last executing test programs: 2.080053014s ago: executing program 1 (id=383): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b84954fc5dc28"], 0xdd12}], 0x1}, 0x20048821) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x40, 0x4) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000100)='./file1\x00', 0x400017e) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) sendfile(r5, r6, 0x0, 0x20000000000006) vmsplice(r4, &(0x7f0000000200)=[{&(0x7f00000002c0)='u', 0x1}], 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000817000/0x2000)=nil, 0x2000, 0x4, 0x28011, r7, 0x21fd6000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1.609057372s ago: executing program 3 (id=399): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x6, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000002c0)={0x1, 0x2, 0x1}) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r5, 0xc0205648, &(0x7f0000000040)={0xf010000, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r4, 0x0) r6 = dup(r4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000a1a000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/105, 0x69, 0x0, &(0x7f0000000300)=""/145, 0x91}, &(0x7f0000000280)=0x40) r7 = syz_io_uring_setup(0x2d07, &(0x7f00000007c0)={0x0, 0x20ab, 0x10000, 0x1, 0x59c}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r7, 0x6f58, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendto$packet(r6, &(0x7f0000000400)="cb84b9cb5ec5ee1459742cda342089107a45b13c6d21bd9ab7bcd79db8245b95d76bf29240be23c48f34f02c838863e2944e0526c87d54fe3a5115f7d12b98493984e303263ff34f4ee5f8fa9377b41fc716a0526f5e67a0fab9e3bff627a208478f8d48dfce8d502446c1cc2d83a25b150c34d764f22f5847f946323b9df9e6d647b270a23552e26c2826099885511f8000f6e2b9ace9f5f5f95d544d9438aa5d93945c49d3cc550a5643af46c01a2d2c453bab960a283210006d161d6267", 0xbf, 0x20004095, &(0x7f0000000540)={0x11, 0x9, r1, 0x1, 0x8, 0x6, @broadcast}, 0x14) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000104000280600fc02000000000000412a6031efeb6381430000000000000004fe8000000000000000000000000000aa00004e22da7493dcda1cc5bacfe0405e21b7070719c74dac3206f5d289b55e3a60719944a836db847b820b6b53abfab4e02980527a461743d205da1e41e01fe1bcf58e59321b2dfa58e470225e70400b9a2e154b24240cf8a3d29ff36d20c91f6cd13b0561d9f6e3d7a9472e8ac14697f05f90ad20015ae3c052f14b5382f8ab0e8b1dd74d17924b0cf7a2018fd1b694dfdcaa69ff54123c7b502415", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a4000000907800001d12d2b653e0c9d32072c19dd6ca814b7d7b0000"], 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r6, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r6}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r6, 0xc00864c0, &(0x7f0000000040)={r10}) 1.508695998s ago: executing program 3 (id=401): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r3, 0x5, 0x70bd27, 0x25dfdc01, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40048}, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000003c0)={0x3, @pix_mp={0x9, 0x9, 0x30314142, 0x7, 0xb, [{0x9}, {0x0, 0x2}, {0x1}, {0x9, 0x5000000}, {0x5, 0x1}, {0x9, 0x8cd}, {0x0, 0x101}, {0xb131, 0xffffffc4}], 0x7, 0xc, 0x1, 0x4, 0x4}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000380)={0xf0f009, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xe2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}]}}]}, 0x48}}, 0x0) sendto(r8, 0x0, 0x0, 0x4014, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x13}}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1.438577305s ago: executing program 3 (id=403): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x41c101, 0x0) fcntl$notify(r0, 0x402, 0x2b) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000080)='net/connector\x00') copy_file_range(r0, &(0x7f0000000000)=0x1, r0, &(0x7f0000000040)=0x16, 0x6, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup2(r2, r3) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.3898679s ago: executing program 3 (id=404): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, 0x5, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c045}, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES64=r2, @ANYBLOB="200401", @ANYRESOCT=0x0], 0x38}, 0x1, 0x0, 0x0, 0xbe0f}, 0x0) 1.387514641s ago: executing program 3 (id=406): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) (async) r2 = syz_usb_connect$uac1(0x6, 0xd7, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x4, 0x10, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x46c, 0xfe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x10, 0x751, 0x6, "931c33620883cb47"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0xde23, 0x3}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x3, 0x5, 0x7, '{'}, @as_header={0x7, 0x24, 0x1, 0xff, 0x4}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x3, 0x5, 0x9, 0x4, "8e13f38c43cd"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x7, 0x1, "c0b1b95f2850"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7f, 0x9, 0x9, {0x7, 0x25, 0x1, 0x0, 0x6, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x14, 0x3}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0x8d, 0x3}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xe, 0x6, 0x7, "a5a4f3c5f2c4f6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xa5, 0x1, 0x3, {0x7, 0x25, 0x1, 0x1, 0xaf, 0x2}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x2, 0x81, 0x8, 0x20, 0x7}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3, 0x6, 0xff}]}, 0xa, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1801}}, {0x6c, &(0x7f0000000380)=@string={0x6c, 0x3, "87e79974c4dfdce31df1faf22bc2cf617dbbcdf82a39aa6988496f8fbf7bb580c5efe05b06b38e30af35f01e2c1f9857abfe3721e270b4217108aa5cca93d7cde29a9b84519e520247f45e3c982481ad07fa293f387e30ad6cbf3b79d8cb51421c59d6b5818b94d621d4"}}, {0x87, &(0x7f0000000480)=@string={0x87, 0x3, "a02c1233377830a520bffb8d39074cd551f3e24cf37927f7775144d5de57fbfa9ac7233f310602f3b80d552f02abfff198c05875a952acc02354523837122419fe4c9944fed3305bc85a4ca55c2a45a0e779e6d62912a681a089b604777b1dfc31272e76e5a68236ca776b787866fdae286712eaaeb163ce201c97c133b14a417b8091c7fc"}}, {0x4f, &(0x7f0000000540)=@string={0x4f, 0x3, "d0b9701e90c11a4e1e92a62f30f196351b4e9b8b28ff6c928dd426c97c07e0123feba1bc428682b5ffe8363c5505866b906d786b7d8ceda11db63772d372898602884b740c87753d14f4339d15"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x400}}, {0xc2, &(0x7f0000000e40)=@string={0xc2, 0x3, "92603654f2fa12f83462154cd4b2e783348e9afcbb6cb771f12e6911e6e3aa6cc941c558842ccff88f0d70998369c8a5cc1f0b85e070b4ed62586cbd17286c38b83206a3d0c2d3a9d1bc3f6acdd71e347ed2568ac6db702aeb7f44addf8ece1addfd1011f2848a7748304763cd16a5be4f500e12714afb72d112970a986cd2328c2f2cd37e603993cd5eb9e5adc6fa5d581352dd58d6af2a70430d6f990db7de73a327c4c4f771df5399e5bf411acb1b22e8009d44724b10b6238ead0dc6be30"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x42f}}, {0x61, &(0x7f0000000dc0)=@string={0x61, 0x3, "18a65a9f573a773ef3799fa525d5cb37c88ab1e6fa787ce20db03ed89ce7a41f3950e1ef623311f856613479a4d6c17b30a32f169394fbb4ff4f600368097886d79a6044ad90b161d0073ac6e474c0a96af8427f49da4187efc4c0ba5dd231"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x480a}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000a80)={0x14, &(0x7f0000000880)={0x40, 0x30, 0xc0, {0xc0, 0x3, "ef473c35de42c1069ab89cdc47ad6525c42c1ab1cbed020a03433e1b1c0c5818933cf299e6cd2d4341b9c1713d1a71e3f50424f73177ca907fe0ae6d39038404dc46306de3e9d7d5c406737dcff507ba1ded24afa5c84481a0ea873dd42df6e81b10b7f62f399fb1c4f189568508ebc5211041f63dec71c8015e6cfd0204f68616ea03b7d186ca3965839c6991e632c69c9291d2d07375004e1deff470cd0eff8403bea7638bede4604b5983a67d18533f918ec8f98108ecf8015f4ccc60"}}, &(0x7f0000000980)={0x0, 0x3, 0xd4, @string={0xd4, 0x3, "62dccec80eb7098a34c77b16fc2e83046c97325986189e4c7eb05aeaeace7556570b0793e3efd0d6e354f800ec900218bba8fdc7a1d239a8cee37744239f8f01a285d8203dccb1666954afe9bf04a0917eb15fd48902edcb9a841866d54455ed35ffea80a83a3335d551385af4a3bb3b5f2b74a1530cbdc1a1847c05129f378aa6ac316000cdd5e535d9c971fc705ad31e0e00a00e479879fc04d27e532e297599ecbabd771fb614c18932d4116c032ff39b8ae1e4ae5751c0aa7703fdbe55725743129f584c35ec07f9be70aef708186cc8"}}}, &(0x7f0000000d00)={0x44, &(0x7f0000000ac0)={0x40, 0x15, 0x3f, "9f016c54dd3ea51b3cfb7a513ec2ece65b2a647bb45a1c187e6027773fecfc114ece32c759272176d4b6d6933ca3b2c5da6e0fbc5d972995069b45b900a073"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, "a0"}, &(0x7f0000000c00)={0x20, 0x82, 0x1, 't'}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "02b7d2"}, &(0x7f0000000c80)={0x20, 0x84, 0x2, "61d2"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "fe2b4d"}}) 1.139831457s ago: executing program 1 (id=409): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x185880, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000080)={0x3, 0x0, [{0xaaf, 0x0, 0x1d1}, {0x32e, 0x0, 0x1000}, {0x862, 0x0, 0xfffffffffffffffb}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0xff, 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) lseek(r4, 0x3, 0x3) recvfrom$inet(r2, 0x0, 0x0, 0x720, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001240)=""/4096, 0x1000}], 0x1}, 0x3}], 0x1, 0x40, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000000)=0x31) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000200)={"aa9c7481", 0x0, 0xf7, 0x0, 0x8, 0x2, "2fbab4cd34744fe00799fe7087dc89", "a998f2c6", "89e9832a", "6f9cff89", ["bd99adaf7e8b7e34f59653cd", "171404168e45b72df3972316", "74cded730c5395ddbf12171b", "734fbd64cf725dfac1dc3171"]}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x3250c0, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) write$tun(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="9b40f912a1"], 0xa) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000500)=[0x4], 0x0, 0x0, 0x1}}, 0x40) r9 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) io_uring_register$IORING_REGISTER_BUFFERS2(r9, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r10, &(0x7f0000004100)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001e000100000000000000000003000000b4fc121ffca98d04ea55acc21843e7a96b835eefd7c96b11abf92fdd3ffe581f3263e62709af77d2647f80d5ac6c90b21d657561d706566f36c018affda18fd24908ecfbedff86f18f3d08f343660da9693afa9c9805d316985ebc29146f08286ad975c0f8e757784cf82295727a080a47f443e70279593fcbfec1f416b93a34de0539ec2ce14c42336cc812e19f9e01cfbcf6697647cceec736f6ea6a8ad465ab437de9b209d918954a37ac75005f23714c66218a8f03", @ANYRES32=0x0, @ANYRES64=r11], 0x30}}, 0x4c844) 780.127753ms ago: executing program 3 (id=412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r2 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x48, 0xc0, 0x6, [{{0x9, 0x4, 0x0, 0xa0, 0x2, 0x7, 0x1, 0x1, 0xdc, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0x7, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0xf}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0xbc, 0x7, 0x4, 0x28, 0x5}, 0x4b, &(0x7f0000000480)={0x5, 0xf, 0x4b, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x93, 0x9b, 0x5, 0xffff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x3c, 0x40, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x0, 0xf, 0x4, [0x30, 0xc0, 0xcf, 0xc0, 0x30, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x6, 0x5, 0xa}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x406}}, {0xb0, &(0x7f0000000500)=@string={0xb0, 0x3, "411059c501326ac7778ac359fb77343ec92c18df398fec582dc1905a95c38bfff70e1333b5109b0a7de87b1a044253d605db35046d09b4d4fc6ef4c096e84765cfa24d1a80cd8a8bc9286e65b8dcba13e13b085ed25bfe9d48865d637bcde2233ff20d64e30ca3a0a4b42c622e07977c234a0c7e84fb58759fb4068a6f8dff90eb78096cebffbf2228990f3dc883e6bef136fd4faa43e45bb6a74c632650c6f875308303921718fddbb549941d29"}}]}) syz_usb_control_io$printer(r2, &(0x7f0000000840)={0x14, &(0x7f0000000640)={0x20, 0x22, 0xfa, {0xfa, 0x2, "654c697184e882575b0f238ff7225b0bf5e246e4ad3d3bcf51437ad790883d05197127721cf7a8e28e838fb3377b896780fcb4972bfaeebab4ead19bf7317c47a86de4cd234b401880e92bddbbc7b57b5bf89e3f852135ecab44a9b5513512c706671b13358253e2128c3b32d6bc44142b3fbd6dba9f252d974f505f20cb07acf750d98bcba7b6eac730fca8dfb2d54b7303fc859b8cd27d834ff400b4136c440486abb67b600397d6b71916d9d54ef51f2959acde2175b5e91cad7a79cdf08e89010b5d5aca0f89712873fb35d2d2e2b0fb09c1fb4292e5a98f2b20be451f048c4509daaa7358a6fc0e5b8f6bcfad592a8fa6ba8a2c568d"}}, &(0x7f0000000740)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "4ab24c668072812c25890beff20fcbeb132a5c42407c3726a336b282e795c2caf24ad1bc59b62e7daceeadc7ab422b2540f297e63aa459994875d5ba00dc786b7d9ea72c5a838caf9fde5ecd7a09f5783bab52de921324f48b6555fe4310b14c381983e3e3eea4782aa91c4eea6dfd6cf1c3345bb13f5ae44afdc064d785f7dc98139b259963aad4001af63dcc7526b4ab11fd4817c0c53154aa39a715e9dee149e3175bcdc9feb80554490746a9ef78e85235711c65e54667b830586712afd965d54604325d0ebd7a2cf39d6536b1bccda4f66a"}}}, &(0x7f0000000b00)={0x34, &(0x7f0000000880)={0x0, 0xf, 0xda, "37a184fe158a8e86cd5c0d17f5e4fd7959004094a3dc35a910a12c5971d65d4df3ec4b38f48ac62dccfb41eb0f92a3bac7d69772fff77c859b28bff67c7e58eba415d54bad6736e6c55f4c91245e45b1b13c07baa961726107a555140f697beb3867c86a3d3770b246508a0494f9a2aacb6ea9a7907143b5535ce4a0b5c9585248109f4803970d77e2c16422d208d3a8430f652ac89be1b3f9fb60c9c2fe86aaf6dca682235b518d2c8c44f38abc7366009397d9318fa4c2bacfe00e676c5830f2ba6b2ce4e310726d2b23d2f2a5a597c53e10fa0c4f1fedf100"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000a00)={0x20, 0x0, 0x6a, {0x68, "bd9499e86b1d7a0085c2a017ade2a7c342eec4577dc47a9b47434bd1201dfa663cf40ec9bcb9c8aba58183b017610351ab0118a9f769be5d87ec4b1e3c3940e758466f4bacab431216a4e4d3ac3ce3b617ef658960934951d7a2d059c28c0e0d5133f1b2512bcd55"}}, &(0x7f0000000a80)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000ac0)={0x20, 