last executing test programs: 17.325995489s ago: executing program 1 (id=574): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000000)={"b85cad57", 0xff, 0x0, 0x6, 0x2, 0x4, '\x00', '\x00', "ee448507", "00000400", ["e0cadd713852c5204de8a878", "e19e029c0b99c0f100", "2c0f2bf4b125dadbc83d0571"]}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4, 0x42031, 0xffffffffffffffff, 0x0) 17.229061776s ago: executing program 1 (id=575): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x7, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, '.,\x03\x00\\{t\xca\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x20000000, 0x0, 0x932}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x92}}]}, 0x9c}}, 0x801) (async) r3 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r3, &(0x7f0000001a40)=[{{&(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x28}}], 0x2, 0x810) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.22886081s ago: executing program 1 (id=576): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000240)=""/208, &(0x7f0000000340)=0xd0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0xfffffffffffffd76}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xce, @private0, 0xffc}, 0x1c) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 17.160454602s ago: executing program 1 (id=577): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_clone(0x3300, &(0x7f00000000c0)="b8aed8c59da26c774dc2a8e6e7b2df24bc45577988a34f2eaf7060efc7c6de", 0x1f, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000380)="2f0e5f150eb6caf28807796d630e0f42cc5a9355496b084e017f7a8d01a88dca63d6e675a329d16268ea979ac40c69d100c369ffe88cd25359ea9ec275ee50777c3d04fbe2939402d02526ae17") ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)=0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x10002, 0x0) kcmp(r0, r1, 0x0, r2, r3) unlink(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2000, 0x0) syz_emit_ethernet(0x130, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 17.07840585s ago: executing program 1 (id=578): syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000540001802c0004001400010002000000ac14141100000000000000001400020002000000ffffffff00000000000000000d0001006574683a67726530"], 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x4040) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000040)) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e8, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2fd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6208}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @empty, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x401, @loopback, 0x8}}}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x0) 16.549838176s ago: executing program 1 (id=587): shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_FRONTEND_TUNE_MODE(r1, 0x6f51, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x1000, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000080)={r2, 0x1}) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1, 0x2) 16.510713573s ago: executing program 32 (id=587): shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_FRONTEND_TUNE_MODE(r1, 0x6f51, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x1000, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000080)={r2, 0x1}) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1, 0x2) 2.775917192s ago: executing program 2 (id=830): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, &(0x7f0000000500), &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = io_uring_setup(0x6a23, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f00000001c0), 0x1) bpf$PROG_LOAD_XDP(0x5, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000080)) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0], 0xffffffffffffff9c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000005c0)="be38e5e141011a0b340f9c81b2dfe2cebe797a72f2c279f1ded961c35901778b6c7457b8f0e1f2569a1cd1aeddce4382ac9a35256f7d3a0e34649a4499d9b6c151bb346817ab4a30c45a99ae4c09ff2cb1da2daef7acbdb05ac0c57eda4a1b10b5bd6e60b9b2df0ec0689cc9d9b00b12650f997ea69aac19ea01fde78739c5dbdee63ffd99c442e54223018f81e36465a6162339f9b450a888d21419577d4770f8022ce28fdf5d2ea83c77de19e0beb47cfdecf8770962a2b8162b5a2c23d8daefbdf0e3e75e392017ad84a5ad7a42e1", 0xd0}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000d500000000000000000000000700000044047300010000", @ANYRESOCT, @ANYRESOCT=r2], 0x40}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x585902, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x10000000000003) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f000001a000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0, 0xffffff42}], 0x1, 0x10, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CAP_HYPERV_VP_INDEX(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x4050}, 0x4) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r6], 0x0, 0x2a}, 0x28) 1.852854902s ago: executing program 2 (id=846): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001280)={0x64, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x86c}, {0x8, 0xb, 0x7c91}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x1, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003b}, 0x60) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000001c0)={0x0, 0x2, 0x0, [0x3, 0x10001, 0x0, 0x101, 0x800], [0xfffffffffffffff8, 0x2, 0x3, 0xffffffffffffebe7, 0x5, 0x8, 0xc650, 0x7, 0xf4c, 0x1ff, 0x8000000000000000, 0x9, 0x4, 0xdf1, 0x7fffffff, 0x3, 0x1, 0x9, 0x10001, 0xffffffff, 0x3, 0x5, 0xd7, 0x0, 0x8, 0x40, 0xf, 0xb, 0x5, 0xffffffffffffbbd8, 0xffffffff80000001, 0x1, 0x1, 0x179, 0x2, 0x800, 0xbf, 0x7, 0x6, 0xaec2, 0x7, 0x1, 0x5, 0x100000000, 0xffffffffffffffff, 0x8001, 0x5, 0x8, 0x4, 0x7, 0x2, 0x9, 0x9, 0x9, 0x2, 0x9, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0x8, 0x1, 0x78c, 0x1, 0xc8, 0xfffffffffffffff8, 0x7, 0x4, 0x6c, 0x6, 0x79fe, 0x8, 0x8b, 0x5, 0x7, 0x0, 0x9, 0x80000000, 0x100000000, 0x6, 0x2, 0x8, 0x1, 0x3, 0x5, 0x9, 0x74, 0xfff, 0x0, 0x2, 0xffffffffffff3db8, 0xfffffffffffffff9, 0x6, 0x0, 0x7, 0x290, 0x0, 0x2, 0x8, 0x8000000000000000, 0x9, 0x7fffffff, 0x2, 0x5, 0x7, 0x2, 0x7, 0xd, 0x3, 0x2, 0x7, 0x0, 0x3, 0x8, 0x3, 0x5c, 0x0, 0x4, 0xffff, 0x1, 0xcb]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) (async, rerun: 64) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a1b0100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a611fa242792d307c944d4f8e31000000000900020073797a31000000001400000011000100"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r0) sendmsg$TIPC_NL_NET_GET(r7, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb8, r10, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3bc3}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x95}, 0x20008051) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x581, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2002, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000001e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e00)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00022bbd7000fddbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b00680300000600110017000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001600)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001a00)={0x4, 0x3, {0x6, @usage=0x8, r6, 0xca6, 0x2, 0x0, 0x5, 0x3, 0x1c, @struct={0x1000, 0xff}, 0x9, 0x5, [0x7fff, 0xffffffffffffffff, 0x9, 0x7fffffffffffffff, 0x1000, 0x9]}, {0x3, @usage=0x8001, 0x0, 0x3, 0x9, 0x10000, 0x0, 0x401, 0x2, @struct={0xfffffff6, 0x10}, 0x5, 0x3, [0x8000, 0xc, 0x40, 0xa8e, 0x4, 0x10000]}, {0x1, @usage=0x9, r12, 0x1, 0x3, 0x9, 0x5, 0x5, 0x85, @struct={0x0, 0x5}, 0x8001, 0x80000000, [0x154, 0x7870, 0x4, 0x9, 0x7ff, 0x1c]}, {0x4, 0x101, 0x8}}) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000010100000008"], 0x0) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.786420265s ago: executing program 2 (id=848): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) msgctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/26) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x29, 0x81, &(0x7f00000002c0)=""/129}, &(0x7f0000000140)="8536b60bfad6", 0x0, 0x9, 0x10000, 0x1, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x8, 0x80000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) fanotify_mark(r3, 0x105, 0x4800003a, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f0000000200)={0x80}) read$FUSE(r3, 0x0, 0x6c) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="74f2616d6d61702c0000000000f2ffffffffffffff00000000"]) 1.44584154s ago: executing program 2 (id=854): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x7}, {0x6, 0x8d, 0x0, 0x1}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x7}, {0x6, 0x8d, 0x0, 0x1}]}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:pam_var_run_t:s0\x00', 0x23, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="936f0000a8097f447f", @ANYRES16=r1, @ANYBLOB="03032abd7000ffdbdf250a000000"], 0x14}}, 0x20000024) socket$unix(0x1, 0x1, 0x0) 959.753669ms ago: executing program 3 (id=868): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="6000000009060104000000000000000002000000480008800c00078005001a000000000010000780bb88540317c137b8ff1c4c24d2b8b80c0001800800014000078008000940000000031c0007801800018014000240fc01000000691f8c3e458da423415c6d299965582ca3f50f93d92cb35df1c30ee1751a928ccd76bee29d20d81789beaea58324cde281c9493bc207b03f287a9708cdabe0b9c24a51e5a824211d0cb05ab639deaad42b81ef8eec9f6df2384e5d5f3a45520dff7b0fa6d5fe28c076ef1bd5855585d274153b7e7ca906a7f1b56dc88a24c02a292298f95498f2ba824b9c3b142646bf4beb91303646de4915e0a719054d2cafa2d95fda8a449d2bbb6295076adbc45aad1051b1fa875cf8"], 0x60}}, 0x48000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2004}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fff}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000000a0a0102"], 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x24000034) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = accept$netrom(0xffffffffffffffff, &(0x7f0000000b40)={{0x3, @default}, [@remote, @remote, @null, @default, @bcast, @netrom, @remote, @null]}, &(0x7f0000000bc0)=0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r5) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000c00)) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @remote}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x4004550c) timer_create(0x0, &(0x7f0000000200)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) dup(0xffffffffffffffff) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000000)=0x1000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r8, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000000)=0x4000) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r9 = syz_open_dev$sndmidi(&(0x7f0000000c80), 0xffff, 0x8000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r9, 0xc0305710, &(0x7f0000000cc0)={0x0, 0x100, 0x800, 0x0, 0x5}) syz_usb_connect(0x6, 0x613, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x62, 0x94, 0x74, 0xff, 0x1740, 0x9706, 0xc8c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x601, 0x2, 0x7f, 0x6, 0xf0, 0x83, "", [{{0x9, 0x4, 0x15, 0x1, 0x2, 0x89, 0xd6, 0xfc, 0x1, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x7, 0x6, 0x3}, {0x6, 0x24, 0x1a, 0xfffd, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x22}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x0, 0x9}, @acm={0x4, 0x24, 0x2, 0x4}, @obex={0x5, 0x24, 0x15, 0x6}, @country_functional={0xe, 0x24, 0x7, 0x6, 0x2, [0x4b, 0x0, 0x3, 0x0]}]}, @hid_hid={0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x4b3}}], [{{0x9, 0x5, 0x2, 0x0, 0x200, 0x0, 0x9, 0xca, [@generic={0xed, 0x22, "5cab190be8c1cacc6f93304c497e055a63fe13e299013d157428c116772073875b975878152df659bc680dc5003f5653065d3836a92a4804c26450a82162576ea43ce8ff95ccce986d4d26ea87217da954f9b67f7583b778431a4e3158fb0607bff46c4a3a61f72e698b15e38ee16c2cdd1dd217b97ba75315341af9b924427770083b767a5980a53c1ef19fbc7a90c85bab0c45a93901de79c6765034da25078616558d1cf70b33537f741ea1eeefde0631c16afa96495c26caf9077e3fdae51713e2efb588f932498470d9b1d3128970c3ab55b0bce85dc35b40d82d1849cc3fcc34d72dcbc4d8d271fc"}, @generic={0x97, 0x23, "0d0d9f826af034a76921048ee450e48db68c0c1442efe6f6de50dee6ff4561fca29f11d8ec2148b3bf11421e4b1ac2324d0e265d0c244f8a8a6e62943070ed56914da5bd95fa6cd0dc65486fa00b0f889d90f42659435dccd471160fa1bcf05e6a0c2183d0d9022acf5ff170dcfc81ef203775fc3ec8e77a5241188e88b308a7c7bcfc0c93e6687cec4b6302459d504f12daa0dbf4"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x6, 0xff, 0xa, [@generic={0xae, 0xa, "8fd28c63550c8786b7ba0f5ec3e9118e50f568386703a05fe53ce04b84a17517cc7676fc0bc5497d58f70aab8f36bff0af133e0c188b1a0f4ea3ddfd7b14d3ce83b305699420f7abeaa800de2a697003d2f2798e9f93939c1c590f37a662cbc8b52f5b5a9a3d2c7cf66976acff9e2448b3f13df41595bca1abe12e9ecf94c17fd590d46055ecda2b71ac424ccff687b0666f1824d5281b297f303df65c7b4594adb72865129ffb04ffdc5891"}]}}]}}, {{0x9, 0x4, 0x7f, 0x8, 0xa, 0x2f, 0xf5, 0xec, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x57}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x404, 0x4, 0xfa, 0x800, 0xe, 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x401, 0x3, 0xdf, 0xfffa, 0x80, 0x2}, @feature_unit={0x13, 0x24, 0x6, 0x3, 0x6, 0x6, [0x1, 0x3, 0x5, 0x1, 0x2, 0xa], 0x9}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0x4, "efb61dfc"}, @extension_unit={0xc, 0x24, 0x8, 0x3, 0x6, 0xa, "9a476f3c8a"}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x4, 0x3, [0x8, 0x6, 0x3], 0x63}]}], [{{0x9, 0x5, 0x1, 0x0, 0x8, 0x2, 0x4, 0x6}}, {{0x9, 0x5, 0x7, 0x3, 0x420, 0x7, 0x3, 0xb6, [@generic={0xc5, 0x30, "d7769dce63b3485035ccd093c59b43c2172b7317ed637be8fb25dfad7857110c4ecfe26d43b9baa5fbc446b55df32bb13825c83a2d9e0a52810313d6f5b8474a9a28985c43f511cd8b1760f2dbf4401b24d51c585ef7fbf3e5564b963c548ed4470aa09e722e4a4e9d0dff00fe9cbd69f22c377245a97f9f8029a183d88180ef8f2746a8f4a9c67cbf6a63d75b545be960aef06a7366c6c4037aa6c6ad811897523586074bac7fd54232ddc9ff0b99497a8cbb7b951c67061f9db277458dce0a64c18c"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0xe}]}}, {{0x9, 0x5, 0x5, 0x8, 0x400, 0x0, 0x1, 0x1}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x5, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x5b5}]}}, {{0x9, 0x5, 0x2, 0x3, 0x400, 0x8, 0x8, 0x80}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x4, 0x7, 0xf9, [@generic={0xbc, 0xb, "fde3f1abce5a7b039555fe21b993058cb2fe4ca82cd6883e27e4c5f378824fb353f211f5e4d93ecf4309601606cb42701300c02f6e2f27dacd61f065e356d2d927e1f3de6b0c71abb8db2b81d54020f26897ced575290649e0a8727024174a777a8363d8c10e8cc23a0b7aebe6616bd0c7e9ca87fe7b8e214b707af127169ff7898481d6748964cc93955275b47630eec0ee272d3cd5ba4b238b0ba32ea6b19feed9d866a97fa350dfbb418791b211d616e1a5e99d8e792dda74"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0xd47}]}}, {{0x9, 0x5, 0x9, 0x668f02d1cbd97bbb, 0x0, 0x7, 0x9, 0xa, [@generic={0xb3, 0x21, "3578aaee00c9105d13200f5d692f68d063f0ec4a8c70a679ddf4e9484056e9f3da924d5929d855150f64c2bbbef7ec907addce32ea169901cd2e156f9043e322a80ca8d6767a658c18da2f11784921c40c73ecfc8389baad28588cb12438a858785058bf4b12f44cb71037ca046c9f9d3276171194aec6b0a26f73e85750977db5727123b407e06daf9b4a06b80c61ba341c6fbfe2ecbf57111030f225559d0bdbdec8836bfbe0e9327240e7ef2b919710"}, @generic={0x40, 0x24, "ae3587823a2065bde96d2db24ae9686593e23e9c0a56ff58f4ffd640dfe17ba332c0a1dd69548391ced372a7fda7bc58344789622e597c374800a1d607bd"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x9, 0xb3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x9}]}}, {{0x9, 0x5, 0x2, 0xc, 0x40, 0x16, 0x6, 0x4}}, {{0x9, 0x5, 0xd, 0x3, 0x40, 0x7, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xca}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x51, 0xd400}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x300, 0x2a, 0xf4, 0x4, 0x40, 0x7f}, 0x3e, &(0x7f0000000e40)=ANY=[@ANYBLOB="050f3ec10010002d0a100300020000a40af19166595f3c01050024100a0426010000000f010030000000c0ff000000000000003f0000ff0001007fa4d8fa0000000000000000"], 0x5, [{0x17, &(0x7f0000000840)=ANY=[@ANYBLOB="1703cfa08b919b914837232d0e04eb0004000084e8399f"]}, {0x6, &(0x7f0000000880)=@string={0x6, 0x3, "f134d522"}}, {0x83, &(0x7f0000000900)=@string={0x83, 0x3, "a75e054ab94129aaba293c7b8d1df433374779416e3dd63f09a1de6919056a3b3b9413cc91a6edd2f7c02134bd376b3beaa215d813306490754b2fdec97d80ad51df94e40068831e3244383331f7cd0a1a1083c35b812f8c69e098054705b5bf85997de98c2e5a7a629149ed5aff3756665fdabb3393d3a56134b5ac3d3c506e4b"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0xc07}}, {0x9d, &(0x7f0000000a00)=@string={0x9d, 0x3, "2d4eb77915aa1a938bdf13d77228693c71369c7bf56043d742dbcb22d68a579fa71d02b397c6c5b2761f688d741731e1e3269bd7ddbb74849d381f5cca0dcbbc089420861c85d9d9aab4048e7a7b51dfac5ee3a2614330cc4c630091c902d9a7ccf504e1665e7b91f22adc580b1ae0faa2f05c3063c6183fc1ea345987ca7a0ff2ed3df546d22a3c2793c6a4aebf1399ec4d68a2a9b4945d7dc7de"}}]}) 579.730537ms ago: executing program 2 (id=876): openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) (async) fchdir(r3) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x80049370, 0x0) socket$inet6(0xa, 0x80003, 0x1) (async) r5 = socket$inet6(0xa, 0x80003, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x9, @loopback, 0x6}, 0x31) (async) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x9, @loopback, 0x6}, 0x31) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$sock_int(r5, 0x1, 0x2d, &(0x7f0000000040)=0x97, 0x4) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r0, 0x0) 459.015063ms ago: executing program 0 (id=879): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) (async) r1 = socket(0x10, 0x800, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xef, 0x0, 0x0, {}, 0x0, 0x0, 0x3, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x31, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_out(r1, 0x0, &(0x7f0000000080)) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000001e80)=0x6, 0x8) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x9, &(0x7f0000000040)=0x3, 0x4) 388.7665ms ago: executing program 0 (id=881): r0 = socket$rxrpc(0x21, 0x2, 0x2) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r2 = mq_open(&(0x7f0000000140)='*+@[^#^\x00', 0x40, 0x65, 0x0) mq_notify(r2, &(0x7f0000000300)={0x0, 0x1b, 0x1}) mq_notify(r2, &(0x7f00000000c0)={0x0, 0x35, 0x0, @thr={0x0, 0x0}}) (async) creat(&(0x7f0000000140)='./file0\x00', 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0xfffffffffffffdcf, 0x0, r3, {0x7, 0x1f, 0x4, 0x20348eaa, 0xfffe, 0x20, 0x100000, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) umount2(&(0x7f0000000380)='./file0\x00', 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x1, 0x12) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x40086603, &(0x7f0000000040)) (async) write$cgroup_int(r5, &(0x7f0000000200), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) (async) close(r0) 388.426333ms ago: executing program 3 (id=882): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_destroy(r2) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x7, 0x8, r1, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2, r1}]) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) 387.532062ms ago: executing program 4 (id=883): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x6037}], 0x1, 0x1822b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) r3 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000040)=0x543c) 387.350709ms ago: executing program 0 (id=884): r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax=always') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0x7, 0x3, 0x80000001}) 298.955657ms ago: executing program 0 (id=885): r0 = socket(0x18, 0xa, 0x0) (async, rerun: 32) r1 = socket$inet6(0xa, 0x80002, 0x88) (rerun: 32) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) (async) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) (async) recvmmsg(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10123, 0x0) (async) shutdown(r1, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x50) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001800dd8d0000000000000000020000000100000600000000060015000500000058001680540001"], 0x7c}}, 0x20000810) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@tcp6=r0, 0x2}, 0x20) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x60180, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r5, 0x8004510a, &(0x7f00000003c0)) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}}, 0x0) 298.100381ms ago: executing program 2 (id=886): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) waitid(0x2, r0, &(0x7f0000000040), 0x40000000, &(0x7f00000000c0)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) syz_usb_connect$midi(0x2, 0x31, &(0x7f0000001c00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x944, 0x201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x2, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0xfe, [], [{{0x9, 0x5, 0x12, 0x3, 0x8, 0x29, 0x6, 0x8, {0x4}}}]}}}}}]}}, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0}) 297.896092ms ago: executing program 0 (id=887): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) set_mempolicy(0x3, &(0x7f0000000140)=0x7, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x11, 0xf, &(0x7f0000006380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x5}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add4", 0x8}], 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x7c2f}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000280)={0x0, 0x101, 0x5, {0x2, 0x7fffffff}, 0x7da, 0x100000}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x33, @time={0x65757100, 0x6}, 0x4, {0x2}, 0x83, 0xf984851698b5541a}) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xe, 0x488000) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000240)={0x3, 0x800, 0x4, 0x7, 0x5, 0x6}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000ff000000009500000000000000"], &(0x7f0000000300)='GPL\x00'}, 0x94) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000440)=0x4000200, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) 297.581654ms ago: executing program 4 (id=888): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160004000000000000000000fe880000000000000000000000000001ff0100000000000000000000000000010000000000000082000000002b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000096cd4c7d212ca3702bb6000000aa000000002b"], 0xf8}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="9169a3ed388000009500000000001255ef0000aa3f413f38fa07a51b3abd4bc9d6f152785e3826eb8509596d4a63554f4dcaa0539b4fdf9a1c"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x4000000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) r4 = accept$alg(r3, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) (async) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b00)=""/46, 0x2e}, {&(0x7f0000000980)=""/106, 0x6a}, {&(0x7f0000000bc0)=""/51, 0x33}, {&(0x7f0000000a00)=""/245, 0xf5}, {&(0x7f0000000d00)=""/103, 0x67}, {&(0x7f00000004c0)=""/243, 0xf3}, {&(0x7f0000000e80)=""/90, 0x5a}, {&(0x7f0000000f00)=""/66, 0x42}, {&(0x7f0000000000)=""/120, 0x78}, {&(0x7f0000000340)=""/109, 0x6d}, {&(0x7f0000000140)=""/42, 0x2a}, {&(0x7f0000000280)=""/100, 0x64}, {&(0x7f0000000080)=""/146, 0x92}], 0xd}, 0x3}], 0x1, 0xc0032032, 0x0) sendmmsg$alg(r4, &(0x7f0000003000)=[{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000240)="810cac7d486d", 0x6}, {&(0x7f00000033c0)="f5ac467833c129406b9fb74227deb178a089305826e44cfd7f63e9cdf5564909270b6644bb52a5dc8491543df407b54008cbe40ce096d8bcbfb31922bb83ab200a8552b045cbcb3858af82ca2bbafa8c9c88e0c6d7f5a814cd8c50c7f0b30d0f5d80d8edf340a5bbcd0f661371f4eca10ce1043da352b209a70a2a5917b4d5c9b3c9aff3646d66279facf5006a353cc21b2527beb2a2966b2de5f16d1dff662922cf7428691eb0196ae4c102c48740f73f2983285308af441ecb9901e7ce508ac319f8536ec7c7ac38cc994dcc4108c70766668e79a3f15f5e26bb32c42a044c59ac3eb5a12c29b8faf47240bbeed4f9cc2151a5a7339c6a9fc3a264eef894466367ff4e99bd1cd158ad892d22e9c74910f4dcc4a15d0bda7cfb6cd24ae68248164119c05a4cf8209eb7e8b1eb7fadcd71bb5975694206ab0c79e91e4e28bc66f800a25a28abe4862ba2ad30f5b1712dc576fd3dbd90d3b5fd419a027fea14f4b0f0d7e53eb8b44e5876b7163963bbc705962b8b93fd2b93ace470cc4ffd122b966fd43f3367327f10c6a85bc67ae3fdc22235dbcadb37f6fdbf3a4ea7d59ece8281881664c1a63890863a9c3822fbf1d5a3db21a5b28b5f850a0b3f038f70cc395b16d90e39d1dba622cfd980e2a87e5f3652bbe23e77678fcc261d6c95d0e4c10311fe24a479ccb9c9e9a52df2d71f71ca190e1a0f43e0a6aadc4e5b847e3cf4bff7918486551142533ab6ec65d56c13fb2e8b42266f6b4c646f641c27ac71caf1bd42715072ae7d0455f6c3da37780aacb54916fea5ae7da88ee7bf9a89c8da7cc8aa6995569ec94acc79fac6dbcc55ce0bc74916afb52719331c6d913d67da0bef31ffe6d03f55b483c1e03062b47ee149feca8ab633b14243ad6d836ce2d36bdae6de38dab024012264d4053e1bf67a7bb5d50c23f1332ae964df729aee8314d37ba7961390a57f8a6608a2613b566247600b0cd673c4e04e2b5046325871ae90cf614b6d596eeb1d7c33f0317cad3d98b92cc04379e6d07ce68d56ab5b470f29b6294965171385cd9053a858ec09e8c2c3a1bb0fa6b2ab3607a5931cfaeee6f2832ccb28adc567ada1d59b7cbe6577e84a9a33cb73dddb5521853df098850b4f9c5209d3a838e6b23ba524efb3d7308036e563b0d0d439361a20c8269125496257763fb69fa3efe949d5949356ea2c216fdd06fff6616caebb718e0d3f34541da48466e70863b147560534da4e5bb6d0908e0ac04d3bc186cda7637979f697a1a44ac3aa54ea99f32f2d1b50dd9e2ce04428e5e4e6290d20718d916b361b99d5a461b9924f94e05bde15509f60648152900b7a4b10d1408109501c96122c2e488519c05b2fe97cf7888e0b0e37ee9c3a24cd8dde1a3edeb86d79451bc7ec827dcc205e40543f8f2c426171546d7e7cebf492603f63d74ed47566f177da6d92ff268547f3a02cec476f2aa084f29dca079835b72aadb8d0a6b1304667b6197c51f6846b0f7195acb5d5032ebb4fced8c631dbc97063755e041ed17609b1b6e82fa5da5e2f699abddf630cf8e7975b3f577d66ba205c4a803e44ce54d08815e2bea6f6321741499c239b2046fb203b63e05fcbf4d1346dd215647eb1a6a54018f842e100b83e5190b74aa7dedb8426ace1b7a2ef7128fd7981b2c9b7e32b5a66d74ad97e84ad30f6861a37695dc10527601eba116fba69c7fcc87053b8796c53b25177dcbaa1c55401623ab3d114f3752c1310cff30c712d29640bfbeee1a3c983185ca73e021c60438c73b760124267444f737e29f30bb4fc5fd78252f7928aa5f0e5e261b5dc17c82dce3db5f20a335bbbb8817b1898b65cf8f6a02e9a69e3a3119899d64cdaa162c215f4b2357db6c8e4f6421192422caf89035ef88ef07a41e084e942ef57c62962129a79acd161ea05e114d1c485f729f2d67d4dc283488f68e5c4f72114e04a1236fffe2d58d9c1a6f51d9fbea8d810de802c8a0032689f9c091b1f0dba896d647dd6c14fdea592d18d7888abd812cd6f01cd880358f7588f1517e6c256465d0dce577bd6b450d974e619dfb2f8a945a8921622cce585a219d26bb01d02fd4ba2132f3ce4405c382af5624c22a9c5b42cc8ac951a76d6bb24dea6655c577f5cd98d0e840dacfd418e68103cd1d01edeee7cab170b990d6b93e354d908095c545cc458d5e2030dd5b6c225646a06f8aedb59fc853b0bca8e8aa5357803a6a3c494e793da5267f6c1be4f775144c61fbc29ae97717e56dbf71d24856e54f4b4801d088049ed2150baa4b7d2bdb856493e03d0a4999f3118558a32ce5c40ee257b1b90a185e5f83b733c20b56ba9525a47012cb251f4b2c4e9333ba1d275c2d69460ad58f3bcdbfcd90311681f3ddf31921e1b6606672a3dd4fb6c4a58ebb8d1fa65ca4024056a1217b5da95552b91ab17e523b01521cce7681bbe823d7bd23ea466e3f5f68298d956d686a480159cb3a4f0e22c287ec64115777c861a96ca88a13853748e4dbc6648e321572717260e638733f3e5cee62b82eebf5e975609397b9ff4a30c36c6aa7c25fdab51a2785c14cdc8170b265ae0c7777b1627c6a5b9c9c3cece28984bdabe9bfcd25edd0ea192a637b016f2af0f35c4dab0badeb77e7f", 0x74b}], 0x2, 0x0, 0x0, 0xc855}], 0x1, 0x4004004) (async) recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/124}, {&(0x7f00000006c0)=""/128}, {&(0x7f0000000740)=""/105}, {&(0x7f00000007c0)=""/16}, {&(0x7f0000000800)=""/4}], 0x17f}, 0x102) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008094"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0, r1, 0x18, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x7, 0x0, &(0x7f0000000100)=[0xfc, 0x4, 0x1, 0x29, 0x7f, 0x6, 0x17], 0x1}}, 0x30) 230.313285ms ago: executing program 4 (id=889): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) 229.178566ms ago: executing program 3 (id=890): ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, &(0x7f0000000000)={0x7, 0xc0, 0x8000000000000001, 0x80, 0x3}) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000100)={0x8, r1}) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000140)={0x80000000, 0x1}) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000180)) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x3, r1, 0x0, 0xc4b, 0x54, &(0x7f00000001c0)="de46885de77e9905bff43ccee68143152590d88abc3d7cbdbae9df4e8295c205dbaf3023e12994bba0161d40c767f11f6cd78a0bc6574359901c7d63475103ded75cb452f1134e7937559fb20d11ab5ff3c0afba"}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0x3, r1, 0x0, 0xba, 0x9c, &(0x7f0000000300)="39e08913c6f2e4afaf33a245031270e6fc34a7068abf7e159e430378af78a45181435fece499c7d9d10d98c53d377091d5c9dce1c9af2780f2b1db993c4ace41e04d5393891c0cb3a9d25a6c8228272a1e5a519ac4edecc46cb39cd63fd8702925022fab26c0ffb0fcccca4cca3313e87505970d2a69a10de2f300fb96a860758af66bf9e256c175df1241daa547ae3c149ac68900cbfe509182452b"}) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000440)={0x80}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0xad, 0x8, 0x10, @loopback, @local, 0x700, 0x20, 0x5, 0x2}}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000600)={@ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0xffff8001, 0x7, 0xf, 0x500, 0xb, 0x100000, r4}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x3}, &(0x7f00000006c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000700)={r5, 0xfff0}, 0x8) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000000740), &(0x7f0000000780)=0x30) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r7, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x300}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x1040) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000940)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f00000009c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r2, 0x3ba0, &(0x7f0000000a00)={0x48, 0xb, r8, 0x0, r9}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000a80)={0x80, 0x8, @value=0xc1e6}) bind$inet6(r0, &(0x7f0000000ac0)={0xa, 0x4e24, 0x3, @empty, 0xd1}, 0x1c) setxattr$security_selinux(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), &(0x7f0000000b80)='system_u:object_r:syslogd_initrc_exec_t:s0\x00', 0x2b, 0x3) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000bc0)={0x48, 0x7, r8, 0x0, 0x1, 0x0, 0xffffffffffff7540, 0x9}) mount$binder(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x180208c, &(0x7f0000000cc0)={[{@max={'max', 0x3d, 0x4}}, {}, {@stats}, {@max={'max', 0x3d, 0x2}}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x2}}, {@stats}, {@stats}, {@stats}], [{@audit}, {@audit}]}) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r2, 0xc004ae0a, &(0x7f0000000d80)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$NFT_BATCH(r2, &(0x7f0000001180)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000000e00)={{0x14}, [@NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8914}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xff}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x47, 0x7, 0x1, 0x0, "d7baf97e0093a45bb4143253e06fe22d914f5509db9de00574d481182974d594dd716ea2a263893e166066a9ff9e8e50f2c068f4ebce1f6369bf7c6eae84f21e60b8b1"}]}, @NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x44, 0x6, "6ef752389fc79fc01d51fd72d5da2d571449ffcb836416d47817e59ffac7353d7b4b410d43b7d3cdaf234ec18f07b18eee8ad2486dd29b14486e1d494c69fc03"}]}, @NFT_MSG_NEWCHAIN={0xe0, 0x3, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0xc9, 0xc, "ddab5b8efaf29ea8c1998477f42fbf27bacf6c30d351b32c798a38bfbe59939e9e1a48e4b8677ff9b7ec153c2ceb31f17020d3d439df2121de86c56b4da108d315b378433352d0195cf3825b090709156a843c394cceaf63f99b0245a688a28d39eb8c68cf60b6b760aeebb53d11797db86d24200d644ce3fdb883ffcade9ad32b406d799c10f5b8f85279d63249d34ee4e0bd27172939651a57f69a4f962305d646b40d46d367c5074e0c75abf9f50e167a8da2342fce2526f4248d83977cf9785cc6d871"}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xa0, 0x5, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7206dbe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x33c}}, 0x82) recvmsg$can_bcm(r3, &(0x7f0000001300)={&(0x7f00000011c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000001240), 0x0, &(0x7f0000001280)=""/104, 0x68}, 0x10101) 223.910213ms ago: executing program 0 (id=891): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff0001}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}}, 0x8000) 223.452948ms ago: executing program 3 (id=892): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ff9000/0x6000)=nil, 0x6000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) munmap(&(0x7f0000bb3000/0x2000)=nil, 0x2000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000000)={0x780, 0x6}) mmap(&(0x7f0000fe1000/0x4000)=nil, 0x4000, 0x100000f, 0x10010, r0, 0x59905000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={[{@mode={'mode', 0x3d, 0x6}}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16, @ANYBLOB="0500"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r2) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x23, 0x400200) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x73, @multicast2, 0x16, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) 100.147499ms ago: executing program 3 (id=893): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) pwrite64(r0, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) (async) sendfile(r0, r0, &(0x7f0000000080)=0x79, 0x6) (async, rerun: 64) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) (rerun: 64) write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12) (async, rerun: 64) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) (rerun: 64) 99.815072ms ago: executing program 4 (id=894): setresgid(0xee00, 0xee01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f015, 0x1}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_ENABLE={{0x40}, 0x95}}}, 0x7) 99.088907ms ago: executing program 3 (id=895): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) r1 = socket(0xa, 0x4, 0x3a) r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r2, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000003340)=0x9, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180)=0x3, 0x4) getsockopt$MRT6(r1, 0x29, 0x24, 0x0, &(0x7f0000000180)) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 98.654368ms ago: executing program 4 (id=896): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) (async) r1 = socket$unix(0x1, 0x2, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000015000100000000000000ff00fe8800000000000000000000800000010000000000000000000000000000000000040000000000000000b10000000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x68}}, 0x0) (async) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf2501"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x20044000) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) syz_create_resource$binfmt(0x0) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r9 = syz_io_uring_setup(0x82e, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) (async) syz_io_uring_submit(r10, r11, 0x0, &(0x7f0000000000)) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r13 = accept4(r12, 0x0, 0x0, 0x0) recvmmsg(r13, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)=""/4104, 0x2328}], 0x1}, 0x7}], 0x1, 0x40000021, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) io_uring_enter(r9, 0x27e2, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x2000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000010000304000300000095376618ec7704a1615e000000000000bea6cbde88a66b705fc0068d7f22a69e84c46f58410d0000000000000053", @ANYRES32=0x0, @ANYBLOB="00000000010000002800128009000100766c616e00000000180002800c0002001e0000001f00000006000100fc0f000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x58}}, 0x8000) 0s ago: executing program 4 (id=897): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_pts(r0, 0x200200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x27, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @ldst={0x2, 0x3, 0x4, 0x5, 0xc, 0x80, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @alu={0x4, 0x1, 0x1, 0x5, 0x7, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='erofs\x00', 0x0, &(0x7f0000000380)='acl') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x3472, 0x40000060, 0x100007f, 0x6, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) kernel console output (not intermixed with test programs): 1000000 already mapped failed -16 [ 67.172373][ T6568] binder_alloc: binder_alloc_mmap_handler: 6567 200000ffd000-200001000000 already mapped failed -16 [ 67.172443][ T6568] binder_alloc: binder_alloc_mmap_handler: 6567 200000ffd000-200001000000 already mapped failed -16 [ 67.172511][ T6568] binder_alloc: binder_alloc_mmap_handler: 6567 200000ffd000-200001000000 already mapped failed -16 [ 67.172623][ T6568] binder_alloc: binder_alloc_mmap_handler: 6567 200000ffd000-200001000000 already mapped failed -16 [ 67.172694][ T6568] binder_alloc: binder_alloc_mmap_handler: 6567 200000ffd000-200001000000 already mapped failed -16 [ 67.209008][ T6569] binder: 6567:6569 ioctl 4018620d 200000004a80 returned -16 [ 67.210458][ T5993] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 67.368471][ T5993] usb 8-1: Using ep0 maxpacket: 8 [ 67.372249][ T5993] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.377402][ T5993] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.381623][ T5993] usb 8-1: config 0 interface 0 has no altsetting 0 [ 67.384411][ T5993] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 67.388164][ T5993] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.394085][ T5993] usb 8-1: config 0 descriptor?? [ 67.722310][ T6583] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.741438][ T6583] bond1: option downdelay: invalid value (18446744073709551615) [ 67.744299][ T6583] bond1: option downdelay: allowed values 0 - 2147483647 [ 67.748133][ T6583] bond1 (unregistering): Released all slaves [ 67.812806][ T5993] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 67.830541][ T40] kauditd_printk_skb: 72 callbacks suppressed [ 67.830564][ T40] audit: type=1400 audit(1775231750.617:359): avc: denied { create } for pid=6586 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 67.846539][ T40] audit: type=1400 audit(1775231750.637:360): avc: denied { sys_admin } for pid=6586 comm="syz.0.177" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 67.867338][ T40] audit: type=1400 audit(1775231750.657:361): avc: denied { setattr } for pid=6586 comm="syz.0.177" name="NETLINK" dev="sockfs" ino=14499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.911342][ T40] audit: type=1326 audit(1775231750.717:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6591 comm="syz.0.180" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0244b9c819 code=0x0 [ 67.915908][ T6594] __nla_validate_parse: 3 callbacks suppressed [ 67.915921][ T6594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.179'. [ 67.920960][ T5935] Bluetooth: hci2: unexpected event 0x04 length: 6 < 10 [ 67.921214][ T40] audit: type=1400 audit(1775231750.717:363): avc: denied { setopt } for pid=6592 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.921251][ T40] audit: type=1400 audit(1775231750.717:364): avc: denied { write } for pid=6592 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.944865][ T6594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.179'. [ 67.949709][ T40] audit: type=1400 audit(1775231750.747:365): avc: denied { read } for pid=6592 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.014203][ T72] usb 8-1: USB disconnect, device number 3 [ 68.090135][ T40] audit: type=1400 audit(1775231750.887:366): avc: denied { read } for pid=6597 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.104213][ T40] audit: type=1400 audit(1775231750.897:367): avc: denied { write } for pid=6599 comm="syz.0.183" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 68.116274][ T40] audit: type=1400 audit(1775231750.897:368): avc: denied { open } for pid=6599 comm="syz.0.183" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 68.117360][ T6603] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 68.136390][ T6603] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 68.224766][ T6610] SELinux: unknown common  [ 68.226340][ T6610] SELinux: failed to load policy [ 68.265635][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 68.270101][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'. [ 68.347720][ T6620] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 68.442772][ T6626] hpfs: hpfs_map_sector(): read error [ 68.487752][ T6627] hpfs: hpfs_map_sector(): read error [ 68.527665][ T6635] netlink: 312 bytes leftover after parsing attributes in process `syz.0.194'. [ 68.594500][ T6639] comedi: valid board names for 8255 driver are: [ 68.596754][ T6639] 8255 [ 68.597704][ T6639] comedi: valid board names for vmk80xx driver are: [ 68.600771][ T6639] vmk80xx [ 68.601893][ T6639] comedi: valid board names for usbduxsigma driver are: [ 68.604201][ T6639] usbduxsigma [ 68.605620][ T6639] comedi: valid board names for usbduxfast driver are: [ 68.607817][ T6639] usbduxfast [ 68.609132][ T6639] comedi: valid board names for usbdux driver are: [ 68.611210][ T6639] usbdux [ 68.612169][ T6639] comedi: valid board names for ni6501 driver are: [ 68.614349][ T6639] ni6501 [ 68.615468][ T6639] comedi: valid board names for dt9812 driver are: [ 68.618060][ T6639] dt9812 [ 68.620817][ T6639] comedi: valid board names for ni_labpc_cs driver are: [ 68.623364][ T6639] ni_labpc_cs [ 68.624731][ T6639] comedi: valid board names for ni_daq_700 driver are: [ 68.627367][ T6639] ni_daq_700 [ 68.629129][ T6639] comedi: valid board names for labpc_pci driver are: [ 68.631931][ T6639] labpc_pci [ 68.633389][ T6639] comedi: valid board names for adl_pci9118 driver are: [ 68.636541][ T6639] pci9118dg [ 68.637927][ T6639] pci9118hg [ 68.639432][ T6639] pci9118hr [ 68.640492][ T6639] comedi: valid board names for 8255_pci driver are: [ 68.642606][ T6639] 8255_pci [ 68.643608][ T6639] comedi: valid board names for s526 driver are: [ 68.645567][ T6639] s526 [ 68.646510][ T6639] comedi: valid board names for multiq3 driver are: [ 68.649335][ T6639] multiq3 [ 68.650388][ T6639] comedi: valid board names for pcmuio driver are: [ 68.652534][ T6639] pcmuio48 [ 68.653600][ T6639] pcmuio96 [ 68.654682][ T6639] comedi: valid board names for pcmmio driver are: [ 68.656790][ T6639] pcmmio [ 68.657749][ T6639] comedi: valid board names for pcmda12 driver are: [ 68.660409][ T6639] pcmda12 [ 68.661742][ T6639] comedi: valid board names for pcmad driver are: [ 68.663959][ T6639] pcmad12 [ 68.665030][ T6639] pcmad16 [ 68.666388][ T6639] comedi: valid board names for ni_labpc driver are: [ 68.669597][ T6639] lab-pc-1200 [ 68.670813][ T6639] lab-pc-1200ai [ 68.671989][ T6639] lab-pc+ [ 68.672990][ T6639] comedi: valid board names for atmio16 driver are: [ 68.675188][ T6639] atmio16 [ 68.676295][ T6639] atmio16d [ 68.677427][ T6639] comedi: valid board names for ni_at_ao driver are: [ 68.680154][ T6639] at-ao-6 [ 68.681263][ T6639] at-ao-10 [ 68.682303][ T6639] comedi: valid board names for ni_at_a2150 driver are: [ 68.684470][ T6639] ni_at_a2150 [ 68.685577][ T6639] comedi: valid board names for adq12b driver are: [ 68.687677][ T6639] adq12b [ 68.689125][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 68.691101][ T6639] comedi: valid board names for mpc624 driver are: [ 68.693720][ T6639] mpc624 [ 68.694728][ T6639] comedi: valid board names for c6xdigio driver are: [ 68.696929][ T6639] c6xdigio [ 68.704190][ T6639] comedi: valid board names for aio_iiro_16 driver are: [ 68.706711][ T6639] aio_iiro_16 [ 68.707932][ T6639] comedi: valid board names for aio_aio12_8 driver are: [ 68.710942][ T6639] aio_aio12_8 [ 68.712128][ T6639] aio_ai12_8 [ 68.713277][ T6639] aio_ao12_4 [ 68.714418][ T6639] comedi: valid board names for fl512 driver are: [ 68.716512][ T6639] fl512 [ 68.717452][ T6639] comedi: valid board names for dmm32at driver are: [ 68.720060][ T6639] dmm32at [ 68.721316][ T6639] comedi: valid board names for dt282x driver are: [ 68.723733][ T6639] dt2821 [ 68.724844][ T6639] dt2821-f [ 68.725965][ T6639] dt2821-g [ 68.727054][ T6639] dt2823 [ 68.728020][ T6639] dt2824-pgh [ 68.729374][ T6639] dt2824-pgl [ 68.730930][ T6639] dt2825 [ 68.731902][ T6639] dt2827 [ 68.732911][ T6639] dt2828 [ 68.733889][ T6639] dt2829 [ 68.734909][ T6639] dt21-ez [ 68.735927][ T6639] dt23-ez [ 68.737000][ T6639] dt24-ez [ 68.738135][ T6639] dt24-ez-pgl [ 68.739997][ T6639] comedi: valid board names for dt2817 driver are: [ 68.742494][ T6639] dt2817 [ 68.743464][ T6639] comedi: valid board names for dt2815 driver are: [ 68.745518][ T6639] dt2815 [ 68.746515][ T6639] comedi: valid board names for dt2814 driver are: [ 68.748965][ T6639] dt2814 [ 68.749937][ T6639] comedi: valid board names for dt2811 driver are: [ 68.752083][ T6639] dt2811-pgh [ 68.753191][ T6639] dt2811-pgl [ 68.754316][ T6639] comedi: valid board names for dt2801 driver are: [ 68.756466][ T6639] dt2801 [ 68.757562][ T6639] comedi: valid board names for das6402 driver are: [ 68.760430][ T6639] das6402-12 [ 68.761887][ T6639] das6402-16 [ 68.763289][ T6639] comedi: valid board names for das1800 driver are: [ 68.765455][ T6639] das-1701st [ 68.766637][ T6639] das-1701st-da [ 68.767842][ T6639] das-1702st [ 68.771808][ T6639] das-1702st-da [ 68.773085][ T6639] das-1702hr [ 68.775171][ T12] wlan1: Trigger new scan to find an IBSS to join [ 68.778107][ T6639] das-1702hr-da [ 68.779524][ T6639] das-1701ao [ 68.780789][ T6639] das-1702ao [ 68.782161][ T6639] das-1801st [ 68.783248][ T6639] das-1801st-da [ 68.784394][ T6639] das-1802st [ 68.785467][ T6639] das-1802st-da [ 68.786656][ T6639] das-1802hr [ 68.787789][ T6639] das-1802hr-da [ 68.789431][ T6639] das-1801hc [ 68.790587][ T6639] das-1802hc [ 68.792053][ T6639] das-1801ao [ 68.793303][ T6639] das-1802ao [ 68.794486][ T6639] comedi: valid board names for das800 driver are: [ 68.797069][ T6639] das-800 [ 68.798562][ T6639] cio-das800 [ 68.800194][ T6639] das-801 [ 68.801368][ T6639] cio-das801 [ 68.802452][ T6639] das-802 [ 68.803546][ T6639] cio-das802 [ 68.804634][ T6639] cio-das802/16 [ 68.805780][ T6639] comedi: valid board names for isa-das08 driver are: [ 68.808133][ T6639] isa-das08 [ 68.809377][ T6639] das08-pgm [ 68.810574][ T6639] das08-pgh [ 68.811937][ T6639] das08-pgl [ 68.813112][ T6639] das08-aoh [ 68.814268][ T6639] das08-aol [ 68.815319][ T6639] das08-aom [ 68.816362][ T6639] das08/jr-ao [ 68.817471][ T6639] das08jr-16-ao [ 68.818815][ T6639] pc104-das08 [ 68.819999][ T6639] das08jr/16 [ 68.821275][ T6639] comedi: valid board names for das16m1 driver are: [ 68.823406][ T6639] das16m1 [ 68.824515][ T6639] comedi: valid board names for dac02 driver are: [ 68.826701][ T6639] dac02 [ 68.827637][ T6639] comedi: valid board names for rti802 driver are: [ 68.831701][ T6639] rti802 [ 68.832940][ T6639] comedi: valid board names for rti800 driver are: [ 68.838434][ T6639] rti800 [ 68.839560][ T6639] rti815 [ 68.840542][ T6639] comedi: valid board names for pcm3724 driver are: [ 68.842740][ T6639] pcm3724 [ 68.843759][ T6639] comedi: valid board names for pcl818 driver are: [ 68.846022][ T6639] pcl818l [ 68.847089][ T6639] pcl818h [ 68.848186][ T6639] pcl818hd [ 68.850064][ T6639] pcl818hg [ 68.851178][ T6639] pcl818 [ 68.852146][ T6639] pcl718 [ 68.853107][ T6639] pcm3718 [ 68.854139][ T6639] comedi: valid board names for pcl816 driver are: [ 68.856403][ T6639] pcl816 [ 68.857434][ T6639] pcl814b [ 68.858629][ T6639] comedi: valid board names for pcl812 driver are: [ 68.861097][ T6639] pcl812 [ 68.862100][ T6639] pcl812pg [ 68.863114][ T6639] acl8112pg [ 68.864150][ T6639] acl8112dg [ 68.865190][ T6639] acl8112hg [ 68.866275][ T6639] a821pgl [ 68.868005][ T6639] a821pglnda [ 68.869415][ T6639] a821pgh [ 68.870860][ T6639] a822pgl [ 68.871951][ T6639] a822pgh [ 68.873213][ T6639] a823pgl [ 68.874354][ T6639] a823pgh [ 68.875354][ T6639] pcl813 [ 68.876312][ T6639] pcl813b [ 68.877345][ T6639] acl8113 [ 68.878527][ T6639] iso813 [ 68.879560][ T6639] acl8216 [ 68.880606][ T6639] a826pg [ 68.881648][ T6639] comedi: valid board names for pcl730 driver are: [ 68.883882][ T6639] pcl730 [ 68.884872][ T6639] iso730 [ 68.885878][ T6639] acl7130 [ 68.886905][ T6639] pcm3730 [ 68.887899][ T6639] pcl725 [ 68.889263][ T6639] p8r8dio [ 68.890293][ T6639] acl7225b [ 68.891360][ T6639] p16r16dio [ 68.892428][ T6639] pcl733 [ 68.893415][ T6639] pcl734 [ 68.894488][ T6639] opmm-1616-xt [ 68.895784][ T6639] pearl-mm-p [ 68.896998][ T6639] ir104-pbf [ 68.898334][ T6639] comedi: valid board names for pcl726 driver are: [ 68.900579][ T6639] pcl726 [ 68.901589][ T6639] pcl727 [ 68.902595][ T6639] pcl728 [ 68.903550][ T6639] acl6126 [ 68.904607][ T6639] acl6128 [ 68.905662][ T6639] comedi: valid board names for pcl724 driver are: [ 68.907747][ T6639] pcl724 [ 68.908868][ T6639] pcl722 [ 68.909887][ T6639] pcl731 [ 68.911053][ T6639] acl7122 [ 68.912128][ T6639] acl7124 [ 68.913184][ T6639] pet48dio [ 68.914274][ T6639] pcmio48 [ 68.915298][ T6639] onyx-mm-dio [ 68.916396][ T6639] comedi: valid board names for pcl711 driver are: [ 68.918599][ T6639] pcl711 [ 68.919581][ T6639] pcl711b [ 68.920577][ T6639] acl8112hg [ 68.928298][ T6639] acl8112dg [ 68.929423][ T6639] comedi: valid board names for amplc_pc263 driver are: [ 68.938593][ T6639] pc263 [ 68.939955][ T6639] comedi: valid board names for amplc_pc236 driver are: [ 68.943099][ T6639] pc36at [ 68.944418][ T6639] comedi: valid board names for amplc_dio200 driver are: [ 68.947341][ T6639] pc212e [ 68.950822][ T6639] pc214e [ 68.952148][ T6639] pc215e [ 68.953403][ T6639] pc218e [ 68.954775][ T6639] pc272e [ 68.956213][ T6639] comedi: valid board names for comedi_parport driver are: [ 68.959523][ T6639] comedi_parport [ 68.961096][ T6639] comedi: valid board names for comedi_test driver are: [ 68.964999][ T6639] comedi_test [ 68.966202][ T6639] comedi: valid board names for comedi_bond driver are: [ 68.967013][ T6665] geneve1: entered allmulticast mode [ 68.969471][ T6639] comedi_bond [ 68.971819][ T6639] comedi: valid board names for 8255 driver are: [ 68.974248][ T6639] 8255 [ 68.975159][ T6639] comedi: valid board names for vmk80xx driver are: [ 68.977283][ T6639] vmk80xx [ 68.978471][ T6639] comedi: valid board names for usbduxsigma driver are: [ 68.980925][ T6639] usbduxsigma [ 68.982119][ T6639] comedi: valid board names for usbduxfast driver are: [ 68.984247][ T6639] usbduxfast [ 68.985301][ T6639] comedi: valid board names for usbdux driver are: [ 68.987326][ T6639] usbdux [ 68.989398][ T6639] comedi: valid board names for ni6501 driver are: [ 68.992605][ T6639] ni6501 [ 68.994047][ T6639] comedi: valid board names for dt9812 driver are: [ 68.996553][ T6639] dt9812 [ 68.997891][ T6639] comedi: valid board names for ni_labpc_cs driver are: [ 69.000531][ T6639] ni_labpc_cs [ 69.001633][ T6639] comedi: valid board names for ni_daq_700 driver are: [ 69.004574][ T6639] ni_daq_700 [ 69.005712][ T6639] comedi: valid board names for labpc_pci driver are: [ 69.007950][ T6639] labpc_pci [ 69.010058][ T6639] comedi: valid board names for adl_pci9118 driver are: [ 69.012439][ T6639] pci9118dg [ 69.013807][ T6639] pci9118hg [ 69.014947][ T6639] pci9118hr [ 69.016073][ T6639] comedi: valid board names for 8255_pci driver are: [ 69.018452][ T6639] 8255_pci [ 69.019699][ T6639] comedi: valid board names for s526 driver are: [ 69.021784][ T6639] s526 [ 69.022806][ T6639] comedi: valid board names for multiq3 driver are: [ 69.024980][ T6639] multiq3 [ 69.026088][ T6639] comedi: valid board names for pcmuio driver are: [ 69.028147][ T6639] pcmuio48 [ 69.029298][ T6639] pcmuio96 [ 69.030485][ T6639] comedi: valid board names for pcmmio driver are: [ 69.033255][ T6639] pcmmio [ 69.034240][ T6639] comedi: valid board names for pcmda12 driver are: [ 69.036477][ T6639] pcmda12 [ 69.037534][ T6639] comedi: valid board names for pcmad driver are: [ 69.039684][ T6639] pcmad12 [ 69.040857][ T6639] pcmad16 [ 69.042054][ T6639] comedi: valid board names for ni_labpc driver are: [ 69.044329][ T6639] lab-pc-1200 [ 69.045444][ T6639] lab-pc-1200ai [ 69.046731][ T6639] lab-pc+ [ 69.047739][ T6639] comedi: valid board names for atmio16 driver are: [ 69.050151][ T6639] atmio16 [ 69.051281][ T6639] atmio16d [ 69.052441][ T6639] comedi: valid board names for ni_at_ao driver are: [ 69.054676][ T6639] at-ao-6 [ 69.055920][ T6639] at-ao-10 [ 69.057108][ T6639] comedi: valid board names for ni_at_a2150 driver are: [ 69.059488][ T6639] ni_at_a2150 [ 69.060620][ T6639] comedi: valid board names for adq12b driver are: [ 69.062813][ T6639] adq12b [ 69.063841][ T6639] comedi: valid board names for mpc624 driver are: [ 69.065835][ T6639] mpc624 [ 69.066793][ T6639] comedi: valid board names for c6xdigio driver are: [ 69.068974][ T6639] c6xdigio [ 69.070028][ T6639] comedi: valid board names for aio_iiro_16 driver are: [ 69.072472][ T6639] aio_iiro_16 [ 69.073627][ T6639] comedi: valid board names for aio_aio12_8 driver are: [ 69.076156][ T6639] aio_aio12_8 [ 69.077271][ T6639] aio_ai12_8 [ 69.078391][ T6639] aio_ao12_4 [ 69.079530][ T6639] comedi: valid board names for fl512 driver are: [ 69.082260][ T6639] fl512 [ 69.083374][ T6639] comedi: valid board names for dmm32at driver are: [ 69.085431][ T6639] dmm32at [ 69.087094][ T6639] comedi: valid board names for dt282x driver are: [ 69.089457][ T6639] dt2821 [ 69.098304][ T6639] dt2821-f [ 69.099399][ T6639] dt2821-g [ 69.100461][ T6639] dt2823 [ 69.101474][ T6639] dt2824-pgh [ 69.102632][ T6639] dt2824-pgl [ 69.103718][ T6639] dt2825 [ 69.104716][ T6639] dt2827 [ 69.105720][ T6639] dt2828 [ 69.106847][ T6639] dt2829 [ 69.107923][ T6639] dt21-ez [ 69.109270][ T6639] dt23-ez [ 69.110457][ T6639] dt24-ez [ 69.111568][ T6639] dt24-ez-pgl [ 69.112767][ T6639] comedi: valid board names for dt2817 driver are: [ 69.114853][ T6639] dt2817 [ 69.115811][ T6639] comedi: valid board names for dt2815 driver are: [ 69.117936][ T6639] dt2815 [ 69.119034][ T6639] comedi: valid board names for dt2814 driver are: [ 69.121293][ T6639] dt2814 [ 69.122402][ T6639] comedi: valid board names for dt2811 driver are: [ 69.124624][ T6639] dt2811-pgh [ 69.125825][ T6639] dt2811-pgl [ 69.127046][ T6639] comedi: valid board names for dt2801 driver are: [ 69.129281][ T6639] dt2801 [ 69.130284][ T6639] comedi: valid board names for das6402 driver are: [ 69.132460][ T6639] das6402-12 [ 69.133570][ T6639] das6402-16 [ 69.134670][ T6639] comedi: valid board names for das1800 driver are: [ 69.136761][ T6639] das-1701st [ 69.137859][ T6639] das-1701st-da [ 69.139329][ T6639] das-1702st [ 69.140436][ T6639] das-1702st-da [ 69.141671][ T6639] das-1702hr [ 69.143118][ T6639] das-1702hr-da [ 69.144491][ T6639] das-1701ao [ 69.145712][ T6639] das-1702ao [ 69.146849][ T6639] das-1801st [ 69.147940][ T6639] das-1801st-da [ 69.149201][ T6639] das-1802st [ 69.150301][ T6639] das-1802st-da [ 69.151489][ T6639] das-1802hr [ 69.152667][ T6639] das-1802hr-da [ 69.153838][ T6639] das-1801hc [ 69.154921][ T6639] das-1802hc [ 69.156004][ T6639] das-1801ao [ 69.157137][ T6639] das-1802ao [ 69.158388][ T6639] comedi: valid board names for das800 driver are: [ 69.161142][ T6639] das-800 [ 69.162293][ T6639] cio-das800 [ 69.163411][ T6639] das-801 [ 69.164418][ T6639] cio-das801 [ 69.165520][ T6639] das-802 [ 69.166562][ T6639] cio-das802 [ 69.167641][ T6639] cio-das802/16 [ 69.168881][ T6639] comedi: valid board names for isa-das08 driver are: [ 69.171207][ T6639] isa-das08 [ 69.172335][ T6639] das08-pgm [ 69.173408][ T6639] das08-pgh [ 69.174473][ T6639] das08-pgl [ 69.175558][ T6639] das08-aoh [ 69.176680][ T6639] das08-aol [ 69.177847][ T6639] das08-aom [ 69.180112][ T6639] das08/jr-ao [ 69.181921][ T6639] das08jr-16-ao [ 69.183464][ T6639] pc104-das08 [ 69.184486][ T6685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.208'. [ 69.184925][ T6639] das08jr/16 [ 69.189568][ T6639] comedi: valid board names for das16m1 driver are: [ 69.192049][ T6639] das16m1 [ 69.193321][ T6639] comedi: valid board names for dac02 driver are: [ 69.196010][ T6639] dac02 [ 69.197308][ T6639] comedi: valid board names for rti802 driver are: [ 69.200993][ T6639] rti802 [ 69.206075][ T6639] comedi: valid board names for rti800 driver are: [ 69.209695][ T6639] rti800 [ 69.211392][ T6639] rti815 [ 69.212831][ T6639] comedi: valid board names for pcm3724 driver are: [ 69.216137][ T6639] pcm3724 [ 69.217594][ T6639] comedi: valid board names for pcl818 driver are: [ 69.220459][ T6001] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 69.223670][ T6639] pcl818l [ 69.225167][ T6639] pcl818h [ 69.226847][ T6639] pcl818hd [ 69.227629][ T6687] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 69.228795][ T6639] pcl818hg [ 69.233860][ T6639] pcl818 [ 69.235064][ T6639] pcl718 [ 69.236271][ T6639] pcm3718 [ 69.237661][ T6639] comedi: valid board names for pcl816 driver are: [ 69.240451][ T6639] pcl816 [ 69.241958][ T6639] pcl814b [ 69.243351][ T6639] comedi: valid board names for pcl812 driver are: [ 69.246216][ T6639] pcl812 [ 69.247598][ T6639] pcl812pg [ 69.251067][ T6639] acl8112pg [ 69.252549][ T6639] acl8112dg [ 69.254023][ T6639] acl8112hg [ 69.255453][ T6639] a821pgl [ 69.256816][ T6639] a821pglnda [ 69.258050][ T6639] a821pgh [ 69.259412][ T6639] a822pgl [ 69.260778][ T6639] a822pgh [ 69.262190][ T6639] a823pgl [ 69.263562][ T6639] a823pgh [ 69.264957][ T6639] pcl813 [ 69.269659][ T6639] pcl813b [ 69.275582][ T6639] acl8113 [ 69.277025][ T6639] iso813 [ 69.278449][ T6639] acl8216 [ 69.279779][ T6639] a826pg [ 69.281413][ T6639] comedi: valid board names for pcl730 driver are: [ 69.284503][ T6639] pcl730 [ 69.285821][ T6639] iso730 [ 69.287310][ T6639] acl7130 [ 69.288792][ T6639] pcm3730 [ 69.290146][ T6639] pcl725 [ 69.291482][ T6639] p8r8dio [ 69.292927][ T6689] macsec0: entered promiscuous mode [ 69.294839][ T6689] macsec0: left allmulticast mode [ 69.295809][ T6639] acl7225b [ 69.297971][ T6639] p16r16dio [ 69.299323][ T6639] pcl733 [ 69.300471][ T6639] pcl734 [ 69.301687][ T6639] opmm-1616-xt [ 69.303453][ T6639] pearl-mm-p [ 69.304824][ T6639] ir104-pbf [ 69.305978][ T6639] comedi: valid board names for pcl726 driver are: [ 69.308037][ T6639] pcl726 [ 69.310495][ T6639] pcl727 [ 69.311516][ T6639] pcl728 [ 69.312201][ T6689] veth1_macvtap: entered promiscuous mode [ 69.312652][ T6639] acl6126 [ 69.314979][ T6689] macsec0: left promiscuous mode [ 69.315635][ T6639] acl6128 [ 69.320134][ T6639] comedi: valid board names for pcl724 driver are: [ 69.324002][ T6639] pcl724 [ 69.325093][ T6639] pcl722 [ 69.326225][ T6639] pcl731 [ 69.327228][ T6639] acl7122 [ 69.328386][ T6639] acl7124 [ 69.329405][ T6639] pet48dio [ 69.330473][ T6639] pcmio48 [ 69.331520][ T6639] onyx-mm-dio [ 69.332880][ T6639] comedi: valid board names for pcl711 driver are: [ 69.335016][ T6639] pcl711 [ 69.336072][ T6639] pcl711b [ 69.338071][ T6639] acl8112hg [ 69.339919][ T6639] acl8112dg [ 69.342547][ T6639] comedi: valid board names for amplc_pc263 driver are: [ 69.344795][ T6639] pc263 [ 69.344801][ T6639] comedi: valid board names for amplc_pc236 driver are: [ 69.344806][ T6639] pc36at [ 69.344810][ T6639] comedi: valid board names for amplc_dio200 driver are: [ 69.344815][ T6639] pc212e [ 69.344818][ T6639] pc214e [ 69.344822][ T6639] pc215e [ 69.344826][ T6639] pc218e [ 69.344829][ T6639] pc272e [ 69.344833][ T6639] comedi: valid board names for comedi_parport driver are: [ 69.344837][ T6639] comedi_parport [ 69.344841][ T6639] comedi: valid board names for comedi_test driver are: [ 69.344846][ T6639] comedi_test [ 69.344850][ T6639] comedi: valid board names for comedi_bond driver are: [ 69.344855][ T6639] comedi_bond [ 69.344919][ T6639] comedi: valid board names for 8255 driver are: [ 69.352572][ T6689] loop5: detected capacity change from 0 to 7 [ 69.353351][ T6639] 8255 [ 69.357921][ T6689] Dev loop5: unable to read RDB block 7 [ 69.360149][ T6639] comedi: valid board names for vmk80xx driver are: [ 69.360157][ T6639] vmk80xx [ 69.360161][ T6639] comedi: valid board names for usbduxsigma driver are: [ 69.360165][ T6639] usbduxsigma [ 69.360170][ T6639] comedi: valid board names for usbduxfast driver are: [ 69.360174][ T6639] usbduxfast [ 69.360178][ T6639] comedi: valid board names for usbdux driver are: [ 69.360183][ T6639] usbdux [ 69.360186][ T6639] comedi: valid board names for ni6501 driver are: [ 69.360191][ T6639] ni6501 [ 69.360194][ T6639] comedi: valid board names for dt9812 driver are: [ 69.363272][ T6689] loop5: unable to read partition table [ 69.364030][ T6639] dt9812 [ 69.365546][ T6689] loop5: partition table beyond EOD, [ 69.367652][ T6639] comedi: valid board names for ni_labpc_cs driver are: [ 69.367661][ T6639] ni_labpc_cs [ 69.367665][ T6639] comedi: valid board names for ni_daq_700 driver are: [ 69.367669][ T6639] ni_daq_700 [ 69.367673][ T6639] comedi: valid board names for labpc_pci driver are: [ 69.367678][ T6639] labpc_pci [ 69.367682][ T6639] comedi: valid board names for adl_pci9118 driver are: [ 69.369353][ T6689] truncated [ 69.369364][ T6689] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 69.374298][ T6639] pci9118dg [ 69.383596][ T6001] usb 5-1: Using ep0 maxpacket: 16 [ 69.384911][ T6639] pci9118hg [ 69.391661][ T6001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.392791][ T6639] pci9118hr [ 69.394097][ T6001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.396435][ T6639] comedi: valid board names for 8255_pci driver are: [ 69.399213][ T6001] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 69.400173][ T6639] 8255_pci [ 69.402537][ T6001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.404704][ T6639] comedi: valid board names for s526 driver are: [ 69.404711][ T6639] s526 [ 69.410302][ T6001] usb 5-1: config 0 descriptor?? [ 69.413824][ T6639] comedi: valid board names for multiq3 driver are: [ 69.452448][ T6639] multiq3 [ 69.453548][ T6639] comedi: valid board names for pcmuio driver are: [ 69.457962][ T6639] pcmuio48 [ 69.465458][ T6639] pcmuio96 [ 69.469475][ T6639] comedi: valid board names for pcmmio driver are: [ 69.471654][ T6639] pcmmio [ 69.472720][ T6639] comedi: valid board names for pcmda12 driver are: [ 69.476267][ T6639] pcmda12 [ 69.477741][ T6639] comedi: valid board names for pcmad driver are: [ 69.481979][ T6639] pcmad12 [ 69.484293][ T6639] pcmad16 [ 69.486160][ T6639] comedi: valid board names for ni_labpc driver are: [ 69.489496][ T6639] lab-pc-1200 [ 69.491088][ T6639] lab-pc-1200ai [ 69.492797][ T6639] lab-pc+ [ 69.494297][ T6639] comedi: valid board names for atmio16 driver are: [ 69.497135][ T6639] atmio16 [ 69.498796][ T6639] atmio16d [ 69.500019][ T6639] comedi: valid board names for ni_at_ao driver are: [ 69.502443][ T6639] at-ao-6 [ 69.503494][ T6639] at-ao-10 [ 69.504560][ T6639] comedi: valid board names for ni_at_a2150 driver are: [ 69.507052][ T6639] ni_at_a2150 [ 69.508587][ T6639] comedi: valid board names for adq12b driver are: [ 69.510780][ T6639] adq12b [ 69.511774][ T6639] comedi: valid board names for mpc624 driver are: [ 69.514386][ T6639] mpc624 [ 69.515357][ T6639] comedi: valid board names for c6xdigio driver are: [ 69.517452][ T6639] c6xdigio [ 69.518649][ T6639] comedi: valid board names for aio_iiro_16 driver are: [ 69.521019][ T6639] aio_iiro_16 [ 69.522383][ T6639] comedi: valid board names for aio_aio12_8 driver are: [ 69.524858][ T6639] aio_aio12_8 [ 69.526105][ T6639] aio_ai12_8 [ 69.527253][ T6639] aio_ao12_4 [ 69.528472][ T6639] comedi: valid board names for fl512 driver are: [ 69.530494][ T6639] fl512 [ 69.531459][ T6639] comedi: valid board names for dmm32at driver are: [ 69.533570][ T6639] dmm32at [ 69.534781][ T6639] comedi: valid board names for dt282x driver are: [ 69.538713][ T6639] dt2821 [ 69.540259][ T6639] dt2821-f [ 69.541886][ T6639] dt2821-g [ 69.543300][ T6639] dt2823 [ 69.544575][ T6639] dt2824-pgh [ 69.546063][ T6639] dt2824-pgl [ 69.547513][ T6639] dt2825 [ 69.548912][ T6639] dt2827 [ 69.550252][ T6639] dt2828 [ 69.551859][ T6639] dt2829 [ 69.553159][ T6639] dt21-ez [ 69.554703][ T6639] dt23-ez [ 69.555831][ T6639] dt24-ez [ 69.556914][ T6639] dt24-ez-pgl [ 69.558084][ T6639] comedi: valid board names for dt2817 driver are: [ 69.562436][ T6639] dt2817 [ 69.563731][ T6639] comedi: valid board names for dt2815 driver are: [ 69.566591][ T6639] dt2815 [ 69.568032][ T6639] comedi: valid board names for dt2814 driver are: [ 69.571593][ T6639] dt2814 [ 69.572969][ T6639] comedi: valid board names for dt2811 driver are: [ 69.575707][ T6639] dt2811-pgh [ 69.577153][ T6639] dt2811-pgl [ 69.578845][ T6639] comedi: valid board names for dt2801 driver are: [ 69.581775][ T6639] dt2801 [ 69.583249][ T6639] comedi: valid board names for das6402 driver are: [ 69.586281][ T6639] das6402-12 [ 69.589007][ T6639] das6402-16 [ 69.590937][ T6639] comedi: valid board names for das1800 driver are: [ 69.593831][ T6639] das-1701st [ 69.594921][ T6639] das-1701st-da [ 69.596085][ T6639] das-1702st [ 69.597177][ T6639] das-1702st-da [ 69.598440][ T6639] das-1702hr [ 69.599523][ T6639] das-1702hr-da [ 69.600689][ T6639] das-1701ao [ 69.601809][ T6639] das-1702ao [ 69.602956][ T6639] das-1801st [ 69.604119][ T6639] das-1801st-da [ 69.605347][ T6639] das-1802st [ 69.606675][ T6639] das-1802st-da [ 69.607999][ T6639] das-1802hr [ 69.609547][ T6639] das-1802hr-da [ 69.610820][ T6639] das-1801hc [ 69.612048][ T6639] das-1802hc [ 69.613546][ T6639] das-1801ao [ 69.615214][ T6639] das-1802ao [ 69.616636][ T6639] comedi: valid board names for das800 driver are: [ 69.619518][ T6639] das-800 [ 69.620910][ T6639] cio-das800 [ 69.622420][ T6639] das-801 [ 69.623844][ T6639] cio-das801 [ 69.625374][ T6639] das-802 [ 69.626839][ T6639] cio-das802 [ 69.628422][ T6639] cio-das802/16 [ 69.629580][ T6639] comedi: valid board names for isa-das08 driver are: [ 69.631732][ T6639] isa-das08 [ 69.633047][ T6639] das08-pgm [ 69.634179][ T6639] das08-pgh [ 69.635268][ T6639] das08-pgl [ 69.636354][ T6639] das08-aoh [ 69.637443][ T6639] das08-aol [ 69.638825][ T6639] das08-aom [ 69.639929][ T6639] das08/jr-ao [ 69.641133][ T6639] das08jr-16-ao [ 69.642630][ T6639] pc104-das08 [ 69.643908][ T6639] das08jr/16 [ 69.645000][ T6639] comedi: valid board names for das16m1 driver are: [ 69.647071][ T6639] das16m1 [ 69.648043][ T6639] comedi: valid board names for dac02 driver are: [ 69.650423][ T6639] dac02 [ 69.651414][ T6639] comedi: valid board names for rti802 driver are: [ 69.653597][ T6639] rti802 [ 69.654574][ T6639] comedi: valid board names for rti800 driver are: [ 69.656747][ T6639] rti800 [ 69.657808][ T6639] rti815 [ 69.658967][ T6639] comedi: valid board names for pcm3724 driver are: [ 69.661091][ T6639] pcm3724 [ 69.662113][ T6639] comedi: valid board names for pcl818 driver are: [ 69.664150][ T6639] pcl818l [ 69.665150][ T6639] pcl818h [ 69.666430][ T6639] pcl818hd [ 69.667561][ T6639] pcl818hg [ 69.668758][ T6639] pcl818 [ 69.669736][ T6639] pcl718 [ 69.670908][ T6639] pcm3718 [ 69.672001][ T6639] comedi: valid board names for pcl816 driver are: [ 69.674252][ T6639] pcl816 [ 69.675414][ T6639] pcl814b [ 69.676552][ T6639] comedi: valid board names for pcl812 driver are: [ 69.678812][ T6639] pcl812 [ 69.679769][ T6639] pcl812pg [ 69.680796][ T6639] acl8112pg [ 69.681895][ T6639] acl8112dg [ 69.682993][ T6639] acl8112hg [ 69.684037][ T6639] a821pgl [ 69.685038][ T6639] a821pglnda [ 69.686247][ T6639] a821pgh [ 69.687273][ T6639] a822pgl [ 69.688493][ T6639] a822pgh [ 69.689592][ T6639] a823pgl [ 69.690858][ T6639] a823pgh [ 69.692011][ T6639] pcl813 [ 69.693097][ T6639] pcl813b [ 69.694181][ T6639] acl8113 [ 69.695252][ T6639] iso813 [ 69.696196][ T6639] acl8216 [ 69.697191][ T6639] a826pg [ 69.698158][ T6639] comedi: valid board names for pcl730 driver are: [ 69.700270][ T6639] pcl730 [ 69.701244][ T6639] iso730 [ 69.702260][ T6639] acl7130 [ 69.703254][ T6639] pcm3730 [ 69.704251][ T6639] pcl725 [ 69.705200][ T6639] p8r8dio [ 69.706220][ T6639] acl7225b [ 69.707245][ T6639] p16r16dio [ 69.708377][ T6639] pcl733 [ 69.709340][ T6639] pcl734 [ 69.710315][ T6639] opmm-1616-xt [ 69.711627][ T6639] pearl-mm-p [ 69.712810][ T6639] ir104-pbf [ 69.713995][ T6639] comedi: valid board names for pcl726 driver are: [ 69.716138][ T6639] pcl726 [ 69.717103][ T6639] pcl727 [ 69.718072][ T6639] pcl728 [ 69.719099][ T6639] acl6126 [ 69.720109][ T6639] acl6128 [ 69.721145][ T6639] comedi: valid board names for pcl724 driver are: [ 69.723358][ T6639] pcl724 [ 69.724345][ T6639] pcl722 [ 69.725335][ T6639] pcl731 [ 69.726532][ T6639] acl7122 [ 69.727793][ T6639] acl7124 [ 69.729123][ T6639] pet48dio [ 69.730366][ T6639] pcmio48 [ 69.731567][ T6639] onyx-mm-dio [ 69.732787][ T6639] comedi: valid board names for pcl711 driver are: [ 69.734835][ T6639] pcl711 [ 69.735785][ T6639] pcl711b [ 69.736729][ T6639] acl8112hg [ 69.737767][ T6639] acl8112dg [ 69.738955][ T6639] comedi: valid board names for amplc_pc263 driver are: [ 69.741075][ T6639] pc263 [ 69.742028][ T6639] comedi: valid board names for amplc_pc236 driver are: [ 69.744200][ T6639] pc36at [ 69.745140][ T6639] comedi: valid board names for amplc_dio200 driver are: [ 69.747472][ T6639] pc212e [ 69.748742][ T6639] pc214e [ 69.749780][ T6639] pc215e [ 69.750780][ T6639] pc218e [ 69.751876][ T6639] pc272e [ 69.753253][ T6639] comedi: valid board names for comedi_parport driver are: [ 69.755713][ T6639] comedi_parport [ 69.756863][ T6639] comedi: valid board names for comedi_test driver are: [ 69.759076][ T6639] comedi_test [ 69.760144][ T6639] comedi: valid board names for comedi_bond driver are: [ 69.762278][ T6639] comedi_bond [ 69.834955][ T6702] qnx6: unable to set blocksize [ 69.872822][ T6706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.215'. [ 69.985140][ T6710] fuse: Unknown parameter 'fd0x0000000000000003' [ 70.252207][ T6001] usbhid 5-1:0.0: can't add hid device: -71 [ 70.254262][ T6001] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 70.260642][ T6001] usb 5-1: USB disconnect, device number 4 [ 70.350187][ T6757] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 70.356553][ T6757] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 70.363016][ T6757] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 70.370583][ T6757] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 70.377192][ T6757] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 70.381081][ T6757] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 70.383892][ T6757] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 70.386551][ T6757] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 70.389252][ T6757] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 70.421557][ T6765] gfs2: error -5 reading superblock [ 70.431196][ T6764] gfs2: error -5 reading superblock [ 70.623992][ T6781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.228'. [ 70.660833][ T6787] 9pnet_virtio: no channels available for device syz [ 70.697064][ T6793] ceph: Path missing in source [ 70.897030][ T6808] netlink: 'syz.3.239': attribute type 5 has an invalid length. [ 71.086517][ T6830] ipt_ECN: cannot use operation on non-tcp rule [ 71.234678][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'. [ 71.239981][ T6837] /dev/sr0: Can't open blockdev [ 71.317523][ T6842] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 71.399953][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.251'. [ 71.518372][ T50] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 71.529924][ T6851] tipc: Enabling of bearer rejected, failed to enable media [ 71.538824][ T6851] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 71.544164][ T6851] netlink: 'syz.2.253': attribute type 1 has an invalid length. [ 71.567809][ T6851] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 71.619334][ T6856] nfs: Unknown parameter './file0' [ 71.671567][ T50] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 71.674776][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.678370][ T50] usb 5-1: Product: syz [ 71.680264][ T50] usb 5-1: Manufacturer: syz [ 71.682565][ T50] usb 5-1: SerialNumber: syz [ 71.719341][ T5967] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 71.809384][ T61] wlan1: Trigger new scan to find an IBSS to join [ 71.895395][ T5967] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 71.901725][ T5967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.906809][ T5967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.911227][ T5967] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 71.917620][ T5967] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 71.923455][ T5967] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 71.927068][ T5967] usb 6-1: Manufacturer: syz [ 71.931435][ T5967] usb 6-1: config 0 descriptor?? [ 71.941555][ T50] rtl8150 5-1:1.0: couldn't reset the device [ 71.944624][ T50] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 71.954463][ T50] usb 5-1: USB disconnect, device number 5 [ 72.041361][ T6874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.050158][ T6874] netlink: 'syz.2.258': attribute type 1 has an invalid length. [ 72.160307][ T6874] bond2: entered promiscuous mode [ 72.162952][ T6874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.212150][ T6840] syzkaller0: entered promiscuous mode [ 72.214154][ T6840] syzkaller0: entered allmulticast mode [ 72.342839][ T5967] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 72.361335][ T5967] appleir 0003:05AC:8243.0004: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 72.873926][ T6915] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 72.898659][ T40] kauditd_printk_skb: 84 callbacks suppressed [ 72.898675][ T40] audit: type=1400 audit(1775231755.697:453): avc: denied { ioctl } for pid=6919 comm="syz.3.269" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 72.908401][ T5993] usb 6-1: USB disconnect, device number 5 [ 72.941310][ T5967] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 72.982965][ T40] audit: type=1400 audit(1775231755.777:454): avc: denied { watch_mount watch_reads } for pid=6926 comm="syz.1.271" path="/75" dev="tmpfs" ino=407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.994378][ T40] audit: type=1400 audit(1775231755.777:455): avc: denied { append } for pid=6926 comm="syz.1.271" name="frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 73.003527][ T6928] netlink: 'syz.1.271': attribute type 21 has an invalid length. [ 73.062432][ T40] audit: type=1400 audit(1775231755.857:456): avc: denied { append } for pid=6937 comm="syz.1.274" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.073599][ T6938] loop6: detected capacity change from 0 to 524287999 [ 73.076725][ T40] audit: type=1400 audit(1775231755.867:457): avc: denied { getopt } for pid=6935 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.078978][ T6938] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.079090][ T6936] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.088085][ T40] audit: type=1400 audit(1775231755.867:458): avc: denied { write } for pid=6935 comm="syz.3.273" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 73.091741][ T6938] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.094387][ T40] audit: type=1400 audit(1775231755.867:459): avc: denied { open } for pid=6935 comm="syz.3.273" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 73.101352][ T5967] usb 7-1: unable to get BOS descriptor or descriptor too short [ 73.101842][ T5967] usb 7-1: not running at top speed; connect to a high speed hub [ 73.101874][ T5967] usb 7-1: no configurations [ 73.101883][ T5967] usb 7-1: can't read configurations, error -22 [ 73.124603][ T6942] tmpfs: Bad value for 'mpol' [ 73.125084][ T40] audit: type=1400 audit(1775231755.917:460): avc: denied { mounton } for pid=6937 comm="syz.1.274" path="/syzcgroup/unified/syz1" dev="hugetlbfs" ino=14895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 73.137725][ T40] audit: type=1400 audit(1775231755.917:461): avc: denied { append } for pid=6940 comm="syz.3.275" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.146093][ T40] audit: type=1400 audit(1775231755.917:462): avc: denied { ioctl } for pid=6940 comm="syz.3.275" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.171769][ T6938] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.175466][ T6938] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.179038][ T6938] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.183285][ T6938] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.193260][ T6938] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.196694][ T6938] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.198393][ T6001] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 73.201066][ T6938] ldm_validate_partition_table(): Disk read failed. [ 73.206868][ T6938] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.213146][ T6938] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.215960][ T6938] Dev loop6: unable to read RDB block 0 [ 73.217942][ T6938] loop6: unable to read partition table [ 73.220244][ T6938] loop_reread_partitions: partition scan of loop6 (3 x) failed (rc=-5) [ 73.223932][ T5938] ldm_validate_partition_table(): Disk read failed. [ 73.227018][ T5938] Dev loop6: unable to read RDB block 0 [ 73.230154][ T5938] loop6: unable to read partition table [ 73.230746][ T5967] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 73.233786][ T6939] ldm_validate_partition_table(): Disk read failed. [ 73.238196][ T6939] Dev loop6: unable to read RDB block 0 [ 73.240401][ T6939] loop6: unable to read partition table [ 73.242653][ T6939] loop_reread_partitions: partition scan of loop6 (3 x) failed (rc=-5) [ 73.348451][ T6001] usb 5-1: Using ep0 maxpacket: 32 [ 73.352534][ T6001] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 73.359386][ T6001] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 73.364185][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 73.367849][ T6001] usb 5-1: Product: syz [ 73.369966][ T6001] usb 5-1: Manufacturer: syz [ 73.371994][ T6001] usb 5-1: SerialNumber: syz [ 73.377724][ T6001] usb 5-1: config 0 descriptor?? [ 73.381307][ T6927] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 73.382055][ T5967] usb 7-1: unable to get BOS descriptor or descriptor too short [ 73.389335][ T5967] usb 7-1: not running at top speed; connect to a high speed hub [ 73.392985][ T5967] usb 7-1: no configurations [ 73.395205][ T5967] usb 7-1: can't read configurations, error -22 [ 73.398446][ T5967] usb usb7-port1: attempt power cycle [ 73.642519][ T5993] usb 5-1: USB disconnect, device number 6 [ 73.738384][ T5967] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 73.764437][ T5967] usb 7-1: unable to get BOS descriptor or descriptor too short [ 73.769639][ T5967] usb 7-1: not running at top speed; connect to a high speed hub [ 73.773648][ T5967] usb 7-1: no configurations [ 73.775679][ T5967] usb 7-1: can't read configurations, error -22 [ 73.859704][ T6973] 9pnet_virtio: no channels available for device syz [ 73.908439][ T5967] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 73.930789][ T5967] usb 7-1: unable to get BOS descriptor or descriptor too short [ 73.934546][ T5967] usb 7-1: not running at top speed; connect to a high speed hub [ 73.938073][ T5967] usb 7-1: no configurations [ 73.940942][ T5967] usb 7-1: can't read configurations, error -22 [ 73.944167][ T5967] usb usb7-port1: unable to enumerate USB device [ 73.986714][ T6977] mkiss: ax0: crc mode is auto. [ 74.016651][ T6975] __nla_validate_parse: 5 callbacks suppressed [ 74.016665][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 74.164361][ T6979] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.227307][ T6979] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.321561][ T6981] evm: overlay not supported [ 74.326094][ T6979] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.437911][ T6979] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.569913][ T185] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.582273][ T185] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.593973][ T185] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.603585][ T185] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.698462][ T185] wlan1: Creating new IBSS network, BSSID 56:96:02:43:f0:24 [ 74.903843][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 74.909686][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 74.967796][ T7038] atomic_op ffff888057eb9198 conn xmit_atomic 0000000000000000 [ 74.968416][ T6100] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 75.108425][ T6100] usb 5-1: device descriptor read/64, error -71 [ 75.350073][ T6100] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 75.478479][ T6100] usb 5-1: device descriptor read/64, error -71 [ 75.588629][ T6100] usb usb5-port1: attempt power cycle [ 75.667537][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 75.674210][ T7043] deleting an unspecified loop device is not supported. [ 75.747260][ T7052] net_ratelimit: 53 callbacks suppressed [ 75.747272][ T7052] xfrm0: mtu less than device minimum [ 75.928734][ T6100] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 75.949226][ T6100] usb 5-1: device descriptor read/8, error -71 [ 76.190928][ T6100] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 76.208864][ T6100] usb 5-1: device descriptor read/8, error -71 [ 76.328650][ T6100] usb usb5-port1: unable to enumerate USB device [ 76.368767][ T7089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.310'. [ 76.372365][ T7087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.372388][ T7089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.310'. [ 76.452755][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.452857][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.648913][ T7104] futex_wake_op: syz.3.314 tries to shift op by -1; fix this program [ 77.081552][ T7122] netlink: 'syz.3.320': attribute type 21 has an invalid length. [ 77.134064][ T7129] netlink: 104 bytes leftover after parsing attributes in process `syz.1.322'. [ 77.142104][ T7129] netlink: 104 bytes leftover after parsing attributes in process `syz.1.322'. [ 77.145251][ T7129] netlink: 104 bytes leftover after parsing attributes in process `syz.1.322'. [ 77.148365][ T7129] netlink: 104 bytes leftover after parsing attributes in process `syz.1.322'. [ 77.257066][ T7142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.268162][ T7142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.274365][ T7142] bond0 (unregistering): Released all slaves [ 77.364265][ T7146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64272 sclass=netlink_route_socket pid=7146 comm=syz.1.328 [ 77.416628][ T7152] netlink: 'syz.1.330': attribute type 1 has an invalid length. [ 77.553617][ T7175] capability: warning: `syz.3.339' uses 32-bit capabilities (legacy support in use) [ 77.613326][ T7184] misc userio: Invalid payload size [ 77.687385][ T7022] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.695225][ T7192] SELinux: policydb version -1029796092 does not match my version range 15-35 [ 77.704250][ T7192] SELinux: failed to load policy [ 77.784599][ T7204] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 77.786663][ T7205] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 77.816918][ T7204] netlink: 'syz.2.349': attribute type 13 has an invalid length. [ 77.894747][ T7225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.942180][ T7234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.947727][ T7232] sctp: [Deprecated]: syz.0.354 (pid 7232) Use of int in max_burst socket option deprecated. [ 77.947727][ T7232] Use struct sctp_assoc_value instead [ 78.054677][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 78.054691][ T40] audit: type=1400 audit(1775231760.857:504): avc: denied { bind } for pid=7247 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.059194][ T7248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.072997][ T7244] bond1: Removing last arp target with arp_interval on [ 78.078432][ T40] audit: type=1400 audit(1775231760.857:505): avc: denied { block_suspend } for pid=7247 comm="syz.2.359" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.113490][ T7241] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 78.119267][ T7241] bond1 (unregistering): Released all slaves [ 78.209428][ T7251] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 78.238723][ T7251] bond1 (unregistering): Released all slaves [ 78.292674][ T40] audit: type=1326 audit(1775231761.097:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7260 comm="syz.1.363" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5e679c819 code=0x0 [ 78.578327][ T40] audit: type=1400 audit(1775231761.377:507): avc: denied { mount } for pid=7265 comm="syz.0.364" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 78.633976][ T7271] loop6: detected capacity change from 0 to 7 [ 78.638849][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 78.641990][ C1] buffer_io_error: 39 callbacks suppressed [ 78.642038][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.652812][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 78.656846][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.661357][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 78.665247][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.668291][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 78.671732][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.674448][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 78.677745][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.680787][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 78.684288][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.687343][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 78.690760][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.693708][ T5938] ldm_validate_partition_table(): Disk read failed. [ 78.696336][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 78.700654][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.704479][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 78.708135][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.712601][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 78.716732][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.720791][ T5938] Dev loop6: unable to read RDB block 0 [ 78.726860][ T5938] loop6: unable to read partition table [ 78.730167][ T5938] loop6: partition table beyond EOD, truncated [ 78.742669][ T7271] ldm_validate_partition_table(): Disk read failed. [ 78.758367][ T7271] Dev loop6: unable to read RDB block 0 [ 78.761440][ T7271] loop6: unable to read partition table [ 78.763492][ T7271] loop6: partition table beyond EOD, truncated [ 78.765664][ T7271] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 78.857166][ T40] audit: type=1800 audit(1775231761.647:508): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.366" name="file0" dev="tmpfs" ino=468 res=0 errno=0 [ 78.864717][ T40] audit: type=1400 audit(1775231761.647:509): avc: denied { getopt } for pid=7275 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.934577][ T40] audit: type=1400 audit(1775231761.727:510): avc: denied { create } for pid=7282 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 78.934788][ T7281] ptrace attach of "/syz-executor exec"[5927] was attempted by ""[7281] [ 78.941613][ T40] audit: type=1400 audit(1775231761.727:511): avc: denied { write } for pid=7282 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 78.985485][ T7286] Illegal XDP return value 4294967274 on prog (id 41) dev N/A, expect packet loss! [ 79.135710][ T7286] __nla_validate_parse: 38 callbacks suppressed [ 79.135725][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 79.148400][ T7286] openvswitch: netlink: Missing key (keys=40, expected=80) [ 79.255189][ T7298] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 79.391059][ T40] audit: type=1400 audit(1775231762.187:512): avc: denied { setopt } for pid=7305 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.439532][ T5993] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 79.459206][ T40] audit: type=1400 audit(1775231762.257:513): avc: denied { create } for pid=7305 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 79.598950][ T5993] usb 6-1: Using ep0 maxpacket: 32 [ 79.606856][ T5993] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 79.609801][ T5993] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 79.612584][ T5993] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 79.615493][ T5993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 79.619224][ T5993] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 79.623068][ T5993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 79.626600][ T5993] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 79.630062][ T5993] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 79.634144][ T5993] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 79.636989][ T5993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.643834][ T5993] usb 6-1: config 0 descriptor?? [ 79.646661][ T7296] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.867647][ T63] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 79.906802][ T5993] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 79.914662][ T5993] usb 6-1: USB disconnect, device number 6 [ 79.920577][ T5993] usblp0: removed [ 80.531975][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.388'. [ 80.536982][ T7346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=7346 comm=syz.1.388 [ 80.546221][ T7346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=7346 comm=syz.1.388 [ 80.763236][ T7361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7361 comm=syz.1.393 [ 80.916095][ T7363] rtc_cmos 00:05: Alarms can be up to one day in the future [ 80.952293][ T7367] random: crng reseeded on system resumption [ 81.016869][ T7376] netlink: 'syz.3.397': attribute type 16 has an invalid length. [ 81.019616][ T7376] netlink: 'syz.3.397': attribute type 17 has an invalid length. [ 81.033236][ T7376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.044753][ T7376] netlink: 'syz.3.397': attribute type 13 has an invalid length. [ 81.152360][ T7389] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 81.172002][ T7389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.217043][ T7389] bond1: (slave veth7): Enslaving as an active interface with a down link [ 81.267039][ T7396] vlan3: entered allmulticast mode [ 81.272757][ T7396] bond1: entered allmulticast mode [ 81.275381][ T7396] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 81.586578][ T7440] (syz.2.413,7440,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 81.591043][ T7440] (syz.2.413,7440,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 81.593467][ T7440] (syz.2.413,7440,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 81.596429][ T7440] (syz.2.413,7440,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 81.605185][ T7441] cgroup: Unknown subsys name 'cpuset' [ 81.642928][ T7450] tmpfs: Unknown parameter '' [ 81.975472][ T7468] tmpfs: Bad value for 'mpol' [ 82.024024][ T5994] IPVS: starting estimator thread 0... [ 82.026550][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.424'. [ 82.038675][ T7475] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20007 [ 82.084601][ T7485] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 82.091474][ T7485] syz_tun: entered promiscuous mode [ 82.093413][ T7485] macsec1: entered promiscuous mode [ 82.097506][ T7485] dlm: non-version read from control device 0 [ 82.103205][ T7485] input: syz1 as /devices/virtual/input/input8 [ 82.130382][ T7476] IPVS: using max 43 ests per chain, 103200 per kthread [ 82.181792][ T7493] netlink: 'syz.3.430': attribute type 1 has an invalid length. [ 82.194347][ T7493] bond2: entered promiscuous mode [ 82.196438][ T7493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.206719][ T7493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.210312][ T7493] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 82.214488][ T7493] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 82.220161][ T7493] bond2: (slave ip6gre1): making interface the new active one [ 82.222771][ T7493] ip6gre1: entered promiscuous mode [ 82.225509][ T7493] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 82.233133][ T7493] random: crng reseeded on system resumption [ 82.239268][ T7493] Hibernate inconsistent memory map detected! [ 82.241816][ T7493] PM: hibernation: Image mismatch: architecture specific data [ 82.301689][ T7500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.432'. [ 82.769214][ T7503] overlayfs: failed to resolve '/u+k<': -2 [ 83.232468][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 83.232480][ T40] audit: type=1400 audit(1775231766.027:537): avc: denied { unmount } for pid=5924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 83.257480][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 83.322093][ T7514] binder: 7509:7514 ioctl c0306201 2000000003c0 returned -14 [ 83.374982][ T7510] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7510 comm=syz.3.436 [ 83.415209][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 83.451391][ T7527] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 83.460772][ T7527] CIFS: Unable to determine destination address [ 83.469417][ T40] audit: type=1400 audit(1775231766.267:538): avc: denied { mount } for pid=7522 comm="syz.3.440" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 83.479160][ T7523] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.501046][ T40] audit: type=1400 audit(1775231766.297:539): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 83.540378][ T40] audit: type=1400 audit(1775231766.337:540): avc: denied { name_bind } for pid=7536 comm="syz.0.444" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 83.656333][ T7550] sp0: Synchronizing with TNC [ 83.662473][ T7546] Cannot find del_set index 0 as target [ 83.678670][ T7549] [U] [ 83.793397][ T40] audit: type=1400 audit(1775231766.587:541): avc: denied { mount } for pid=7555 comm="syz.3.449" name="/" dev="rpc_pipefs" ino=20020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 83.798694][ T7556] program syz.3.449 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.801363][ T40] audit: type=1400 audit(1775231766.587:542): avc: denied { mounton } for pid=7555 comm="syz.3.449" path="/116/file0" dev="rpc_pipefs" ino=20020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 83.824898][ T40] audit: type=1400 audit(1775231766.617:543): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 83.847155][ T7558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.450'. [ 83.958975][ T7561] netlink: 'syz.0.451': attribute type 10 has an invalid length. [ 83.963475][ T7561] veth0_macvtap: left promiscuous mode [ 84.065571][ T40] audit: type=1400 audit(1775231766.857:544): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 84.073717][ T7571] netlink: 'syz.0.454': attribute type 10 has an invalid length. [ 84.086368][ T7571] team0: Port device dummy0 added [ 84.105966][ T7573] macsec1: entered promiscuous mode [ 84.107855][ T7573] macsec1: entered allmulticast mode [ 84.313948][ T40] audit: type=1400 audit(1775231767.107:545): avc: denied { mount } for pid=7587 comm="syz.3.460" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 84.338425][ T6001] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 84.450501][ T40] audit: type=1400 audit(1775231767.247:546): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 84.499746][ T6001] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 84.503309][ T6001] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.506768][ T6001] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.513052][ T6001] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.517294][ T6001] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.522093][ T6001] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.526812][ T6001] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.538201][ T6001] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.541163][ T6001] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.544850][ T6001] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.549028][ T6001] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.552089][ T6001] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.555565][ T6001] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.559354][ T6001] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.562218][ T6001] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.566096][ T6001] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.569259][ T6001] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.572189][ T6001] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.575848][ T6001] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.580501][ T6001] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.583382][ T6001] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.587056][ T6001] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.590204][ T6001] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.593010][ T6001] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.596574][ T6001] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.607695][ T6001] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 84.610762][ T6001] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 84.613376][ T6001] usb 5-1: Product: syz [ 84.614725][ T6001] usb 5-1: Manufacturer: syz [ 84.616275][ T6001] usb 5-1: SerialNumber: syz [ 84.619495][ T6001] usb 5-1: config 0 descriptor?? [ 84.629255][ T6001] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 84.781630][ T34] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 84.825411][ T6001] usb 5-1: USB disconnect, device number 11 [ 84.830078][ T7571] netlink: 'syz.0.454': attribute type 10 has an invalid length. [ 84.835439][ T6001] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 84.845469][ T7571] team0: Port device dummy0 removed [ 84.849746][ T7571] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 84.853794][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 84.859539][ T7616] EXT4-fs (nbd1): unable to read superblock [ 84.940632][ T34] usb 8-1: unable to get BOS descriptor or descriptor too short [ 84.949124][ T34] usb 8-1: config 8 has an invalid interface number: 52 but max is 0 [ 84.951650][ T34] usb 8-1: config 8 has no interface number 0 [ 84.953513][ T34] usb 8-1: config 8 interface 52 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 84.960606][ T34] usb 8-1: string descriptor 0 read error: -22 [ 84.962670][ T34] usb 8-1: New USB device found, idVendor=1bc7, idProduct=1071, bcdDevice=65.f0 [ 84.965459][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.969777][ T7602] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 84.973348][ T34] cdc_mbim 8-1:8.52: CDC Union missing and no IAD found [ 84.975674][ T34] cdc_mbim 8-1:8.52: bind() failure [ 85.004423][ T7624] program syz.1.471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.181387][ T6967] usb 8-1: USB disconnect, device number 4 [ 85.419417][ T34] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 85.442030][ T7637] xt_hashlimit: size too large, truncated to 1048576 [ 85.570216][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 85.574749][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 85.582818][ T34] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 85.585763][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.588408][ T34] usb 6-1: Product: syz [ 85.589760][ T34] usb 6-1: Manufacturer: syz [ 85.591261][ T34] usb 6-1: SerialNumber: syz [ 85.595016][ T34] usb 6-1: config 0 descriptor?? [ 85.600042][ T34] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 85.603049][ T34] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 85.641169][ T7644] xt_hashlimit: size too large, truncated to 1048576 [ 85.785869][ T7660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=7660 comm=syz.2.482 [ 85.858788][ T34] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 85.863348][ T7663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.866618][ T7663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.908975][ T7668] /dev/sg0: Can't lookup blockdev [ 86.342081][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 86.369277][ T7662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.373419][ T7662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.389108][ T34] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 86.398392][ T34] em28xx 6-1:0.0: board has no eeprom [ 86.413646][ T7699] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 86.418029][ T7699] overlayfs: missing 'lowerdir' [ 86.468615][ T34] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 86.472364][ T34] em28xx 6-1:0.0: dvb set to bulk mode. [ 86.479754][ T5994] em28xx 6-1:0.0: Binding DVB extension [ 86.486041][ T34] usb 6-1: USB disconnect, device number 7 [ 86.495005][ T7699] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 86.506327][ T34] em28xx 6-1:0.0: Disconnecting em28xx [ 86.540687][ T7713] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 86.541112][ T5994] em28xx 6-1:0.0: Registering input extension [ 86.543608][ T7713] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 86.546685][ T34] em28xx 6-1:0.0: Closing input extension [ 86.619707][ T34] em28xx 6-1:0.0: Freeing device [ 86.689788][ T24] cfg80211: failed to load regulatory.db [ 86.704019][ T7732] IPv6: NLM_F_REPLACE set, but no existing node found! [ 86.801003][ T7739] fuse: Bad value for 'user_id' [ 86.802745][ T7739] fuse: Bad value for 'user_id' [ 86.918447][ T7756] netlink: 'syz.2.512': attribute type 1 has an invalid length. [ 86.923778][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 86.940602][ T7756] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 86.955227][ T7760] 8021q: adding VLAN 0 to HW filter on device bond4 [ 86.997539][ T7760] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 87.269860][ T7794] can0: slcan on ttyS3. [ 87.319420][ T7794] can0 (unregistered): slcan off ttyS3. [ 87.342640][ T7794] netlink: 36 bytes leftover after parsing attributes in process `syz.3.524'. [ 87.358638][ T5994] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 87.397230][ T7807] pim6reg: entered allmulticast mode [ 87.400594][ T7807] pim6reg: left allmulticast mode [ 87.435807][ T7809] netlink: 'syz.3.529': attribute type 11 has an invalid length. [ 87.508912][ T5994] usb 7-1: Using ep0 maxpacket: 8 [ 87.513135][ T5994] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 87.516742][ T5994] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 87.522684][ T5994] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.526816][ T5994] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.532053][ T5994] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.534966][ T5994] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.564200][ T7819] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.532'. [ 87.725326][ T7827] bond0: entered promiscuous mode [ 87.727021][ T7827] bond_slave_0: entered promiscuous mode [ 87.729420][ T7827] bond_slave_1: entered promiscuous mode [ 87.732211][ T7827] batadv0: entered promiscuous mode [ 87.735262][ T7827] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 87.739722][ T7827] bond0: left promiscuous mode [ 87.741300][ T7827] bond_slave_0: left promiscuous mode [ 87.743073][ T7827] bond_slave_1: left promiscuous mode [ 87.744201][ T5994] usb 7-1: GET_CAPABILITIES returned 0 [ 87.746968][ T5994] usbtmc 7-1:16.0: can't read capabilities [ 87.746981][ T7827] batadv0: left promiscuous mode [ 87.807020][ T7829] netlink: 'syz.1.536': attribute type 10 has an invalid length. [ 87.821486][ T7829] veth0_vlan: left promiscuous mode [ 87.824116][ T7829] veth0_vlan: entered promiscuous mode [ 87.835889][ T7829] team0: Device veth0_vlan failed to register rx_handler [ 87.952474][ T7786] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 87.955722][ T7786] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 87.971089][ T7786] vhci_hcd vhci_hcd.0: Device attached [ 87.975671][ T7786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.984180][ T7786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.995893][ T7786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.001117][ T7786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.004314][ T7837] vhci_hcd: cannot find a urb of seqnum 2097152 max seqnum 0 [ 88.009168][ T7786] usb 7-1: usbtmc_ioctl_clear_out_halt returned -32 [ 88.012265][ T7208] vhci_hcd vhci_hcd.2: stop threads [ 88.012723][ T34] usb 7-1: USB disconnect, device number 10 [ 88.013967][ T7208] vhci_hcd vhci_hcd.2: release socket [ 88.017578][ T7208] vhci_hcd vhci_hcd.2: disconnect device [ 88.078664][ T7842] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 88.167998][ T7847] syzkaller1: entered promiscuous mode [ 88.170674][ T7847] syzkaller1: entered allmulticast mode [ 88.259863][ T40] kauditd_printk_skb: 102 callbacks suppressed [ 88.259913][ T40] audit: type=1400 audit(1775231771.057:649): avc: denied { create } for pid=7848 comm="syz.3.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 88.331398][ T40] audit: type=1400 audit(1775231771.127:650): avc: denied { create } for pid=7850 comm="syz.1.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.339830][ T40] audit: type=1400 audit(1775231771.137:651): avc: denied { mounton } for pid=7855 comm="syz.3.545" path="/152/file0" dev="tmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.347470][ T40] audit: type=1400 audit(1775231771.137:652): avc: denied { mount } for pid=7855 comm="syz.3.545" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 88.356926][ T40] audit: type=1400 audit(1775231771.157:653): avc: denied { write } for pid=7855 comm="syz.3.545" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 88.359036][ T7856] netlink: 52 bytes leftover after parsing attributes in process `syz.3.545'. [ 88.364204][ T40] audit: type=1400 audit(1775231771.157:654): avc: denied { setattr } for pid=7855 comm="syz.3.545" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 88.379245][ T40] audit: type=1400 audit(1775231771.177:655): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 88.400310][ T7851] kvm: kvm [7850]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 88.417665][ T40] audit: type=1400 audit(1775231771.217:656): avc: denied { append } for pid=7859 comm="syz.3.546" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 88.645424][ T40] audit: type=1400 audit(1775231771.447:657): avc: denied { create } for pid=7868 comm="syz.2.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.688089][ T40] audit: type=1400 audit(1775231771.477:658): avc: denied { create } for pid=7871 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.706051][ T7872] netlink: 'syz.2.550': attribute type 21 has an invalid length. [ 88.713539][ T7872] IPv6: NLM_F_CREATE should be specified when creating new route [ 88.807567][ T7877] netlink: 'syz.2.550': attribute type 32 has an invalid length. [ 88.825437][ T7879] program syz.3.552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.418418][ T5935] Bluetooth: hci0: command 0x2016 tx timeout [ 89.606973][ T7943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.555'. [ 89.611043][ T7943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.555'. [ 89.614823][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 89.786042][ T7957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.560'. [ 89.867118][ T63] Bluetooth: hci1: Malformed HCI Event [ 89.876638][ T7965] : entered promiscuous mode [ 89.955795][ T7972] gfs2: error -5 reading superblock [ 90.199236][ T7985] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 90.228948][ T7993] netlink: 'syz.1.570': attribute type 29 has an invalid length. [ 90.232312][ T7993] netlink: 'syz.1.570': attribute type 29 has an invalid length. [ 90.245025][ T7993] netlink: 596 bytes leftover after parsing attributes in process `syz.1.570'. [ 90.346279][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.572'. [ 90.349923][ T8000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57120 sclass=netlink_route_socket pid=8000 comm=syz.1.572 [ 90.489167][ T8009] netlink: 84 bytes leftover after parsing attributes in process `syz.1.575'. [ 90.516899][ T8013] netlink: 48 bytes leftover after parsing attributes in process `syz.1.576'. [ 90.521439][ T8013] trusted_key: encrypted_key: insufficient parameters specified [ 90.648142][ T8018] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 90.861099][ T8026] wg1: entered promiscuous mode [ 90.862723][ T8026] wg1: entered allmulticast mode [ 90.870366][ T8026] IPv6: syztnl0: Disabled Multicast RS [ 90.949063][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.013690][ T8040] netlink: 'syz.3.586': attribute type 4 has an invalid length. [ 91.016162][ T8040] netlink: 17 bytes leftover after parsing attributes in process `syz.3.586'. [ 91.023680][ T8040] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.586'. [ 91.038743][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.150499][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.260493][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.303471][ T5935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.308403][ T5935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.315139][ T5935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.319704][ T5935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.323151][ T5935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.482758][ T13] bridge_slave_1: left allmulticast mode [ 91.484809][ T13] bridge_slave_1: left promiscuous mode [ 91.487848][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.491697][ T63] Bluetooth: hci0: command 0x2016 tx timeout [ 91.506142][ T13] bridge_slave_0: left allmulticast mode [ 91.508021][ T13] bridge_slave_0: left promiscuous mode [ 91.510190][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.513178][ T8050] ucma_write: process 329 (syz.0.589) changed security contexts after opening file descriptor, this is not allowed. [ 91.778183][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.783321][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.787651][ T13] bond0 (unregistering): Released all slaves [ 91.796608][ T13] bond1 (unregistering): Released all slaves [ 91.841562][ T8044] chnl_net:caif_netlink_parms(): no params data found [ 91.943332][ T8044] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.950879][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.954730][ T8074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=8074 comm=syz.0.593 [ 91.957899][ T8044] bridge_slave_0: entered allmulticast mode [ 91.963352][ T8044] bridge_slave_0: entered promiscuous mode [ 91.967193][ T8044] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.969926][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.972360][ T8044] bridge_slave_1: entered allmulticast mode [ 91.975197][ T8044] bridge_slave_1: entered promiscuous mode [ 92.032945][ T8044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.039566][ T8044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.099600][ T8044] team0: Port device team_slave_0 added [ 92.102990][ T8044] team0: Port device team_slave_1 added [ 92.127181][ T8044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.130124][ T8044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.139311][ T8044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.143788][ T8044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.146102][ T8044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.156114][ T8044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.199955][ T8044] hsr_slave_0: entered promiscuous mode [ 92.203211][ T8044] hsr_slave_1: entered promiscuous mode [ 92.206391][ T8044] debugfs: 'hsr0' already exists in 'hsr' [ 92.209414][ T8044] Cannot create hsr debugfs directory [ 92.256631][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'. [ 92.360749][ T13] hsr_slave_0: left promiscuous mode [ 92.363826][ T13] hsr_slave_1: left promiscuous mode [ 92.366681][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.371768][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.375208][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.377544][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.386370][ T13] veth1_macvtap: left promiscuous mode [ 92.388423][ T13] veth0_macvtap: left promiscuous mode [ 92.390278][ T13] veth1_vlan: left promiscuous mode [ 92.534374][ T13] team0 (unregistering): Port device team_slave_1 removed [ 92.546888][ T13] team0 (unregistering): Port device team_slave_0 removed [ 92.674462][ T8044] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.680307][ T8044] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.685430][ T8044] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.691964][ T8044] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.719099][ T8044] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.721525][ T8044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.723897][ T8044] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.726188][ T8044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.764539][ T8044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.775134][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.779175][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.795620][ T8044] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.807230][ T7208] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.809717][ T7208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.818603][ T7211] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.821008][ T7211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.928025][ T8044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.069478][ T8098] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.072713][ T8098] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.081405][ T8098] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.085674][ T8098] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.087805][ T8098] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.094403][ T8044] veth0_vlan: entered promiscuous mode [ 93.095355][ T8098] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.100337][ T8044] veth1_vlan: entered promiscuous mode [ 93.103908][ T8098] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.106129][ T8098] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.115528][ T8098] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.119342][ T8098] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.121667][ T8098] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.122207][ T8044] veth0_macvtap: entered promiscuous mode [ 93.127158][ T8098] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.129028][ T8044] veth1_macvtap: entered promiscuous mode [ 93.138172][ T8044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.145597][ T8044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.151841][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.166262][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.174550][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.177775][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.218895][ T8143] kvm: user requested TSC rate below hardware speed [ 93.224001][ T8143] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 93.227765][ T7009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.234685][ T7009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.239008][ T8148] trusted_key: syz.0.603 sent an empty control message without MSG_MORE. [ 93.259744][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.262469][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.269436][ T40] kauditd_printk_skb: 91 callbacks suppressed [ 93.269449][ T40] audit: type=1400 audit(1775231776.077:750): avc: denied { mounton } for pid=8044 comm="syz-executor" path="/syzkaller.sIfrnB/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 93.288408][ T40] audit: type=1400 audit(1775231776.077:751): avc: denied { mount } for pid=8044 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 93.298408][ T40] audit: type=1400 audit(1775231776.077:752): avc: denied { mounton } for pid=8044 comm="syz-executor" path="/syzkaller.sIfrnB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 93.309375][ T40] audit: type=1400 audit(1775231776.077:753): avc: denied { mounton } for pid=8044 comm="syz-executor" path="/syzkaller.sIfrnB/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 93.320605][ T40] audit: type=1400 audit(1775231776.097:754): avc: denied { mounton } for pid=8044 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 93.328686][ T40] audit: type=1400 audit(1775231776.097:755): avc: denied { mount } for pid=8044 comm="syz-executor" name="/" dev="gadgetfs" ino=8553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 93.336767][ T40] audit: type=1400 audit(1775231776.097:756): avc: denied { mounton } for pid=8044 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 93.376526][ T8155] IPv6: addrconf: prefix option has invalid lifetime [ 93.381675][ T40] audit: type=1400 audit(1775231776.177:757): avc: denied { read } for pid=8154 comm="syz.4.