last executing test programs: 48.657829554s ago: executing program 2 (id=22): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="58010000100001002cbc700000000008fc0000000000000000000000001d0001fe8800000000000000000000000000010000ecdf000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000000003200000000000000000000000000000000000000fcfffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000090000000000000001000000000000000008400000000000090000000000000092020000000000000010000000000000000000000000000007350000020004002c00000000000000600002006362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000006e000b", @ANYRES16], 0x158}}, 0x44050) 48.657702951s ago: executing program 2 (id=23): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001340)=ANY=[@ANYBLOB="5c0100001000010000000000fdfffffffe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000020000020000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000a0000008a000000000000001c0017000000000000000000ffffffff00000000ffffffff0400000048000100736861323536"], 0x15c}}, 0x0) 48.59069153s ago: executing program 2 (id=24): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_io_uring_complete(0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010828bd7000fadbdf250b00000008000300", @ANYRES32=r4, @ANYBLOB="050008000500000048005080110001000400000008f8eef16f162471f40000002400088004000100040002000400010004000100040001000400010004100100040001000500020002000000040005"], 0x6c}, 0x1, 0x0, 0x0, 0x20000002}, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00'], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0xfffffffffffffcf0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x0, 0xffffff01}, 0x48) r8 = dup3(r6, r5, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) sendto$packet(r8, &(0x7f0000000540)="d0dd201b", 0x4, 0x240080c0, 0x0, 0x0) accept4(r8, 0x0, 0x0, 0x80800) sendto$inet6(r8, &(0x7f0000000000)="5d7679b977f1804295cc7d56d0e9ec1cbb05f658f7024c6487d7702a89388107829159e2f33f434c309c683ada49cdacead456c9b1ae3744b0e42bc61e074475587a0efd0130c16c9b7208890ee0800fc95bf8de2eb76447249148309ed5b16736aa2cd57b10964bcacf09af9e4121b1f460a5522f0cfef63daed3", 0x7b, 0x400, &(0x7f0000000100)={0xa, 0x4e22, 0x1800, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10}, 0x1c) 48.590462091s ago: executing program 2 (id=25): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000002e40)=0x3c, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081e0}, 0x44000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x88, 0x2c, 0xd27, 0x78bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4000004, 0x20000001, 0x4, 0x2}, 0x1, r6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) 48.470597398s ago: executing program 2 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) write$sequencer(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="81040808f9ffffff940f32f0411976ec9402ff"], 0x20) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_dellink={0x2c, 0x13, 0x1, 0x70bd25, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0xa}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008014}, 0x20000040) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r4 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./pipefs\x00', 0x400, 0x21) fcntl$notify(r5, 0x402, 0xd) fcntl$notify(r5, 0x402, 0x80000003) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 48.408285605s ago: executing program 2 (id=28): r0 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="3082010c3081baa003020102020101300a06082a85030701010302300c310a30080603550403130141301e170d3230303130313030303030305a170d3330303130313030303030305a300c310a300806035504031301413068302106082a85030701010101301506092a850307010201010106082a85030701010202034300044001010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101300a06082a8503070101030203410002020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202", 0x110, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r0}, &(0x7f0000000080)={'enc=', 'raw', ' hash=', {'hmac(sha1-ce)\x00'}}, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0xa000201e}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0xfffe}], 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x9, 0x8001, 0x10, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x40, 0x5, 0x9}}) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0xfffffffffffffffe) write$P9_RSTATu(r2, &(0x7f0000000000)=ANY=[@ANYRESHEX=r3, @ANYRES16=r3, @ANYRES8=r2, @ANYRES8=r2, @ANYRES64, @ANYRES32=r3, @ANYRES32, @ANYRESOCT=r2, @ANYRES8=r3], 0x296) 20.462923467s ago: executing program 32 (id=28): r0 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x110, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r0}, &(0x7f0000000080)={'enc=', 'raw', ' hash=', {'hmac(sha1-ce)\x00'}}, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0xa000201e}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0xfffe}], 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x9, 0x8001, 0x10, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x40, 