0x0, 0x1, 0x4}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000009c0)="af8d195ac29a", 0x6}], 0x1}}], 0x1, 0x44008090) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6d0f, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x80080}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0xffffffffffffffff, 0x2, 0x80000, 0x0, 0x9}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000080)={0x2, 0x4, 0x0, 0x0, 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x8}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x8c}}, 0x40c4894) 700.041574ms ago: executing program 0 (id=414): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffbf, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 698.92087ms ago: executing program 0 (id=415): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0x2, 0x3, 0x9}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r1, 0x8b32, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f00000001c0)={r7}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r6, &(0x7f0000000180)={0x70000000}) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @initdev, @broadcast}, &(0x7f0000000300)=0xc) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@delqdisc={0x58, 0x25, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x6, 0x1}, {0x3, 0xa}, {0xf, 0xd}}, [@q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080d1}, 0x90) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) setsockopt$inet6_int(r11, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r11, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c92019000600050001870200ff07"], 0xf) io_uring_setup(0x37cc, &(0x7f0000000040)={0x0, 0x2a11, 0x1c080, 0xa, 0x20002f7}) 691.818588ms ago: executing program 2 (id=416): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000380)={r3}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000380)={r3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0xac}}, 0x24040084) 590.263908ms ago: executing program 2 (id=417): rseq(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000002c0)={0x84, @broadcast, 0x4e21, 0x3, 'lblc\x00', 0x3c, 0x10000004, 0x80}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000002c0)={0x84, @broadcast, 0x4e21, 0x3, 'lblc\x00', 0x3c, 0x10000004, 0x80}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@rand_addr=0x64010101, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@rand_addr=0x64010101, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a40)={'syz0\x00', {0x1, 0xe, 0x9, 0x7}, 0x6, [0x5, 0x4, 0x100000, 0xffff7fff, 0x81, 0x1db696b1, 0x9, 0x9, 0x4, 0x10001, 0xbdcf, 0x6, 0xfffffff9, 0x5, 0x5, 0x1, 0x1, 0x5, 0xfffffffd, 0x9, 0xa8, 0x8000, 0x7f, 0x2, 0x40, 0x6, 0x6, 0x8, 0x4aa700, 0x8, 0xfffffffe, 0x9, 0x7ff, 0x0, 0x5, 0x2, 0x0, 0x6, 0xc4, 0xb, 0xf06, 0x7, 0x8, 0x0, 0x1ff, 0x1, 0x9, 0xb, 0x7fff, 0x4, 0x0, 0xc, 0x850, 0x1, 0xa76, 0x0, 0x6, 0x4, 0x5, 0x8, 0x162, 0x101, 0x2, 0x3], [0x6, 0x5, 0x8, 0xfffffffa, 0x1, 0x83, 0x8, 0x101, 0xfffeffff, 0x1, 0x3, 0x0, 0x8, 0xfffffffa, 0x4, 0x3, 0x0, 0x0, 0x81, 0x9c, 0xfffffff7, 0xfffffffd, 0x7f, 0x5, 0x9, 0x0, 0x5, 0x2, 0x2, 0xe106, 0x4a4, 0x71, 0x9, 0x8000000, 0xd82, 0x1c3, 0x468e, 0x23, 0x5, 0x9, 0x5, 0x200, 0x1, 0x871, 0x5, 0x10000, 0x100, 0xc, 0x4, 0x6, 0x80000000, 0xd663, 0x7, 0x6, 0x4, 0x2, 0x40, 0xf7, 0xd, 0x3, 0x3, 0xd8, 0xc71, 0x7], [0x5, 0x4, 0x7, 0x8001, 0x5, 0x8, 0x50dc, 0x0, 0x6, 0x26, 0x10000, 0x7, 0x2, 0xc, 0x100, 0x8, 0x7, 0x1, 0xc774, 0x7, 0xb, 0x7fff, 0x3, 0x2, 0xea2e, 0x3fffe, 0x7ff, 0x0, 0x2b, 0x814, 0x3dd, 0x7fff, 0x2, 0x80000000, 0x7a2de192, 0x2, 0x3, 0x9, 0x2, 0xa, 0x4, 0x3, 0x6, 0x9, 0x1, 0x6, 0x6, 0x1000, 0x1000, 0x2, 0x1, 0x1, 0x9, 0x5, 0xe, 0xffff, 0x6, 0xe, 0x3, 0x100, 0x9, 0x6, 0x6, 0x2], [0x6, 0x4, 0x4, 0x8, 0xe12dc20e, 0x8000, 0x6, 0x9, 0x233afcb6, 0x0, 0xffff, 0xfe7, 0xc, 0x7ff, 0x80000000, 0x1, 0x7fff, 0x8, 0x4, 0x2, 0x5, 0x5, 0x6, 0x802, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1000, 0x4d1, 0x64, 0xfffffff7, 0xf19f, 0x2, 0x1, 0x2, 0xb3, 0x76, 0x4, 0xfffffcef, 0x6, 0xe3fd, 0x80, 0x3, 0x8, 0xffff8000, 0xa1b, 0xffffff80, 0x6, 0xa, 0x26, 0x800, 0xa5f1, 0xd, 0xc, 0x3f6d378b, 0x7fff, 0xad3, 0x10000004, 0x0, 0x4, 0x4, 0x4]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) timer_settime(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) (async) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r4, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, 0x0) (async) r5 = syz_open_procfs(0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r5, 0x111, 0x4, 0x1, 0x4) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) write$binfmt_elf64(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r8) r9 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r9) 530.171008ms ago: executing program 2 (id=418): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="9f49962542adbbcbc9000000400000404000000009000000000000000000000905000000070000000000000e010000000000000000000000000000e2fd000000000000000000000d00000000000000000000000200000000000000000000005f00e9c143b66fe18ad166b3901df7ab5c6100a172523950fc5f0014e7fb78e24344a3e7e1759a87419754e28ad188a76d838410f4a4427870c117626ff05da12d622cfa110bfeaeefdafc9faff19692"], 0x0, 0x61}, 0x20) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002dc0)={0x5c, r3, 0x1, 0x0, 0x25dfdc01, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x5c}}, 0x40000) 529.738813ms ago: executing program 0 (id=419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000002c0)={0x9a00000000000000, 0x5000, 0x5, 0x4, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x108044}], 0x1) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x2, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x32}, @loopback}, 0x10) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="1201b0048020", 0x0, 0x0, 0x4, 0x0, 0x0}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0x6, 0x4, 0x5}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000140)={0xe200000000000000, 0x80a0000, 0xfffffffffffffffd, 0x2, 0x2}) 470.406638ms ago: executing program 2 (id=420): creat(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x10001011, r0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x1b) io_setup(0x251, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000140)={0x25, 0x0, 0x41, 0x8, 0x0, r2, 0x0, 0x0, 0x4000, 0x0, 0x0, r2}]) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000000280)) fdatasync(r4) openat(r0, &(0x7f0000000100)='./bus\x00', 0x80042, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2) r5 = getpid() capset(&(0x7f00000000c0)={0x20080522, r5}, &(0x7f0000000140)={0x3ff, 0x6, 0xfffffffc, 0x6, 0x0, 0x6}) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000580)='./file0\x00', 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) fanotify_init(0xf00, 0x0) (async) fanotify_mark(r1, 0x1, 0x10001011, r0, 0x0) (async) creat(&(0x7f0000000100)='./bus\x00', 0x1b) (async) io_setup(0x251, &(0x7f0000000080)) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000140)={0x25, 0x0, 0x41, 0x8, 0x0, r2, 0x0, 0x0, 0x4000, 0x0, 0x0, r2}]) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000000280)) (async) fdatasync(r4) (async) openat(r0, &(0x7f0000000100)='./bus\x00', 0x80042, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2) (async) getpid() (async) capset(&(0x7f00000000c0)={0x20080522, r5}, &(0x7f0000000140)={0x3ff, 0x6, 0xfffffffc, 0x6, 0x0, 0x6}) (async) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') (async) 402.183594ms ago: executing program 0 (id=421): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400600, 0x80}, 0x18) r1 = openat(r0, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$FUSE(r1, &(0x7f0000000bc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, r2, &(0x7f00000000c0)='./file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01005ffc00000000000034000000340000ff0100000005009884e370d723523308000000000e040000000cb9bd005bd3799d000000ff0f0000080000000000000a0400"/86], 0x0, 0x4e, 0x0, 0x0, 0xfffffffe}, 0x28) 401.806765ms ago: executing program 0 (id=422): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7fff, 0x80, 0x240}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg(r2, &(0x7f00000016c0)={&(0x7f00000001c0)=@can={0x1d, r5}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="3343d9978700c81e8a61231703ce0b35a65029743b72f0ac04b3358905cdbbb1db93c07399fdaad6b1e6f0161354d737f8af0382576169cd0485b7864eeb3581056454909c0081db532cd69611534562f0457c0be318776a9893e17f5e751768aff0d87bfafc37af39ac5adf996241aba2e4063dea00bfb430cdbf979178cba87dff2dd1a9e21b71568cab2fc00402b95c8a7d245567feb63bb9644f0811b92db34bdf4f", 0xa4}, {&(0x7f0000000000)="50c2e48e200ace6097b306408cacaac67a6d82aec408a0af946a63f7c37c687fd196f99ce5f13d8e6867010f00db702a36b2b173", 0x34}], 0x2, &(0x7f0000000480)=[{0xe8, 0x11, 0x1ff, "114d3b21673eb10ff88f8fa50f0f3f4c749346c752fbc5ee8de33c5935fc23c8e08e5dd8315a7f0796eb2bc0d2a63ae3b48f9d00dfb5ca6c510e4c345aa3649e3c8baeac1f727f56d2d61059b1d7b5f7e914b36b1a60812485ba43c86861b17d206412bd338530893df5146f9207d674b09f28d8f0a3560ee773967d332ed92d49a486598b45aae94bd73651b66f08c5bcd67c7a98387def9f46250e142948e7497a657dcadd494b179a16c6506a279c6b29ff75a44b0e025849198e6db530d14c62a65b23ad809f1f702bc382168ab00fdbe63d9f57"}, {0x38, 0x107, 0x13e, "69afaac36447a9b182f285d6e7ad35a3006181525bde1505fa5676e8c0fb4d3e36b784137f"}, {0x78, 0x113, 0x6e, "5bbefdcfc060bfa26131f02848887d9222f3c5729e586f107928f2a4a92591ddc7f242ac12e588262e792bee4c90cf79c243f691720300e75cc4cb21731a25e5e4fc27ec8a377315be890a74d0b0bbb12e8449c2fe29192723e209a44dc5accf6166c90920c4f5"}, {0x1010, 0x114, 0xabc, "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"}, {0x98, 0x101, 0x7, "dae2ff9aa5a936f0e57b27c3f5bb6722d1c5f2335e142cbe5665d8ae2dcc0ce4823bfddd02dc65f98a01e214410b9d6b0aaa18c007d21ef00bff916d99463aca1c32b46518016b9e72d5371e6123907e0ac888727d2a247f22c7db1f4a177013c917b6e76016352b9615f6016b97ca8d34fe6637088bef474f6134b38b906e981e836c678449"}], 0x1240}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @loopback, 0x2004}, 0x1c) (async) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) accept4(r6, 0x0, 0x0, 0x800) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 316.806918ms ago: executing program 2 (id=423): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@expire={0x104, 0x18, 0x1, 0x70bd25, 0x25dfdbfe, {{{@in=@empty, @in=@empty, 0x4e23, 0x7, 0x4e24, 0x5, 0x0, 0x0, 0xa0, 0x87}, {@in6=@mcast2, 0x4d6, 0x6c}, @in=@empty, {0x6b2, 0xf9a, 0x1, 0xfffffffffffffffc, 0x65d, 0xffffffffffffffd8, 0x5, 0xddc}, {0x6, 0x7, 0x4, 0x1}, {0x10, 0x2, 0x6}, 0x70bd2d, 0x3501, 0xed59e89b51ed819, 0x2, 0x4, 0x94}, 0x4}, [@mark={0xc, 0x15, {0x35075d, 0x200}}]}, 0x104}}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0xe4) 316.25925ms ago: executing program 2 (id=424): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8000, 0x0, 0x0, 0x0, {0x7, 0x1ff8, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x801, 0x8001, 0x1}}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_PBSS={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000400}, 0x4000004) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x2, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x44) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x3, [0x0, 0xffff, 0x5]}, &(0x7f0000000340)=0xa) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000380)={0x2, r0, 'id0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x31, 0x1, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0], 0x0}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x10, 0x994, 0x20, @rand_addr=' \x01\x00', @private2, 0x80, 0x1, 0x3, 0x40}}) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@ifindex=r6, r4, 0x15, 0x10, 0x0, @void, @value=r7, @void, @void, r5}, 0x20) recvfrom$inet(r4, &(0x7f00000006c0)=""/15, 0xf, 0x12002, 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000700)={0xc45d, 0xde, 0x7fffffff, 0x5054, 0x13, "cbe23f5d9f8eba2e6a3dd5070a9c856c89690a"}) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) syncfs(r8) connect$inet(r4, &(0x7f0000000780)={0x2, 0x4e24, @remote}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000007c0)={0x401}, 0x8) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000800)='-\x06\x00', &(0x7f0000000840)='\x00', 0x0) getsockname(r2, &(0x7f0000000880)=@in={0x2, 0x0, @initdev}, &(0x7f0000000900)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x0, 0x6, 0x5, 0x10000000, 0x800, r8, 0x80000001, '\x00', r6, r8, 0x4, 0x0, 0x4}, 0x50) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000009c0)={0xffff, 0xc, 0x3, 0x7, 0x8, 0x4}) r9 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r9, &(0x7f0000000cc0)={&(0x7f0000000a00)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a80)=""/52, 0x34}, {&(0x7f0000000ac0)=""/160, 0xa0}], 0x2, &(0x7f0000000bc0)=""/218, 0xda}, 0x22) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000d00)={'ip_vti0\x00'}) write$cgroup_subtree(r8, &(0x7f0000000d40)={[{0x0, 'net_prio'}]}, 0xa) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200480d0}, 0x24000084) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000ec0)={0x2, r8, 0x2}) 315.733343ms ago: executing program 0 (id=425): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000780)="36660f7d260f01c30f20c035100000000f22c08fc878c2eb0066baf80cb88e7cc781ef66bafc0ce666b83166eff2640f2246b8f4ad41330f23d80f21f8f30f5e3e0f23f80f1814beadb9b3000040b8b9020000fd080800000f30", 0x5a}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r8 = landlock_create_ruleset(&(0x7f00000000c0)={0x1e18, 0x3, 0x2}, 