last executing test programs: 57.751757708s ago: executing program 1 (id=15117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 57.715074817s ago: executing program 1 (id=15118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0) close(r7) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xe, 0xb}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfffffffb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 57.177632559s ago: executing program 1 (id=15123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 57.132163059s ago: executing program 1 (id=15124): syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x38) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000001000000000000000000180100002020642500000000002020207b1af8ff00000000bfa108000000004047010000f6f3ffffb702000008000000b70300000000000885000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0xc}, 0x94) 55.545496309s ago: executing program 1 (id=15134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000000480)=""/177, 0xb1, 0xa6) unshare(0x26020480) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r5 = fsopen(&(0x7f0000000080)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r6) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4040040) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, 0x0) 53.714557878s ago: executing program 1 (id=15141): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket(0x10, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f35, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}}, 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0xc10c3000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x143da}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000880}, 0xc0d0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x58) ioctl$TIOCSTI(r5, 0x5412, 0x0) write(r5, &(0x7f0000000080)="230f1d2f06eadaeaea3e1965084514f86d25b12c7976a1f22e82bbbd4bc6be07f92e3fdc07a369231622efe5a00b9016b790582b223ac0721cf7496228e97db99202d9d4617c6171befe1a1bf18aa8ad3ff82a9c92bb4891c2ed0e7e3f8ac4a6b04eb8aca0b306d74a64a8070c81066680f0b755a2f4ef73ed57746a9e5d8e6cc89637a230c99f356ecfb0eb", 0x8c) unshare(0x6a040000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, 0x0) 37.526627197s ago: executing program 32 (id=15141): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket(0x10, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f35, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}}, 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0xc10c3000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x143da}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000880}, 0xc0d0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x58) ioctl$TIOCSTI(r5, 0x5412, 0x0) write(r5, &(0x7f0000000080)="230f1d2f06eadaeaea3e1965084514f86d25b12c7976a1f22e82bbbd4bc6be07f92e3fdc07a369231622efe5a00b9016b790582b223ac0721cf7496228e97db99202d9d4617c6171befe1a1bf18aa8ad3ff82a9c92bb4891c2ed0e7e3f8ac4a6b04eb8aca0b306d74a64a8070c81066680f0b755a2f4ef73ed57746a9e5d8e6cc89637a230c99f356ecfb0eb", 0x8c) unshare(0x6a040000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, 0x0) 6.79797913s ago: executing program 5 (id=15385): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff06, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket(0x40000000015, 0x5, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0/..\x00', 0x22a040, 0x121) socket$inet6_sctp(0xa, 0x801, 0x84) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00004d4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000000f000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x1, 0x8d, 0x0, r3}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x50) io_uring_enter(r5, 0x2219, 0xcf74, 0x51, 0x0, 0x0) 6.21101999s ago: executing program 4 (id=15391): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 6.08149669s ago: executing program 4 (id=15393): kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x20005005) sendmmsg$alg(r1, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabda", 0x47}, {0x0}, {&(0x7f0000000300)="86545d2157646172b815818bfd0e1457", 0x10}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f", 0x53}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df", 0xc4}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) 5.666899189s ago: executing program 3 (id=15397): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 5.122629322s ago: executing program 3 (id=15399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x2001, 0x8}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.030209651s ago: executing program 4 (id=15400): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 4.621812317s ago: executing program 2 (id=15401): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 4.462682467s ago: executing program 4 (id=15402): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000900)="580000001400192360834b80043f679a10ff3d420000000001000000f61bcdf1194ad353e9cc853a804824cabece4b381effffffff0057e792945f80000000050028925aaa000000c600000004002e499391db0926f27805", 0x58}], 0x1) 4.365823668s ago: executing program 2 (id=15404): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x4004) 4.064165798s ago: executing program 2 (id=15405): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x33424752}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) unshare(0x22020600) syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0x601, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xc, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xf, 0x1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8884}, 0x24000840) socket$netlink(0x10, 0x3, 0x0) 3.977448285s ago: executing program 4 (id=15407): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x24}}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8800, 0x0, 0x0) clock_nanosleep(0x4, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) request_key(0x0, &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000940)='-#{%]:\x00', 0xffffffffffffffff) 3.872907259s ago: executing program 5 (id=15408): dup2(0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0xb40, 0xffffffff, 0xc8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xaa8, 0xaa8, 0xaa8, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xa0, 0xc8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x287, 0x898, 0x8f8, 0x0, {0x0, 0x4}, [@common=@unspec=@u32={{0x7e0}, {[{[{}, {0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[{}, {}, {0x0, 0x2}], [{}, {0x0, 0x8}]}, {}, {}, {[{}, {}, {}, {}, {}, {0xfffffffe}], [{0x6}, {0x0, 0x3}], 0xfe}, {[{}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0xfe40}]}, {[{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[], [{}, {0x4}, {}, {}, {}, {}, {}, {}, {0x4}]}], 0x5}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@private=0xa010102, [0xff000000, 0xff, 0xff0000ff], 0x4e24, 0xc, 0x2, 0x4e24, 0x1, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x1, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5, 0x4], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xba0) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x22020400) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) 3.696559421s ago: executing program 0 (id=15410): r0 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x2000, 0x0, 0x1f) close_range(r0, 0xffffffffffffffff, 0x0) 3.591043032s ago: executing program 3 (id=15411): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x138, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xb}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0xa9f}, @filter_kind_options=@f_u32={{0x8}, {0xfc, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x7, 0x2, 0x0, 0x7, 0xd, 0x94, 0x2}}, @TCA_U32_ACT={0xe4, 0x7, [@m_csum={0xe0, 0x4, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4, 0xfffffffb}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x4, 0x1, 0xa, 0x928}, 0x60}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc, 0x0, 0x1, 0xffffffff, 0x3}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x430800, 0x4, 0x7, 0x4}, 0x80}}]}, {0x41, 0x6, "fd94c06764f37d74e02e47d2112b5242809e2419a3cf7f21e0a41fd7d83b6df9e9c285b3a976c4ebcd91e46a33997be265aa1e90d10cac810d688759de"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x91}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.200955118s ago: executing program 0 (id=15412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="8fe978d2597466b833010f00d0c4e17de72866ba420066edb8010000000f01c126d9ea0f01c80f06c4e18d5da50f000000b9800000c00f3235001000000f30", 0x3f}], 0x1, 0x46, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.138459419s ago: executing program 3 (id=15413): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c4, 0x10, 0x2, 0x3, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0) 3.049309302s ago: executing program 3 (id=15414): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000000480)=""/177, 0xb1, 0xa6) unshare(0x26020480) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r5 = fsopen(&(0x7f0000000080)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x24, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040040) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, 0x0) 2.831913095s ago: executing program 0 (id=15415): r0 = msgget$private(0x0, 0x3ac) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x2800) 2.495602586s ago: executing program 0 (id=15416): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) 2.174895013s ago: executing program 5 (id=15417): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 2.12700233s ago: executing program 0 (id=15418): kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x20005005) sendmmsg$alg(r1, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabda", 0x47}, {0x0}, {&(0x7f0000000300)="86545d2157646172b815818bfd0e1457", 0x10}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f", 0x53}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df", 0xc4}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) 2.126335192s ago: executing program 5 (id=15419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000040601"], 0x60}}, 0x0) 2.047609692s ago: executing program 3 (id=15420): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x5) 1.990304346s ago: executing program 5 (id=15421): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) syz_open_dev$vim2m(&(0x7f00000002c0), 0x8, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) 1.989296179s ago: executing program 4 (id=15422): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x78, 0x30, 0xb, 0x5, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x4000) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6(0xa, 0x4, 0x80000006) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0xa}, 0x94) preadv2(r0, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/168, 0xa8}, {&(0x7f0000000500)=""/250, 0xfa}], 0x2, 0x6, 0xe1, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x208000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.916113451s ago: executing program 5 (id=15423): r0 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x2000, 0x0, 0x1f) close_range(r0, 0xffffffffffffffff, 0x0) 1.646319652s ago: executing program 2 (id=15424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000010405000000000000000000070000000600064000020000050001"], 0x34}}, 0x2000004) 1.555074262s ago: executing program 0 (id=15425): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, &(0x7f0000000880)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x3, 0x8, &(0x7f0000001840)=ANY=[@ANYRESDEC=r4, @ANYRES8, @ANYRES16=r1], &(0x7f0000001540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfc}, 0x94) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xd2eeab92b6f09a65}, 0xc, &(0x7f0000001700)={&(0x7f0000000480)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01ffffff7f000000000067000800", @ANYRES32, @ANYBLOB="0800c7000008"], 0x30}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 1.27660086s ago: executing program 2 (id=15426): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000004140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x5, 0x2, 0x7, 0x8, 0x0, 0x0, {0x43, 0x3, 0x5, 0xffff, 0x1000, 0x80000000400000ff, 0x0, 0x1, 0x120, 0x2000, 0x10001, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x2, 0xffffffff80200168, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) write$FUSE_CREATE_OPEN(r6, 0x0, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, 0x0) 0s ago: executing program 2 (id=15427): bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x0) kernel console output (not intermixed with test programs): 45] usb 1-1: New USB device found, idVendor=0af0, idProduct=7111, bcdDevice=72.c5 [ 1788.493984][ T6245] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.517506][ T6245] usb 1-1: Product: syz [ 1788.523562][ T6245] usb 1-1: Manufacturer: syz [ 1788.534456][ T6245] usb 1-1: SerialNumber: syz [ 1788.770095][ T6245] usb 1-1: USB disconnect, device number 43 [ 1788.778584][ T9924] Device name cannot be null; rc = [-22] [ 1788.805327][T15772] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1789.022046][T15772] usb 3-1: Using ep0 maxpacket: 8 [ 1789.047235][T28753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1789.057276][T28753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1789.068047][T28753] bond0 (unregistering): Released all slaves [ 1789.091542][T15772] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1789.106096][ T9751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.114852][ T9751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.116499][T15772] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1789.122733][ T9751] bridge_slave_0: entered allmulticast mode [ 1789.140491][ T9751] bridge_slave_0: entered promiscuous mode [ 1789.153328][T15772] usb 3-1: can't read configurations, error -71 [ 1789.156473][ T9751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.179305][ T9751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.187274][ T9751] bridge_slave_1: entered allmulticast mode [ 1789.194255][ T9751] bridge_slave_1: entered promiscuous mode [ 1789.201700][T28753] tipc: Left network mode [ 1789.626037][ T9751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1789.650374][ T9751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1789.713539][ T9751] team0: Port device team_slave_0 added [ 1789.733346][ T9751] team0: Port device team_slave_1 added [ 1789.751329][T28753] hsr_slave_0: left promiscuous mode [ 1789.782283][T28753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1789.798480][T28753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1789.813283][T31394] Bluetooth: hci2: command tx timeout [ 1789.822682][T28753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1789.831300][T28753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1789.850438][T28753] veth1_macvtap: left promiscuous mode [ 1789.856137][T28753] veth0_macvtap: left promiscuous mode [ 1789.862925][T28753] veth1_vlan: left promiscuous mode [ 1789.883195][T28753] veth0_vlan: left promiscuous mode [ 1790.332994][ T29] audit: type=1400 audit(1781643472.552:4537): avc: denied { write } for pid=9964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1790.443047][T28753] team0 (unregistering): Port device team_slave_1 removed [ 1790.472735][T28753] team0 (unregistering): Port device team_slave_0 removed [ 1790.472952][ T29] audit: type=1400 audit(1781643472.681:4538): avc: denied { write } for pid=10033 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1790.566507][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1790.579656][ T9751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1790.587095][ T9751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1790.619159][ T9751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1790.635274][ T9751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1790.642704][ T9751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1790.669125][ T9751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1790.709971][ T9751] hsr_slave_0: entered promiscuous mode [ 1790.716875][ T9751] hsr_slave_1: entered promiscuous mode [ 1790.723029][ T9751] debugfs: 'hsr0' already exists in 'hsr' [ 1790.783590][ T9751] Cannot create hsr debugfs directory [ 1791.067387][T10136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1791.538477][ T9751] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.868050][ T29] audit: type=1400 audit(1781643473.973:4539): avc: denied { write } for pid=10103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1791.931346][ T9751] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.013496][ T29] audit: type=1400 audit(1781643474.056:4540): avc: denied { write } for pid=10184 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1792.039724][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1792.049478][T28753] IPVS: stop unused estimator thread 0... [ 1792.067696][T31394] Bluetooth: hci2: command tx timeout [ 1792.081689][ T9751] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.092492][T10191] Device name cannot be null; rc = [-22] [ 1793.463753][ T9751] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.664948][T10225] netlink: 436 bytes leftover after parsing attributes in process `syz.4.14365'. [ 1793.674233][T10225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14365'. [ 1794.245594][ T9751] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1794.262691][ T9751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1794.286464][ T9751] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1794.306818][ T9751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1794.321173][T31394] Bluetooth: hci2: command tx timeout [ 1794.321425][ T9751] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1794.338781][ T9751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1794.355493][ T9751] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1794.366860][ T9751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1794.412265][ T29] audit: type=1400 audit(1781643476.280:4541): avc: denied { write } for pid=10201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1794.913148][ T29] audit: type=1400 audit(1781643476.788:4542): avc: denied { write } for pid=10268 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1796.050999][ T9751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1796.066553][ T9751] 8021q: adding VLAN 0 to HW filter on device team0 [ 1796.081169][T19223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.088317][T19223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1796.140209][T19223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.147315][T19223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1796.158386][T20054] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1796.173550][T10296] afs: Unknown parameter 'dy' [ 1796.647648][T31394] Bluetooth: hci2: command tx timeout [ 1796.884190][ T29] audit: type=1400 audit(1781643478.606:4543): avc: denied { write } for pid=10297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1797.006032][T10341] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1797.921867][ T29] audit: type=1400 audit(1781643479.565:4544): avc: denied { write } for pid=10345 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1797.978612][ T9751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1798.016395][ T9751] veth0_vlan: entered promiscuous mode [ 1798.025938][ T9751] veth1_vlan: entered promiscuous mode [ 1798.102473][ T9751] veth0_macvtap: entered promiscuous mode [ 1798.118586][ T9751] veth1_macvtap: entered promiscuous mode [ 1798.146059][ T9751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1798.174367][ T9751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1798.209724][T20054] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.258770][T20054] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.281864][T10384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14393'. [ 1798.493745][T10385] overlayfs: failed to resolve './file0': -2 [ 1798.562573][T20054] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.637902][T20054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.675006][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1798.689895][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1798.802036][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1799.025044][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1799.087564][ T29] audit: type=1400 audit(1781643480.636:4545): avc: denied { write } for pid=10360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1799.250339][ T29] audit: type=1400 audit(1781643480.783:4546): avc: denied { write } for pid=10428 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1799.555305][ T7660] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1799.622843][T28704] block nbd1: Possible stuck request ffff888027c1e000: control (read@0,1024B). Runtime 600 seconds [ 1799.635103][T28704] block nbd1: Possible stuck request ffff888027c1e1c0: control (read@1024,1024B). Runtime 600 seconds [ 1799.651111][T28704] block nbd1: Possible stuck request ffff888027c1e380: control (read@2048,1024B). Runtime 600 seconds [ 1799.662748][T28704] block nbd1: Possible stuck request ffff888027c1e540: control (read@3072,1024B). Runtime 600 seconds [ 1799.733036][T20054] Bluetooth: hci3: Frame reassembly failed (-84) [ 1799.804497][ T7660] usb 5-1: Using ep0 maxpacket: 8 [ 1799.818865][ T7660] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1799.830022][ T7660] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1799.843308][ T7660] usb 5-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 1799.853441][ T7660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.902606][ T7660] usb 5-1: config 0 descriptor?? [ 1800.117620][T10471] random: crng reseeded on system resumption [ 1800.174896][T10420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1800.213995][T10420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.491836][T10484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14407'. [ 1800.996691][T28704] block nbd3: Possible stuck request ffff888027cc5080: control (read@0,1024B). Runtime 540 seconds [ 1801.007562][T28704] block nbd3: Possible stuck request ffff888027cc5240: control (read@1024,1024B). Runtime 540 seconds [ 1801.018668][T28704] block nbd3: Possible stuck request ffff888027cc5400: control (read@2048,1024B). Runtime 540 seconds [ 1801.029816][T28704] block nbd3: Possible stuck request ffff888027cc55c0: control (read@3072,1024B). Runtime 540 seconds [ 1801.950907][T31394] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1802.318899][ T29] audit: type=1326 audit(1781643483.616:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.0.14411" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5943b9ce59 code=0x0 [ 1803.054806][ T7660] usbhid 5-1:0.0: can't add hid device: -71 [ 1803.157187][ T7660] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1803.280808][T10520] (syz.2.14413,10520,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1803.379262][T10520] (syz.2.14413,10520,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1803.394322][T10512] tipc: Started in network mode [ 1803.431290][T10512] tipc: Node identity c29c92938fde, cluster identity 4711 [ 1803.548801][T10512] tipc: Enabled bearer , priority 0 [ 1803.627325][T10533] input: syz0 as /devices/virtual/input/input100 [ 1803.656838][T10531] syzkaller0: entered promiscuous mode [ 1803.730917][T10531] syzkaller0: entered allmulticast mode [ 1803.932874][T10512] tipc: Resetting bearer [ 1804.012532][ T7660] usb 5-1: USB disconnect, device number 58 [ 1804.028407][T10511] tipc: Resetting bearer [ 1804.153520][T10511] tipc: Disabling bearer [ 1804.738011][T10591] random: crng reseeded on system resumption [ 1805.036939][ T29] audit: type=1400 audit(1781643486.126:4548): avc: denied { transfer } for pid=10614 comm="syz.2.14430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1805.098897][T10621] afs: Unknown parameter 'dy' [ 1805.211914][T13511] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1805.319304][T10638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14432'. [ 1805.656488][T13511] usb 2-1: Using ep0 maxpacket: 8 [ 1805.693565][T13511] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1805.789144][T13511] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1805.896382][T13511] usb 2-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 1805.910642][T13511] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.012432][T13511] usb 2-1: config 0 descriptor?? [ 1806.336795][T10604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1806.399335][T10604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1806.877233][T10657] (syz.2.14436,10657,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1806.886178][T10657] (syz.2.14436,10657,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1807.444321][ T6245] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1807.607960][ T6245] usb 1-1: config 128 has an invalid interface number: 148 but max is 0 [ 1807.616440][ T6245] usb 1-1: config 128 has no interface number 0 [ 1807.622846][ T6245] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1807.632929][ T6245] usb 1-1: config 128 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1807.646125][ T6245] usb 1-1: config 128 interface 148 has no altsetting 0 [ 1807.655471][ T6245] usb 1-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 1807.664758][ T6245] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.673051][ T6245] usb 1-1: Product: syz [ 1807.677320][ T6245] usb 1-1: Manufacturer: syz [ 1807.681980][ T6245] usb 1-1: SerialNumber: syz [ 1807.916615][ T6245] usb 1-1: USB disconnect, device number 44 [ 1808.151367][T13511] usbhid 2-1:0.0: can't add hid device: -71 [ 1808.176950][T13511] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1808.200253][T13511] usb 2-1: USB disconnect, device number 26 [ 1808.270052][T10741] Mount JFS Failure: -22 [ 1808.274419][T10741] jfs_mount failed w/return code = -22 [ 1809.513436][ T6245] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1809.730958][ T6245] usb 1-1: Using ep0 maxpacket: 8 [ 1809.739953][ T6245] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1809.750654][ T6245] usb 1-1: config 16 has an invalid interface number: 148 but max is 0 [ 1809.760508][ T6245] usb 1-1: config 16 has no interface number 0 [ 1809.768033][ T6245] usb 1-1: config 16 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1809.787155][ T6245] usb 1-1: config 16 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1809.832271][ T6245] usb 1-1: config 16 interface 148 has no altsetting 0 [ 1809.857931][ T6245] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1809.880931][ T6245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.175434][ T6245] usb 1-1: string descriptor 0 read error: -71 [ 1810.211006][ T6245] usb 1-1: USB disconnect, device number 45 [ 1810.748217][ T6245] IPVS: starting estimator thread 0... [ 1810.754141][T10795] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1810.868601][T10808] IPVS: using max 87 ests per chain, 208800 per kthread [ 1812.124011][T10821] /dev/nullb0: Can't lookup blockdev [ 1812.334177][T10837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14466'. [ 1812.812580][T10842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14468'. [ 1812.824062][T10842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14468'. [ 1813.496280][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1814.121669][ T6245] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1814.153046][ T6245] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1814.708666][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14482'. [ 1815.437887][T10910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14484'. [ 1815.464588][ T29] audit: type=1400 audit(1781643495.742:4549): avc: denied { map } for pid=10904 comm="syz.2.14484" path="/dev/video1" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1817.451086][T10934] syzkaller0: entered promiscuous mode [ 1817.478998][T10934] syzkaller0: entered allmulticast mode [ 1818.124411][T10962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14498'. [ 1819.103919][ T29] audit: type=1326 audit(1781643499.092:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10976 comm="syz.0.14504" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5943b9ce59 code=0x0 [ 1819.694923][T10992] overlayfs: failed to clone upperpath [ 1819.767579][T10994] syzkaller0: entered promiscuous mode [ 1819.773232][T10994] syzkaller0: entered allmulticast mode [ 1820.329542][T11019] tipc: Enabled bearer , priority 0 [ 1820.491536][ T6238] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1820.727390][ T6238] usb 3-1: Using ep0 maxpacket: 16 [ 1820.743035][ T6238] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1820.767280][ T6238] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1820.847760][ T6238] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1821.083969][ T6238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.094280][ T6238] usb 3-1: Product: 蓮䙐Ύ獩⃵ꏞ㻦궯鬪뿅꘽珆協늾瀐ﲽ⛷㻎巸髞迍㙏ⱳ屪ሠ쑑ꀝ࣍믫覔䀏呟ᔑ헄ꌅ锺䯟ꔼ熘ꃶ話轑攥ᛵ撚鈩穧䧹뫨➧佤뵡覙犎䉯䰖죄륓䑋⩏ⶲ묑编놊뜭鵸祈䔮☑䂷ᑠ쓷螟稫 [ 1821.120025][ T6238] usb 3-1: Manufacturer: 䂾ᗬ姤㴝䄷蔮⿩ꍢ呠럱輝㶦㒯峒瞄놆肋똨婱⬌짏ꏀ㴾ᯎ俳ﯴ宴ऽԊ줅퓔嵣뙛稢㵝ȗ鲬㽫欄ᎍ뤫貈麀蓚蹺ⶵ㾄쉨䰗ក⏡酪郰艇㫳ⵠ뷈㼠䙥奡賟팎愳돰⸋뻽￨Ὼ鸭촕懡揱檷蕡㤇p鋓Ệdᵼ䠞茑夆깽ꃯ㤱騭嶸䘨潁ꮂ沙袅渣ɬ叿縪た䑔䭸䩫 [ 1821.155080][ T6238] usb 3-1: SerialNumber: 徴뼦綤葤魩۰헆꣒崌⺡凬庵薡속֢ﲜ훥年茋∑ฐ꯶⯈쨒ᐒꦶ픘꬏䴋曩䣉ܒ鉚媖蒮ғࣇ쀞죗翇ࡅ谹仝戧뻍䖿몰릍읹絠벨┱蒦뛞鎉⌚놌 [ 1821.362887][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14516'. [ 1821.423625][ T6245] tipc: Node number set to 533352408 [ 1821.804351][T11051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14519'. [ 1821.827684][T11051] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1821.998196][ T6245] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1822.082253][ T6238] cdc_ncm 3-1:1.0: bind() failure [ 1822.161004][ T6238] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1822.170512][ T6238] cdc_ncm 3-1:1.1: bind() failure [ 1822.184840][ T6238] usb 3-1: USB disconnect, device number 69 [ 1822.192896][ T6245] usb 1-1: Using ep0 maxpacket: 32 [ 1822.214741][ T6245] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1822.232790][ T6245] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.242704][ T6245] usb 1-1: Product: syz [ 1822.247231][ T6245] usb 1-1: Manufacturer: syz [ 1822.252074][ T6245] usb 1-1: SerialNumber: syz [ 1822.276828][ T6245] usb 1-1: config 0 descriptor?? [ 1822.287135][T11073] random: crng reseeded on system resumption [ 1822.297303][ T6245] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1822.305581][ T6245] dvb-usb: bulk message failed: -22 (4/0) [ 1822.311500][ T6245] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1822.325902][ T6245] dvb-usb: bulk message failed: -22 (5/0) [ 1822.332250][ T6245] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1822.388004][ T6245] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1822.400816][ T6245] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1822.411335][ T6245] usb 1-1: media controller created [ 1822.439278][ T6245] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1822.492353][ T6245] usb 1-1: selecting invalid altsetting 3 [ 1822.501998][ T6245] ttusb2: set interface to alts=3 failed [ 1822.673338][ T6245] DVB: Unable to find symbol tda10086_attach() [ 1822.700591][ T6245] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1822.734076][ T6245] dvb-usb: bulk message failed: -22 (4/0) [ 1822.741686][ T6245] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1822.754416][ T6245] dvb-usb: bulk message failed: -22 (5/0) [ 1822.760681][ T6245] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1822.771220][ T6245] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1822.786292][ T6245] usb 1-1: USB disconnect, device number 46 [ 1822.845181][ T6245] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1824.090763][T13522] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1824.207925][T11133] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.14535'. [ 1824.257926][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14536'. [ 1824.291217][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14536'. [ 1824.350062][T11135] netlink: 'syz.3.14536': attribute type 12 has an invalid