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 93.416269][ T40] audit: type=1400 audit(1775231776.207:758): avc: denied { bind } for pid=8156 comm="syz.4.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.421151][ T8157] netlink: 'syz.4.605': attribute type 1 has an invalid length. [ 93.423154][ T40] audit: type=1400 audit(1775231776.207:759): avc: denied { name_bind } for pid=8156 comm="syz.4.605" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 93.425497][ T8157] netlink: 'syz.4.605': attribute type 1 has an invalid length. [ 93.479683][ T8159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.483754][ T8159] netlink: 868 bytes leftover after parsing attributes in process `syz.4.606'. [ 93.512792][ T6967] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 93.515935][ T6967] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 93.538975][ T7211] wlan1: authenticated [ 93.540087][ T8159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.549866][ T7211] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 93.595277][ T7009] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x0 status=0 aid=1) [ 93.595389][ T8159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.598106][ T7009] wlan1: associated [ 94.146508][ T8164] vlan2: entered promiscuous mode [ 94.148197][ T8164] bridge0: entered promiscuous mode [ 94.154822][ T8166] bridge1: entered promiscuous mode [ 94.289576][ T63] Bluetooth: hci0: command 0x2016 tx timeout [ 94.344372][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.614'. [ 94.358185][ T8181] 8021q: adding VLAN 0 to HW filter on device bond5 [ 94.370850][ T8181] netlink: 'syz.3.614': attribute type 1 has an invalid length. [ 94.377604][ T8181] vxlan0: entered promiscuous mode [ 94.383530][ T8181] bond5: (slave vxlan0): Enslaving as an active interface with an up link [ 94.387762][ T7208] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.396951][ T7208] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.406310][ T7208] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.409069][ T7208] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.419834][ T8181] ufs: You didn't specify the type of your ufs filesystem [ 94.419834][ T8181] [ 94.419834][ T8181] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 94.419834][ T8181] [ 94.419834][ T8181] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 94.438577][ T8181] ufs: failed to set blocksize [ 94.442789][ T8181] netlink: 184 bytes leftover after parsing attributes in process `syz.3.614'. [ 94.455030][ T8184] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.477977][ T8187] binder_alloc: 8186: binder_alloc_buf, no vma [ 94.481622][ T8187] sctp: [Deprecated]: syz.3.616 (pid 8187) Use of int in max_burst socket option deprecated. [ 94.481622][ T8187] Use struct sctp_assoc_value instead [ 94.653281][ T8197] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 94.656024][ T8197] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 94.659205][ T8197] vhci_hcd vhci_hcd.0: Device attached [ 94.662066][ T8198] vhci_hcd: connection closed [ 94.662404][ T7018] vhci_hcd vhci_hcd.3: stop threads [ 94.667262][ T7018] vhci_hcd vhci_hcd.3: release socket [ 94.670197][ T7018] vhci_hcd vhci_hcd.3: disconnect device [ 94.816206][ T8204] nvme_fabrics: missing parameter 'transport=%s' [ 94.820264][ T8204] nvme_fabrics: missing parameter 'nqn=%s' [ 94.907610][ T8210] usb usb1: usbfs: process 8210 (syz.2.624) did not claim interface 0 before use [ 94.922095][ T8210] tipc: Started in network mode [ 94.923577][ T8210] tipc: Node identity ce8ade0f0af4, cluster identity 4711 [ 94.924250][ T63] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 94.925762][ T8210] tipc: Enabled bearer , priority 0 [ 94.926536][ T8217] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 94.929342][ T8210] syzkaller0: entered promiscuous mode [ 94.930477][ T8217] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 94.932652][ T8210] syzkaller0: entered allmulticast mode [ 94.936813][ T8217] vhci_hcd vhci_hcd.0: Device attached [ 94.940904][ T8219] vhci_hcd: connection closed [ 94.943811][ T7211] vhci_hcd vhci_hcd.4: stop threads [ 94.947247][ T7211] vhci_hcd vhci_hcd.4: release socket [ 94.947759][ T63] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 94.949282][ T7211] vhci_hcd vhci_hcd.4: disconnect device [ 94.963965][ T8210] tipc: Resetting bearer [ 94.969890][ T8210] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.972800][ T8210] bridge_slave_1: left allmulticast mode [ 94.974464][ T8210] bridge_slave_1: left promiscuous mode [ 94.976550][ T8210] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.985428][ T8209] tipc: Resetting bearer [ 94.995144][ T8209] tipc: Disabling bearer [ 95.088445][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.168566][ T63] Bluetooth: hci2: command 0x041b tx timeout [ 95.170987][ T5935] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.253049][ T8246] io-wq is not configured for unbound workers [ 95.255185][ T8246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8246 comm=syz.3.633 [ 95.270250][ T8241] macvlan0: entered promiscuous mode [ 95.317376][ T8237] could not allocate digest TFM handle cryptd(blake2b-160) [ 95.366255][ T8253] __nla_validate_parse: 5 callbacks suppressed [ 95.366270][ T8253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.636'. [ 95.411207][ T5935] Bluetooth: hci1: unexpected event for opcode 0x420a [ 95.576289][ T8273] ip6erspan0: entered allmulticast mode [ 95.641231][ T8282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.644'. [ 95.704429][ T5935] Bluetooth: hci3: unexpected event for opcode 0x0404 [ 95.718008][ T8292] netlink: 16 bytes leftover after parsing attributes in process `syz.4.649'. [ 95.884363][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.654'. [ 95.905027][ T8316] Invalid logical block size (536872960) [ 95.975490][ T8328] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 96.024154][ T8334] erspan0: entered promiscuous mode [ 96.380090][ T5935] Bluetooth: hci0: command 0x2016 tx timeout [ 96.397312][ T8364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.668'. [ 96.516572][ T5935] Bluetooth: hci2: unexpected event for opcode 0x080d [ 96.520114][ T8369] ip6t_rpfilter: unknown options [ 96.870241][ T8387] loop6: detected capacity change from 0 to 7 [ 96.873750][ C1] blk_print_req_error: 26 callbacks suppressed [ 96.873763][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.879059][ C1] buffer_io_error: 26 callbacks suppressed [ 96.879101][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.884864][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.888689][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.891541][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.894569][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.897249][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.901010][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.904816][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.908433][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.911371][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.915476][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.919483][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.923778][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.927246][ T5938] ldm_validate_partition_table(): Disk read failed. [ 96.930337][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.934543][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.939177][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.942478][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.945458][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.949409][ T6001] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 96.949597][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.956398][ T5938] Dev loop6: unable to read RDB block 0 [ 96.957877][ T8388] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 96.958992][ T5938] loop6: unable to read partition table [ 96.962911][ T5938] loop6: partition table beyond EOD, truncated [ 96.968071][ T8387] ldm_validate_partition_table(): Disk read failed. [ 96.971162][ T8387] Dev loop6: unable to read RDB block 0 [ 96.973170][ T8387] loop6: unable to read partition table [ 96.975146][ T8387] loop6: partition table beyond EOD, truncated [ 96.977365][ T8387] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 97.040289][ T5935] Bluetooth: hci3: unexpected event for opcode 0x200a [ 97.098334][ T6001] usb 5-1: Using ep0 maxpacket: 32 [ 97.101531][ T6001] usb 5-1: config 0 has an invalid interface number: 125 but max is 0 [ 97.104351][ T6001] usb 5-1: config 0 has no interface number 0 [ 97.106422][ T6001] usb 5-1: too many endpoints for config 0 interface 125 altsetting 152: 48, using maximum allowed: 30 [ 97.110651][ T6001] usb 5-1: config 0 interface 125 altsetting 152 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 97.115490][ T6001] usb 5-1: config 0 interface 125 has no altsetting 0 [ 97.118758][ T6001] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 97.121700][ T6001] usb 5-1: New USB device strings: Mfr=0, Product=58, SerialNumber=0 [ 97.124437][ T6001] usb 5-1: Product: syz [ 97.128195][ T6001] usb 5-1: config 0 descriptor?? [ 97.143822][ T8404] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8404 comm=syz.3.684 [ 97.149980][ T5935] Bluetooth: hci2: unexpected event for opcode 0x0404 [ 97.198897][ T8413] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 97.298695][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.691'. [ 97.301811][ T8424] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 97.342578][ T8426] netem: change failed [ 97.345562][ T6001] as10x_usb: device has been detected [ 97.355848][ T6001] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 97.391023][ T6001] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 97.417327][ T6001] as10x_usb: error during firmware upload part1 [ 97.420199][ T6001] Registered device nBox DVB-T Dongle [ 97.422122][ T6001] usb 5-1: USB disconnect, device number 12 [ 97.436209][ T7230] udevd[7230]: setting mode of /dev/dvb/adapter1/demux0 to 020660 failed: No such file or directory [ 97.444580][ T7230] udevd[7230]: setting owner of /dev/dvb/adapter1/demux0 to uid=0, gid=28 failed: No such file or directory [ 97.450639][ T6001] Unregistered device nBox DVB-T Dongle [ 97.451526][ T6001] as10x_usb: device has been disconnected [ 97.485378][ T8439] netlink: 124 bytes leftover after parsing attributes in process `syz.2.693'. [ 97.668452][ T5992] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 97.818374][ T5992] usb 8-1: Using ep0 maxpacket: 32 [ 97.822257][ T5992] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.826824][ T5992] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.831078][ T5992] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 97.836608][ T5992] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 97.840487][ T5992] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.846033][ T5992] usb 8-1: config 0 descriptor?? [ 97.870343][ T63] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 97.914775][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.699'. [ 97.918118][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.699'. [ 97.918615][ T8452] netlink: 'syz.0.698': attribute type 1 has an invalid length. [ 97.989519][ T8458] delete_channel: no stack [ 98.047366][ T8467] cgroup: subsys name conflicts with all [ 98.077118][ T5992] usbhid 8-1:0.0: can't add hid device: -71 [ 98.083180][ T5992] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 98.089921][ T5992] usb 8-1: USB disconnect, device number 5 [ 98.236486][ T8492] netlink: 64 bytes leftover after parsing attributes in process `syz.2.710'. [ 98.281971][ T40] kauditd_printk_skb: 82 callbacks suppressed [ 98.282018][ T40] audit: type=1400 audit(1775231781.077:842): avc: denied { relabelfrom } for pid=8498 comm="syz.2.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 98.294336][ T40] audit: type=1400 audit(1775231781.087:843): avc: denied { relabelto } for pid=8498 comm="syz.2.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 98.305206][ T40] audit: type=1400 audit(1775231781.097:844): avc: denied { open } for pid=8498 comm="syz.2.712" path="/dev/ptyq9" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 98.315679][ T40] audit: type=1400 audit(1775231781.097:845): avc: denied { ioctl } for pid=8498 comm="syz.2.712" path="/dev/ptyq9" dev="devtmpfs" ino=136 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 98.434072][ T8516] netlink: 'syz.2.718': attribute type 9 has an invalid length. [ 98.437103][ T8515] netlink: 'syz.0.717': attribute type 1 has an invalid length. [ 98.507810][ T40] audit: type=1400 audit(1775231781.297:846): avc: denied { accept } for pid=8520 comm="syz.0.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 98.527926][ T8525] netlink: 'syz.2.721': attribute type 4 has an invalid length. [ 98.550544][ T40] audit: type=1400 audit(1775231781.347:847): avc: denied { write } for pid=8526 comm="syz.0.722" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.600819][ T40] audit: type=1400 audit(1775231781.407:848): avc: denied { create } for pid=8533 comm="syz.0.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 98.665873][ T40] audit: type=1400 audit(1775231781.457:849): avc: denied { read write } for pid=8536 comm="syz.2.725" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 98.676064][ T40] audit: type=1400 audit(1775231781.457:850): avc: denied { open } for pid=8536 comm="syz.2.725" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 98.778013][ T40] audit: type=1400 audit(1775231781.567:851): avc: denied { setopt } for pid=8539 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.040325][ T8567] binder: 8566:8567 ioctl c0306201 2000000000c0 returned -14 [ 99.066198][ T8575] 9p: Bad value for 'rfdno' [ 99.169749][ T8581] loop4: detected capacity change from 0 to 7 [ 99.172494][ T8581] ldm_validate_partition_table(): Disk read failed. [ 99.174860][ T8581] Dev loop4: unable to read RDB block 0 [ 99.176728][ T8581] loop4: unable to read partition table [ 99.179479][ T8581] loop4: partition table beyond EOD, truncated [ 99.187682][ T8581] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 99.273312][ T8605] Bluetooth: MGMT ver 1.23 [ 99.278173][ T8605] mac80211_hwsim hwsim4 ;: renamed from wlan0 (while UP) [ 99.352821][ T8612] netlink: 'syz.3.749': attribute type 2 has an invalid length. [ 99.408534][ T63] Bluetooth: hci2: command 0x041b tx timeout [ 99.470610][ T8632] pim6reg: entered allmulticast mode [ 99.589486][ T8644] netlink: 'syz.3.756': attribute type 2 has an invalid length. [ 99.976752][ T8586] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.980050][ T8586] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 99.985780][ T8586] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.987829][ T8586] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 99.991259][ T8586] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.993179][ T8586] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 100.056556][ T8586] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.058918][ T8586] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 100.076997][ T8586] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 100.393768][ T8705] macvtap1: entered promiscuous mode [ 100.395638][ T8705] macvtap1: entered allmulticast mode [ 100.397448][ T8705] veth1_vlan: entered allmulticast mode [ 100.562110][ T8724] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 100.685433][ T8728] netlink: 'syz.0.776': attribute type 13 has an invalid length. [ 100.689063][ T8728] __nla_validate_parse: 10 callbacks suppressed [ 100.689080][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 100.701546][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.704841][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.708212][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.708486][ T8728] netlink: 'syz.0.776': attribute type 13 has an invalid length. [ 100.712642][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 100.715573][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.544337][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.782'. [ 101.588976][ T8750] sit0: entered promiscuous mode [ 101.789053][ T8761] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 101.840209][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 101.866608][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'. [ 101.948325][ T8782] binder: 8781:8782 unknown command 0 [ 101.950058][ T8782] binder: 8781:8782 ioctl c0306201 200000000280 returned -22 [ 102.298041][ T8787] syzkaller0: entered promiscuous mode [ 102.300568][ T8787] syzkaller0: entered allmulticast mode [ 102.428668][ T8782] nbd1: detected capacity change from 0 to 63 [ 102.492862][ T63] block nbd1: Receive control failed (result -32) [ 102.492862][ T5936] block nbd1: Receive control failed (result -32) [ 102.492863][ T5937] block nbd1: Receive control failed (result -104) [ 102.497135][ T5935] block nbd1: Receive control failed (result -32) [ 102.504320][ T5940] block nbd1: Receive control failed (result -32) [ 102.563002][ T72] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 102.611597][ T8798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.798'. [ 102.614855][ T8798] openvswitch: netlink: Flow key attr not present in new flow. [ 102.719790][ T72] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 102.722873][ T72] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.727724][ T72] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.733552][ T72] usb 5-1: config 0 interface 0 has no altsetting 0 [ 102.740332][ T72] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 102.743409][ T72] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 102.746336][ T72] usb 5-1: Product: syz [ 102.747822][ T72] usb 5-1: Manufacturer: syz [ 102.749524][ T72] usb 5-1: SerialNumber: syz [ 102.752659][ T72] usb 5-1: config 0 descriptor?? [ 102.757741][ T72] hub 5-1:0.0: bad descriptor, ignoring hub [ 102.759945][ T72] hub 5-1:0.0: probe with driver hub failed with error -5 [ 102.785505][ T72] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 102.801563][ T7230] udevd[7230]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.068492][ T6001] usb 5-1: USB disconnect, device number 13 [ 103.398387][ T6100] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 103.455400][ T8800] ceph: No mds server is up or the cluster is laggy [ 103.525417][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 103.525463][ T40] audit: type=1400 audit(1775231786.317:892): avc: denied { write } for pid=8822 comm="syz.4.