0x18, 0x2) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000140)={{r8}, 0x0, 0x0, 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x44, 0x2, [@TCA_MATCHALL_ACT={0x40, 0x2, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1cb2, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) read$FUSE(r9, &(0x7f0000000980)={0x2020}, 0x2020) 140.123165ms ago: executing program 1 (id=426): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x7, 0x3, 0x3, 0x0, 0x100, 0x5}, &(0x7f00000000c0)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x14, 0x28, 0x0, 0x0, 0x6, 0x6, 0x0, @rand_addr=0x64010102, @multicast1}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x800}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 80.343568ms ago: executing program 1 (id=427): creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r0, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0xc2, 0xfffffffd}]}, 0xc, 0x1) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0) (async) chown(&(0x7f00000003c0)='./file0\x00', r0, 0xee01) (async) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) (async) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) (async) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0xc2, 0xfffffffd}]}, 0xc, 0x1) (async) 80.146276ms ago: executing program 1 (id=428): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x80006}, 0xc) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='ncks=8,\x00']) 0s ago: executing program 1 (id=429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x109) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x4}, [], {0x4, 0x1}, [{0x8, 0x6}], {0x10, 0x1}, {0x20, 0x2}}, 0x2c, 0x3) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000300120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:39795' (ED25519) to the list of known hosts. [ 46.109008][ T40] audit: type=1400 audit(1766395046.223:62): avc: denied { name_bind } for pid=5847 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.155461][ T40] audit: type=1400 audit(1766395046.273:63): avc: denied { execute } for pid=5848 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.163226][ T40] audit: type=1400 audit(1766395046.273:64): avc: denied { execute_no_trans } for pid=5848 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.193322][ T40] audit: type=1400 audit(1766395048.313:65): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.201132][ T40] audit: type=1400 audit(1766395048.313:66): avc: denied { mount } for pid=5848 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.203208][ T5848] cgroup: Unknown subsys name 'net' [ 48.338748][ T5848] cgroup: Unknown subsys name 'cpuset' [ 48.345090][ T5848] cgroup: Unknown subsys name 'rlimit' [ 48.639176][ T5891] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.287068][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.188846][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 52.188856][ T40] audit: type=1400 audit(1766395052.303:85): avc: denied { execmem } for pid=5924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.367584][ T40] audit: type=1400 audit(1766395052.483:86): avc: denied { create } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.381910][ T5293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.382655][ T40] audit: type=1400 audit(1766395052.483:87): avc: denied { read write } for pid=5928 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.392207][ T5293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.397361][ T5930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.400622][ T40] audit: type=1400 audit(1766395052.483:88): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.400744][ T5930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.410988][ T40] audit: type=1400 audit(1766395052.483:89): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="socket:[976]" dev="sockfs" ino=976 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.413279][ T5934] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.423094][ T5934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.425697][ T5934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.427616][ T5938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.428189][ T5934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.428899][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.429811][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.431333][ T5938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.433160][ T5934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.435935][ T5938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.439074][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.440088][ T5938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.445873][ T40] audit: type=1400 audit(1766395052.563:90): avc: denied { read } for pid=5932 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.446246][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.449033][ T5938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.454805][ T40] audit: type=1400 audit(1766395052.563:91): avc: denied { open } for pid=5928 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.466496][ T40] audit: type=1400 audit(1766395052.563:92): avc: denied { mounton } for pid=5928 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.473461][ T5930] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.476435][ T5930] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.590601][ T40] audit: type=1400 audit(1766395052.703:93): avc: denied { module_request } for pid=5928 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.638598][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 52.689518][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 52.776400][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.779153][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.781602][ T5928] bridge_slave_0: entered allmulticast mode [ 52.784507][ T5928] bridge_slave_0: entered promiscuous mode [ 52.808330][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.811628][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.815035][ T5928] bridge_slave_1: entered allmulticast mode [ 52.818912][ T5928] bridge_slave_1: entered promiscuous mode [ 52.856854][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 52.881845][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.884260][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.886609][ T5932] bridge_slave_0: entered allmulticast mode [ 52.889203][ T5932] bridge_slave_0: entered promiscuous mode [ 52.894445][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.897766][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.900064][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.902350][ T5932] bridge_slave_1: entered allmulticast mode [ 52.905306][ T5932] bridge_slave_1: entered promiscuous mode [ 52.924359][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.942045][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.968413][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 52.978465][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.031250][ T5928] team0: Port device team_slave_0 added [ 53.039442][ T5928] team0: Port device team_slave_1 added [ 53.062744][ T5932] team0: Port device team_slave_0 added [ 53.070337][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.072653][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.080617][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.084889][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.087177][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.089344][ T5936] bridge_slave_0: entered allmulticast mode [ 53.092065][ T5936] bridge_slave_0: entered promiscuous mode [ 53.096589][ T5932] team0: Port device team_slave_1 added [ 53.112456][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.115518][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.123759][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.128011][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.130264][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.132522][ T5936] bridge_slave_1: entered allmulticast mode [ 53.135294][ T5936] bridge_slave_1: entered promiscuous mode [ 53.185153][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.187333][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.195117][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.200171][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.211004][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.213554][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.222679][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.233660][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.236480][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.238638][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.240935][ T5940] bridge_slave_0: entered allmulticast mode [ 53.243865][ T5940] bridge_slave_0: entered promiscuous mode [ 53.253617][ T5928] hsr_slave_0: entered promiscuous mode [ 53.256125][ T5928] hsr_slave_1: entered promiscuous mode [ 53.267670][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.269918][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.272191][ T5940] bridge_slave_1: entered allmulticast mode [ 53.275033][ T5940] bridge_slave_1: entered promiscuous mode [ 53.286523][ T5936] team0: Port device team_slave_0 added [ 53.300841][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.310340][ T5936] team0: Port device team_slave_1 added [ 53.328152][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.350603][ T5932] hsr_slave_0: entered promiscuous mode [ 53.352972][ T5932] hsr_slave_1: entered promiscuous mode [ 53.355098][ T5932] debugfs: 'hsr0' already exists in 'hsr' [ 53.356977][ T5932] Cannot create hsr debugfs directory [ 53.381318][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.383979][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.392066][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.400731][ T5940] team0: Port device team_slave_0 added [ 53.402981][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.405123][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.413068][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.432057][ T5940] team0: Port device team_slave_1 added [ 53.480030][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.482297][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.490714][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.495411][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.497658][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.506123][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.559375][ T5936] hsr_slave_0: entered promiscuous mode [ 53.561701][ T5936] hsr_slave_1: entered promiscuous mode [ 53.564195][ T5936] debugfs: 'hsr0' already exists in 'hsr' [ 53.566017][ T5936] Cannot create hsr debugfs directory [ 53.608811][ T5940] hsr_slave_0: entered promiscuous mode [ 53.611073][ T5940] hsr_slave_1: entered promiscuous mode [ 53.613283][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 53.615128][ T5940] Cannot create hsr debugfs directory [ 53.736212][ T5928] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.747139][ T5928] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.768036][ T5928] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.788029][ T5928] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.841193][ T5932] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.849350][ T5932] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.853810][ T5932] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.858201][ T5932] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.901521][ T5940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.908866][ T5940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.916325][ T5940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.929170][ T5940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.956722][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.979284][ T5936] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.987818][ T5936] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.993302][ T5936] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.002295][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.005807][ T5936] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.017705][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.020234][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.034208][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.036511][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.103728][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.124880][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.129645][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.134859][ T40] audit: type=1400 audit(1766395054.253:94): avc: denied { sys_module } for pid=5928 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.139617][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.146028][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.159955][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.163039][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.173598][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.185088][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.195589][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.198018][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.213617][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.216689][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.218988][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.230691][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.232998][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.247179][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.249453][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.274694][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.355077][ T5928] veth0_vlan: entered promiscuous mode [ 54.361282][ T5928] veth1_vlan: entered promiscuous mode [ 54.387955][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.393274][ T5928] veth0_macvtap: entered promiscuous mode [ 54.398510][ T5928] veth1_macvtap: entered promiscuous mode [ 54.409718][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.417475][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.427982][ T1154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.430991][ T1154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.435633][ T1154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.438526][ T1154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.464817][ T5932] veth0_vlan: entered promiscuous mode [ 54.474754][ T5939] Bluetooth: hci1: command tx timeout [ 54.475260][ T5930] Bluetooth: hci0: command tx timeout [ 54.486445][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.489928][ T5932] veth1_vlan: entered promiscuous mode [ 54.518521][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.529593][ T4671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.532376][ T4671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.543837][ T5930] Bluetooth: hci2: command tx timeout [ 54.543865][ T5939] Bluetooth: hci3: command tx timeout [ 54.563888][ T5932] veth0_macvtap: entered promiscuous mode [ 54.569224][ T5940] veth0_vlan: entered promiscuous mode [ 54.569348][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.572571][ T5932] veth1_macvtap: entered promiscuous mode [ 54.575108][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.599473][ T5940] veth1_vlan: entered promiscuous mode [ 54.606845][ T5936] veth0_vlan: entered promiscuous mode [ 54.612129][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.625144][ T5928] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.633688][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.638040][ T5936] veth1_vlan: entered promiscuous mode [ 54.653225][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.656609][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.659780][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.668533][ T5940] veth0_macvtap: entered promiscuous mode [ 54.671330][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.675369][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 54.678093][ T5940] veth1_macvtap: entered promiscuous mode [ 54.678446][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 54.745214][ T6020] netlink: 'syz.0.5': attribute type 1 has an invalid length. [ 54.747952][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.757886][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.758421][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.762484][ T5936] veth0_macvtap: entered promiscuous mode [ 54.765267][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.767910][ T5936] veth1_macvtap: entered promiscuous mode [ 54.801516][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.807391][ T1063] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.820674][ T1063] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.826042][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.828387][ T4671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.831231][ T1063] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.831320][ T4671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.834149][ T1063] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.845312][ T1154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.852342][ T1154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.857275][ T1154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.866454][ T1154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.910344][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.913431][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.949061][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.951676][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.976497][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.979051][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.979354][ T1063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.984968][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 54.986764][ T1063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.046929][ T6041] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 55.089291][ T6046] netlink: 'syz.1.11': attribute type 2 has an invalid length. [ 55.091800][ T6046] netlink: 46 bytes leftover after parsing attributes in process `syz.1.11'. [ 55.143047][ T53] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.168656][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14'. [ 55.215842][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'. [ 55.258478][ T6056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16'. [ 55.273040][ T6056] loop5: detected capacity change from 0 to 7 [ 55.285980][ T5935] Dev loop5: unable to read RDB block 7 [ 55.287774][ T5935] loop5: unable to read partition table [ 55.289681][ T5935] loop5: partition table beyond EOD, truncated [ 55.294706][ T53] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 55.297404][ T53] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 55.300526][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 55.305636][ T53] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 55.308562][ T6056] Dev loop5: unable to read RDB block 7 [ 55.308566][ T53] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 55.308578][ T53] usb 5-1: Product: syz [ 55.308586][ T53] usb 5-1: Manufacturer: syz [ 55.310885][ T6056] loop5: unable to read partition table [ 55.314099][ T53] usb 5-1: SerialNumber: syz [ 55.316210][ T6056] loop5: partition table beyond EOD, [ 55.318081][ T53] usb 5-1: config 0 descriptor?? [ 55.318732][ T6056] truncated [ 55.323102][ T53] hub 5-1:0.0: bad descriptor, ignoring hub [ 55.324723][ T6057] trusted_key: encrypted_key: master key parameter 'Ӿ' is invalid [ 55.331043][ T53] hub 5-1:0.0: probe with driver hub failed with error -5 [ 55.332861][ T6056] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 55.335905][ T53] usb 5-1: selecting invalid altsetting 0 [ 55.368597][ T6064] tmpfs: Bad value for 'mpol' [ 55.370923][ T6062] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.395462][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 55.417077][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 55.432852][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 55.662931][ T6088] process 'syz.2.21' launched './file0' with NULL argv: empty string added [ 55.702373][ T6092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=6092 comm=syz.2.22 [ 55.953269][ T6028] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 55.982753][ T5976] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 56.107996][ T6028] usb 5-1: device firmware changed [ 56.110910][ T6024] usb 5-1: USB disconnect, device number 2 [ 56.145143][ T5976] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 56.148800][ T5976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 56.152160][ T5976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 56.155688][ T5976] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 56.159762][ T5976] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.162878][ T5976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.167810][ T5976] usb 7-1: config 0 descriptor?? [ 56.262703][ T5996] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.272708][ T6024] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.442915][ T5996] usb 6-1: Using ep0 maxpacket: 32 [ 56.444496][ T6024] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 56.446448][ T5996] usb 6-1: config 0 has an invalid interface number: 209 but max is 0 [ 56.448050][ T6024] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 56.451324][ T5996] usb 6-1: config 0 has no interface number 0 [ 56.455197][ T6024] usb 5-1: config 0 interface 0 has no altsetting 0 [ 56.457312][ T5996] usb 6-1: config 0 interface 209 has no altsetting 0 [ 56.461653][ T6024] usb 5-1: string descriptor 0 read error: -22 [ 56.464835][ T5996] usb 6-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 56.464848][ T6024] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 56.464862][ T6024] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 56.468633][ T5996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.473742][ T6024] usb 5-1: config 0 descriptor?? [ 56.475532][ T5996] usb 6-1: Product: syz [ 56.479718][ T6024] hub 5-1:0.0: bad descriptor, ignoring hub [ 56.479859][ T5996] usb 6-1: Manufacturer: syz [ 56.481362][ T6024] hub 5-1:0.0: probe with driver hub failed with error -5 [ 56.483929][ T5996] usb 6-1: SerialNumber: syz [ 56.486066][ T5996] usb 6-1: config 0 descriptor?? [ 56.489019][ T6024] usb 5-1: selecting invalid altsetting 0 [ 56.542980][ T5939] Bluetooth: hci1: command tx timeout [ 56.553553][ T5939] Bluetooth: hci0: command tx timeout [ 56.575309][ T5976] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 56.583636][ T5976] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 56.623281][ T5939] Bluetooth: hci2: command tx timeout [ 56.623366][ T5930] Bluetooth: hci3: command tx timeout [ 56.704234][ T5996] usb 6-1: USB disconnect, device number 2 [ 56.779980][ T6119] kernel read not supported for file /blkio.bfq.io_wait_time_recursive (pid: 6119 comm: syz.3.24) [ 56.782409][ T6118] bridge1: entered promiscuous mode [ 56.787780][ T6031] usb 5-1: USB disconnect, device number 3 [ 56.800886][ T6118] bridge1: entered allmulticast mode [ 56.806209][ T6118] team0: Port device bridge1 added [ 56.962395][ T6126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 57.181763][ T1167] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.185140][ T1167] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.189652][ T1167] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.189920][ T6151] Zero length message leads to an empty skb [ 57.192522][ T1167] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.217528][ T6153] overlay: Bad value for 'workdir' [ 57.273779][ T40] kauditd_printk_skb: 87 callbacks suppressed [ 57.273790][ T40] audit: type=1400 audit(1766395057.393:182): avc: denied { connect } for pid=6154 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.289621][ T6157] netlink: 'syz.1.37': attribute type 11 has an invalid length. [ 57.292197][ T6157] netlink: 'syz.1.37': attribute type 13 has an invalid length. [ 57.334067][ T6161] netlink: 'syz.1.38': attribute type 7 has an invalid length. [ 57.336619][ T6161] netlink: 'syz.1.38': attribute type 8 has an invalid length. [ 57.379758][ T40] audit: type=1400 audit(1766395057.493:183): avc: denied { create } for pid=6162 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.384458][ T6158] nbd0: detected capacity change from 0 to 549764202496 [ 57.393873][ T5930] block nbd0: Receive control failed (result -32) [ 57.397265][ T6066] block nbd0: Send control failed (result -32) [ 57.399614][ T6066] block nbd0: Request send failed, requeueing [ 57.404118][ T35] block nbd0: Dead connection, failed to find a fallback [ 57.407004][ T35] block nbd0: shutting down sockets [ 57.409254][ T35] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.412838][ T35] Buffer I/O error on dev nbd0, logical block 0, async page read [ 57.417023][ T6066] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.420375][ T6066] Buffer I/O error on dev nbd0, logical block 0, async page read [ 57.423154][ T6066] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.428098][ T6066] Buffer I/O error on dev nbd0, logical block 0, async page read [ 57.430641][ T6066] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.438329][ T6066] Buffer I/O error on dev nbd0, logical block 0, async page read [ 57.441613][ T6066] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.449053][ T6066] Buffer I/O error on dev nbd0, logical block 0, async page read [ 57.452286][ T6066] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.456126][ T6066] Buffer I/O error on dev nbd0, logical block 0, async page read [ 57.458661][ T6066] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.461570][ T6066] Buffer I/O error on dev nbd0, logical block 0, async page read [ 57.465671][ T6066] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.468735][ T6066] Buffer I/O error on dev nbd0, logical block 0, async page read [ 57.471556][ T6066] ldm_validate_partition_table(): Disk read failed. [ 57.474598][ T6066] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.477689][ T40] audit: type=1400 audit(1766395057.593:184): avc: denied { write } for pid=6168 comm="syz.1.41" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.479827][ T6066] Buffer I/O error on dev nbd0, logical block 0, async page read [ 57.485134][ T40] audit: type=1400 audit(1766395057.593:185): avc: denied { open } for pid=6168 comm="syz.1.41" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.488009][ T6066] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.494897][ T40] audit: type=1400 audit(1766395057.593:186): avc: denied { setopt } for pid=6168 