length. [ 1824.371110][T13522] usb 1-1: Using ep0 maxpacket: 8 [ 1824.396496][T13522] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1824.424470][ T35] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1824.424549][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14536'. [ 1824.433578][ T35] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1824.452780][ T35] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1824.461502][T13522] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1824.461543][T13522] usb 1-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 1824.461562][T13522] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.474736][ T35] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1824.542544][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14536'. [ 1824.586795][T11135] netlink: 'syz.3.14536': attribute type 12 has an invalid length. [ 1824.707129][T13522] usb 1-1: config 0 descriptor?? [ 1825.040887][T11118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.139293][T11118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.565782][T13522] usbhid 1-1:0.0: can't add hid device: -71 [ 1826.757619][T11187] tipc: Enabling of bearer rejected, failed to enable media [ 1826.797985][T13522] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1826.823167][T13522] usb 1-1: USB disconnect, device number 47 [ 1826.845193][T11193] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.14547'. [ 1827.467375][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14552'. [ 1827.523992][T11212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14552'. [ 1828.620727][T11252] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.14559'. [ 1828.632860][T11238] (syz.1.14554,11238,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1828.641837][T11238] (syz.1.14554,11238,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1829.160797][T13522] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1829.984621][T13522] usb 1-1: Using ep0 maxpacket: 8 [ 1829.999472][T13522] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1830.035129][T13522] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1830.061595][T11305] fuse: Bad value for 'group_id' [ 1830.066715][T13522] usb 1-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 1830.078241][T11305] fuse: Bad value for 'group_id' [ 1830.097254][T13522] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.831729][T19223] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1831.038428][T13522] usb 1-1: config 0 descriptor?? [ 1831.154118][T11343] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.14572'. [ 1831.354313][T11255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1831.362993][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14573'. [ 1831.454905][T11255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1832.012396][T13522] usbhid 1-1:0.0: can't add hid device: -71 [ 1832.028005][T13522] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1832.321653][T13522] usb 1-1: USB disconnect, device number 48 [ 1832.330797][T28704] block nbd1: Possible stuck request ffff888027c1e000: control (read@0,1024B). Runtime 630 seconds [ 1832.343278][T28704] block nbd1: Possible stuck request ffff888027c1e1c0: control (read@1024,1024B). Runtime 630 seconds [ 1832.354455][T28704] block nbd1: Possible stuck request ffff888027c1e380: control (read@2048,1024B). Runtime 630 seconds [ 1832.365513][T28704] block nbd1: Possible stuck request ffff888027c1e540: control (read@3072,1024B). Runtime 630 seconds [ 1833.642302][T28704] block nbd3: Possible stuck request ffff888027cc5080: control (read@0,1024B). Runtime 570 seconds [ 1833.653459][T28704] block nbd3: Possible stuck request ffff888027cc5240: control (read@1024,1024B). Runtime 570 seconds [ 1833.665813][T28704] block nbd3: Possible stuck request ffff888027cc5400: control (read@2048,1024B). Runtime 570 seconds [ 1833.677825][T28704] block nbd3: Possible stuck request ffff888027cc55c0: control (read@3072,1024B). Runtime 570 seconds [ 1833.741628][T11420] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.14586'. [ 1834.044528][T11441] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1834.590851][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14597'. [ 1834.609988][T11459] gtp2: entered allmulticast mode [ 1835.166829][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14599'. [ 1836.045799][T11486] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.14603'. [ 1836.106367][T11490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14602'. [ 1836.922082][T11514] overlayfs: failed to clone upperpath [ 1837.004512][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14609'. [ 1837.024965][T11516] gtp0: entered allmulticast mode [ 1837.509498][T11527] Device name cannot be null; rc = [-22] [ 1838.488641][T11544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14614'. [ 1838.974616][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14620'. [ 1840.411166][T11598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14624'. [ 1840.749988][ T29] audit: type=1804 audit(1781643519.043:4551): pid=11606 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.14627" name="/newroot/299/bus/bus" dev="overlay" ino=1582 res=1 errno=0 [ 1841.217068][T11612] Device name cannot be null; rc = [-22] [ 1841.522200][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14630'. [ 1841.581732][T11615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14630'. [ 1841.623093][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14630'. [ 1841.632358][T11615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14630'. [ 1843.357062][T31394] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1843.365114][T31394] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1843.372889][T31394] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1843.383992][T31394] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1843.394577][T31394] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1844.981390][ T29] audit: type=1400 audit(1781643522.882:4552): avc: denied { recv } for pid=11704 comm="syz.0.14646" saddr=10.128.0.169 src=38734 daddr=10.128.1.85 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1845.278097][T11731] Device name cannot be null; rc = [-22] [ 1845.661787][T31394] Bluetooth: hci3: command tx timeout [ 1845.818924][T11687] bridge0: port 1(bridge_slave_0) entered blocking state [ 1845.831392][T11687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1845.846638][T11687] bridge_slave_0: entered allmulticast mode [ 1845.854415][T11687] bridge_slave_0: entered promiscuous mode [ 1845.862593][T11687] bridge0: port 2(bridge_slave_1) entered blocking state [ 1845.869812][T11687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1846.301773][T11687] bridge_slave_1: entered allmulticast mode [ 1846.359144][T11687] bridge_slave_1: entered promiscuous mode [ 1846.382197][T11687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1846.395179][T11687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1846.432671][T11687] team0: Port device team_slave_0 added [ 1846.459472][T11687] team0: Port device team_slave_1 added [ 1846.577682][T11687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1846.584726][T11687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1846.621992][T11687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1846.937616][T11687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1846.954613][T11687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1846.991131][T11687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1847.152635][T13511] IPVS: starting estimator thread 0... [ 1847.288645][T11930] IPVS: using max 88 ests per chain, 211200 per kthread [ 1847.668723][T11687] hsr_slave_0: entered promiscuous mode [ 1847.690893][T11687] hsr_slave_1: entered promiscuous mode [ 1847.712384][T11687] debugfs: 'hsr0' already exists in 'hsr' [ 1847.730145][T11687] Cannot create hsr debugfs directory [ 1847.846333][T12002] random: crng reseeded on system resumption [ 1847.946343][T31394] Bluetooth: hci3: command tx timeout [ 1848.156077][T11687] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1848.187767][T11687] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.451043][T11687] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1848.582419][T11687] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.882871][T11687] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1848.996915][T11687] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.356359][T12053] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1849.384260][T11687] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1849.406161][T11687] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.429908][T12053] CIFS mount error: No usable UNC path provided in device string! [ 1849.429908][T12053] [ 1849.447249][T12053] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1849.618127][T11687] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1849.647440][T11687] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1849.658727][T11687] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1849.682403][ T9] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 1849.698873][ T9] hid-generic 0000:0000:0000.003A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1849.778825][T11687] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1849.796694][T11687] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1849.807616][T11687] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1849.815475][T11687] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1849.829233][T11687] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1850.063543][T11687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1850.104401][T11687] 8021q: adding VLAN 0 to HW filter on device team0 [ 1850.126213][T20051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1850.133465][T20051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1850.152538][T31394] Bluetooth: hci3: command tx timeout [ 1850.167846][T20051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1850.174933][T20051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1851.363068][T12132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14677'. [ 1851.446115][T12143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1851.526546][T11687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1851.899879][T11687] veth0_vlan: entered promiscuous mode [ 1851.923795][T11687] veth1_vlan: entered promiscuous mode [ 1851.988541][T11687] veth0_macvtap: entered promiscuous mode [ 1852.009953][T11687] veth1_macvtap: entered promiscuous mode [ 1852.044554][T11687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1852.071461][T11687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1852.090697][T20051] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1852.105424][T20051] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1852.147224][T20051] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1852.165096][T20051] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1852.528414][T31394] Bluetooth: hci3: command tx timeout [ 1852.558951][T20051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1852.569995][T20051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1852.604282][T14066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1852.612702][T14066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1852.673460][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14644'. [ 1852.683184][T12201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14644'. [ 1852.684787][T12199] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12199 comm=syz.0.14685 [ 1852.693031][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14644'. [ 1852.735473][T12201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14644'. [ 1852.809635][T12206] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1854.980486][T12292] (syz.0.14704,12292,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1854.989406][T12292] (syz.0.14704,12292,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1855.794243][T12307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1857.651440][ T29] audit: type=1326 audit(1781643534.736:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12347 comm="syz.3.14720" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27c6d9ce59 code=0x0 [ 1857.654649][T12353] syzkaller0: entered promiscuous mode [ 1857.685492][T12353] syzkaller0: entered allmulticast mode [ 1857.776562][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1857.890403][T12375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1857.948834][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1857.955907][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1857.966385][ T9] usb 1-1: config 7 has an invalid interface number: 87 but max is 0 [ 1857.976913][ T9] usb 1-1: config 7 has no interface number 0 [ 1857.984926][ T9] usb 1-1: config 7 interface 87 has no altsetting 0 [ 1858.058356][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=7111, bcdDevice=72.c5 [ 1858.068826][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.078383][ T9] usb 1-1: Product: syz [ 1858.082679][ T9] usb 1-1: Manufacturer: syz [ 1858.087370][ T9] usb 1-1: SerialNumber: syz [ 1858.241906][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14727'. [ 1858.252731][T12386] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14727'. [ 1858.262686][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14727'. [ 1858.271967][T12386] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14727'. [ 1858.570645][ T9] usb 1-1: USB disconnect, device number 49 [ 1860.305322][ T29] audit: type=1400 audit(1781643537.216:4554): avc: denied { read } for pid=12436 comm="syz.2.14732" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1860.882573][T12448] 9p: Bad value for 'rfdno' [ 1861.063453][T12460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14742'. [ 1862.077093][T12472] tipc: Enabled bearer , priority 0 [ 1862.090127][T12472] syzkaller0: entered promiscuous mode [ 1862.104678][T12472] syzkaller0: entered allmulticast mode [ 1862.118511][T12467] syzkaller0: entered promiscuous mode [ 1862.207289][T12467] syzkaller0: entered allmulticast mode [ 1862.238916][T12478] tipc: Resetting bearer [ 1862.248477][T12468] tipc: Resetting bearer [ 1862.320095][T12468] tipc: Disabling bearer [ 1863.495817][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14753'. [ 1863.769372][T12519] input: syz0 as /devices/virtual/input/input101 [ 1863.789082][T12522] input: syz1 as /devices/virtual/input/input102 [ 1864.387223][T12556] syzkaller0: entered promiscuous mode [ 1864.396675][T12556] syzkaller0: entered allmulticast mode [ 1865.333299][ T5872] block nbd1: Possible stuck request ffff888027c1e000: control (read@0,1024B). Runtime 660 seconds [ 1865.335170][ T167] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1865.344150][ T5872] block nbd1: Possible stuck request ffff888027c1e1c0: control (read@1024,1024B). Runtime 660 seconds [ 1865.401394][ T5872] block nbd1: Possible stuck request ffff888027c1e380: control (read@2048,1024B). Runtime 660 seconds [ 1865.439915][ T5872] block nbd1: Possible stuck request ffff888027c1e540: control (read@3072,1024B). Runtime 660 seconds [ 1866.020087][ T5872] block nbd3: Possible stuck request ffff888027cc5080: control (read@0,1024B). Runtime 600 seconds [ 1866.033907][ T5872] block nbd3: Possible stuck request ffff888027cc5240: control (read@1024,1024B). Runtime 600 seconds [ 1866.045130][ T5872] block nbd3: Possible stuck request ffff888027cc5400: control (read@2048,1024B). Runtime 600 seconds [ 1866.121075][ T5872] block nbd3: Possible stuck request ffff888027cc55c0: control (read@3072,1024B). Runtime 600 seconds [ 1866.230180][T12574] syz.0.14763 (12574): /proc/12569/oom_adj is deprecated, please use /proc/12569/oom_score_adj instead. [ 1866.811597][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14765'. [ 1866.947099][T12581] hsr_slave_1 (unregistering): left promiscuous mode [ 1867.148446][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14768'. [ 