][ T832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.428972][ T832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.432024][ T832] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 177.436146][ T832] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 177.439062][ T832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.443536][ T832] usb 9-1: config 0 descriptor?? [ 177.818192][T10329] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 177.827877][ T5943] Bluetooth: hci4: command tx timeout [ 177.872541][ T29] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 177.895885][ T832] hid_parser_main: 22 callbacks suppressed [ 177.895904][ T832] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 177.901044][ T832] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 177.903915][ T832] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 177.906729][ T832] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 177.909497][ T832] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 177.918652][ T832] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 177.971878][ T832] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 177.975447][ T832] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 178.095132][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 178.095149][ T40] audit: type=1400 audit(1771264336.517:1445): avc: denied { append } for pid=10325 comm="syz.4.1326" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 178.095178][T10326] random: crng reseeded on system resumption [ 178.115282][ T6014] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 178.115578][ T2298] usb 9-1: USB disconnect, device number 2 [ 178.120112][ T6014] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 178.128087][ T2298] ------------[ cut here ]------------ [ 178.129839][ T2298] workqueue: work disable count underflowed [ 178.131061][ T6014] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 178.131775][ T2298] WARNING: kernel/workqueue.c:4409 at enable_work+0x2d1/0x320, CPU#2: kworker/2:2/2298 [ 178.135949][ T6014] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 178.138836][ T2298] Modules linked in: [ 178.138862][ T2298] CPU: 2 UID: 0 PID: 2298 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.138880][ T2298] Tainted: [L]=SOFTLOCKUP [ 178.138884][ T2298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.138893][ T2298] Workqueue: usb_hub_wq hub_event [ 178.154366][ T2298] RIP: 0010:enable_work+0x2d1/0x320 [ 178.156149][ T2298] Code: ff e8 03 94 38 00 e8 3e 45 be 09 e9 61 ff ff ff e8 f4 93 38 00 90 0f 0b 90 e9 17 fe ff ff e8 e6 93 38 00 48 8d 3d df 2b 0c 0f <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 3a e1 a4 00 e9 [ 178.162455][ T2298] RSP: 0018:ffffc9000d81f3b0 EFLAGS: 00010093 [ 178.164434][ T2298] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81d00310 [ 178.166932][ T2298] RDX: ffff88802f268000 RSI: ffffffff81d004da RDI: ffffffff90dc30c0 [ 178.169381][ T2298] RBP: ffff888056f6d738 R08: 0000000000000007 R09: 0000000000000000 [ 178.171850][ T2298] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 178.174510][ T2298] R13: 1ffff92001b03e77 R14: ffff888056f6d698 R15: 000000007fffffff [ 178.176965][ T2298] FS: 0000000000000000(0000) GS:ffff8880d6552000(0000) knlGS:0000000000000000 [ 178.179712][ T2298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.181837][ T2298] CR2: 000000070000008d CR3: 00000000204d7000 CR4: 0000000000352ef0 [ 178.184372][ T2298] Call Trace: [ 178.185512][ T2298] [ 178.186450][ T2298] ? __pfx_enable_work+0x10/0x10 [ 178.188011][ T2298] ? __pfx___might_resched+0x10/0x10 [ 178.189724][ T2298] cancel_delayed_work_sync+0x96/0xf0 [ 178.191424][ T2298] thermal_zone_device_unregister+0x28e/0x4e0 [ 178.193479][ T2298] ? __pfx_shield_remove+0x10/0x10 [ 178.195661][ T2298] power_supply_unregister+0x10a/0x150 [ 178.197855][ T2298] shield_remove+0x75/0x130 [ 178.199756][ T2298] ? __pfx_shield_remove+0x10/0x10 [ 178.201847][ T2298] hid_device_remove+0xd1/0x270 [ 178.203877][ T2298] ? __pfx_hid_device_remove+0x10/0x10 [ 178.206201][ T2298] device_remove+0xcb/0x180 [ 178.208110][ T2298] device_release_driver_internal+0x42e/0x600 [ 178.210680][ T2298] bus_remove_device+0x22f/0x440 [ 178.212745][ T2298] device_del+0x376/0x9b0 [ 178.214655][ T2298] ? __pfx_device_del+0x10/0x10 [ 178.216480][ T2298] ? do_raw_spin_lock+0x128/0x260 [ 178.218083][ T2298] ? find_held_lock+0x2b/0x80 [ 178.219935][ T2298] hid_destroy_device+0x19c/0x240 [ 178.221668][ T2298] usbhid_disconnect+0xa0/0xe0 [ 178.223507][ T2298] usb_unbind_interface+0x1dd/0x9e0 [ 178.225198][ T2298] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 178.226816][ T2298] ? __pfx_usb_unbind_interface+0x10/0x10 [ 178.228570][ T2298] device_remove+0x12a/0x180 [ 178.230067][ T2298] device_release_driver_internal+0x42e/0x600 [ 178.232029][ T2298] bus_remove_device+0x22f/0x440 [ 178.233861][ T2298] device_del+0x376/0x9b0 [ 178.235763][ T2298] ? __pfx_device_del+0x10/0x10 [ 178.237867][ T2298] ? kobject_put+0xb9/0x640 [ 178.239835][ T2298] usb_disable_device+0x367/0x810 [ 178.242017][ T2298] usb_disconnect+0x2e2/0x9a0 [ 178.243837][ T2298] hub_event+0x1d0c/0x4af0 [ 178.245503][ T2298] ? __lock_acquire+0x4a5/0x2630 [ 178.247081][ T2298] ? do_raw_spin_unlock+0x145/0x1e0 [ 178.248723][ T2298] ? __pfx_hub_event+0x10/0x10 [ 178.250192][ T2298] ? debug_object_deactivate+0x2e4/0x3b0 [ 178.251845][ T2298] ? sched_core_dequeue+0x200/0x270 [ 178.253678][ T2298] ? rcu_is_watching+0x12/0xc0 [ 178.255245][ T2298] process_one_work+0x9d7/0x1920 [ 178.256825][ T2298] ? __pfx_process_one_work+0x10/0x10 [ 178.258559][ T2298] ? __pfx_hub_event+0x10/0x10 [ 178.260080][ T2298] worker_thread+0x5da/0xe40 [ 178.261606][ T2298] ? __pfx_worker_thread+0x10/0x10 [ 178.263317][ T2298] ? kthread+0x13a/0x450 [ 178.264730][ T2298] ? __pfx_worker_thread+0x10/0x10 [ 178.266388][ T2298] kthread+0x370/0x450 [ 178.267773][ T2298] ? __pfx_kthread+0x10/0x10 [ 178.269544][ T2298] ret_from_fork+0x754/0xd80 [ 178.271464][ T2298] ? __pfx_ret_from_fork+0x10/0x10 [ 178.273601][ T2298] ? __switch_to+0x7b4/0x1120 [ 178.275380][ T2298] ? __pfx_kthread+0x10/0x10 [ 178.277321][ T2298] ret_from_fork_asm+0x1a/0x30 [ 178.279271][ T2298] [ 178.280594][ T2298] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 178.283509][ T2298] CPU: 2 UID: 0 PID: 2298 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.287747][ T2298] Tainted: [L]=SOFTLOCKUP [ 178.289498][ T2298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.293535][ T2298] Workqueue: usb_hub_wq hub_event [ 178.295602][ T2298] Call Trace: [ 178.296993][ T2298] [ 178.298266][ T2298] dump_stack_lvl+0x100/0x190 [ 178.300233][ T2298] vpanic+0x552/0x970 [ 178.301885][ T2298] ? __pfx_vpanic+0x10/0x10 [ 178.303763][ T2298] panic+0xd1/0xe0 [ 178.305399][ T2298] ? __pfx_panic+0x10/0x10 [ 178.307221][ T2298] ? check_panic_on_warn+0x1f/0x90 [ 178.309347][ T2298] check_panic_on_warn.cold+0x19/0x34 [ 178.311543][ T2298] ? enable_work+0x2d1/0x320 [ 178.313444][ T2298] __warn.cold+0x191/0x348 [ 178.315318][ T2298] __report_bug+0x296/0x3d0 [ 178.317232][ T2298] ? enable_work+0x2d1/0x320 [ 178.319121][ T2298] ? __pfx___report_bug+0x10/0x10 [ 178.321192][ T2298] ? __pfx_debug_object_free+0x10/0x10 [ 178.323407][ T2298] ? enable_work+0x2ca/0x320 [ 178.325421][ T2298] ? enable_work+0x100/0x320 [ 178.327384][ T2298] ? find_held_lock+0x2b/0x80 [ 178.329363][ T2298] ? __flush_work+0x928/0xcb0 [ 178.331326][ T2298] ? __flush_work+0x928/0xcb0 [ 178.333295][ T2298] report_bug_entry+0xe1/0x290 [ 178.335365][ T2298] ? enable_work+0x2d1/0x320 [ 178.337412][ T2298] handle_bug+0x1c9/0x2a0 [ 178.339265][ T2298] exc_invalid_op+0x17/0x50 [ 178.341194][ T2298] asm_exc_invalid_op+0x1a/0x20 [ 178.343211][ T2298] RIP: 0010:enable_work+0x2d1/0x320 [ 178.345425][ T2298] Code: ff e8 03 94 38 00 e8 3e 45 be 09 e9 61 ff ff ff e8 f4 93 38 00 90 0f 0b 90 e9 17 fe ff ff e8 e6 93 38 00 48 8d 3d df 2b 0c 0f <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 3a e1 a4 00 e9 [ 178.353681][ T2298] RSP: 0018:ffffc9000d81f3b0 EFLAGS: 00010093 [ 178.356355][ T2298] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81d00310 [ 178.359780][ T2298] RDX: ffff88802f268000 RSI: ffffffff81d004da RDI: ffffffff90dc30c0 [ 178.363083][ T2298] RBP: ffff888056f6d738 R08: 0000000000000007 R09: 0000000000000000 [ 178.366394][ T2298] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 178.369656][ T2298] R13: 1ffff92001b03e77 R14: ffff888056f6d698 R15: 000000007fffffff [ 178.372839][ T2298] ? enable_work+0x100/0x320 [ 178.374820][ T2298] ? enable_work+0x2ca/0x320 [ 178.376695][ T2298] ? __pfx_enable_work+0x10/0x10 [ 178.378705][ T2298] ? __pfx___might_resched+0x10/0x10 [ 178.380899][ T2298] cancel_delayed_work_sync+0x96/0xf0 [ 178.383125][ T2298] thermal_zone_device_unregister+0x28e/0x4e0 [ 178.385785][ T2298] ? __pfx_shield_remove+0x10/0x10 [ 178.387936][ T2298] power_supply_unregister+0x10a/0x150 [ 178.390187][ T2298] shield_remove+0x75/0x130 [ 178.392076][ T2298] ? __pfx_shield_remove+0x10/0x10 [ 178.394213][ T2298] hid_device_remove+0xd1/0x270 [ 178.396312][ T2298] ? __pfx_hid_device_remove+0x10/0x10 [ 178.398578][ T2298] device_remove+0xcb/0x180 [ 178.400541][ T2298] device_release_driver_internal+0x42e/0x600 [ 178.403105][ T2298] bus_remove_device+0x22f/0x440 [ 178.404967][ T2298] device_del+0x376/0x9b0 [ 178.406369][ T2298] ? __pfx_device_del+0x10/0x10 [ 178.407877][ T2298] ? do_raw_spin_lock+0x128/0x260 [ 178.409500][ T2298] ? find_held_lock+0x2b/0x80 [ 178.410987][ T2298] hid_destroy_device+0x19c/0x240 [ 178.412602][ T2298] usbhid_disconnect+0xa0/0xe0 [ 178.414415][ T2298] usb_unbind_interface+0x1dd/0x9e0 [ 178.416128][ T2298] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 178.417899][ T2298] ? __pfx_usb_unbind_interface+0x10/0x10 [ 178.419701][ T2298] device_remove+0x12a/0x180 [ 178.421187][ T2298] device_release_driver_internal+0x42e/0x600 [ 178.423106][ T2298] bus_remove_device+0x22f/0x440 [ 178.424972][ T2298] device_del+0x376/0x9b0 [ 178.426398][ T2298] ? __pfx_device_del+0x10/0x10 [ 178.427927][ T2298] ? kobject_put+0xb9/0x640 [ 178.429406][ T2298] usb_disable_device+0x367/0x810 [ 178.430976][ T2298] usb_disconnect+0x2e2/0x9a0 [ 178.432427][ T2298] hub_event+0x1d0c/0x4af0 [ 178.433967][ T2298] ? __lock_acquire+0x4a5/0x2630 [ 178.435804][ T2298] ? do_raw_spin_unlock+0x145/0x1e0 [ 178.437564][ T2298] ? __pfx_hub_event+0x10/0x10 [ 178.439063][ T2298] ? debug_object_deactivate+0x2e4/0x3b0 [ 178.441219][ T2298] ? sched_core_dequeue+0x200/0x270 [ 178.442928][ T2298] ? rcu_is_watching+0x12/0xc0 [ 178.444571][ T2298] process_one_work+0x9d7/0x1920 [ 178.446228][ T2298] ? __pfx_process_one_work+0x10/0x10 [ 178.447901][ T2298] ? __pfx_hub_event+0x10/0x10 [ 178.449395][ T2298] worker_thread+0x5da/0xe40 [ 178.450795][ T2298] ? __pfx_worker_thread+0x10/0x10 [ 178.452406][ T2298] ? kthread+0x13a/0x450 [ 178.453790][ T2298] ? __pfx_worker_thread+0x10/0x10 [ 178.455621][ T2298] kthread+0x370/0x450 [ 178.456892][ T2298] ? __pfx_kthread+0x10/0x10 [ 178.458349][ T2298] ret_from_fork+0x754/0xd80 [ 178.459803][ T2298] ? __pfx_ret_from_fork+0x10/0x10 [ 178.461435][ T2298] ? __switch_to+0x7b4/0x1120 [ 178.462929][ T2298] ? __pfx_kthread+0x10/0x10 [ 178.464442][ T2298] ret_from_fork_asm+0x1a/0x30 [ 178.466048][ T2298] [ 178.467751][ T2298] Kernel Offset: disabled [ 178.469147][ T2298] Rebooting in 86400 seconds..