0x5, 0x9}}) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0xfffffffffffffffe) write$P9_RSTATu(r2, &(0x7f0000000000)=ANY=[@ANYRESHEX=r3, @ANYRES16=r3, @ANYRES8=r2, @ANYRES8=r2, @ANYRES64, @ANYRES32=r3, @ANYRES32, @ANYRESOCT=r2, @ANYRES8=r3], 0x296) 3.100353539s ago: executing program 4 (id=726): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="58010000100001002cbc700000000008fc000000000000000000000000000001fe8800000000000000000000000300010000ecdf000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000000003200000000000000000000000000000000000000fcfffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000090000000000000001000000000000000008400000000000090000000000000092020000000000000010000000000000000000000000000007350000020004002c00000000000000600002006362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000006e000b00", @ANYRES16], 0x158}}, 0x44050) 3.099484066s ago: executing program 4 (id=728): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x82, 0x6}, {0x8}, {0x4, 0x7}, {0x3, 0x6}, {0x0, 0x7}], "46d1755544385989"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 3.019729952s ago: executing program 4 (id=729): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001340)=ANY=[@ANYBLOB="5c0100001000010000000000fdfffffffe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000400000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000a0000008a000000000000001c0017000000000000000000ffffffff00000000ffffffff0400000048000100736861323536"], 0x15c}}, 0x0) 3.019376188s ago: executing program 4 (id=731): r0 = syz_open_dev$media(&(0x7f0000000000), 0xd5, 0x282200) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)=[{{}, {0x80000000}}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000004c0)={0x0, 0x4, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}], 0x3, 0x0, &(0x7f00000002c0)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000000440)=[{0x0, 0x80000000, 0x0, {0x0}}, {}], 0x1, 0x0, &(0x7f0000000480)=[{}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000600)={0x80000000, &(0x7f0000000540), &(0x7f0000000580)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000a00)={0x0, 0x3, 0x0, &(0x7f0000000640)=[{0x80000000}, {}, {}], 0x2, 0x0, &(0x7f0000000780)=[{}, {}], 0x5, 0x0, &(0x7f0000000880)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}], 0x4, 0x0, &(0x7f0000000940)=[{}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000a80)={{r1, r3, 0x3, [0x3ff, 0x9]}, {r4, r6, 0x0, [0x244, 0xa]}, 0x2, [0x101, 0xfca]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000b80)={r2, &(0x7f0000000ac0), &(0x7f0000000b00)}) read$FUSE(0xffffffffffffffff, &(0x7f0000000bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000002c00)={0x18, 0x0, r7, {0x747}}, 0x18) r8 = syz_open_dev$media(&(0x7f0000002c40), 0x1, 0x200000) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000002d40)={r5, &(0x7f0000002c80), &(0x7f0000002cc0)}) r9 = syz_open_dev$media(&(0x7f0000002d80), 0x4, 0x481) ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, &(0x7f0000002e80)={r1, &(0x7f0000002dc0)=[{}, {0x80000000}], &(0x7f0000002e00)=[{{}, {0x80000000}}]}) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000002ec0), 0x8) ioctl$PPPIOCATTCHAN(r12, 0x40047438, &(0x7f0000002f00)=0x4) ioctl$BSG_GET_COMMAND_Q(r12, 0x2270, &(0x7f0000002f40)) ioctl$EXT4_IOC_GETFSUUID(r9, 0x8008662c, &(0x7f0000002f80)) accept4$inet6(r12, &(0x7f0000002fc0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000003000)=0x1c, 0x800) ioctl$MEDIA_IOC_G_TOPOLOGY(r12, 0xc0487c04, &(0x7f00000033c0)={0x0, 0x2, 0x0, &(0x7f0000003040)=[{}, {}], 0x2, 0x0, &(0x7f0000003100)=[{}, {}], 0x6, 0x0, &(0x7f0000003200)=[{}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x5, 0x0, &(0x7f00000032c0)=[{}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r12, 0xc0487c04, &(0x7f00000038c0)={0x0, 0x5, 0x0, &(0x7f0000003440)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000003640)=[{}], 0x5, 0x0, &(0x7f00000036c0)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}], 0x7, 0x0, &(0x7f0000003780)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000003a00)={r11, &(0x7f0000003940)=[{0x80000000, 0x0}], &(0x7f0000003980)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000003a40)={{r13, r14, 0x3, [0x5, 0x2dd2]}, {r10, r15, 0x0, [0x6]}, 0x4, [0x599, 0x889b]}) ioctl$FS_IOC_ENABLE_VERITY(r12, 0x40806685, &(0x7f0000003bc0)={0x1, 0x2, 0x1000, 0x67, &(0x7f0000003a80)="c9f3ed1e66d78b3dc918f13b2993b2d8557a327e16fbc6f20c7440b142157b2ddd0adce0992eb0ccc26187960da600c32066dc7e405a649a7a07dce98a5f57f6fe2cf661bd777c41b05bded497e3342e861bf9d950cd6db08d759353d8e77d60ce4cff457985a7", 0xa4, 0x0, &(0x7f0000003b00)="4573902ba5808b5dbaf948d367c0a2b4f9947790786e9884213a024d2296034f0ee55542bb74cb439244b806e4bbe183b1cb37d9dd2a528bf9b33b5e0f0189a0ad4af31c00b874dca95bbb46b09cbfe07239bf7d709a8f4e2ae48ac3b60aea12d369de40dde3e008899f76cca665d5a11bc58c2e6275b125694e29312e78717a00bad5dab21bdd01bc51077aa6a9c6b4bb7ce8016f86d5785e06eedb1ac70c7be83f6d74"}) syz_open_dev$media(&(0x7f0000003c40), 