1867.164337][T12597] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14768'. [ 1867.191596][T12598] syz.4.14766 (12598): drop_caches: 2 [ 1867.398845][T12534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1867.448680][ T5699] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1867.464223][T12606] syzkaller0: entered promiscuous mode [ 1867.482383][T12606] syzkaller0: entered allmulticast mode [ 1868.134740][ T5699] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1868.147681][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.156007][ T5699] usb 1-1: Product: syz [ 1868.160228][ T5699] usb 1-1: Manufacturer: syz [ 1868.166237][ T5699] usb 1-1: SerialNumber: syz [ 1868.175733][ T5699] usb 1-1: config 0 descriptor?? [ 1868.186728][ T5699] ch341 1-1:0.0: ch341-uart converter detected [ 1868.283855][T12630] veth0: entered promiscuous mode [ 1868.633644][ T5699] usb 1-1: failed to receive control message: -121 [ 1868.642627][T12628] veth0: left promiscuous mode [ 1868.648051][ T5699] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 1868.852089][ T5699] usb 1-1: USB disconnect, device number 50 [ 1870.267281][ T5699] ch341 1-1:0.0: device disconnected [ 1870.538190][T12703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14782'. [ 1870.549690][T12703] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14782'. [ 1872.210188][T12723] syz.0.14784 (12723): drop_caches: 2 [ 1874.109470][T12746] hfsplus: unable to find HFS+ superblock [ 1874.784871][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14801'. [ 1874.799854][T12762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14801'. [ 1874.817139][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14801'. [ 1874.836464][T12762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14801'. [ 1874.909954][T12768] syzkaller0: entered promiscuous mode [ 1874.920095][T12768] syzkaller0: entered allmulticast mode [ 1875.199719][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14805'. [ 1875.477587][T13522] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1875.849997][T13522] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1875.884116][T13522] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1875.916340][T13522] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1875.945940][T13522] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.969639][ T29] audit: type=1326 audit(1781643551.870:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12801 comm="syz.2.14810" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab2ed9ce59 code=0x0 [ 1876.604878][T13522] usb 1-1: config 0 descriptor?? [ 1877.364285][ T29] audit: type=1400 audit(1781643553.162:4556): avc: denied { mount } for pid=12824 comm="syz.3.14813" name="/" dev="hugetlbfs" ino=221299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1878.148424][T12837] syzkaller0: entered promiscuous mode [ 1878.153941][T12837] syzkaller0: entered allmulticast mode [ 1878.534911][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14817'. [ 1878.935768][ T7660] usb 1-1: USB disconnect, device number 51 [ 1879.695515][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1879.747882][T12873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1880.521800][ T29] audit: type=1400 audit(1781643556.137:4557): avc: denied { unmount } for pid=11687 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1881.678174][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14832'. [ 1881.956566][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14833'. [ 1882.590135][T12939] 9p: Bad value for 'rfdno' [ 1882.878960][T12943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14837'. [ 1884.368716][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14845'. [ 1884.784455][ T9] IPVS: starting estimator thread 0... [ 1884.887108][T12989] IPVS: using max 86 ests per chain, 206400 per kthread [ 1886.067815][T13029] hub 8-0:1.0: USB hub found [ 1886.072828][T13029] hub 8-0:1.0: 1 port detected [ 1887.982139][T13065] syzkaller0: entered promiscuous mode [ 1888.000912][T13065] syzkaller0: entered allmulticast mode [ 1888.212157][ T29] audit: type=1326 audit(1781643568.338:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.0.14870" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5943b9ce59 code=0x0 [ 1888.587398][T13098] tipc: Enabling of bearer rejected, failed to enable media [ 1889.291349][T13102] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1889.493444][T13111] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1889.675865][T13121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14878'. [ 1890.004864][T13138] nfs: Unknown parameter '/dev/autofs' [ 1890.245398][ T29] audit: type=1400 audit(1781643570.003:4559): avc: denied { read } for pid=13126 comm="syz.0.14882" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1890.958928][ T29] audit: type=1400 audit(1781643570.003:4560): avc: denied { open } for pid=13126 comm="syz.0.14882" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1890.984684][ T29] audit: type=1400 audit(1781643570.003:4561): avc: denied { ioctl } for pid=13126 comm="syz.0.14882" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1891.100278][T13152] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1891.225480][T13161] ubi: mtd0 is already attached to ubi16 [ 1892.043963][T13165] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1892.527755][T13175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14892'. [ 1892.865380][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14895'. [ 1896.086696][T13258] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1897.304660][T13302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14918'. [ 1897.373971][T13302] Invalid option length (772) for dns_resolver key [ 1897.568611][T13305] syz.1.14925 (13305): drop_caches: 2 [ 1897.829461][T28704] block nbd1: Possible stuck request ffff888027c1e000: control (read@0,1024B). Runtime 690 seconds [ 1897.851092][T28704] block nbd1: Possible stuck request ffff888027c1e1c0: control (read@1024,1024B). Runtime 690 seconds [ 1897.951265][T28704] block nbd1: Possible stuck request ffff888027c1e380: control (read@2048,1024B). Runtime 690 seconds [ 1897.975198][T28704] block nbd1: Possible stuck request ffff888027c1e540: control (read@3072,1024B). Runtime 690 seconds [ 1898.176206][ T5872] block nbd3: Possible stuck request ffff888027cc5080: control (read@0,1024B). Runtime 630 seconds [ 1898.187499][ T5872] block nbd3: Possible stuck request ffff888027cc5240: control (read@1024,1024B). Runtime 630 seconds [ 1898.198613][ T5872] block nbd3: Possible stuck request ffff888027cc5400: control (read@2048,1024B). Runtime 630 seconds [ 1898.221761][ T5872] block nbd3: Possible stuck request ffff888027cc55c0: control (read@3072,1024B). Runtime 630 seconds [ 1899.407274][T13328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14932'. [ 1899.429297][T13328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1899.530099][T11333] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1899.784347][T13364] macvlan2: entered promiscuous mode [ 1899.805786][T13364] macvlan2: entered allmulticast mode [ 1899.818474][T13364] bond1: entered promiscuous mode [ 1899.824318][T13364] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1899.833989][T13364] bond1: left promiscuous mode [ 1899.985537][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14938'. [ 1900.040783][ T29] audit: type=1326 audit(1781643579.397:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13395 comm="syz.3.14940" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27c6d9ce59 code=0x0 [ 1900.457177][T13401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1901.478422][T13408] hub 8-0:1.0: USB hub found [ 1901.483246][T13408] hub 8-0:1.0: 1 port detected [ 1901.659331][T13417] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1902.821575][T13458] (syz.0.14947,13458,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1902.830448][T13458] (syz.0.14947,13458,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1903.848376][T13481] syzkaller0: entered promiscuous mode [ 1903.860185][T13481] syzkaller0: entered allmulticast mode [ 1903.888098][ T29] audit: type=1326 audit(1781643582.990:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13487 comm="syz.4.14955" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94eb99ce59 code=0x0 [ 1904.014529][T13496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1905.783826][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14969'. [ 1906.220520][ T29] audit: type=1326 audit(1781643585.180:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13566 comm="syz.1.14973" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f778e79ce59 code=0x0 [ 1906.248491][T13569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1906.443078][T13522] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1907.403481][T13522] usb 4-1: Using ep0 maxpacket: 32 [ 1908.189028][T13522] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1908.203819][T13522] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1908.216076][T13522] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1908.224553][T13522] usb 4-1: Product: syz [ 1908.230522][T13522] usb 4-1: Manufacturer: syz [ 1908.235228][T13522] usb 4-1: SerialNumber: syz [ 1908.244360][T13522] usb 4-1: config 0 descriptor?? [ 1908.251727][T13562] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1908.541144][T13612] syz.1.14979 (13612): drop_caches: 2 [ 1908.901901][ T29] audit: type=1326 audit(1781643587.697:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13624 comm="syz.0.14984" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5943b9ce59 code=0x0 [ 1909.048958][T13632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1909.078036][ T6243] usb 4-1: USB disconnect, device number 39 [ 1911.194284][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1911.201763][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1911.216109][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1911.224170][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1911.236379][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1911.291444][T29497] syz_tun (unregistering): left allmulticast mode [ 1912.236083][T13693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14995'. [ 1912.311716][T13693] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14995'. [ 1913.059389][T13669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1913.066547][T13669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1913.074107][T13669] bridge_slave_0: entered allmulticast mode [ 1913.082743][T13669] bridge_slave_0: entered promiscuous mode [ 1913.090239][T13669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1913.097367][T13669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1913.107406][T13669] bridge_slave_1: entered allmulticast mode [ 1913.117023][T13669] bridge_slave_1: entered promiscuous mode [ 1913.149588][T13669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1913.177491][T13669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1913.210860][T13669] team0: Port device team_slave_0 added [ 1913.218391][T13669] team0: Port device team_slave_1 added [ 1913.238706][T13669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1913.246286][T13669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1913.289860][T13669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1913.302677][T13669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1913.309916][T13669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1913.361515][T13669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1913.415670][T13888] fuse: Bad value for 'fd' [ 1913.464196][T31394] Bluetooth: hci0: command tx timeout [ 1913.481736][T13669] hsr_slave_0: entered promiscuous mode [ 1913.490257][T13669] hsr_slave_1: entered promiscuous mode [ 1913.499098][T13669] debugfs: 'hsr0' already exists in 'hsr' [ 1913.506764][T13669] Cannot create hsr debugfs directory [ 1913.513706][T13895] syzkaller0: entered promiscuous mode [ 1913.519626][T13895] syzkaller0: entered allmulticast mode [ 1913.709090][T13669] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1913.792288][T13669] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.371789][T13669] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.579113][T13669] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1915.104588][T13669] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1915.130183][T13669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1915.151020][T13669] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1915.170855][T13669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1915.187781][T13669] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1915.205878][T13669] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1915.222738][T13669] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1915.239779][T13669] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1915.320672][T13669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1915.350299][T13669] 8021q: adding VLAN 0 to HW filter on device team0 [ 1915.379792][T11333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1915.386896][T11333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1915.501996][T14090] (syz.1.15009,14090,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1915.510905][T14090] (syz.1.15009,14090,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1915.686651][T31394] Bluetooth: hci0: command tx timeout [ 1915.741144][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1915.748324][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1917.030062][T14122] netlink: 87 bytes leftover after parsing attributes in process `syz.3.15021'. [ 1917.046242][T14120] syzkaller0: entered promiscuous mode [ 1917.052045][T14120] syzkaller0: entered allmulticast mode [ 1917.316604][T14141] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15026'. [ 1917.833424][T14157] fuse: Invalid rootmode [ 1917.871696][T13669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1917.909465][T31394] Bluetooth: hci0: command tx timeout [ 1917.977920][T13669] veth0_vlan: entered promiscuous mode [ 1917.986203][T13669] veth1_vlan: entered promiscuous mode [ 1918.009101][T13669] veth0_macvtap: entered promiscuous mode [ 1918.020977][T13669] veth1_macvtap: entered promiscuous mode [ 1918.034296][T13669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1918.046325][T13669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1918.072604][T11332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1918.081856][T11332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1918.117368][T11332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1918.168234][T14190] (syz.1.15029,14190,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1918.177651][T14190] (syz.1.15029,14190,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1919.082837][T11332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.243963][T14224] syz.2.15032 (14224): drop_caches: 2 [ 1919.465981][T14067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1919.482620][T14067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1919.507995][T11337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1919.516583][T11337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1919.843127][T14247] ubi: mtd0 is already attached to ubi16 [ 1919.897896][T14252] fuse: Invalid rootmode [ 1919.943573][T14255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1920.378123][ T5610] Bluetooth: hci0: command tx timeout [ 1920.383818][ T5610] Bluetooth: hci2: command 0x0406 tx timeout [ 1921.260023][T14331] (syz.4.15051,14331,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1921.269053][T14331] (syz.4.15051,14331,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1921.845970][T14344] fuse: Invalid rootmode [ 1922.488766][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15060'. [ 1922.500321][T14372] gtp1: entered allmulticast mode [ 1922.739954][T14387] syzkaller0: entered promiscuous mode [ 1922.756761][T14387] syzkaller0: entered allmulticast mode [ 