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.497952][ T6066] Buffer I/O error on dev nbd0, logical block 0, async page read [ 57.505726][ T40] audit: type=1400 audit(1766395057.593:187): avc: denied { read } for pid=6168 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.508627][ T6066] Dev nbd0: unable to read RDB block 0 [ 57.509131][ T6169] sg_write: data in/out 566242494/136 bytes for SCSI command 0x31-- guessing data in; [ 57.509131][ T6169] program syz.1.41 not setting count and/or reply_len properly [ 57.515297][ T40] audit: type=1400 audit(1766395057.593:188): avc: denied { setopt } for pid=6168 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.515345][ T40] audit: type=1400 audit(1766395057.623:189): avc: denied { ioctl } for pid=6168 comm="syz.1.41" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.538934][ T6066] nbd0: unable to read partition table [ 57.542255][ T6066] ldm_validate_partition_table(): Disk read failed. [ 57.544601][ T6066] Dev nbd0: unable to read RDB block 0 [ 57.546771][ T6066] nbd0: unable to read partition table [ 57.550310][ T40] audit: type=1400 audit(1766395057.663:190): avc: denied { create } for pid=6177 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 57.556483][ T40] audit: type=1400 audit(1766395057.663:191): avc: denied { ioctl } for pid=6177 comm="syz.1.43" path="socket:[10549]" dev="sockfs" ino=10549 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 57.748849][ T6196] usb usb8: usbfs: process 6196 (syz.0.49) did not claim interface 0 before use [ 57.835462][ T6200] faux_driver vkms: [drm] Unknown color mode 36; guessing buffer size. [ 58.004694][ T6204] netlink: 'syz.0.53': attribute type 8 has an invalid length. [ 58.007279][ T6204] sch_fq: defrate 0 ignored. [ 58.214566][ T6222] netlink: 'syz.3.60': attribute type 11 has an invalid length. [ 58.309679][ T6235] overlayfs: overlapping lowerdir path [ 58.340697][ T6238] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 58.445560][ T6247] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3440445330 (27523562640 ns) > initial count (4528868080 ns). Using initial count to start timer. [ 58.633636][ T5930] Bluetooth: hci0: command tx timeout [ 58.634645][ T5939] Bluetooth: hci1: command tx timeout [ 58.702709][ T5939] Bluetooth: hci2: command tx timeout [ 58.702783][ T5930] Bluetooth: hci3: command tx timeout [ 58.715663][ T1025] usb 7-1: USB disconnect, device number 2 [ 58.758078][ T6024] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 58.809525][ T6279] No control pipe specified [ 58.912676][ T6024] usb 6-1: Using ep0 maxpacket: 16 [ 58.916513][ T6024] usb 6-1: config 119 has an invalid interface number: 92 but max is 3 [ 58.919231][ T6024] usb 6-1: config 119 contains an unexpected descriptor of type 0x1, skipping [ 58.922038][ T6024] usb 6-1: config 119 has an invalid interface number: 35 but max is 3 [ 58.925753][ T6024] usb 6-1: config 119 contains an unexpected descriptor of type 0x1, skipping [ 58.928632][ T6024] usb 6-1: config 119 has an invalid interface number: 84 but max is 3 [ 58.931291][ T6024] usb 6-1: config 119 has an invalid interface number: 237 but max is 3 [ 58.934191][ T6024] usb 6-1: config 119 has no interface number 0 [ 58.936589][ T6024] usb 6-1: config 119 has no interface number 1 [ 58.938753][ T6024] usb 6-1: config 119 has no interface number 2 [ 58.940793][ T6024] usb 6-1: config 119 has no interface number 3 [ 58.943379][ T6024] usb 6-1: config 119 interface 92 altsetting 48 endpoint 0xC has an invalid bInterval 96, changing to 7 [ 58.947271][ T6024] usb 6-1: config 119 interface 92 altsetting 48 endpoint 0x9 has invalid wMaxPacketSize 0 [ 58.950517][ T6024] usb 6-1: config 119 interface 35 altsetting 137 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 58.954387][ T6024] usb 6-1: config 119 interface 35 altsetting 137 has a duplicate endpoint with address 0x3, skipping [ 58.957838][ T6024] usb 6-1: config 119 interface 35 altsetting 137 has a duplicate endpoint with address 0x9, skipping [ 58.961334][ T6024] usb 6-1: config 119 interface 237 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 58.964963][ T6024] usb 6-1: config 119 interface 237 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 58.968415][ T6024] usb 6-1: config 119 interface 237 altsetting 1 bulk endpoint 0xF has invalid maxpacket 16 [ 58.972168][ T6024] usb 6-1: config 119 interface 237 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 58.975886][ T6024] usb 6-1: config 119 interface 237 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 58.979365][ T6024] usb 6-1: config 119 interface 237 altsetting 1 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 58.982948][ T6024] usb 6-1: config 119 interface 237 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 58.986365][ T6024] usb 6-1: config 119 interface 237 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 58.997561][ T6024] usb 6-1: config 119 interface 92 has no altsetting 0 [ 58.998292][ T6284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6284 comm=syz.0.77 [ 58.999725][ T6024] usb 6-1: config 119 interface 35 has no altsetting 0 [ 59.010106][ T6024] usb 6-1: config 119 interface 84 has no altsetting 0 [ 59.014947][ T6024] usb 6-1: config 119 interface 237 has no altsetting 0 [ 59.018886][ T6024] usb 6-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=49.f8 [ 59.021754][ T6024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.025140][ T6024] usb 6-1: Product: 㐊 [ 59.026480][ T6024] usb 6-1: Manufacturer: 쿸⮂躺第䓪染ﹶ묋㑀⩄径눞ǁ멻ㇳ撊ﯿఢ﹀抬ꁏ讕쁈賷阜㇐紒┕䘝앋텇阼뒄︐⩄ꦜ髵ও胧䎝⧉퍛皡ஷᇠ瑷衛΅婉篸馡ັ [ 59.032309][ T6024] usb 6-1: SerialNumber: ❑뭴㈸쀢쁔ዾ麘ꃬ슧箃耦곝Ťޖ͏ꏩ噊䝶裱윔쓓᳆땆鶌놘泦励痴⯀랢蘧鯉⪯쌤찊쁗ᛊሤ䊊㥮灕䡍⾉㬫儏邕נ㍜꺉꯲富뫌媟ꑦ척〱▯ [ 59.145506][ T6298] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 59.151184][ T6298] netlink: 'syz.0.81': attribute type 1 has an invalid length. [ 59.178549][ T6298] bond1: entered promiscuous mode [ 59.180431][ T6298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.192158][ T6298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.196250][ T6298] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 59.203130][ T6298] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 59.213763][ T6298] bond1: (slave ip6gre1): making interface the new active one [ 59.216252][ T6298] ip6gre1: entered promiscuous mode [ 59.219464][ T6298] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 59.275408][ T6298] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 59.279243][ T6298] ip6gre1: left promiscuous mode [ 59.284152][ T6298] bond1 (unregistering): Released all slaves [ 59.309204][ T6024] keyspan 6-1:119.92: Keyspan - (without firmware) converter detected [ 59.314991][ T6024] keyspan 6-1:119.35: Keyspan - (without firmware) converter detected [ 59.319648][ T6024] keyspan 6-1:119.84: Keyspan - (without firmware) converter detected [ 59.323380][ T53] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 59.328417][ T6024] keyspan 6-1:119.237: Keyspan - (without firmware) converter detected [ 59.346992][ T6024] usb 6-1: USB disconnect, device number 3 [ 59.357723][ T6024] keyspan 6-1:119.92: device disconnected [ 59.361899][ T6024] keyspan 6-1:119.35: device disconnected [ 59.365584][ T6024] keyspan 6-1:119.84: device disconnected [ 59.370602][ T6024] keyspan 6-1:119.237: device disconnected [ 59.392062][ T6309] capability: warning: `syz.0.84' uses deprecated v2 capabilities in a way that may be insecure [ 59.460283][ T6311] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 59.473656][ T6311] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 59.506430][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.510890][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.515222][ T53] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 59.530766][ T53] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 59.537053][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.546450][ T53] usb 8-1: config 0 descriptor?? [ 59.600890][ T6325] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 59.643449][ T54] libceph: connect (1)[c::]:6789 error -101 [ 59.648404][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 59.651713][ T54] libceph: connect (1)[c::]:6789 error -101 [ 59.653748][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 59.734235][ T1025] libceph: connect (1)[c::]:6789 error -101 [ 59.737646][ T1025] libceph: mon0 (1)[c::]:6789 connect error [ 59.915206][ T54] libceph: connect (1)[c::]:6789 error -101 [ 59.917235][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 59.996230][ T1025] libceph: connect (1)[c::]:6789 error -101 [ 59.998619][ T1025] libceph: mon0 (1)[c::]:6789 connect error [ 60.098342][ T6356] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 60.153840][ T6290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.162306][ T6290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.173996][ T53] usbhid 8-1:0.0: can't add hid device: -71 [ 60.178019][ T53] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 60.184802][ T53] usb 8-1: USB disconnect, device number 2 [ 60.424224][ T54] libceph: connect (1)[c::]:6789 error -101 [ 60.426886][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 60.467018][ T6334] ceph: No mds server is up or the cluster is laggy [ 60.471812][ T6343] ceph: No mds server is up or the cluster is laggy [ 60.603103][ T53] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 60.702858][ T5930] Bluetooth: hci0: command tx timeout [ 60.703198][ T5939] Bluetooth: hci1: command tx timeout [ 60.728869][ T6427] ldm_validate_partition_table(): Disk read failed. [ 60.733986][ T6427] Dev nbd0: unable to read RDB block 0 [ 60.735788][ T6427] nbd0: unable to read partition table [ 60.741068][ T6426] Attempt to restore checkpoint with obsolete wellknown handles [ 60.748438][ T6427] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 60.753022][ T53] usb 8-1: Using ep0 maxpacket: 32 [ 60.756001][ T53] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 60.759366][ T53] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 60.763185][ T53] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 60.767333][ T53] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 60.773095][ T53] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 60.775905][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.778596][ T53] usb 8-1: Product: syz [ 60.780036][ T53] usb 8-1: Manufacturer: syz [ 60.781594][ T53] usb 8-1: SerialNumber: syz [ 60.782730][ T5939] Bluetooth: hci2: command tx timeout [ 60.783262][ T5930] Bluetooth: hci3: command tx timeout [ 60.791564][ C3] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 60.796574][ T53] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input5 [ 60.802898][ T6429] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 61.012645][ T53] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 61.019205][ T53] (id 0x00) [ 61.064027][ T53] rc_core: IR keymap rc-imon-pad not found [ 61.066630][ T53] Registered IR keymap rc-empty [ 61.068848][ T53] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 61.073726][ T53] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 61.077735][ T53] imon:send_packet: packet tx failed (-71) [ 61.084810][ T6435] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.093161][ T53] imon 8-1:155.0: remote input dev register failed [ 61.096292][ T53] imon 8-1:155.0: imon_init_intf0: rc device setup failed [ 61.111021][ T53] imon 8-1:155.0: unable to initialize intf0, err 0 [ 61.114701][ T53] imon:imon_probe: failed to initialize context! [ 61.117579][ T53] imon 8-1:155.0: unable to register, err -19 [ 61.131514][ T53] usb 8-1: USB disconnect, device number 3 [ 61.156038][ T6442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6442 comm=syz.3.119 [ 61.341066][ T6447] __nla_validate_parse: 149 callbacks suppressed [ 61.341078][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 61.347764][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.121'. [ 61.352014][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 61.355548][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.121'. [ 61.634336][ T6473] can0: slcan on ttyprintk. [ 61.713140][ T6472] can0 (unregistered): slcan off ttyprintk. [ 61.856175][ T6496] netlink: 'syz.0.133': attribute type 1 has an invalid length. [ 61.878952][ T6496] bond1: (slave geneve2): Opening slave failed [ 62.466958][ T40] kauditd_printk_skb: 95 callbacks suppressed [ 62.466973][ T40] audit: type=1400 audit(1766395062.583:287): avc: denied { create } for pid=6513 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.477476][ T40] audit: type=1400 audit(1766395062.583:288): avc: denied { setopt } for pid=6513 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.484048][ T40] audit: type=1400 audit(1766395062.603:289): avc: denied { shutdown } for pid=6513 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.556383][ T40] audit: type=1400 audit(1766395062.673:290): avc: denied { mounton } for pid=6518 comm="syz.3.142" path="/35/file0" dev="tmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.563493][ T40] audit: type=1400 audit(1766395062.673:291): avc: denied { bind } for pid=6520 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.601679][ T40] audit: type=1400 audit(1766395062.713:292): avc: denied { bind } for pid=6526 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.636471][ T6525] vcan1: entered allmulticast mode [ 62.664734][ T6533] netlink: 'syz.0.146': attribute type 2 has an invalid length. [ 62.697866][ T40] audit: type=1400 audit(1766395062.813:293): avc: denied { getopt } for pid=6536 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.960251][ T40] audit: type=1400 audit(1766395063.073:294): avc: denied { mount } for pid=6542 comm="syz.2.149" name="/" dev="autofs" ino=10908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 62.992801][ T40] audit: type=1400 audit(1766395063.113:295): avc: denied { unmount } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 63.345729][ T6548] mmap: syz.2.152 (6548) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.369219][ T6548] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 63.371709][ T6548] macsec1: entered promiscuous mode [ 63.374128][ T6548] macsec1: entered allmulticast mode [ 63.375830][ T6548] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 63.412704][ T959] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 63.455118][ T6553] sctp: [Deprecated]: syz.3.154 (pid 6553) Use of int in max_burst socket option. [ 63.455118][ T6553] Use struct sctp_assoc_value instead [ 63.528667][ T6566] netlink: 'syz.3.157': attribute type 8 has an invalid length. [ 63.531373][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'. [ 63.539830][ T6566] bond0: entered promiscuous mode [ 63.541439][ T6566] bond_slave_0: entered promiscuous mode [ 63.544262][ T6566] bond_slave_1: entered promiscuous mode [ 63.547054][ T6566] gretap0: entered promiscuous mode [ 63.550475][ T6566] bond0: left promiscuous mode [ 63.552067][ T6566] bond_slave_0: left promiscuous mode [ 63.554228][ T6566] bond_slave_1: left promiscuous mode [ 63.558652][ T6568] netlink: 44 bytes leftover after parsing attributes in process `syz.0.158'. [ 63.562718][ T959] usb 6-1: Using ep0 maxpacket: 16 [ 63.564721][ T6566] gretap0: left promiscuous mode [ 63.565512][ T959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.569939][ T959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.573550][ T959] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 63.577767][ T959] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 63.580566][ T959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.584867][ T959] usb 6-1: config 0 descriptor?? [ 63.604300][ T40] audit: type=1400 audit(1766395063.723:296): avc: denied { create } for pid=6567 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.742729][ T54] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 63.895762][ T54] usb 7-1: Using ep0 maxpacket: 8 [ 63.899260][ T54] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 63.902340][ T54] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 63.911375][ T54] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 63.915139][ T54] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.919917][ T54] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 63.923162][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.990811][ T959] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 63.994682][ T959] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 63.996950][ T959] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 63.999234][ T959] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 64.001446][ T959] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 64.006384][ T959] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 64.025596][ T959] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 64.029329][ T959] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 64.116362][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 64.119262][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 64.129479][ T54] usb 7-1: GET_CAPABILITIES returned 0 [ 64.131347][ T54] usbtmc 7-1:16.0: can't read capabilities [ 64.193699][ T6550] netlink: 'syz.1.151': attribute type 2 has an invalid length. [ 64.197118][ T6550] netlink: 244 bytes leftover after parsing attributes in process `syz.1.151'. [ 64.202805][ T54] usb 6-1: USB disconnect, device number 4 [ 64.203974][ T5996] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 64.208509][ T5996] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 64.212212][ T5996] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 64.216197][ T5996] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 64.346013][ T838] usb 7-1: USB disconnect, device number 3 [ 64.432262][ T6607] netlink: 328 bytes leftover after parsing attributes in process `syz.0.169'. [ 64.551659][ T6620] bridge0: entered promiscuous mode [ 64.554248][ T6620] macsec1: entered allmulticast mode [ 64.556491][ T6620] bridge0: entered allmulticast mode [ 64.566404][ T6619] sp0: Synchronizing with TNC [ 65.201727][ T6662] netlink: 'syz.1.184': attribute type 12 has an invalid length. [ 65.259304][ T6668] binder: 6667:6668 ioctl c0306201 200000000640 returned -22 [ 65.373429][ T6617] [U] [ 65.434106][ T6677] netlink: 'syz.1.189': attribute type 10 has an invalid length. [ 65.437518][ T6677] lo: entered promiscuous mode [ 65.439952][ T6677] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 65.463744][ T6680] fuseblk: Unknown parameter 'group9`͝_id' [ 65.508107][ T6684] erofs (device loop1): cannot find valid erofs superblock [ 65.538337][ T6686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6686 comm=syz.0.192 [ 65.585597][ T6693] bond2: Unable to set down delay as MII monitoring is disabled [ 65.586653][ T6693] bond2 (unregistering): Released all slaves [ 65.634504][ T6696] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 65.677499][ T6696] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.741086][ T6710] binder: 6709:6710 ioctl c0306201 200000000640 returned -22 [ 65.788901][ T6716] capability: warning: `syz.0.203' uses 32-bit capabilities (legacy support in use) [ 65.814997][ T6696] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.967970][ T6696] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.026617][ T6732] syzkaller1: entered promiscuous mode [ 66.029194][ T6732] syzkaller1: entered allmulticast mode [ 66.062991][ T6696] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.152083][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.162479][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.170625][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.177689][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.245341][ T6748] pim6reg: entered allmulticast mode [ 66.369545][ T6766] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 66.380132][ T6766] warning: `syz.0.214' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.389787][ T6766] bridge_slave_0: left allmulticast mode [ 66.391609][ T6766] bridge_slave_0: left promiscuous mode [ 66.395306][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.400393][ T6766] bridge_slave_1: left allmulticast mode [ 66.402207][ T6766] bridge_slave_1: left promiscuous mode [ 66.408636][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.414290][ T6766] bond0: (slave bond_slave_0): Releasing backup interface [ 66.419817][ T6766] bond0: (slave bond_slave_1): Releasing backup interface [ 66.434756][ T6766] team0: Port device team_slave_0 removed [ 66.445183][ T6775] netlink: 'syz.0.214': attribute type 10 has an invalid length. [ 66.447180][ T6766] team0: Port device team_slave_1 removed [ 66.450444][ T6766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.456086][ T6766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.459330][ T6766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.461893][ T6766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.465633][ T6780] overlayfs: overlapping lowerdir path [ 66.470138][ T6766] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 66.480374][ T6775] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 66.491782][ T6775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.512314][ T6776] ======================================================= [ 66.512314][ T6776] WARNING: The mand mount option has been deprecated and [ 66.512314][ T6776] and is ignored by this kernel. Remove the mand [ 66.512314][ T6776] option from the mount to silence this warning. [ 66.512314][ T6776] ======================================================= [ 66.516437][ T6775] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 66.628246][ T6792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7168 sclass=netlink_route_socket pid=6792 comm=syz.0.221 [ 66.637485][ T6792] Bluetooth: MGMT ver 1.23 [ 66.735710][ T6800] 9pnet_fd: p9_fd_create_unix (6800): problem connecting socket: ./file0: -111 [ 66.805338][ T6796] /dev/sr0: Can't open blockdev [ 66.807081][ T6800] gfs2: gfs2 mount does not exist [ 67.302977][ T6861] bridge2: entered promiscuous mode [ 67.334661][ T6857] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 67.375701][ T6872] netlink: 'syz.0.241': attribute type 1 has an invalid length. [ 67.404620][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 67.460513][ T6872] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.476098][ T6885] __nla_validate_parse: 4 callbacks suppressed [ 67.476109][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.242'. [ 67.558910][ T9] usb 6-1: config index 0 descriptor too short (expected 65535, got 36) [ 67.561585][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.572685][ T9] usb 6-1: config 0 has no interfaces? [ 67.574998][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.581931][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.588967][ T9] usb 6-1: config 0 descriptor?? [ 67.608762][ T6905] overlayfs: failed to resolve './file1': -2 [ 67.613787][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 67.616578][ T6905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.244'. [ 67.732727][ T9] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 67.741726][ T6914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.246'. [ 67.772699][ T6919] mkiss: ax0: crc mode is auto. [ 67.862709][ T9] usb 8-1: device descriptor read/64, error -71 [ 67.912709][ T6014] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 67.972227][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'. [ 67.976765][ T6927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.249'. [ 68.018837][ T6929] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 68.027201][ T6929] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 68.052725][ T40] kauditd_printk_skb: 62 callbacks suppressed [ 68.052736][ T40] audit: type=1400 audit(1766395068.173:359): avc: denied { ioctl } for pid=6932 comm="syz.2.251" path="socket:[13104]" dev="sockfs" ino=13104 ioctlcmd=0xb101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.062538][ T40] audit: type=1400 audit(1766395068.173:360): avc: denied { name_bind } for pid=6932 comm="syz.2.251" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 68.083643][ T6014] usb 5-1: Using ep0 maxpacket: 8 [ 68.092456][ T6014] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 68.095965][ T6014] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.099573][ T40] audit: type=1800 audit(1766395068.213:361): pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.252" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 68.099874][ T6014] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 68.100299][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'. [ 68.114541][ T6014] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 68.118456][ T6014] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.124010][ T9] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 68.127200][ T6014] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 68.131657][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.136167][ T6940] fuse: Bad value for 'fd' [ 68.155725][ T6943] netlink: 'syz.1.235': attribute type 10 has an invalid length. [ 68.166116][ T6943] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 68.174316][ T6943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.235'. [ 68.179101][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 68.183849][ T6943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.235'. [ 68.272781][ T9] usb 8-1: device descriptor read/64, error -71 [ 68.327981][ T40] audit: type=1400 audit(1766395068.443:362): avc: denied { write } for pid=6954 comm="syz.2.254" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 68.337012][ T40] audit: type=1400 audit(1766395068.443:363): avc: denied { open } for pid=6954 comm="syz.2.254" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 68.341956][ T6014] usb 5-1: GET_CAPABILITIES returned 0 [ 68.346883][ T40] audit: type=1400 audit(1766395068.443:364): avc: denied { ioctl } for pid=6954 comm="syz.2.254" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 68.357259][ T6014] usbtmc 5-1:16.0: can't read capabilities [ 68.394502][ T9] usb usb8-port1: attempt power cycle [ 68.410130][ T6961] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 68.441985][ T6963] program syz.2.257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.625609][ T6975] kvm: pic: non byte read [ 68.627843][ T6975] kvm: pic: non byte read [ 68.629546][ T6975] kvm: pic: non byte read [ 68.631240][ T6975] kvm: pic: non byte read [ 68.633041][ T6975] kvm: pic: non byte read [ 68.634739][ T6975] kvm: pic: non byte read [ 68.636419][ T6975] kvm: pic: non byte read [ 68.638123][ T6975] kvm: pic: non byte read [ 68.639824][ T6975] kvm: pic: non byte read [ 68.641515][ T6975] kvm: pic: non byte read [ 68.742717][ T9] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 68.755036][ T53] usb 5-1: USB disconnect, device number 4 [ 68.764091][ T9] usb 8-1: device descriptor read/8, error -71 [ 69.002766][ T9] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 