0x7, 0x80) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r12, 0x4020565b, &(0x7f0000003c80)={0x3, 0x101, 0x1}) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$media(&(0x7f0000003cc0), 0x0, 0x82000) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000003d00), 0x2, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008) openat$hpet(0xffffffffffffff9c, &(0x7f0000003d40), 0xa800, 0x0) 2.940054362s ago: executing program 4 (id=733): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 2.939717534s ago: executing program 4 (id=734): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000180)='dax\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000000002080400000000000000000a0092eb250a018006000340000300000c00028005000100000000003c0003800c000280050001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000080)={[{@noprefix}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x4202, 0x6a) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.779169379s ago: executing program 0 (id=751): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="58010000100001002cbc700000000008fc000000000000000000000000000001fe8800000000000000020000000000010000ecdf000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000000003200000000000000000000000000000000000000fcfffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000090000000000000001000000000000000008400000000000090000000000000092020000000000000010000000000000000000000000000007350000020004002c00000000000000600002006362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000006e000b000000002000000000fffffff1ffa27affff", @ANYRES16], 0x158}}, 0x44050) 1.778439512s ago: executing program 0 (id=753): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000140)="a03a2ceb2fbf6c7c2a1a8fbc050eb507a1202fa05d62e6c84e307965d8beffecdffa4e7dc65fd043a59bf0d32aa25c96a842f3d51386ee7740f73c22c7dcf5494b1c5f3d7bb52898c5af02ba7613f7", 0x4f}, {&(0x7f00000002c0)="65cef088faab5397eba802efca0384d938e35f89dc5b0e1a313552213f3f3afcda5cd229b932f672f856c9a54bcf4467b40b53058f96ba9491b331d41c7c62b2b25c02091ff87f814d51b0b67dcd5974dc2035da2dc6ed6dd378", 0x5a}, {&(0x7f0000000340)="8c8b2d794687ecf6c26d41eeda2841f93893ae0e250912a5a0c44493c4adee989b9d786193c92376741ceb72fd4357a3ff8b4dfc648aa1debda2f179bb6ed279017999ab5a3fb5b989243431ebf85aa2fdda265edb840a50edb3e0b6b07c560d0d63df54e5a8169f95d2d406bdbaabcdd1bfa1d6e6aaa38b46db98f17cab64bdaa08062e1105f50da043971e24", 0x8d}, {&(0x7f0000000400)="c315a65275da2e7af062706ce3e9c340a4f4176cfd407a8417319f9a6e12a5222e219bc99b1ca40559822e72bfef3f0bd32b7552340557facab3e59b226a81b6045e57545c3358e0a00e50c1d3a43ac70d9c689749b1662c75adbe68224f5abca9172eea5940d35827c81e978d749ee70997ed6f51b5dc2d943f1dfe735085fc", 0x80}], 0x4}, 0x20000000) (async) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000140)="a03a2ceb2fbf6c7c2a1a8fbc050eb507a1202fa05d62e6c84e307965d8beffecdffa4e7dc65fd043a59bf0d32aa25c96a842f3d51386ee7740f73c22c7dcf5494b1c5f3d7bb52898c5af02ba7613f7", 0x4f}, {&(0x7f00000002c0)="65cef088faab5397eba802efca0384d938e35f89dc5b0e1a313552213f3f3afcda5cd229b932f672f856c9a54bcf4467b40b53058f96ba9491b331d41c7c62b2b25c02091ff87f814d51b0b67dcd5974dc2035da2dc6ed6dd378", 0x5a}, {&(0x7f0000000340)="8c8b2d794687ecf6c26d41eeda2841f93893ae0e250912a5a0c44493c4adee989b9d786193c92376741ceb72fd4357a3ff8b4dfc648aa1debda2f179bb6ed279017999ab5a3fb5b989243431ebf85aa2fdda265edb840a50edb3e0b6b07c560d0d63df54e5a8169f95d2d406bdbaabcdd1bfa1d6e6aaa38b46db98f17cab64bdaa08062e1105f50da043971e24", 0x8d}, {&(0x7f0000000400)="c315a65275da2e7af062706ce3e9c340a4f4176cfd407a8417319f9a6e12a5222e219bc99b1ca40559822e72bfef3f0bd32b7552340557facab3e59b226a81b6045e57545c3358e0a00e50c1d3a43ac70d9c689749b1662c75adbe68224f5abca9172eea5940d35827c81e978d749ee70997ed6f51b5dc2d943f1dfe735085fc", 0x80}], 0x4}, 0x20000000) futex_waitv(&(0x7f0000000280)=[{0x0, &(0x7f0000000000), 0x2}, {0x0, 0x0, 0x82}], 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x27, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) 1.730639877s ago: executing program 0 (id=755): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="01154e000100000001160c000000", 0xe, 0x4c0d1, &(0x7f0000000040)={0x11, 0x11, r1, 0x8100, 0x1, 0x0, @local}, 0x14) 1.729615632s ago: executing program 0 (id=756): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26, 0x0, 0x80}, 0x28) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') read$FUSE(r0, 0x0, 0xa00) 1.660303183s ago: executing program 0 (id=758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x3b}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xed, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x4009, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r6, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x3b}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xed, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x4009, 0x0, 0xffffffffffffffff, 0x4}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r6, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x200002, 