1922.857539][T14264] Bluetooth: hci0: command 0x0405 tx timeout [ 1922.943313][T14420] (syz.3.15065,14420,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1922.952260][T14420] (syz.3.15065,14420,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1924.280130][T14449] Bluetooth: MGMT ver 1.23 [ 1924.566319][T14453] kvm: vcpu 3: requested lapic timer restore with starting count register 0x390=2648458468 (10593833872 ns) > initial count (10212520180 ns). Using initial count to start timer. [ 1925.090797][T14264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1925.101204][T14264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1925.109034][T14264] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1925.117822][T14264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1925.126150][T14264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1925.273996][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15079'. [ 1925.291726][T14496] gtp2: entered allmulticast mode [ 1925.325467][T14067] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1925.637354][T14067] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.432983][T14067] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.576718][T14067] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.998325][ T167] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1927.042830][ T167] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1927.087315][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15093'. [ 1927.104548][ T167] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1927.117262][T14572] gtp0: entered allmulticast mode [ 1927.134995][T19223] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1927.170330][T14067] bridge_slave_1: left allmulticast mode [ 1927.176105][T14067] bridge_slave_1: left promiscuous mode [ 1927.183373][T14067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1927.194788][T14067] bridge_slave_0: left allmulticast mode [ 1927.200486][T14067] bridge_slave_0: left promiscuous mode [ 1927.208656][T14067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.310068][T14264] Bluetooth: hci4: command tx timeout [ 1927.634475][T14067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1927.655569][T14067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1927.667804][T14067] bond0 (unregistering): Released all slaves [ 1927.738602][T14067] tipc: Disabling bearer [ 1927.749868][T14067] tipc: Left network mode [ 1927.779230][T14067] IPVS: stopping master sync thread 7993 ... [ 1928.030796][ T29] audit: type=1400 audit(1781643605.834:4566): avc: denied { write } for pid=14663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1928.149573][ T29] audit: type=1400 audit(1781643605.947:4567): avc: denied { write } for pid=14709 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1928.298857][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1928.321036][T14067] hsr_slave_0: left promiscuous mode [ 1928.331211][T14067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1928.346109][T14067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1928.383621][T14067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1928.412855][T14067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1928.443580][T14067] veth1_macvtap: left promiscuous mode [ 1928.449140][T14067] veth0_macvtap: left promiscuous mode [ 1928.461416][T14067] veth1_vlan: left promiscuous mode [ 1928.481934][T14067] veth0_vlan: left promiscuous mode [ 1928.600156][T14772] hub 8-0:1.0: USB hub found [ 1928.604990][T14772] hub 8-0:1.0: 1 port detected [ 1928.682418][T14067] team0 (unregistering): Port device team_slave_1 removed [ 1928.782066][T14067] team0 (unregistering): Port device team_slave_0 removed [ 1929.209367][T14473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1929.222092][T14473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1929.231850][T14473] bridge_slave_0: entered allmulticast mode [ 1929.238578][T14473] bridge_slave_0: entered promiscuous mode [ 1929.241709][T14838] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15111'. [ 1929.262869][T14473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1929.279396][T14473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1929.288432][T14473] bridge_slave_1: entered allmulticast mode [ 1929.295098][T14473] bridge_slave_1: entered promiscuous mode [ 1929.323601][T14473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1929.336807][T14473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1929.375156][T14473] team0: Port device team_slave_0 added [ 1929.383376][T14473] team0: Port device team_slave_1 added [ 1929.408401][T14473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1929.416854][T14473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1929.493260][T14473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1929.524742][T14473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1929.533081][T14264] Bluetooth: hci4: command tx timeout [ 1929.541658][T14473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1929.646830][T14473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1929.676243][ T29] audit: type=1400 audit(1781643607.369:4568): avc: denied { write } for pid=14870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1929.721741][T14067] IPVS: stop unused estimator thread 0... [ 1929.754489][T14934] syzkaller0: entered promiscuous mode [ 1929.771699][T14934] syzkaller0: entered allmulticast mode [ 1929.920874][ T29] audit: type=1400 audit(1781643607.491:4569): avc: denied { write } for pid=14965 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1930.008826][T14473] hsr_slave_0: entered promiscuous mode [ 1930.019543][T14473] hsr_slave_1: entered promiscuous mode [ 1930.031774][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1930.045389][T28704] block nbd1: Possible stuck request ffff888027c1e000: control (read@0,1024B). Runtime 720 seconds [ 1930.056484][T28704] block nbd1: Possible stuck request ffff888027c1e1c0: control (read@1024,1024B). Runtime 720 seconds [ 1930.067983][T28704] block nbd1: Possible stuck request ffff888027c1e380: control (read@2048,1024B). Runtime 720 seconds [ 1930.079442][ T5872] block nbd3: Possible stuck request ffff888027cc5080: control (read@0,1024B). Runtime 660 seconds [ 1930.090967][T28704] block nbd1: Possible stuck request ffff888027c1e540: control (read@3072,1024B). Runtime 720 seconds [ 1930.102144][ T5872] block nbd3: Possible stuck request ffff888027cc5240: control (read@1024,1024B). Runtime 660 seconds [ 1930.118595][ T5872] block nbd3: Possible stuck request ffff888027cc5400: control (read@2048,1024B). Runtime 660 seconds [ 1930.130293][ T5872] block nbd3: Possible stuck request ffff888027cc55c0: control (read@3072,1024B). Runtime 660 seconds [ 1930.145408][T14979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1930.174300][T14979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1930.201111][T14979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1930.229268][T14979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1930.490816][T14473] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.549164][T15065] tipc: Enabling of bearer rejected, failed to enable media [ 1930.596985][T14473] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.756784][T14473] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1931.001830][T14473] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1931.115854][ T29] audit: type=1400 audit(1781643608.717:4570): avc: denied { write } for pid=15041 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1931.262273][ T29] audit: type=1400 audit(1781643608.866:4571): avc: denied { write } for pid=15104 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1931.298983][T14473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1931.377616][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15128'. [ 1931.456126][T14473] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1931.466088][T15125] gtp1: entered allmulticast mode [ 1931.489788][T14473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1931.505003][T14473] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1931.530799][T14473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1931.554125][T14473] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1931.593798][T14473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1931.618418][T14473] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1931.755384][T14264] Bluetooth: hci4: command tx timeout [ 1931.765376][T14473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1931.802640][T14473] 8021q: adding VLAN 0 to HW filter on device team0 [ 1931.822949][T14067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1931.830095][T14067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1931.906579][T11337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1931.913739][T11337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1932.332795][ T29] audit: type=1400 audit(1781643609.868:4572): avc: denied { write } for pid=15148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1932.430254][ T29] audit: type=1400 audit(1781643609.952:4573): avc: denied { write } for pid=15194 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1932.459470][T13522] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1933.540002][T14066] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1933.778515][T13522] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 1933.787741][T13522] usb 3-1: config 128 has no interface number 0 [ 1933.806360][T13522] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1933.818475][T13522] usb 3-1: config 128 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1933.831925][T13522] usb 3-1: config 128 interface 148 has no altsetting 0 [ 1933.928911][T13522] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 1933.976257][T14264] Bluetooth: hci4: command tx timeout [ 1934.279460][T13522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1934.324251][T13522] usb 3-1: Product: syz [ 1934.339755][T13522] usb 3-1: Manufacturer: syz [ 1934.361892][T13522] usb 3-1: SerialNumber: syz [ 1934.451885][T14473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1934.477684][ T29] audit: type=1400 audit(1781643611.861:4574): avc: denied { write } for pid=15214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1934.513053][T15275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15144'. [ 1934.526237][T14473] veth0_vlan: entered promiscuous mode [ 1934.534291][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15144'. [ 1934.547863][T14473] veth1_vlan: entered promiscuous mode [ 1934.583541][T14473] veth0_macvtap: entered promiscuous mode [ 1934.597293][T15275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15144'. [ 1934.611177][T14473] veth1_macvtap: entered promiscuous mode [ 1934.622079][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15144'. [ 1934.638544][T14473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1934.658680][T14473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1934.672745][T15281] nfs: Unknown parameter '/dev/autofs' [ 1934.682141][T13522] usb 3-1: USB disconnect, device number 70 [ 1934.727406][ T29] audit: type=1400 audit(1781643612.085:4575): avc: denied { write } for pid=15280 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1934.762190][T19223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1934.803231][T19223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.078724][T19223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.095241][T19223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.245925][T15318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15148'. [ 1935.255075][T15318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15148'. [ 1935.301317][ T6243] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1935.331565][T11332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1935.421155][T11332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1935.525915][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1935.737813][T20051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1935.768170][ T9] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1935.821277][T20051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1935.848252][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.943997][ T9] usb 5-1: Product: syz [ 1935.999932][ T9] usb 5-1: Manufacturer: syz [ 1936.044351][ T9] usb 5-1: SerialNumber: syz [ 1936.141058][ T9] usb 5-1: config 0 descriptor?? [ 1936.291351][ T9] ch341 5-1:0.0: ch341-uart converter detected [ 1936.454878][ T29] audit: type=1400 audit(1781643613.714:4576): avc: denied { write } for pid=15296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1936.454884][ T9] usb 5-1: failed to receive control message: -121 [ 1936.630406][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 1936.678553][ T29] audit: type=1400 audit(1781643613.920:4577): avc: denied { write } for pid=15341 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1936.707749][ T9] usb 5-1: USB disconnect, device number 59 [ 1936.731439][ T9] ch341 5-1:0.0: device disconnected [ 1936.975333][T15367] hfsplus: unable to find HFS+ superblock [ 1937.314966][T15373] xt_hashlimit: size too large, truncated to 1048576 [ 1937.379929][ T29] audit: type=1400 audit(1781643614.584:4578): avc: denied { write } for pid=15351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1937.428856][ T29] audit: type=1400 audit(1781643614.631:4579): avc: denied { write } for pid=15381 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1937.996564][T15405] syz.0.15155 (15405): drop_caches: 2 [ 1938.227307][T15407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15157'. [ 1938.255484][T15407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15157'. [ 1938.330270][T15410] No such timeout policy "syz1" [ 1938.933741][T15407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15157'. [ 1938.968084][T15407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15157'. [ 1940.215759][T15439] tipc: Enabling of bearer rejected, failed to enable media [ 1940.484447][T15772] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1940.676480][T15772] usb 5-1: Using ep0 maxpacket: 32 [ 1940.727254][T15772] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1940.771997][T15772] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1940.782582][T15772] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1940.793669][T15772] usb 5-1: Product: syz [ 1940.805544][T15772] usb 5-1: Manufacturer: syz [ 1940.810226][T15772] usb 5-1: SerialNumber: syz [ 1940.817532][T15772] usb 5-1: config 0 descriptor?? [ 1940.823915][T15434] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1942.025809][T15491] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1942.517099][T15772] usb 5-1: USB disconnect, device number 60 [ 1942.572925][T15513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15177'. [ 1942.584791][T15513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15177'. [ 1942.670059][T15528] (syz.3.15176,15528,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1942.679257][T15528] (syz.3.15176,15528,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1942.819773][T15513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15177'. [ 1942.868843][T15513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15177'. [ 1943.892269][T15555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15182'. [ 1943.969467][T15555] gtp0: entered allmulticast mode [ 1944.007996][T15564] syzkaller0: entered promiscuous mode [ 1944.026779][T15564] syzkaller0: entered allmulticast mode [ 1944.508318][T15575] usb usb8: usbfs: process 15575 (syz.4.15188) did not claim interface 0 before use [ 1945.203448][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1945.501201][T15616] (syz.2.15192,15616,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1945.510789][T15616] (syz.2.15192,15616,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1945.860246][T15620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15193'. [ 1946.049229][T15630] ubi: mtd0 is already attached to ubi16 [ 