69.023112][ T9] usb 8-1: device descriptor read/8, error -71 [ 69.133059][ T9] usb usb8-port1: unable to enumerate USB device [ 69.464897][ T6985] syzkaller0: entered promiscuous mode [ 69.466989][ T6985] syzkaller0: entered allmulticast mode [ 69.479865][ T6991] overlayfs: overlapping lowerdir path [ 69.624214][ T6998] binder: 6997:6998 ioctl 40046205 0 returned -22 [ 69.626916][ T6998] binder: 6997:6998 ioctl c0306201 200000000300 returned -11 [ 69.782289][ T7006] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 69.784808][ T7006] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 69.791256][ T7006] vhci_hcd vhci_hcd.0: Device attached [ 69.797269][ T7006] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 69.800008][ T7006] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 69.804177][ T7006] vhci_hcd vhci_hcd.0: Device attached [ 69.807020][ T7011] vhci_hcd: connection closed [ 69.807111][ T7009] vhci_hcd: connection closed [ 69.809421][ T13] vhci_hcd vhci_hcd.0: stop threads [ 69.814458][ T13] vhci_hcd vhci_hcd.0: release socket [ 69.816796][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 69.819327][ T13] vhci_hcd vhci_hcd.0: stop threads [ 69.821664][ T13] vhci_hcd vhci_hcd.0: release socket [ 69.824311][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 70.158356][ T9] usb 6-1: USB disconnect, device number 5 [ 70.181656][ T7017] nfs: Unknown parameter '*{):' [ 70.190809][ T40] audit: type=1400 audit(1766395070.303:365): avc: denied { write } for pid=7018 comm="syz.1.275" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 70.222700][ T40] audit: type=1400 audit(1766395070.323:366): avc: denied { ioctl } for pid=7018 comm="syz.1.275" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x640c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 70.232856][ T40] audit: type=1400 audit(1766395070.323:367): avc: denied { write } for pid=7018 comm="syz.1.275" path="socket:[15495]" dev="sockfs" ino=15495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.278431][ T40] audit: type=1400 audit(1766395070.393:368): avc: denied { mount } for pid=7020 comm="syz.1.276" name="/" dev="ramfs" ino=13782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 70.280399][ T7021] overlayfs: missing 'lowerdir' [ 70.473522][ T7030] batman_adv: batadv0: Adding interface: gretap1 [ 70.475568][ T7030] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.484371][ T7030] batman_adv: batadv0: Interface activated: gretap1 [ 70.547970][ T7037] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 70.550077][ T7037] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 70.564959][ T7037] vhci_hcd vhci_hcd.0: Device attached [ 70.601257][ T7043] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 70.648796][ T7050] vhci_hcd vhci_hcd.0: port 0 already used [ 70.655707][ T7053] futex_wake_op: syz.2.285 tries to shift op by 32; fix this program [ 70.783819][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.842887][ T54] usb 40-1: SetAddress Request (2) to port 0 [ 70.846092][ T54] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 70.857458][ T7062] bridge0: Device is already in use. [ 70.862726][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 70.873177][ T5996] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 70.940991][ T7068] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 70.963555][ T7038] vhci_hcd: connection reset by peer [ 70.967486][ T46] vhci_hcd vhci_hcd.1: stop threads [ 70.969603][ T46] vhci_hcd vhci_hcd.1: release socket [ 70.972520][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 71.011385][ T7076] netlink: 'syz.3.295': attribute type 12 has an invalid length. [ 71.012818][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 71.018607][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 71.023952][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.028181][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.032195][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 71.036508][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 71.039713][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 71.043324][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.049374][ T9] usb 5-1: config 0 descriptor?? [ 71.063904][ T5939] Bluetooth: hci4: urb ffff888057390900 submission failed (90) [ 71.192734][ T5996] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 71.259720][ T53] usb 5-1: USB disconnect, device number 5 [ 71.355725][ T5996] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 71.358836][ T5996] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.361779][ T5996] usb 7-1: Product: syz [ 71.363595][ T5996] usb 7-1: Manufacturer: syz [ 71.365138][ T5996] usb 7-1: SerialNumber: syz [ 71.368158][ T5996] usb 7-1: config 0 descriptor?? [ 71.602179][ T9] usb 7-1: USB disconnect, device number 4 [ 71.822847][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.129676][ T7098] netlink: 'syz.0.301': attribute type 20 has an invalid length. [ 72.134845][ T7098] netlink: 'syz.0.301': attribute type 20 has an invalid length. [ 72.146654][ T7100] input: syz1 as /devices/virtual/input/input8 [ 72.231949][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.234941][ T7103] binder: 7101:7103 ioctl c0306201 200000000640 returned -22 [ 72.340038][ T7115] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4238726434 (542556983552 ns) > initial count (358389898240 ns). Using initial count to start timer. [ 72.383468][ T959] e1000 0000:00:06.0 eth0: Reset adapter [ 72.483004][ T959] e1000 0000:00:06.0 eth0: Reset adapter [ 72.542776][ T5939] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.550810][ T5930] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 72.571700][ T7131] geneve2: entered promiscuous mode [ 72.573860][ T7131] geneve2: entered allmulticast mode [ 72.583010][ T959] e1000 0000:00:06.0 eth0: Reset adapter [ 72.864728][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.902762][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.705625][ T838] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 74.942979][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.272929][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.912826][ T54] usb 40-1: device descriptor read/8, error -110 [ 75.983028][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.329095][ T54] usb usb40-port1: attempt power cycle [ 76.383257][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.396089][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.398861][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.894099][ T54] usb usb40-port1: unable to enumerate USB device [ 77.023000][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.073890][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.312966][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.953139][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.103009][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.422969][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.142969][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.223754][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.863627][ T1332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.183093][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.224473][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.262980][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.266015][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.303803][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.344884][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.984083][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.986854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.007014][ T7162] __nla_validate_parse: 11 callbacks suppressed [ 86.007025][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 86.014333][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 86.018217][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 86.018960][ T7167] autofs4:pid:7167:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 86.021647][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 86.026972][ T7167] autofs4:pid:7167:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 86.032729][ T7172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4096 sclass=netlink_route_socket pid=7172 comm=syz.1.315 [ 86.036439][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 86.043635][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 86.047457][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 86.051827][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 86.051907][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 86.051989][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 86.085936][ T7179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.136348][ T7186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.142872][ T7186] IPv6: NLM_F_CREATE should be set when creating new route [ 86.145709][ T7186] IPv6: NLM_F_CREATE should be set when creating new route [ 86.148623][ T7186] IPv6: NLM_F_CREATE should be set when creating new route [ 86.154590][ T7189] netlink: 'syz.0.319': attribute type 1 has an invalid length. [ 86.181197][ T7189] bond3: entered promiscuous mode [ 86.185579][ T7189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 86.278409][ T7189] bond3 (unregistering): Released all slaves [ 86.303008][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.394646][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.507066][ T7216] netlink: 'syz.3.327': attribute type 29 has an invalid length. [ 86.510234][ T7216] netlink: 'syz.3.327': attribute type 29 has an invalid length. [ 86.539809][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 86.539825][ T40] audit: type=1400 audit(1766395086.653:395): avc: denied { sqpoll } for pid=7214 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.594790][ T40] audit: type=1400 audit(1766395086.713:396): avc: denied { write } for pid=7218 comm="syz.0.329" name="file0" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 86.602972][ T40] audit: type=1400 audit(1766395086.713:397): avc: denied { open } for pid=7218 comm="syz.0.329" path="/106/file0" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 86.630366][ T7227] bond1: (slave bond_slave_1): Device is not our slave [ 86.632550][ T7227] bond1: option active_slave: invalid value (bond_slave_1) [ 86.636166][ T34] cfg80211: failed to load regulatory.db [ 86.645651][ T7227] bond1 (unregistering): Released all slaves [ 86.783580][ T40] audit: type=1400 audit(1766395086.903:398): avc: denied { map } for pid=7245 comm="syz.1.339" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.783925][ T7244] netlink: 'syz.0.338': attribute type 10 has an invalid length. [ 86.792181][ T40] audit: type=1400 audit(1766395086.903:399): avc: denied { getopt } for pid=7245 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.827402][ T7251] sock: sock_timestamping_bind_phc: sock not bind to device [ 86.890176][ T40] audit: type=1400 audit(1766395087.003:400): avc: denied { ioctl } for pid=7250 comm="syz.0.341" path="socket:[14073]" dev="sockfs" ino=14073 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.921006][ T40] audit: type=1400 audit(1766395087.023:401): avc: denied { call } for pid=7245 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 86.944309][ T7260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.967001][ T7260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.035549][ T40] audit: type=1400 audit(1766395087.153:402): avc: denied { listen } for pid=7267 comm="syz.0.345" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.042388][ T7269] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 87.047887][ T40] audit: type=1400 audit(1766395087.163:403): avc: denied { write } for pid=7267 comm="syz.0.