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.536174][ T40] audit: type=1400 audit(1775231786.337:893): avc: denied { create } for pid=8822 comm="syz.4.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 103.560547][ T6100] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 103.563115][ T6100] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.567023][ T6100] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.577372][ T6100] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.590174][ T6100] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 103.594080][ T6100] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 103.596686][ T6100] usb 5-1: Product: syz [ 103.598351][ T6100] usb 5-1: Manufacturer: syz [ 103.600385][ T6100] usb 5-1: SerialNumber: syz [ 103.613915][ T6100] usb 5-1: config 0 descriptor?? [ 103.625102][ T6100] hub 5-1:0.0: bad descriptor, ignoring hub [ 103.627698][ T6100] hub 5-1:0.0: probe with driver hub failed with error -5 [ 103.628115][ T8828] syz.2.806 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 103.703294][ T6100] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 103.738002][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.848172][ T8858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.890001][ T8858] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 103.952985][ T8861] netlink: 24 bytes leftover after parsing attributes in process `syz.4.814'. [ 103.958154][ T8861] Invalid source name [ 103.960303][ T8861] UBIFS error (pid: 8861): cannot open "ubifs", error -22 [ 103.962250][ T8861] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 103.966948][ T8861] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 103.974341][ T8861] vhci_hcd vhci_hcd.0: Device attached [ 103.977543][ T8863] vhci_hcd: connection closed [ 103.977762][ T185] vhci_hcd vhci_hcd.4: stop threads [ 103.982992][ T185] vhci_hcd vhci_hcd.4: release socket [ 103.984883][ T185] vhci_hcd vhci_hcd.4: disconnect device [ 103.988677][ T71] usb 5-1: USB disconnect, device number 14 [ 104.040054][ T6001] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 104.188379][ T6001] usb 8-1: Using ep0 maxpacket: 16 [ 104.191749][ T6001] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 104.196960][ T6001] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 104.200271][ T6001] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.203095][ T6001] usb 8-1: Product: syz [ 104.204595][ T6001] usb 8-1: Manufacturer: syz [ 104.206389][ T6001] usb 8-1: SerialNumber: syz [ 104.210217][ T6001] usb 8-1: config 0 descriptor?? [ 104.213914][ T6001] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 104.216899][ T6001] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 104.345435][ T8871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8871 comm=syz.2.815 [ 104.594950][ T40] audit: type=1400 audit(1775231787.387:894): avc: denied { bind } for pid=8890 comm="syz.0.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 104.616294][ T6001] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 104.655618][ T8901] overlayfs: failed to resolve './cgroup': -2 [ 104.660097][ T40] audit: type=1400 audit(1775231787.457:895): avc: denied { ioctl } for pid=8902 comm="syz.4.822" path="socket:[27470]" dev="sockfs" ino=27470 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.660408][ T8901] overlayfs: failed to clone upperpath [ 104.718737][ T40] audit: type=1400 audit(1775231787.497:896): avc: denied { create } for pid=8904 comm="syz.0.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 104.725803][ T40] audit: type=1400 audit(1775231787.497:897): avc: denied { sys_admin } for pid=8904 comm="syz.0.823" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 104.806385][ T40] audit: type=1400 audit(1775231787.597:898): avc: denied { bind } for pid=8910 comm="syz.2.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.844397][ T40] audit: type=1400 audit(1775231787.637:899): avc: denied { sys_nice } for pid=8915 comm="syz.0.827" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 104.854017][ T8918] overlayfs: failed to resolve './cgroup/file0': -2 [ 104.860944][ T40] audit: type=1400 audit(1775231787.657:900): avc: denied { write } for pid=8917 comm="syz.2.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 104.871400][ T8918] overlayfs: failed to clone upperpath [ 105.022213][ T8928] netlink: 20 bytes leftover after parsing attributes in process `syz.0.832'. [ 105.037459][ T8928] syz.0.832 (8928): /proc/8927/oom_adj is deprecated, please use /proc/8927/oom_score_adj instead. [ 105.070838][ T8935] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 105.226874][ T8949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.835'. [ 105.229033][ T6001] em28xx 8-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 105.230180][ T8949] netlink: 'syz.0.835': attribute type 2 has an invalid length. [ 105.235408][ T8949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.835'. [ 105.237997][ T6001] em28xx 8-1:0.0: board has no eeprom [ 105.343479][ T8951] kvm: user requested TSC rate below hardware speed [ 105.348111][ T8951] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 105.355043][ T8951] i2c i2c-1: dtv_property_process_set: SET cmd 0xa16ed702 undefined [ 105.367019][ T8958] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 105.522549][ T40] audit: type=1400 audit(1775231788.317:901): avc: denied { setopt } for pid=8963 comm="syz.4.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 105.696565][ T8987] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 105.700653][ T8987] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 105.704730][ T8987] overlayfs: missing 'lowerdir' [ 105.874758][ T9009] __nla_validate_parse: 1 callbacks suppressed [ 105.874777][ T9009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.846'. [ 106.061918][ T8977] cgroup: fork rejected by pids controller in /syz4 [ 106.240033][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'. [ 106.243423][ T9049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.852'. [ 106.289644][ T8849] em28xx 8-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 106.348307][ T6001] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 106.351037][ T6001] em28xx 8-1:0.0: dvb set to bulk mode. [ 106.352803][ T71] em28xx 8-1:0.0: Binding DVB extension [ 106.381218][ T71] em28xx 8-1:0.0: Registering input extension [ 106.388857][ T6001] usb 8-1: USB disconnect, device number 6 [ 106.391762][ T6001] em28xx 8-1:0.0: Disconnecting em28xx [ 106.394193][ T6001] em28xx 8-1:0.0: Closing input extension [ 106.412798][ T6001] em28xx 8-1:0.0: Freeing device [ 106.471465][ T9067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.857'. [ 106.472205][ T9069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.857'. [ 106.483260][ T9070] sp0: Synchronizing with TNC [ 106.714298][ T9095] netlink: 'syz.4.867': attribute type 1 has an invalid length. [ 106.731260][ T9095] 9p: Bad value for 'wfdno' [ 106.733760][ T9102] netlink: 'syz.4.867': attribute type 1 has an invalid length. [ 106.892295][ T9116] x_tables: ip_tables: osf match: only valid for protocol 6 [ 106.992921][ T9088] trusted_key: encrypted_key: insufficient parameters specified [ 106.996298][ T9088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9754 sclass=netlink_route_socket pid=9088 comm=syz.0.864 [ 107.078093][ T9131] random: crng reseeded on system resumption [ 107.361139][ T9157] No source specified [ 107.571518][ T9182] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:22 [ 107.661572][ T9194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.896'. [ 107.712849][ T9200] /dev/sg0: Can't lookup blockdev [ 107.768597][ T6012] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 107.829663][ T9200] kvm: kvm [9199]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 107.928345][ T6012] usb 5-1: Using ep0 maxpacket: 8 [ 107.949997][ T6012] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 107.953984][ T6012] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 107.957638][ T6012] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 107.958498][ T9205] ip6t_srh: unknown srh invflags 4000 [ 107.961505][ T6012] usb 5-1: config 250 has no interface number 0 [ 107.968533][ T6012] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 107.973922][ C1] [ 107.973933][ C1] ============================= [ 107.973939][ C1] [ BUG: Invalid wait context ] [ 107.973947][ C1] syzkaller #0 Tainted: G L [ 107.973957][ C1] ----------------------------- [ 107.973961][ C1] kworker/1:4/6012 is trying to lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 107.974011][ C1] ffff88803e3192e0 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x253/0xe80 [ 107.974064][ C1] other info that might help us debug this: [ 107.974069][ C1] context-{2:2} [ 107.974075][ C1] 6 locks held by kworker/1:4/6012: [ 107.974083][ C1] #0: ffff88801f6ce948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 107.974117][ C1] #1: ffffc900047a7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 107.974141][ C1] #2: ffff88802d78e1e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 107.974177][ C1] #3: ffffffff8e7d3e80 (console_lock){+.+.}-{0:0}, at: dev_vprintk_emit+0x394/0x3e0 [ 107.974202][ C1] #4: ffffffff8e7d3ef8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 107.974228][ C1] #5: ffff88803e319840 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x245/0xe80 [ 107.974255][ C1] stack backtrace: [ 107.974291][ C1] CPU: 1 UID: 0 PID: 6012 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.974305][ C1] Tainted: [L]=SOFTLOCKUP [ 107.974308][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.974316][ C1] Workqueue: usb_hub_wq hub_event [ 107.974357][ C1] Call Trace: [ 107.974388][ C1] [ 107.974393][ C1] dump_stack_lvl+0x100/0x190 [ 107.974409][ C1] __lock_acquire+0xfa4/0x2630 [ 107.974418][ C1] ? __lock_acquire+0x4a5/0x2630 [ 107.974426][ C1] ? xa_load+0x149/0x2c0 [ 107.974435][ C1] ? xa_load+0x149/0x2c0 [ 107.974444][ C1] lock_acquire+0x1cf/0x380 [ 107.974452][ C1] ? kvm_xen_set_evtchn_fast+0x253/0xe80 [ 107.974468][ C1] _raw_read_lock_irqsave+0x46/0x90 [ 107.974482][ C1] ? kvm_xen_set_evtchn_fast+0x253/0xe80 [ 107.974497][ C1] kvm_xen_set_evtchn_fast+0x253/0xe80 [ 107.974511][ C1] ? kvm_xen_set_evtchn_fast+0x245/0xe80 [ 107.974526][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 107.974541][ C1] ? __pfx_kvm_xen_set_evtchn_fast+0x10/0x10 [ 107.974556][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 107.974567][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 107.974580][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 107.974595][ C1] xen_timer_callback+0x1db/0x2a0 [ 107.974610][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 107.974623][ C1] ? __hrtimer_run_queues+0x42b/0xa70 [ 107.974635][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 107.974646][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 107.974660][ C1] __hrtimer_run_queues+0x1ad/0xa70 [ 107.974671][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 107.974682][ C1] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 107.974693][ C1] hrtimer_interrupt+0x397/0x8c0 [ 107.974706][ C1] __sysvec_apic_timer_interrupt+0x109/0x490 [ 107.974718][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 107.974732][ C1] [ 107.974735][ C1] [ 107.974738][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 107.974749][ C1] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 107.974762][ C1] Code: 00 e8 01 54 29 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 af 4f 21 00 48 85 ed 0f 85 d7 01 00 00 e8 c1 54 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 107.974771][ C1] RSP: 0018:ffffc900047a70b0 EFLAGS: 00000287 [ 107.974806][ C1] RAX: ffffffff8f513e58 RBX: ffffffff8f513e00 RCX: ffffc9002fb2a000 [ 107.974812][ C1] RDX: 0000000000100000 RSI: ffffffff81e7a85f RDI: ffff888036ed8000 [ 107.974818][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 107.974823][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000012a6 [ 107.974829][ C1] R13: ffffffff8f513e58 R14: ffffc900047a7130 R15: dffffc0000000000 [ 107.974837][ C1] ? console_flush_one_record+0xabf/0xe50 [ 107.974852][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 107.974867][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 107.974881][ C1] console_unlock+0x103/0x260 [ 107.974893][ C1] ? __pfx_console_unlock+0x10/0x10 [ 107.974913][ C1] ? dev_vprintk_emit+0x394/0x3e0 [ 107.974925][ C1] vprintk_emit+0x407/0x6b0 [ 107.974937][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 107.974951][ C1] dev_vprintk_emit+0x394/0x3e0 [ 107.974963][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 107.974976][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 107.974990][ C1] ? __kmalloc_noprof+0x301/0x850 [ 107.975004][ C1] ? usb_get_configuration+0x330e/0x4320 [ 107.975014][ C1] ? usb_new_device+0x580/0x7d0 [ 107.975027][ C1] ? hub_event+0x314d/0x4af0 [ 107.975039][ C1] ? process_one_work+0xa23/0x19a0 [ 107.975049][ C1] ? worker_thread+0x5ef/0xe50 [ 107.975058][ C1] ? ret_from_fork+0x754/0xd80 [ 107.975069][ C1] dev_printk_emit+0xd2/0x10d [ 107.975080][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 107.975095][ C1] __dev_printk+0xcb/0x100 [ 107.975106][ C1] _dev_notice+0xef/0x130 [ 107.975118][ C1] ? __pfx__dev_notice+0x10/0x10 [ 107.975131][ C1] ? rcu_is_watching+0x12/0xc0 [ 107.975142][ C1] ? trace_kmalloc+0x101/0x130 [ 107.975152][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 107.975166][ C1] ? __kmalloc_noprof+0x320/0x850 [ 107.975181][ C1] usb_get_configuration.cold+0xe11/0x17d3 [ 107.975202][ C1] ? __pfx_usb_get_configuration+0x10/0x10 [ 107.975213][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 107.975225][ C1] ? mark_held_locks+0x40/0x70 [ 107.975234][ C1] usb_new_device+0x580/0x7d0 [ 107.975248][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.975264][ C1] ? do_raw_spin_lock+0x128/0x260 [ 107.975275][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 107.975289][ C1] ? mark_held_locks+0x40/0x70 [ 107.975298][ C1] hub_event+0x314d/0x4af0 [ 107.975317][ C1] ? __pfx_hub_event+0x10/0x10 [ 107.975330][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 107.975344][ C1] ? trace_event_raw_event_sched_process_exec+0x1e0/0x350 [ 107.975359][ C1] ? rcu_is_watching+0x12/0xc0 [ 107.975371][ C1] process_one_work+0xa23/0x19a0 [ 107.975384][ C1] ? __pfx_process_one_work+0x10/0x10 [ 107.975395][ C1] ? __pfx_hub_event+0x10/0x10 [ 107.975409][ C1] worker_thread+0x5ef/0xe50 [ 107.975420][ C1] ? __pfx_worker_thread+0x10/0x10 [ 107.975431][ C1] ? kthread+0x13a/0x450 [ 107.975439][ C1] ? __pfx_worker_thread+0x10/0x10 [ 107.975449][ C1] kthread+0x370/0x450 [ 107.975457][ C1] ? __pfx_kthread+0x10/0x10 [ 107.975466][ C1] ret_from_fork+0x754/0xd80 [ 107.975476][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 107.975486][ C1] ? __switch_to+0x7b4/0x1120 [ 107.975497][ C1] ? __pfx_kthread+0x10/0x10 [ 107.975506][ C1] ret_from_fork_asm+0x1a/0x30 [ 107.975521][ C1] [ 108.216967][ T6012] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 108.220376][ T6012] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 108.224183][ T6012] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 108.227486][ T6012] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 108.231846][ T6012] usb 5-1: config 250 interface 228 has no altsetting 0 [ 108.234541][ T6012] usb 5-1: string descriptor 0 read error: -71 [ 108.236552][ T6012] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 108.239817][ T6012] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 108.244943][ T6012] usb 5-1: can't set config #250, error -71 [ 108.247505][ T6012] usb 5-1: USB disconnect, device number 15 [ 108.437991][ T7009] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.591249][ T7009] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.712003][ T7009] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.821398][ T7009] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.888626][ T7009] bridge_slave_1: left allmulticast mode [ 108.890516][ T7009] bridge_slave_1: left promiscuous mode [ 108.892475][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.895727][ T7009] bridge_slave_0: left allmulticast mode [ 108.897740][ T7009] bridge_slave_0: left promiscuous mode [ 108.900074][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.120977][ T7009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.126181][ T7009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.132354][ T7009] bond0 (unregistering): Released all slaves [ 109.399883][ T7009] hsr_slave_0: left promiscuous mode [ 109.402835][ T7009] hsr_slave_1: left promiscuous mode [ 109.405667][ T7009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.409277][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.412921][ T7009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.416387][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.422510][ T7009] veth1_macvtap: left promiscuous mode [ 109.425001][ T7009] veth0_macvtap: left promiscuous mode [ 109.427683][ T7009] veth1_vlan: left promiscuous mode [ 109.430490][ T7009] veth0_vlan: left promiscuous mode [ 109.536060][ T7009] team0 (unregistering): Port device team_slave_1 removed [ 109.543194][ T7009] team0 (unregistering): Port device team_slave_0 removed [ 110.023148][ T7009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.027152][ T7009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.092265][ T7009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.095506][ T7009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.183006][ T7009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.188024][ T7009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.271797][ T7009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.275899][ T7009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.357275][ T7009] bridge_slave_1: left allmulticast mode [ 110.359635][ T7009] bridge_slave_1: left promiscuous mode [ 110.361535][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.364827][ T7009] bridge_slave_0: left allmulticast mode [ 110.366680][ T7009] bridge_slave_0: left promiscuous mode [ 110.368585][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.533427][ T7009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.538130][ T7009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.542618][ T7009] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 110.546035][ T7009] bond0 (unregistering): Released all slaves [ 110.549488][ T7009] bond1 (unregistering): Released all slaves [ 110.927065][ T7009] hsr_slave_0: left promiscuous mode [ 110.929350][ T7009] hsr_slave_1: left promiscuous mode [ 110.931586][ T7009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.934129][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.936967][ T7009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.939482][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.943015][ T7009] veth1_macvtap: left promiscuous mode [ 110.944831][ T7009] veth1_vlan: left promiscuous mode [ 110.946643][ T7009] veth0_vlan: left promiscuous mode [ 111.013158][ T7009] team0 (unregistering): Port device team_slave_1 removed [ 111.019485][ T7009] team0 (unregistering): Port device team_slave_0 removed