1946.444227][T15633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1948.183475][T15647] nfs: Unknown parameter '/dev/autofs' [ 1948.269659][T15650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15200'. [ 1948.377721][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15205'. [ 1948.619855][T15659] hsr_slave_1 (unregistering): left promiscuous mode [ 1948.882898][T15660] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15205'. [ 1948.904389][T15649] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1949.214647][T15413] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1950.541447][T15413] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1950.552945][T13670] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1950.563418][T13670] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1950.574705][T13670] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1950.582197][T13670] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1950.589950][T13670] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1950.604428][T15413] usb 1-1: config 0 has no interface number 0 [ 1950.612511][T15413] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1950.689345][T15413] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1950.704945][T15413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.713333][T15413] usb 1-1: Product: syz [ 1950.729891][T15413] usb 1-1: Manufacturer: syz [ 1950.735143][T15413] usb 1-1: SerialNumber: syz [ 1950.774872][ T7660] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1950.775320][T15413] usb 1-1: config 0 descriptor?? [ 1950.968506][ T7660] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1951.000858][ T7660] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1951.011084][ T7660] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1951.020253][ T7660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1951.073431][T15740] hub 8-0:1.0: USB hub found [ 1951.079431][T15740] hub 8-0:1.0: 1 port detected [ 1951.086012][T15740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15740 comm=syz.3.15218 [ 1951.109745][T15740] mac80211_hwsim hwsim57 wlan0: entered allmulticast mode [ 1951.230073][T15717] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1951.366243][ T7660] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1951.607174][ T7660] usb 5-1: USB disconnect, device number 61 [ 1951.620205][T15712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1951.628625][T15712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1951.636228][T15712] bridge_slave_0: entered allmulticast mode [ 1951.643349][T15712] bridge_slave_0: entered promiscuous mode [ 1951.651404][T15712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1951.658665][T15712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1951.666259][T15712] bridge_slave_1: entered allmulticast mode [ 1951.677763][T15712] bridge_slave_1: entered promiscuous mode [ 1951.703265][T15712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1951.720692][T15413] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 1951.743305][T15712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1951.755369][T15413] usb 1-1: USB disconnect, device number 52 [ 1952.045068][T15712] team0: Port device team_slave_0 added [ 1952.055588][T15712] team0: Port device team_slave_1 added [ 1952.088877][T15712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1952.099043][T15712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1952.125357][T15712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1952.136954][T15712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1952.143970][T15712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1952.170241][T15712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1952.186986][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1952.197658][T15712] hsr_slave_0: entered promiscuous mode [ 1952.204909][T15712] hsr_slave_1: entered promiscuous mode [ 1952.210951][T15712] debugfs: 'hsr0' already exists in 'hsr' [ 1952.216681][T15712] Cannot create hsr debugfs directory [ 1952.285223][T16043] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15224'. [ 1952.300267][T16043] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15224'. [ 1952.330374][T15712] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1952.343638][T15712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1952.353986][T15712] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1952.363153][T15712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1952.367072][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1952.371183][T15712] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1952.383602][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1952.384911][T15712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1952.400418][T15712] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1952.404964][ T9] usb 3-1: config 7 has an invalid interface number: 87 but max is 0 [ 1952.417636][T15712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1952.425257][ T9] usb 3-1: config 7 has no interface number 0 [ 1952.443428][ T9] usb 3-1: config 7 interface 87 has no altsetting 0 [ 1952.502409][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7111, bcdDevice=72.c5 [ 1952.518902][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.533409][ T9] usb 3-1: Product: syz [ 1952.537635][ T9] usb 3-1: Manufacturer: syz [ 1952.543315][ T9] usb 3-1: SerialNumber: syz [ 1952.784715][T13670] Bluetooth: hci5: command tx timeout [ 1952.828510][T15712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1952.830922][T16083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15228'. [ 1952.868107][T15712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1952.888781][T11338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1952.895901][T11338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1952.906773][T14066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1952.910289][ T29] audit: type=1326 audit(1781643629.117:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16087 comm="syz.4.15230" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9360b9ce59 code=0x7ffc0000 [ 1952.914051][T14066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1953.356168][ T9] usb 3-1: USB disconnect, device number 72 [ 1953.383696][ T29] audit: type=1326 audit(1781643629.117:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16087 comm="syz.4.15230" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9360b9ce59 code=0x7ffc0000 [ 1953.413304][ T29] audit: type=1326 audit(1781643629.164:4582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16087 comm="syz.4.15230" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9360b9ce59 code=0x7ffc0000 [ 1953.506274][ T29] audit: type=1326 audit(1781643629.164:4583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16087 comm="syz.4.15230" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9360b9ce59 code=0x7ffc0000 [ 1953.534510][ T29] audit: type=1326 audit(1781643629.164:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16087 comm="syz.4.15230" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9360b9ce59 code=0x7ffc0000 [ 1953.561681][ T29] audit: type=1326 audit(1781643629.164:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16087 comm="syz.4.15230" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9360b9ce59 code=0x7ffc0000 [ 1953.592487][ T29] audit: type=1326 audit(1781643629.173:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16087 comm="syz.4.15230" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9360b9ce59 code=0x7ffc0000 [ 1953.912741][ T29] audit: type=1326 audit(1781643629.173:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16087 comm="syz.4.15230" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9360b9ce59 code=0x7ffc0000 [ 1953.984269][ T29] audit: type=1326 audit(1781643629.173:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16087 comm="syz.4.15230" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9360b9ce59 code=0x7ffc0000 [ 1954.452053][T16126] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15234'. [ 1954.480045][T15712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1954.490856][T16126] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15234'. [ 1954.613387][T16141] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode [ 1954.620577][T16141] mac80211_hwsim hwsim61 wlan0: entered allmulticast mode [ 1954.946931][T15712] veth0_vlan: entered promiscuous mode [ 1954.962015][T15712] veth1_vlan: entered promiscuous mode [ 1954.990410][T15712] veth0_macvtap: entered promiscuous mode [ 1955.013788][T15712] veth1_macvtap: entered promiscuous mode [ 1955.019715][T13670] Bluetooth: hci5: command tx timeout [ 1955.043736][T15712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1955.056554][T15712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1955.103539][T14067] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1955.112333][T14067] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1955.129420][T14067] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1955.138907][T14067] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1955.288818][T14067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1955.726997][T14067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1955.762552][T11335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1955.772211][T11335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1956.033212][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1956.319827][T16197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15245'. [ 1956.343430][ T6245] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1956.352492][T16197] ip6gretap0: entered promiscuous mode [ 1956.358177][T16197] macvtap1: entered promiscuous mode [ 1956.363876][T16197] macvtap1: entered allmulticast mode [ 1956.369304][T16197] ip6gretap0: entered allmulticast mode [ 1956.379973][T16197] ip6gretap0: left allmulticast mode [ 1956.385750][T16197] ip6gretap0: left promiscuous mode [ 1956.391462][T16197] macvtap1: left promiscuous mode [ 1956.398164][T16197] macvtap1: left allmulticast mode [ 1956.930005][ T7660] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1956.952536][ T6245] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1956.980527][ T6245] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1956.999814][T16215] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1957.000188][ T6245] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1957.030286][T16213] syzkaller0: entered promiscuous mode [ 1957.035781][T16213] syzkaller0: entered allmulticast mode [ 1957.048286][ T6245] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1957.064323][ T6245] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1957.074437][ T6245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.082742][ T6245] usb 4-1: Product: syz [ 1957.087105][ T6245] usb 4-1: Manufacturer: syz [ 1957.091780][ T6245] usb 4-1: SerialNumber: syz [ 1957.099012][ T6245] cdc_mbim 4-1:1.0: skipping garbage [ 1957.106076][ T7660] usb 1-1: Using ep0 maxpacket: 32 [ 1957.112828][ T7660] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1957.123969][ T7660] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1957.134091][ T7660] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1957.143192][ T7660] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.153832][ T7660] usb 1-1: config 0 descriptor?? [ 1957.161840][ T7660] hub 1-1:0.0: USB hub found [ 1957.198811][T16227] lo speed is unknown, defaulting to 1000 [ 1957.204615][T16227] lo speed is unknown, defaulting to 1000 [ 1957.211791][T16227] lo speed is unknown, defaulting to 1000 [ 1957.217810][T16227] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1957.232404][T16227] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1957.249369][T16227] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1957.262828][T16227] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1957.274588][T13670] Bluetooth: hci5: command tx timeout [ 1957.281062][T16227] lo speed is unknown, defaulting to 1000 [ 1957.287453][T16227] lo speed is unknown, defaulting to 1000 [ 1957.293775][T16227] lo speed is unknown, defaulting to 1000 [ 1957.300225][T16227] lo speed is unknown, defaulting to 1000 [ 1957.307145][T16227] lo speed is unknown, defaulting to 1000 [ 1957.313553][T16227] lo speed is unknown, defaulting to 1000 [ 1957.315187][T16172] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1957.320032][T16227] lo speed is unknown, defaulting to 1000 [ 1957.332978][T16227] lo speed is unknown, defaulting to 1000 [ 1957.339278][T16227] lo speed is unknown, defaulting to 1000 [ 1957.345540][T16227] lo speed is unknown, defaulting to 1000 [ 1957.352250][T16227] lo speed is unknown, defaulting to 1000 [ 1957.384638][ T7660] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1957.860460][ T7660] hid-generic 0003:046D:C31C.003B: unknown main item tag 0x0 [ 1957.938277][ T7660] hid-generic 0003:046D:C31C.003B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 1957.953995][ T6245] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 1957.960975][ T6245] cdc_mbim 4-1:1.0: bind() failure [ 1957.970509][ T6245] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1957.979186][ T6245] cdc_ncm 4-1:1.1: bind() failure [ 1957.995121][ T6245] usb 4-1: USB disconnect, device number 40 [ 1958.358691][T16275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15255'. [ 1958.379389][T16275] gtp2: entered allmulticast mode [ 1958.793105][T16289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15257'. [ 1959.365065][T16189] usb 1-1: reset high-speed USB device number 53 using dummy_hcd [ 1959.437317][T16295] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15260'. [ 1959.448444][T16295] syz_tun: entered promiscuous mode [ 1959.454097][T16295] syz_tun: entered allmulticast mode [ 1959.466123][T16295] syz_tun: left promiscuous mode [ 1959.477327][T16295] syz_tun: left allmulticast mode [ 1959.559237][T13670] Bluetooth: hci5: command tx timeout [ 1959.620054][T16305] fuse: Unknown parameter 'user_id00000000000000000000' [ 1959.745410][T16307] syz.4.15262 (16307): drop_caches: 2 [ 1961.771165][ T29] audit: type=1326 audit(1781643637.389:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.3.15271" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c6d9ce59 code=0x7ffc0000 [ 1961.832570][ T29] audit: type=1326 audit(1781643637.408:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.3.15271" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c6d9ce59 code=0x7ffc0000 [ 1961.862975][ T29] audit: type=1326 audit(1781643637.408:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.3.15271" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c6d9ce59 code=0x7ffc0000 [ 1962.101845][ T29] audit: type=1326 audit(1781643637.408:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.3.15271" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f27c6d9ce59 code=0x7ffc0000 [ 1962.189422][T28704] block nbd3: Possible stuck request ffff888027cc5080: control (read@0,1024B). Runtime 690 seconds [ 1962.200497][ T5872] block nbd1: Possible stuck request ffff888027c1e000: control (read@0,1024B). Runtime 750 seconds [ 1962.211269][T28704] block nbd3: Possible stuck request ffff888027cc5240: control (read@1024,1024B). Runtime 690 seconds [ 1962.222302][ T5872] block nbd1: Possible stuck request ffff888027c1e1c0: control (read@1024,1024B). Runtime 750 seconds [ 1962.234824][T28704] block nbd3: Possible stuck request ffff888027cc5400: control (read@2048,1024B). Runtime 690 seconds [ 1962.246306][ T5872] block nbd1: Possible stuck request ffff888027c1e380: control (read@2048,1024B). Runtime 750 seconds [ 1962.257494][ T29] audit: type=1326 audit(1781643637.464:4593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.3.15271" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f27c6d5d68e code=0x7ffc0000 [ 1962.258438][ T5872] block nbd1: Possible stuck request ffff888027c1e540: control (read@3072,1024B). Runtime 750 seconds [ 1962.297196][T28704] block nbd3: Possible stuck request ffff888027cc55c0: control (read@3072,1024B). Runtime 690 seconds [ 1962.957569][ T29] audit: type=1326 audit(1781643637.464:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.3.15271" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f27c6d5d68e code=0x7ffc0000 [ 1962.984634][ T29] audit: type=1326 audit(1781643637.492:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.3.15271" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f27c6d5d68e code=0x7ffc0000 [ 1963.012016][ T29] audit: type=1326 audit(1781643637.680:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.3.15271" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f27c6d5d68e code=0x7ffc0000 [ 1963.040059][ T29] audit: type=1326 audit(1781643637.680:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.3.15271" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f27c6d5d68e code=0x7ffc0000 [ 1963.066918][ T29] audit: type=1326 audit(1781643637.680:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.3.15271" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f27c6d5d68e code=0x7ffc0000 [ 1964.471312][T16406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15281'. [ 1964.566867][ T6238] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1964.821546][ T6238] usb 6-1: Using ep0 maxpacket: 32 [ 1964.867610][T16406] gtp3: entered allmulticast mode [ 1964.901342][T16189] usb 1-1: device descriptor read/all, error -110 [ 1964.921021][ T6238] usb 6-1: config 0 has no interfaces? [ 1964.971176][ T6238] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1965.068745][ T6238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1965.121017][T16189] usb 1-1: reset high-speed USB device number 53 using dummy_hcd [ 1965.250629][ T6238] usb 6-1: config 0 descriptor?? [ 1965.302481][T16189] usb 1-1: device descriptor read/64, error -32 [ 1965.561449][T16189] usb 1-1: reset high-speed USB device number 53 using dummy_hcd [ 1965.592601][T16189] usb 1-1: device descriptor read/8, error -32 [ 1965.618224][ T6238] usb 6-1: USB disconnect, device number 2 [ 1965.914043][T16189] usb 1-1: reset high-speed USB device number 53 using dummy_hcd [ 1965.995285][T16189] usb 1-1: device descriptor read/8, error -32 [ 1966.152765][ T7660] usb 1-1: USB disconnect, device number 53 [ 1966.874818][ T6238] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1967.072000][ T6238] usb 4-1: Using ep0 maxpacket: 32 [ 1967.091729][ T6238] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1967.108351][ T6238] usb 4-1: config 0 has no interface number 0 [ 1967.178861][ T6238] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1967.208828][ T6238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.266386][ T6238] usb 4-1: Product: syz [ 1967.270857][ T6238] usb 4-1: Manufacturer: syz [ 1967.276629][ T6238] usb 4-1: SerialNumber: syz [ 1967.287499][ T6238] usb 4-1: config 0 descriptor?? [ 1967.581383][T11332] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1967.633272][T16500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15301'. [ 1967.741300][ T6238] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1967.753867][ T6238] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1967.771367][T16506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1967.778758][T16506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1968.055284][T16506] mac80211_hwsim hwsim61 wlan0: left promiscuous mode [ 1968.084465][T16506] mac80211_hwsim hwsim61 wlan0: left allmulticast mode [ 1968.347420][T16506] gtp0: left allmulticast mode [ 1968.352984][T16506] gtp1: left allmulticast mode [ 1968.362670][T16506] gtp2: left allmulticast mode [ 1968.401821][T16506] gtp3: left allmulticast mode [ 1968.418873][T11335] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.456542][T11335] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.477391][T11335] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.493619][T11335] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.552601][ T6238] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1968.677010][ T6238] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1968.883705][T14264] Bluetooth: hci5: command 0x0405 tx timeout [ 1968.893344][ T6238] usb 4-1: USB disconnect, device number 41 [ 1968.927952][T16550] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15313'. [ 1968.948916][ T6243] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1969.457456][ T6243] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1969.482569][ T6243] usb 5-1: config 1 has no interface number 0 [ 1969.500871][ T6243] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 1969.512872][T16565] tipc: Started in network mode [ 1969.517951][T16565] tipc: Node identity 4, cluster identity 4711 [ 1969.525143][ T6243] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 1969.538682][T16565] tipc: Node number set to 4 [ 1969.555943][ T6243] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1969.580718][ T6243] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x5 has invalid maxpacket 1056, setting to 1024 [ 1969.600274][ T6243] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1969.611628][ T6243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.623901][ T6243] usb 5-1: Product: syz [ 1969.628162][ T6243] usb 5-1: Manufacturer: syz [ 1969.638367][ T6243] usb 5-1: SerialNumber: syz [ 1969.898908][T16541] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1969.906510][T16541] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1969.916198][T16541] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1969.926884][ T6243] usb 5-1: Error in usbnet_get_endpoints (-22) [ 1970.413717][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 1970.413747][ T29] audit: type=1400 audit(1781643645.931:4640): avc: denied { connect } for pid=16579 comm="syz.3.15322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1970.965538][T16619] syzkaller0: entered promiscuous mode [ 1970.982417][T16619] syzkaller0: entered allmulticast mode [ 1971.601459][T16648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15336'. [ 1971.692672][T16652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15337'. [ 1972.007465][T15772] usb 5-1: USB disconnect, device number 62 [ 1972.034162][ T29] audit: type=1400 audit(1781643647.545:4641): avc: denied { accept } for pid=16658 comm="syz.2.15340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1972.151132][T16673] netlink: 'syz.3.15342': attribute type 49 has an invalid length. [ 1972.206197][T16673] bond0: (slave bond_slave_0): Releasing backup interface [ 1972.311747][T16673] bond_slave_0: entered promiscuous mode [ 1972.317924][T16673] bond_slave_0: entered allmulticast mode [ 1972.374240][ T9] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1972.409846][T16587] syz.0.15325 (16587): drop_caches: 1 [ 1972.546728][ T9] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1972.559463][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1972.582415][ T9] usb 3-1: Product: syz [ 1972.591727][ T9] usb 3-1: Manufacturer: syz [ 1972.601333][ T9] usb 3-1: SerialNumber: syz [ 1972.621394][ T9] usb 3-1: config 0 descriptor?? [ 1972.652431][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1973.089287][ T9] gspca_stk1135: reg_w 0x2 err -71 [ 1973.127495][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.161175][T16710] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1973.182640][T16709] IPVS: stopping master sync thread 16710 ... [ 1973.197784][ T9] gspca_stk1135: Sensor write failed [ 1973.243984][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.269278][ T9] gspca_stk1135: Sensor write failed [ 1973.297870][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.327932][ T9] gspca_stk1135: Sensor read failed [ 1973.351061][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.389546][ T9] gspca_stk1135: Sensor read failed [ 1973.472707][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 1973.546845][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.621489][ T9] gspca_stk1135: Sensor read failed [ 1973.691488][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.789891][ T9] gspca_stk1135: Sensor read failed [ 1973.796314][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.802672][ T9] gspca_stk1135: Sensor write failed [ 1973.808008][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.814351][ T9] gspca_stk1135: Sensor write failed [ 1973.820243][ T9] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1973.831092][ T9] usb 3-1: USB disconnect, device number 73 [ 1974.060732][T14264] Bluetooth: hci3: command 0x0406 tx timeout [ 1974.417568][T16748] lo speed is unknown, defaulting to 1000 [ 1974.660306][T16781] (syz.3.15357,16781,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1974.669232][T16781] (syz.3.15357,16781,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1974.826174][T16783] syzkaller0: entered promiscuous mode [ 1974.844589][T16783] syzkaller0: entered allmulticast mode [ 1975.056903][T15772] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1975.301757][T15772] usb 6-1: Using ep0 maxpacket: 8 [ 1975.348214][T15772] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1975.383935][T15772] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1975.414066][T15772] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1975.456409][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15360'. [ 1975.546280][T16805] gtp4: entered allmulticast mode [ 1975.554586][T15772] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1975.565297][T15772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.590646][T15772] hub 6-1:1.0: bad descriptor, ignoring hub [ 1975.629291][T15772] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1975.658665][T15772] cdc_wdm 6-1:1.0: skipping garbage [ 1975.885551][T15772] cdc_wdm 6-1:1.0: skipping garbage [ 1975.891528][T16761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1976.107922][T16761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1976.124679][ T29] audit: type=1400 audit(1781643651.397:4642): avc: denied { write } for pid=16744 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1976.188825][T15772] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1976.298954][ T29] audit: type=1400 audit(1781643651.584:4643): avc: denied { write } for pid=16836 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1976.349438][ T6243] usb 6-1: USB disconnect, device number 3 [ 1976.540193][ T7660] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1976.711937][ T7660] usb 5-1: Using ep0 maxpacket: 32 [ 1976.728193][ T7660] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1976.750704][ T7660] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1976.773050][ T7660] usb 5-1: can't read configurations, error -71 [ 1977.308198][T16874] input: syz1 as /devices/virtual/input/input103 [ 1978.454625][T16895] lo speed is unknown, defaulting to 1000 [ 1978.728219][T16895] (syz.2.15374,16895,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1978.738360][T16895] (syz.2.15374,16895,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1979.378761][T16927] overlayfs: missing 'lowerdir' [ 1979.479841][T16938] vivid-001: ================= START STATUS ================= [ 1979.522371][T16938] vivid-001: Radio HW Seek Mode: Bounded [ 1979.526217][T16942] hub 8-0:1.0: USB hub found [ 1979.550505][T16942] hub 8-0:1.0: 1 port detected [ 1979.557621][T16938] vivid-001: Radio Programmable HW Seek: false [ 1979.582910][T16938] vivid-001: RDS Rx I/O Mode: Block I/O [ 1979.604644][T16938] vivid-001: Generate RBDS Instead of RDS: false [ 1979.625760][T16938] vivid-001: RDS Reception: true [ 1979.652320][T16938] vivid-001: RDS Program Type: 0 inactive [ 1979.681490][T16938] vivid-001: RDS PS Name: inactive [ 1979.752835][T16938] vivid-001: RDS Radio Text: inactive [ 1979.768852][T16938] vivid-001: RDS Traffic Announcement: false inactive [ 1979.775828][T16938] vivid-001: RDS Traffic Program: false inactive [ 1979.782202][T16938] vivid-001: RDS Music: false inactive [ 1979.787899][T16938] vivid-001: ================== END STATUS ================== [ 1981.099939][T17002] lo speed is unknown, defaulting to 1000 [ 1981.165816][T17029] overlayfs: missing 'lowerdir' [ 1981.174091][T17002] (syz.0.15390,17002,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1981.183311][T17002] (syz.0.15390,17002,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1981.194475][ T6243] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1981.253839][ T6241] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1981.373415][ T6243] usb 6-1: config 0 has no interfaces? [ 1981.402202][ T6243] usb 6-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1981.430525][ T6243] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.450377][ T6241] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1981.469722][ T6243] usb 6-1: Product: syz [ 1981.480863][ T6241] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 177, changing to 7 [ 1981.496902][ T6243] usb 6-1: Manufacturer: syz [ 1981.503422][ T6243] usb 6-1: SerialNumber: syz [ 1981.507259][T17044] vivid-001: ================= START STATUS ================= [ 1981.508223][ T6241] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1981.523432][T17044] vivid-001: Radio HW Seek Mode: Bounded [ 1981.531017][ T6243] usb 6-1: config 0 descriptor?? [ 1981.543118][ T6241] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.40 [ 1981.553918][ T6241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.555270][T17044] vivid-001: Radio Programmable HW Seek: [ 1981.562300][ T6241] usb 3-1: Product: syz [ 1981.562322][ T6241] usb 3-1: Manufacturer: syz [ 1981.562337][ T6241] usb 3-1: SerialNumber: syz [ 1981.594387][T17044] false [ 1981.597217][T17044] vivid-001: RDS Rx I/O Mode: Block I/O [ 1981.603202][T17044] vivid-001: Generate RBDS Instead of RDS: false [ 1981.609575][T17044] vivid-001: RDS Reception: true [ 1981.615103][T17044] vivid-001: RDS Program Type: 0 inactive [ 1981.622367][T17044] vivid-001: RDS PS Name: inactive [ 1981.627881][T17044] vivid-001: RDS Radio Text: inactive [ 1981.633766][T17044] vivid-001: RDS Traffic Announcement: false inactive [ 1981.640611][T17044] vivid-001: RDS Traffic Program: false inactive [ 1981.647261][T17044] vivid-001: RDS Music: false inactive [ 1981.652843][T17044] vivid-001: ================== END STATUS ================== [ 1981.792025][ T6241] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1982.715685][ T6241] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1982.727761][ T6241] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1982.735254][ T6241] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1982.746510][ T6241] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1982.748478][T15772] usb 6-1: USB disconnect, device number 4 [ 1982.848565][ T6241] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1982.861455][ T6241] usb 3-1: USB disconnect, device number 74 [ 1982.891668][T17072] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1982.946054][ T1763] udevd[1763]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1983.283778][T17109] overlayfs: missing 'lowerdir' [ 1983.407533][T17117] syzkaller0: entered promiscuous mode [ 1983.413147][T17117] syzkaller0: entered allmulticast mode [ 1983.572489][T17130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15409'. [ 1983.589173][ T6241] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1983.760973][ T6241] usb 3-1: Using ep0 maxpacket: 8 [ 1983.777421][ T6241] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1983.793806][ T6241] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1984.088858][ T6241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1984.102599][ T6241] usb 3-1: config 0 descriptor?? [ 1984.114238][ T6241] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1984.535522][T17154] hfsplus: unable to find HFS+ superblock [ 1985.192325][T17161] overlayfs: missing 'lowerdir' [ 1985.313623][T17167] netlink: 76 bytes leftover after parsing attributes in process `syz.5.15419'. [ 1985.360460][T17171] netlink: 40 bytes leftover after parsing attributes in process `syz.5.15421'. [ 1985.395299][ T6241] gspca_vc032x: reg_r err -110 [ 1985.404232][ T6241] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 1985.472584][T17179] lo speed is unknown, defaulting to 1000 [ 1985.688502][ T9] usb 3-1: USB disconnect, device number 75 [ 1985.768209][T17214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15424'. [ 1985.970032][T17218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15425'. [ 1986.189526][T17218] hsr_slave_1 (unregistering): left promiscuous mode [ 1986.224028][T17216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15425'. [ 1986.304238][ T29] audit: type=1400 audit(1781643660.855:4644): avc: denied { create } for pid=17220 comm="syz.2.15426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1987.529451][T17247] pim6reg: entered allmulticast mode [ 1987.562034][T17247] team0: entered allmulticast mode [ 1987.625786][T17247] team_slave_0: entered allmulticast mode [ 1987.738115][T17247] team_slave_1: entered allmulticast mode [ 1987.756903][T17254] erofs (device nullb0): cannot find valid erofs superblock [ 1987.847196][T17256] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15429'. [ 1987.949648][T17253] team0: left allmulticast mode [ 1988.054817][T17253] team_slave_0: left allmulticast mode [ 1988.131656][T17253] team_slave_1: left allmulticast mode [ 1988.268173][T17253] pim6reg: left allmulticast mode [ 1988.351746][ T29] audit: type=1400 audit(1781643662.730:4645): avc: denied { write } for pid=17237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1988.648356][T17279] No such timeout policy "syz1" [ 1988.884865][ T29] audit: type=1400 audit(1781643663.247:4646): avc: denied { write } for pid=17275 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1989.793856][T17291] kvm: pic: non byte write [ 1989.802656][T17291] kvm: pic: non byte write [ 1989.807456][T17302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15436'. [ 1989.864464][T17302] gtp1: entered allmulticast mode [ 1991.277718][ T29] audit: type=1400 audit(1781643665.453:4647): avc: denied { write } for pid=17311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1991.315718][ T29] audit: type=1400 audit(1781643665.481:4648): avc: denied { write } for pid=17322 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1993.307446][ T4974] udevd[4974]: worker [21783] /devices/virtual/block/nbd3 timeout; kill it [ 1993.316571][ T4974] udevd[4974]: seq 45228 '/devices/virtual/block/nbd3' killed [ 1993.324238][ T4974] udevd[4974]: worker [19839] /devices/virtual/block/nbd1 timeout; kill it [ 1993.333176][ T4974] udevd[4974]: seq 43917 '/devices/virtual/block/nbd1' killed [ 1993.911221][ T5872] block nbd3: Possible stuck request ffff888027cc5080: control (read@0,1024B). Runtime 720 seconds [ 1993.921969][ T5872] block nbd3: Possible stuck request ffff888027cc5240: control (read@1024,1024B). Runtime 720 seconds [ 1993.932972][T28704] block nbd1: Possible stuck request ffff888027c1e000: control (read@0,1024B). Runtime 780 seconds [ 1993.943745][ T5872] block nbd3: Possible stuck request ffff888027cc5400: control (read@2048,1024B). Runtime 720 seconds [ 1993.954825][T28704] block nbd1: Possible stuck request ffff888027c1e1c0: control (read@1024,1024B). Runtime 780 seconds [ 1993.966112][T28704] block nbd1: Possible stuck request ffff888027c1e380: control (read@2048,1024B). Runtime 780 seconds [ 1993.977260][ T5872] block nbd3: Possible stuck request ffff888027cc55c0: control (read@3072,1024B). Runtime 720 seconds [ 1993.989917][T28704] block nbd1: Possible stuck request ffff888027c1e540: control (read@3072,1024B). Runtime 780 seconds [ 2001.537832][T20051] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2010.565818][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2026.506735][ T5872] block nbd3: Possible stuck request ffff888027cc5080: control (read@0,1024B). Runtime 750 seconds [ 2026.517628][T28704] block nbd1: Possible stuck request ffff888027c1e000: control (read@0,1024B). Runtime 810 seconds [ 2026.528488][ T5872] block nbd3: Possible stuck request ffff888027cc5240: control (read@1024,1024B). Runtime 750 seconds [ 2026.539555][T28704] block nbd1: Possible stuck request ffff888027c1e1c0: control (read@1024,1024B). Runtime 810 seconds [ 2026.550595][ T5872] block nbd3: Possible stuck request ffff888027cc5400: control (read@2048,1024B). Runtime 750 seconds [ 2026.561640][T28704] block nbd1: Possible stuck request ffff888027c1e380: control (read@2048,1024B). Runtime 810 seconds [ 2026.572644][ T5872] block nbd3: Possible stuck request ffff888027cc55c0: control (read@3072,1024B). Runtime 750 seconds [ 2026.583664][T28704] block nbd1: Possible stuck request ffff888027c1e540: control (read@3072,1024B). Runtime 810 seconds [ 2046.097686][T13670] Bluetooth: hci0: command 0x0405 tx timeout [ 2057.193848][T13670] Bluetooth: hci4: command 0x0406 tx timeout [ 2059.101085][ T5872] block nbd1: Possible stuck request ffff888027c1e000: control (read@0,1024B). Runtime 840 seconds [ 2059.111846][T28704] block nbd3: Possible stuck request ffff888027cc5080: control (read@0,1024B). Runtime 780 seconds [ 2059.122692][ T5872] block nbd1: Possible stuck request ffff888027c1e1c0: control (read@1024,1024B). Runtime 840 seconds [ 2059.133866][T28704] block nbd3: Possible stuck request ffff888027cc5240: control (read@1024,1024B). Runtime 780 seconds [ 2059.145003][ T5872] block nbd1: Possible stuck request ffff888027c1e380: control (read@2048,1024B). Runtime 840 seconds [ 2059.156009][T28704] block nbd3: Possible stuck request ffff888027cc5400: control (read@2048,1024B). Runtime 780 seconds [ 2059.167039][ T5872] block nbd1: Possible stuck request ffff888027c1e540: control (read@3072,1024B). Runtime 840 seconds [ 2059.178061][T28704] block nbd3: Possible stuck request ffff888027cc55c0: control (read@3072,1024B). Runtime 780 seconds [ 2067.423471][ T167] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2077.135261][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2084.935289][T13670] Bluetooth: hci5: command 0x0405 tx timeout [ 2091.699233][ T5872] block nbd3: Possible stuck request ffff888027cc5080: control (read@0,1024B). Runtime 810 seconds [ 2091.709997][T28704] block nbd1: Possible stuck request ffff888027c1e000: control (read@0,1024B). Runtime 870 seconds [ 2091.720708][ T5872] block nbd3: Possible stuck request ffff888027cc5240: control (read@1024,1024B). Runtime 810 seconds [ 2091.731711][T28704] block nbd1: Possible stuck request ffff888027c1e1c0: control (read@1024,1024B). Runtime 870 seconds [ 2091.742832][ T5872] block nbd3: Possible stuck request ffff888027cc5400: control (read@2048,1024B). Runtime 810 seconds [ 2091.753849][T28704] block nbd1: Possible stuck request ffff888027c1e380: control (read@2048,1024B). Runtime 870 seconds [ 2091.765258][ T5872] block nbd3: Possible stuck request ffff888027cc55c0: control (read@3072,1024B). Runtime 810 seconds [ 2091.776562][T28704] block nbd1: Possible stuck request ffff888027c1e540: control (read@3072,1024B). Runtime 870 seconds [ 2092.175193][ T167] bridge_slave_1: left allmulticast mode [ 2092.181275][ T167] bridge_slave_1: left promiscuous mode [ 2092.187003][ T167] bridge0: port 2(bridge_slave_1) entered disabled state [ 2092.194807][ T167] bridge_slave_0: left allmulticast mode [ 2092.200933][ T167] bridge_slave_0: left promiscuous mode [ 2092.206675][ T167] bridge0: port 1(bridge_slave_0) entered disabled state [ 2092.360635][ T167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2092.370442][ T167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2092.379699][ T167] bond0 (unregistering): Released all slaves [ 2092.614074][ T167] hsr_slave_0: left promiscuous mode [ 2092.619975][ T167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2092.627411][ T167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2092.634969][ T167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2092.642482][ T167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2092.652863][ T167] veth1_macvtap: left promiscuous mode [ 2092.658323][ T167] veth0_macvtap: left promiscuous mode [ 2092.664119][ T167] veth1_vlan: left promiscuous mode [ 2092.669360][ T167] veth0_vlan: left promiscuous mode [ 2092.724066][ T167] team0 (unregistering): Port device team_slave_1 removed [ 2092.736016][ T167] team0 (unregistering): Port device team_slave_0 removed [ 2093.054733][ T167] IPVS: stop unused estimator thread 0... [ 2098.633056][ T30] INFO: task syz.1.15141:15221 blocked for more than 143 seconds. [ 2098.641172][ T30] Tainted: G L syzkaller #0 [ 2098.647722][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2098.656443][ T30] task:syz.1.15141 state:D stack:28096 pid:15221 tgid:15210 ppid:9751 task_flags:0x400040 flags:0x00080002 [ 2098.668447][ T30] Call Trace: [ 2098.671737][ T30] [ 2098.674647][ T30] __schedule+0x125c/0x6730 [ 2098.679175][ T30] ? do_raw_spin_lock+0x128/0x260 [ 2098.684195][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2098.689581][ T30] ? __pfx___schedule+0x10/0x10 [ 2098.694432][ T30] ? rcu_is_watching+0x12/0xc0 [ 2098.699218][ T30] ? schedule+0x2bf/0x390 [ 2098.703547][ T30] ? lock_release+0x24d/0x310 [ 2098.708215][ T30] schedule+0xdd/0x390 [ 2098.712420][ T30] schedule_preempt_disabled+0x13/0x30 [ 2098.717887][ T30] __mutex_lock+0xccc/0x1bd0 [ 2098.722554][ T30] ? bdev_open+0xa2/0xe40 [ 2098.726913][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2098.732026][ T30] ? bd_prepare_to_claim+0x1e0/0x280 [ 2098.737306][ T30] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 2098.742992][ T30] ? kobject_get_unless_zero+0x156/0x200 [ 2098.748919][ T30] ? bdev_open+0xa2/0xe40 [ 2098.753415][ T30] bdev_open+0xa2/0xe40 [ 2098.757589][ T30] ? iput+0x3a/0x40 [ 2098.761390][ T30] blkdev_open+0x34e/0x4f0 [ 2098.765878][ T30] do_dentry_open+0x6ab/0x14d0 [ 2098.770647][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 2098.775644][ T30] vfs_open+0x82/0x3f0 [ 2098.779709][ T30] path_openat+0x2873/0x4280 [ 2098.784291][ T30] ? trace_sched_exit_tp+0x120/0x160 [ 2098.789589][ T30] ? __schedule+0x126e/0x6730 [ 2098.794252][ T30] ? __pfx_path_openat+0x10/0x10 [ 2098.799290][ T30] do_file_open+0x20e/0x430 [ 2098.803794][ T30] ? __pfx_do_file_open+0x10/0x10 [ 2098.808963][ T30] ? __pfx___schedule+0x10/0x10 [ 2098.813855][ T30] ? alloc_fd+0x471/0x7a0 [ 2098.818234][ T30] do_sys_openat2+0x10f/0x1e0 [ 2098.822903][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 2098.828152][ T30] __x64_sys_openat+0x12d/0x210 [ 2098.833001][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 2098.838409][ T30] ? rcu_is_watching+0x12/0xc0 [ 2098.843312][ T30] do_syscall_64+0x115/0x870 [ 2098.847920][ T30] ? clear_bhb_loop+0x40/0x90 [ 2098.852600][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2098.858714][ T30] RIP: 0033:0x7f778e75d68e [ 2098.863173][ T30] RSP: 002b:00007f778f5eab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2098.871635][ T30] RAX: ffffffffffffffda RBX: 00007f778f5eb6c0 RCX: 00007f778e75d68e [ 2098.879600][ T30] RDX: 0000000000000080 RSI: 00007f778f5eac00 RDI: ffffffffffffff9c [ 2098.887676][ T30] RBP: 00007f778f5eac00 R08: 0000000000000000 R09: 0000000000000000 [ 2098.895861][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 2098.903867][ T30] R13: 00007f778ea16218 R14: 00007f778ea16180 R15: 00007ffe19252a38 [ 2098.911839][ T30] [ 2098.914899][ T30] INFO: lockdep is turned off. [ 2098.919649][ T30] NMI backtrace for cpu 1 [ 2098.919660][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2098.919675][ T30] Tainted: [L]=SOFTLOCKUP [ 2098.919679][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2098.919685][ T30] Call Trace: [ 2098.919689][ T30] [ 2098.919693][ T30] dump_stack_lvl+0x100/0x190 [ 2098.919708][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2098.919721][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2098.919733][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 2098.919750][ T30] sys_info+0x141/0x190 [ 2098.919764][ T30] watchdog+0xcb1/0x1030 [ 2098.919781][ T30] ? trace_irq_enable.constprop.0+0x122/0x160 [ 2098.919792][ T30] ? __pfx_watchdog+0x10/0x10 [ 2098.919807][ T30] ? __kthread_parkme+0x18c/0x230 [ 2098.919820][ T30] ? kthread+0x13a/0x450 [ 2098.919832][ T30] ? __pfx_watchdog+0x10/0x10 [ 2098.919847][ T30] kthread+0x370/0x450 [ 2098.919860][ T30] ? __pfx_kthread+0x10/0x10 [ 2098.919873][ T30] ret_from_fork+0x72b/0xd50 [ 2098.919885][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2098.919897][ T30] ? __switch_to+0x800/0x10f0 [ 2098.919911][ T30] ? __pfx_kthread+0x10/0x10 [ 2098.919924][ T30] ret_from_fork_asm+0x1a/0x30 [ 2098.919940][ T30] [ 2098.919944][ T30] Sending NMI from CPU 1 to CPUs 0: [ 2099.051497][ C0] NMI backtrace for cpu 0 [ 2099.051512][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2099.051533][ C0] Tainted: [L]=SOFTLOCKUP [ 2099.051538][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2099.051546][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2099.051565][ C0] Code: c6 90 02 e9 c3 48 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 e6 1e 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2099.051578][ C0] RSP: 0018:ffffffff8e407e10 EFLAGS: 00000246 [ 2099.051589][ C0] RAX: 000000000a1221a4 RBX: ffffffff8e495480 RCX: ffffffff8b8cb2b5 [ 2099.051599][ C0] RDX: 0000000000000001 RSI: ffffffff8c1ce980 RDI: ffffffff81de1ea7 [ 2099.051607][ C0] RBP: fffffbfff1c92a90 R08: 0000000000000000 R09: ffffed101708678d [ 2099.051616][ C0] R10: ffff8880b8433c6b R11: ffffffff81d4f52c R12: 0000000000000000 [ 2099.051625][ C0] R13: 0000000000000000 R14: 1ffffffff1c80fc6 R15: dffffc0000000000 [ 2099.051634][ C0] FS: 0000000000000000(0000) GS:ffff88812435f000(0000) knlGS:0000000000000000 [ 2099.051648][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2099.051658][ C0] CR2: 000055e8d1549168 CR3: 000000000e596000 CR4: 00000000003526f0 [ 2099.051667][ C0] Call Trace: [ 2099.051673][ C0] [ 2099.051677][ C0] default_idle+0x9/0x10 [ 2099.051694][ C0] default_idle_call+0x6c/0xb0 [ 2099.051709][ C0] do_idle+0x3a7/0x5b0 [ 2099.051726][ C0] ? __pfx_do_idle+0x10/0x10 [ 2099.051740][ C0] ? finish_task_switch.isra.0+0x14c/0x1010 [ 2099.051758][ C0] cpu_startup_entry+0x4f/0x60 [ 2099.051773][ C0] rest_init+0x251/0x260 [ 2099.051789][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2099.051807][ C0] start_kernel+0x484/0x490 [ 2099.051822][ C0] x86_64_start_reservations+0x24/0x30 [ 2099.051838][ C0] x86_64_start_kernel+0x12b/0x130 [ 2099.051854][ C0] common_startup_64+0x13e/0x158 [ 2099.051875][ C0] [ 2099.245705][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2099.252583][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2099.263243][ T30] Tainted: [L]=SOFTLOCKUP [ 2099.267539][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2099.277569][ T30] Call Trace: [ 2099.280827][ T30] [ 2099.283735][ T30] dump_stack_lvl+0x100/0x190 [ 2099.288400][ T30] vpanic+0x552/0x970 [ 2099.292365][ T30] ? __pfx_vpanic+0x10/0x10 [ 2099.296853][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 2099.302986][ T30] panic+0xd1/0xe0 [ 2099.306685][ T30] ? __pfx_panic+0x10/0x10 [ 2099.311075][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 2099.317219][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 2099.323359][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 2099.329497][ T30] ? watchdog.cold+0x1ec/0x234 [ 2099.334263][ T30] ? watchdog+0xcc1/0x1030 [ 2099.338667][ T30] watchdog.cold+0x1fd/0x234 [ 2099.343232][ T30] ? trace_irq_enable.constprop.0+0x122/0x160 [ 2099.349271][ T30] ? __pfx_watchdog+0x10/0x10 [ 2099.353926][ T30] ? __kthread_parkme+0x18c/0x230 [ 2099.358925][ T30] ? kthread+0x13a/0x450 [ 2099.363143][ T30] ? __pfx_watchdog+0x10/0x10 [ 2099.367797][ T30] kthread+0x370/0x450 [ 2099.371853][ T30] ? __pfx_kthread+0x10/0x10 [ 2099.376419][ T30] ret_from_fork+0x72b/0xd50 [ 2099.380983][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2099.386077][ T30] ? __switch_to+0x800/0x10f0 [ 2099.390728][ T30] ? __pfx_kthread+0x10/0x10 [ 2099.395295][ T30] ret_from_fork_asm+0x1a/0x30 [ 2099.400060][ T30] [ 2099.403260][ T30] Kernel Offset: disabled [ 2099.407569][ T30] Rebooting in 86400 seconds..