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.167083][ T7288] team0: Device xfrm1 is of different type [ 87.195767][ T7287] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 87.201574][ T40] audit: type=1400 audit(1766395087.313:404): avc: denied { create } for pid=7286 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 87.427254][ T34] net_ratelimit: 1 callbacks suppressed [ 87.427273][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.442102][ T7308] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 87.442102][ T7308] program syz.1.355 not setting count and/or reply_len properly [ 88.033019][ T7345] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 88.036738][ T7345] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 88.044891][ T7344] netlink: 'syz.0.364': attribute type 9 has an invalid length. [ 88.100380][ T7348] overlayfs: conflicting lowerdir path [ 88.287236][ T7362] netlink: 'syz.2.371': attribute type 4 has an invalid length. [ 88.403857][ T7378] binder_alloc: binder_alloc_mmap_handler: 7376 200000ffd000-200001000000 already mapped failed -16 [ 88.409507][ T7378] binder_alloc: binder_alloc_mmap_handler: 7376 200000ffd000-200001000000 already mapped failed -16 [ 88.414261][ T7378] binder_alloc: binder_alloc_mmap_handler: 7376 200000ffd000-200001000000 already mapped failed -16 [ 88.418973][ T7378] binder_alloc: binder_alloc_mmap_handler: 7376 200000ffd000-200001000000 already mapped failed -16 [ 88.423497][ T7378] binder_alloc: binder_alloc_mmap_handler: 7376 200000ffd000-200001000000 already mapped failed -16 [ 88.427839][ T7378] binder_alloc: binder_alloc_mmap_handler: 7376 200000ffd000-200001000000 already mapped failed -16 [ 88.432192][ T7378] binder_alloc: binder_alloc_mmap_handler: 7376 200000ffd000-200001000000 already mapped failed -16 [ 88.437382][ T7378] binder_alloc: binder_alloc_mmap_handler: 7376 200000ffd000-200001000000 already mapped failed -16 [ 88.441943][ T7378] binder_alloc: binder_alloc_mmap_handler: 7376 200000ffd000-200001000000 already mapped failed -16 [ 88.446592][ T7378] binder_alloc: binder_alloc_mmap_handler: 7376 200000ffd000-200001000000 already mapped failed -16 [ 88.453282][ T7389] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7389 comm=syz.1.380 [ 88.478853][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.675870][ T7424] netlink: 'syz.2.391': attribute type 7 has an invalid length. [ 88.842959][ T7446] netlink: 'syz.3.396': attribute type 5 has an invalid length. [ 88.992814][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 89.100504][ T7458] netlink: 'syz.0.400': attribute type 8 has an invalid length. [ 89.117446][ T7460] batman_adv: batadv0: Adding interface: gretap1 [ 89.120785][ T7460] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.130090][ T7460] batman_adv: batadv0: Interface activated: gretap1 [ 89.144199][ T9] usb 7-1: config 2 has an invalid interface number: 150 but max is 1 [ 89.147378][ T9] usb 7-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 89.155559][ T9] usb 7-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 89.163628][ T9] usb 7-1: config 2 has no interface number 0 [ 89.166354][ T9] usb 7-1: config 2 interface 150 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.171269][ T9] usb 7-1: config 2 interface 150 has no altsetting 0 [ 89.179048][ T9] usb 7-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=c6.38 [ 89.182269][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.185495][ T9] usb 7-1: Product: ꟠쿘₹덿眡䳰召㖋要猝㿐蜨䭣궁뛩줟‧ᴙƳ읛冝ঽ녇ﾱ竾䷙Ვ蹢ﮙꧬ≛ᒄ卫⣖㔳⳸춚㉙櫯袂玼晵䀷庝츿湪阼泈먷뚷⸊쏼뎹粲撲뇆གྷ폦㫢㳤雋⑐ஶ朌헧攞㪓霐 [ 89.193081][ T9] usb 7-1: Manufacturer: Њ [ 89.194596][ T9] usb 7-1: SerialNumber: 㠊 [ 89.251951][ T7473] sp0: Synchronizing with TNC [ 89.343525][ T7478] cgroup: none used incorrectly [ 89.353552][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.409269][ T9] usb 7-1: USB disconnect, device number 5 [ 89.514568][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.846097][ T7501] xt_CT: No such helper "pptp" [ 89.995417][ T9] IPVS: starting estimator thread 0... [ 89.998522][ T7513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.007048][ T7513] overlay: filesystem on ./bus not supported as upperdir [ 90.052880][ T54] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 90.082739][ T7515] IPVS: using max 46 ests per chain, 110400 per kthread [ 90.085707][ T7519] vlan0: entered allmulticast mode [ 90.088038][ T7519] veth0_vlan: entered allmulticast mode [ 90.208549][ T54] usb 8-1: Using ep0 maxpacket: 16 [ 90.214922][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.218872][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.222534][ T54] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 90.226665][ T54] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 90.229904][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.234809][ T54] usb 8-1: config 0 descriptor?? [ 90.463615][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.547731][ T7550] tmpfs: Unknown parameter 'ncks' [ 90.548173][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.641920][ T54] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 90.644351][ T54] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 90.647319][ T54] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 90.650634][ T54] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 90.653726][ T54] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 90.661618][ T54] input: HID 0955:7214 Haptics as /devices/virtual/input/input10 [ 90.681334][ T54] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 90.685152][ T54] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 90.842312][ T7499] random: crng reseeded on system resumption [ 90.848977][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.852497][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.863804][ T1025] usb 8-1: USB disconnect, device number 8 [ 90.863897][ T24] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 90.870613][ T24] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 90.874382][ T24] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 90.875615][ T1025] ------------[ cut here ]------------ [ 90.877954][ T24] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 90.880140][ T1025] workqueue: work disable count underflowed [ 90.880146][ T1025] WARNING: kernel/workqueue.c:4359 at enable_work+0x2ca/0x310, CPU#3: kworker/3:3/1025 [ 90.889584][ T1025] Modules linked in: [ 90.891554][ T1025] CPU: 3 UID: 0 PID: 1025 Comm: kworker/3:3 Not tainted syzkaller #0 PREEMPT(full) [ 90.895232][ T1025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.898742][ T1025] Workqueue: usb_hub_wq hub_event [ 90.900364][ T1025] RIP: 0010:enable_work+0x2ca/0x310 [ 90.902042][ T1025] Code: ff e8 da 0d 3a 00 90 0f 0b 90 e9 b4 fe ff ff e8 cc 0d 3a 00 e8 17 29 f3 09 e9 49 ff ff ff e8 bd 0d 3a 00 48 8d 3d 36 cd 06 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 a4 e7 a3 00 e9 f7 fd ff [ 90.908170][ T1025] RSP: 0018:ffffc90005ed7348 EFLAGS: 00010093 [ 90.910107][ T1025] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8184d6e3 [ 90.912626][ T1025] RDX: ffff888028df4980 RSI: ffffffff8184d8b3 RDI: ffffffff908ba5f0 [ 90.915249][ T1025] RBP: ffff88803df42738 R08: 0000000000000005 R09: 0000000000000000 [ 90.917720][ T1025] R10: 0000000000000000 R11: ffff888028df54b0 R12: 1ffff92000bdae6a [ 90.920214][ T1025] R13: ffffffff8fc4e7ff R14: ffff88803df42698 R15: ffff88803df42730 [ 90.922755][ T1025] FS: 0000000000000000(0000) GS:ffff8880d6bf5000(0000) knlGS:0000000000000000 [ 90.925536][ T1025] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.927625][ T1025] CR2: 000000110c3a2aa2 CR3: 0000000024fa2000 CR4: 0000000000352ef0 [ 90.930152][ T1025] Call Trace: [ 90.931230][ T1025] [ 90.932176][ T1025] ? __pfx_enable_work+0x10/0x10 [ 90.933931][ T1025] cancel_delayed_work_sync+0x96/0xf0 [ 90.935640][ T1025] thermal_zone_device_unregister+0x28e/0x4d0 [ 90.937563][ T1025] ? __pfx_shield_remove+0x10/0x10 [ 90.939211][ T1025] power_supply_unregister+0x10a/0x150 [ 90.940936][ T1025] shield_remove+0x75/0x130 [ 90.942437][ T1025] ? __pfx_shield_remove+0x10/0x10 [ 90.944101][ T1025] hid_device_remove+0xd1/0x260 [ 90.945659][ T1025] ? __pfx_hid_device_remove+0x10/0x10 [ 90.947396][ T1025] device_remove+0xcb/0x170 [ 90.948888][ T1025] device_release_driver_internal+0x44b/0x620 [ 90.950827][ T1025] bus_remove_device+0x22f/0x450 [ 90.952409][ T1025] device_del+0x396/0x9f0 [ 90.953842][ T1025] ? __pfx_device_del+0x10/0x10 [ 90.955390][ T1025] ? do_raw_spin_lock+0x12c/0x2b0 [ 90.956989][ T1025] hid_destroy_device+0x19c/0x240 [ 90.958622][ T1025] usbhid_disconnect+0xa0/0xe0 [ 90.960152][ T1025] usb_unbind_interface+0x1dd/0x9e0 [ 90.961813][ T1025] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 90.963653][ T1025] ? __pfx_usb_unbind_interface+0x10/0x10 [ 90.965453][ T1025] device_remove+0x125/0x170 [ 90.966939][ T1025] device_release_driver_internal+0x44b/0x620 [ 90.968925][ T1025] bus_remove_device+0x22f/0x450 [ 90.970538][ T1025] device_del+0x396/0x9f0 [ 90.971932][ T1025] ? __pfx_device_del+0x10/0x10 [ 90.973527][ T1025] ? kobject_put+0x218/0x6f0 [ 90.975014][ T1025] usb_disable_device+0x355/0x820 [ 90.976618][ T1025] usb_disconnect+0x2e1/0x9e0 [ 90.978133][ T1025] hub_event+0x1d84/0x52f0 [ 90.979577][ T1025] ? __lock_acquire+0x436/0x2890 [ 90.981156][ T1025] ? do_raw_spin_unlock+0x172/0x230 [ 90.982846][ T1025] ? __pfx_hub_event+0x10/0x10 [ 90.984374][ T1025] ? debug_objects_fill_pool+0x3a0/0x660 [ 90.986154][ T1025] ? finish_task_switch.isra.0+0x202/0xbd0 [ 90.988003][ T1025] ? rcu_is_watching+0x12/0xc0 [ 90.989531][ T1025] process_one_work+0x9ba/0x1b20 [ 90.991114][ T1025] ? __pfx_process_one_work+0x10/0x10 [ 90.992867][ T1025] ? assign_work+0x1a0/0x250 [ 90.994354][ T1025] worker_thread+0x6c8/0xf10 [ 90.995833][ T1025] ? __kthread_parkme+0x19e/0x250 [ 90.997429][ T1025] ? __pfx_worker_thread+0x10/0x10 [ 90.999072][ T1025] kthread+0x3c5/0x780 [ 91.000376][ T1025] ? __pfx_kthread+0x10/0x10 [ 91.001866][ T1025] ? rcu_is_watching+0x12/0xc0 [ 91.003417][ T1025] ? __pfx_kthread+0x10/0x10 [ 91.004883][ T1025] ret_from_fork+0x983/0xb10 [ 91.006368][ T1025] ? __pfx_ret_from_fork+0x10/0x10 [ 91.007983][ T1025] ? __switch_to+0x7af/0x10d0 [ 91.009498][ T1025] ? __pfx_kthread+0x10/0x10 [ 91.010972][ T1025] ret_from_fork_asm+0x1a/0x30 [ 91.012501][ T1025] [ 91.013518][ T1025] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 91.015804][ T1025] CPU: 3 UID: 0 PID: 1025 Comm: kworker/3:3 Not tainted syzkaller #0 PREEMPT(full) [ 91.018734][ T1025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.022075][ T1025] Workqueue: usb_hub_wq hub_event [ 91.023700][ T1025] Call Trace: [ 91.024765][ T1025] [ 91.025714][ T1025] dump_stack_lvl+0x3d/0x1f0 [ 91.027279][ T1025] vpanic+0x640/0x6f0 [ 91.028864][ T1025] ? enable_work+0x2ca/0x310 [ 91.030713][ T1025] panic+0xca/0xd0 [ 91.032205][ T1025] ? __pfx_panic+0x10/0x10 [ 91.033989][ T1025] ? check_panic_on_warn+0x1f/0xb0 [ 91.036026][ T1025] check_panic_on_warn+0xab/0xb0 [ 91.037999][ T1025] __warn+0x108/0x3c0 [ 91.039606][ T1025] __report_bug+0x2a0/0x520 [ 91.041419][ T1025] ? enable_work+0x2ca/0x310 [ 91.043294][ T1025] ? __pfx___report_bug+0x10/0x10 [ 91.045295][ T1025] ? __wait_for_common+0x1e0/0x4e0 [ 91.047031][ T1025] ? enable_work+0x2c3/0x310 [ 91.048332][ T1025] ? enable_work+0xf3/0x310 [ 91.050117][ T1025] ? find_held_lock+0x2b/0x80 [ 91.051737][ T1025] report_bug_entry+0xe1/0x290 [ 91.053351][ T1025] ? enable_work+0x2ca/0x310 [ 91.054864][ T1025] handle_bug+0x18a/0x260 [ 91.056262][ T1025] exc_invalid_op+0x17/0x50 [ 91.057714][ T1025] asm_exc_invalid_op+0x1a/0x20 [ 91.059292][ T1025] RIP: 0010:enable_work+0x2ca/0x310 [ 91.060963][ T1025] Code: ff e8 da 0d 3a 00 90 0f 0b 90 e9 b4 fe ff ff e8 cc 0d 3a 00 e8 17 29 f3 09 e9 49 ff ff ff e8 bd 0d 3a 00 48 8d 3d 36 cd 06 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 a4 e7 a3 00 e9 f7 fd ff [ 91.066983][ T1025] RSP: 0018:ffffc90005ed7348 EFLAGS: 00010093 [ 91.068913][ T1025] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8184d6e3 [ 91.071429][ T1025] RDX: ffff888028df4980 RSI: ffffffff8184d8b3 RDI: ffffffff908ba5f0 [ 91.073858][ T1025] RBP: ffff88803df42738 R08: 0000000000000005 R09: 0000000000000000 [ 91.076350][ T1025] R10: 0000000000000000 R11: ffff888028df54b0 R12: 1ffff92000bdae6a [ 91.078782][ T1025] R13: ffffffff8fc4e7ff R14: ffff88803df42698 R15: ffff88803df42730 [ 91.081244][ T1025] ? enable_work+0xf3/0x310 [ 91.082713][ T1025] ? enable_work+0x2c3/0x310 [ 91.084149][ T1025] ? enable_work+0x2c3/0x310 [ 91.085575][ T1025] ? __pfx_enable_work+0x10/0x10 [ 91.087141][ T1025] cancel_delayed_work_sync+0x96/0xf0 [ 91.088815][ T1025] thermal_zone_device_unregister+0x28e/0x4d0 [ 91.090713][ T1025] ? __pfx_shield_remove+0x10/0x10 [ 91.092329][ T1025] power_supply_unregister+0x10a/0x150 [ 91.094076][ T1025] shield_remove+0x75/0x130 [ 91.095535][ T1025] ? __pfx_shield_remove+0x10/0x10 [ 91.097159][ T1025] hid_device_remove+0xd1/0x260 [ 91.098754][ T1025] ? __pfx_hid_device_remove+0x10/0x10 [ 91.100481][ T1025] device_remove+0xcb/0x170 [ 91.101953][ T1025] device_release_driver_internal+0x44b/0x620 [ 91.103882][ T1025] bus_remove_device+0x22f/0x450 [ 91.105474][ T1025] device_del+0x396/0x9f0 [ 91.106873][ T1025] ? __pfx_device_del+0x10/0x10 [ 91.108413][ T1025] ? do_raw_spin_lock+0x12c/0x2b0 [ 91.109984][ T1025] hid_destroy_device+0x19c/0x240 [ 91.111593][ T1025] usbhid_disconnect+0xa0/0xe0 [ 91.113123][ T1025] usb_unbind_interface+0x1dd/0x9e0 [ 91.114758][ T1025] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 91.116509][ T1025] ? __pfx_usb_unbind_interface+0x10/0x10 [ 91.118272][ T1025] device_remove+0x125/0x170 [ 91.119744][ T1025] device_release_driver_internal+0x44b/0x620 [ 91.121658][ T1025] bus_remove_device+0x22f/0x450 [ 91.123250][ T1025] device_del+0x396/0x9f0 [ 91.124665][ T1025] ? __pfx_device_del+0x10/0x10 [ 91.126243][ T1025] ? kobject_put+0x218/0x6f0 [ 91.127726][ T1025] usb_disable_device+0x355/0x820 [ 91.129343][ T1025] usb_disconnect+0x2e1/0x9e0 [ 91.130863][ T1025] hub_event+0x1d84/0x52f0 [ 91.132308][ T1025] ? __lock_acquire+0x436/0x2890 [ 91.133897][ T1025] ? do_raw_spin_unlock+0x172/0x230 [ 91.135574][ T1025] ? __pfx_hub_event+0x10/0x10 [ 91.137103][ T1025] ? debug_objects_fill_pool+0x3a0/0x660 [ 91.138897][ T1025] ? finish_task_switch.isra.0+0x202/0xbd0 [ 91.140776][ T1025] ? rcu_is_watching+0x12/0xc0 [ 91.142361][ T1025] process_one_work+0x9ba/0x1b20 [ 91.144061][ T1025] ? __pfx_process_one_work+0x10/0x10 [ 91.145776][ T1025] ? assign_work+0x1a0/0x250 [ 91.147276][ T1025] worker_thread+0x6c8/0xf10 [ 91.148841][ T1025] ? __kthread_parkme+0x19e/0x250 [ 91.150483][ T1025] ? __pfx_worker_thread+0x10/0x10 [ 91.152179][ T1025] kthread+0x3c5/0x780 [ 91.153574][ T1025] ? __pfx_kthread+0x10/0x10 [ 91.155069][ T1025] ? rcu_is_watching+0x12/0xc0 [ 91.156613][ T1025] ? __pfx_kthread+0x10/0x10 [ 91.158099][ T1025] ret_from_fork+0x983/0xb10 [ 91.159593][ T1025] ? __pfx_ret_from_fork+0x10/0x10 [ 91.161227][ T1025] ? __switch_to+0x7af/0x10d0 [ 91.162812][ T1025] ? __pfx_kthread+0x10/0x10 [ 91.164324][ T1025] ret_from_fork_asm+0x1a/0x30 [ 91.165881][ T1025] [ 91.167570][ T1025] Kernel Offset: disabled [ 91.168978][ T1025] Rebooting in 86400 seconds..