0x0) (async) 1.590052186s ago: executing program 0 (id=763): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008015}, 0x8000) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') lseek(r3, 0x20000000000002, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000b80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000800)=@newqdisc={0x310, 0x24, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xb, 0x8}, {0x6, 0xc}, {0xfff1, 0xfff1}}, [@TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x75, 0x5, 0x4, 0x1, 0xa3a0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0xcf9e, 0x101, 0x3, 0x5, 0x2, 0x8]}}, {{0x1c, 0x1, {0x9, 0x8, 0x0, 0x1, 0x2, 0x8, 0xfffff001, 0x3}}, {0xa, 0x2, [0x5, 0x1, 0x8]}}, {{0x1c, 0x1, {0x60, 0x3, 0xfff, 0x90ea, 0x2, 0x8, 0xfff, 0xa}}, {0x18, 0x2, [0xfec7, 0x7ff, 0x5, 0xd, 0xc017, 0x7a, 0x9, 0x1, 0xfff, 0x7]}}, {{0x1c, 0x1, {0x1, 0xc4, 0x2, 0x7, 0x1, 0x3ff, 0x1, 0x9}}, {0x16, 0x2, [0xda61, 0x6, 0x6, 0x7ff, 0x4, 0x81, 0x9, 0x1d6, 0x1]}}, {{0x1c, 0x1, {0x4, 0x1, 0xd, 0x4, 0x2, 0xf, 0x7, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0xd5, 0x1, 0xe5, 0x7fffffff, 0x1, 0x5, 0x5, 0x1}}, {0x6, 0x2, [0x9]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x100000}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x3, 0xa8, 0x6, 0x2, 0xffff, 0x0, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x6}, @TCA_CAKE_RTT={0x8, 0x7, 0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}, @TCA_STAB={0x17c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x4, 0x8, 0x1, 0x1, 0x5, 0x7ff, 0x9}}, {0x16, 0x2, [0x9, 0xf9e, 0xfffb, 0x988, 0x8, 0x2, 0x8, 0x4, 0x1]}}, {{0x1c, 0x1, {0x2, 0xff, 0x7ff, 0x7f, 0x1, 0x0, 0x3, 0xa}}, {0x18, 0x2, [0x7, 0x2, 0x0, 0xf15, 0x5, 0x0, 0x200, 0x546, 0x3, 0x81]}}, {{0x1c, 0x1, {0x6, 0x7, 0x100, 0x0, 0x0, 0x3, 0x401, 0x4}}, {0xc, 0x2, [0x6, 0x6, 0x6, 0x1cd]}}, {{0x1c, 0x1, {0xfc, 0x1, 0x7ff, 0x2, 0x2, 0x8, 0x19, 0x7}}, {0x12, 0x2, [0x8, 0x9, 0x1, 0x8, 0x80, 0x309, 0x7665]}}, {{0x1c, 0x1, {0x3, 0x1, 0x5, 0x4, 0x1, 0xc562, 0x101, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xb9, 0x8, 0x1, 0xb705, 0xac35ba3ee785f0b, 0xd, 0x9, 0x2}}, {0x8, 0x2, [0xdb8, 0x1]}}, {{0x1c, 0x1, {0x7a, 0x5, 0x7, 0x7, 0x2, 0x1, 0xd, 0x2}}, {0x8, 0x2, [0xd32, 0x3ff]}}, {{0x1c, 0x1, {0x83, 0xfd, 0xcdb9, 0x4, 0x1, 0x7fffffff, 0x1, 0x3}}, {0xa, 0x2, [0xc, 0x4, 0x2]}}, {{0x1c, 0x1, {0x4b, 0x6, 0x100, 0x9, 0x2, 0x858, 0x8, 0x2}}, {0x8, 0x2, [0xf3, 0x0]}}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x10008000}, 0x8000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, 0x0, &(0x7f00000000c0)=""/172}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x7, 0xfffffffd, 0x7, 0x4, 0x53}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x11}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f00000000c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1f62}}], &(0x7f0000000140)='GPL\x00', 0x8001, 0xaf, &(0x7f0000000180)=""/175, 0x100, 0x56, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000280)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x2, 0xe}], 0x10, 0x8000}, 0x94) 360.291223ms ago: executing program 3 (id=799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a120000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000004000000189"], 0x340a) 228.409256ms ago: executing program 1 (id=803): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="58010000100001002cbc700000000008fc000000000000000000000000000001fe88000000000000001d0000000000010000ecdf000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000000003200000000000000000000000000000000000000fcfffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000090000000000000001000000000000000008400000000000090000000000000092020000000000000010000000000000000000000000000007350000020004002c00000000000000600002006362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000006e000b000000002000000000fffffff1ffa27affff", @ANYRES16], 0x158}}, 0x44050) 228.280126ms ago: executing program 1 (id=804): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="01154e000100000001160c000000", 0xe, 0x4c0d1, &(0x7f0000000040)={0x11, 0x11, r1, 0xfb88, 0x1, 0x0, @local}, 0x14) 228.118559ms ago: executing program 3 (id=805): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x70bd2c, 0x25dfdbfb, {0xa, 0x14, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x1, 0xa}, [@FRA_SRC={0x14, 0x2, @loopback}, @FRA_DST={0x14, 0x1, @remote}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x15}, 0x44090) 150.524037ms ago: executing program 1 (id=806): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="183000000100000000000000030000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000107010000f8ffffff070000000000003eb7030000652b0000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0xa}, 0x94) 150.402094ms ago: executing program 3 (id=807): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="58010000100001002cbc700000000008fc000000000000000000000000000001fe8800000000000000000000000019010000ecdf000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000000003200000000000000000000000000000000000000fcfffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000090000000000000001000000000000000008400000000000090000000000000092020000000000000010000000000000000000000000000007350000020004002c00000000000000600002006362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000006e000b00", @ANYRES16], 0x158}}, 0x44050) 150.342089ms ago: executing program 1 (id=808): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001340)=ANY=[@ANYBLOB="5c0100001000010000000000fdfffffffe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000020000000000020000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000a0000008a000000000000001c0017000000000000000000ffffffff00000000ffffffff0400000048000100736861323536"], 0x15c}}, 0x0) 90.243782ms ago: executing program 3 (id=809): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000400f9ff00fff5000000000000000000000000000100000000120002000a0006"], 0x6c}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r5) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000c80)=[@mss={0x2, 0x101}, @mss={0x2, 0x62}, @timestamp, @sack_perm, @window={0x3, 0x3, 0x4}], 0x5) syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r10 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r10, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x20, '\x00', @data, 0xfff}]}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300)={@empty, @multicast2, 0x0}, &(0x7f0000000340)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f00000003c0)={0x810, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x110, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r1}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x9, 0x8, 0x8}, {0x4, 0x81, 0xf4, 0xffff}, {0xf55f, 0x4, 0xf0, 0x5}, {0x5, 0x3, 0x8, 0x78}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r1}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x2, 0x3, 0x1000}, {0x2, 0xfb, 0x0, 0x5}]}}}]}}, {{0x8, 0x1, r2}, {0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x6, 0x95}, {0x80, 0xb, 0xcb, 0x3}, {0x4, 0x7, 0x5, 0x1ff}, {0x618, 0x9, 0x32, 0xfff}]}}}]}}, {{0x8, 0x1, r13}, {0x218, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x23}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4d4482c8}}}]}}, {{0x8, 0x1, r1}, {0x1b8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x71}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r2}, {0xa0, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xa, 0x2, 0x6}, {0x2, 0x1, 0xd, 0x1000}, {0xff, 0x9, 0x6, 0xfffffffd}, {0x10, 0x5, 0x2, 0x2}, {0x7, 0x2, 0x0, 0x1}, {0x1, 0xb, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x810}, 0x1, 0x0, 0x0, 0x40000}, 0x88c0) 90.140882ms ago: executing program 1 (id=810): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000050200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c547d03daa0f4bd00", [0x7f, 0x9]}}) 353.063µs ago: executing program 3 (id=811): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="58010000100001002cbc700000000008fc000000000000000000000000000001fe8800000000000000000000000000010000ecdf000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000000003200000000000019000000000000000000000000fcfffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000090000000000000001000000000000000008400000000000090000000000000092020000000000000010000000000000000000000000000007350000020004002c00000000000000600002006362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000006e000b000000002000000000fffffff1ffa27afffffe", @ANYRES16], 0x158}}, 0x44050) 117.81µs ago: executing program 1 (id=812): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 0s ago: executing program 3 (id=813): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) fremovexattr(r0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x2, r0, 0x0, 0x80000}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4855}, 0x24000052) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) (async) fremovexattr(r0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x2, r0, 0x0, 0x80000}) (async) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4855}, 0x24000052) (async) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) 0s ago: executing program 1 (id=815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a120000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000006000000189"], 0x340a) kernel console output (not intermixed with test programs): N 0 to HW filter on device netdevsim3 [ 38.270905][ T5720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.292191][ T5723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.295473][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.304299][ T5723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.306355][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.307895][ T5720] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.311748][ T5723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.313367][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.313983][ T5723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.315485][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.319442][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.319488][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.325691][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.325734][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.330632][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.376699][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.390652][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.390763][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.403464][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.403689][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.423319][ T5721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.465951][ T5721] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.481527][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.485858][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.485927][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.491786][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.491882][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.514330][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.523556][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.523602][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.540712][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.540757][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.665422][ T5720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.703027][ T5720] veth0_vlan: entered promiscuous mode [ 38.708937][ T5720] veth1_vlan: entered promiscuous mode [ 38.724618][ T5720] veth0_macvtap: entered promiscuous mode [ 38.730415][ T5720] veth1_macvtap: entered promiscuous mode [ 38.741175][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.745597][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.750415][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.814056][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.814167][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.814187][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.814225][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.814278][ T5728] veth0_vlan: entered promiscuous mode [ 38.818602][ T5721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.820393][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.820405][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.827018][ T5728] veth1_vlan: entered promiscuous mode [ 38.844578][ T5727] Bluetooth: hci3: command tx timeout [ 38.844618][ T65] Bluetooth: hci1: command tx timeout [ 38.845140][ T5084] Bluetooth: hci2: command tx timeout [ 38.845164][ T65] Bluetooth: hci0: command tx timeout [ 38.848923][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.857366][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.857378][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.871073][ T5728] veth0_macvtap: entered promiscuous mode [ 38.876317][ T5728] veth1_macvtap: entered promiscuous mode [ 38.883005][ T5721] veth0_vlan: entered promiscuous mode [ 38.900628][ T5721] veth1_vlan: entered promiscuous mode [ 38.906875][ T5720] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.912533][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.916536][ T5723] veth0_vlan: entered promiscuous mode [ 38.921484][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.940992][ T5723] veth1_vlan: entered promiscuous mode [ 38.960843][ T5721] veth0_macvtap: entered promiscuous mode [ 38.968697][ T5721] veth1_macvtap: entered promiscuous mode [ 38.986099][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.991243][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.992044][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.992055][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.994082][ T5723] veth0_macvtap: entered promiscuous mode [ 39.001776][ T5723] veth1_macvtap: entered promiscuous mode [ 39.026517][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.028645][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.028657][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.046122][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.064157][ T5811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.064319][ T5811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.064530][ T5811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.083721][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.083747][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.083765][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.083782][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.083800][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.094989][ T5811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.095440][ T5811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.110293][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.110306][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.133604][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.133631][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.143444][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5'. [ 39.151142][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.151154][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.167195][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.167214][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.190863][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 39.225737][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.225750][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.320555][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 39.331987][ T5900] capability: warning: `syz.2.9' uses deprecated v2 capabilities in a way that may be insecure [ 39.341766][ T5900] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 39.341776][ T5900] overlayfs: missing 'lowerdir' [ 39.436258][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 39.460841][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 39.494902][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 39.495140][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 39.510613][ T5916] bond2: Invalid ad_actor_system MAC address. [ 39.510627][ T5916] bond2: option ad_actor_system: invalid value (65541) [ 39.515005][ T5916] bond2 (unregistering): Released all slaves [ 39.571242][ T5916] Zero length message leads to an empty skb [ 39.605095][ T1869] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 39.645318][ T5922] ======================================================= [ 39.645318][ T5922] WARNING: The mand mount option has been deprecated and [ 39.645318][ T5922] and is ignored by this kernel. Remove the mand [ 39.645318][ T5922] option from the mount to silence this warning. [ 39.645318][ T5922] ======================================================= [ 39.645353][ T5922] fuse: Unknown parameter '' [ 39.647682][ T5922] PM: Enabling pm_trace changes system date and time during resume. [ 39.647682][ T5922] PM: Correct system time has to be restored manually after resume. [ 39.689844][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 39.753965][ T1869] usb 5-1: Using ep0 maxpacket: 16 [ 39.756655][ T1869] usb 5-1: unable to get BOS descriptor or descriptor too short [ 39.756679][ T1869] usb 5-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 39.758385][ T1869] usb 5-1: config 1 has an invalid interface number: 232 but max is 0 [ 39.758400][ T1869] usb 5-1: config 1 has no interface number 0 [ 39.758417][ T1869] usb 5-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 39.758429][ T1869] usb 5-1: config 1 interface 232 has no altsetting 0 [ 39.759979][ T1869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.759991][ T1869] usb 5-1: Product: syz [ 39.759998][ T1869] usb 5-1: Manufacturer: syz [ 39.760005][ T1869] usb 5-1: SerialNumber: syz [ 39.762758][ T5902] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 39.777565][ T5928] netlink: 'syz.2.21': attribute type 2 has an invalid length. [ 39.780581][ T5928] usb usb8: usbfs: process 5928 (syz.2.21) did not claim interface 0 before use [ 39.884599][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 39.910405][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 39.971033][ T5902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.971224][ T5902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.174408][ T5902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.174667][ T5902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.179991][ T1869] hub 5-1:1.232: bad descriptor, ignoring hub [ 40.180006][ T1869] hub 5-1:1.232: probe with driver hub failed with error -5 [ 40.180443][ T1869] option 5-1:1.232: GSM modem (1-port) converter detected [ 40.186260][ T1869] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 40.214324][ T1869] usb 5-1: USB disconnect, device number 2 [ 40.219411][ T1869] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 40.219791][ T1869] option 5-1:1.232: device disconnected [ 40.323613][ T30] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 40.451233][ T5950] kAFS: No cell specified [ 40.483673][ T30] usb 8-1: Using ep0 maxpacket: 32 [ 40.484127][ T30] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 40.484898][ T30] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 40.484918][ T30] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 40.484931][ T30] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 40.484943][ T30] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 40.486684][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.486695][ T30] usb 8-1: Product: syz [ 40.486702][ T30] usb 8-1: Manufacturer: syz [ 40.486709][ T30] usb 8-1: SerialNumber: syz [ 40.492986][ C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 40.497403][ T30] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input5 [ 40.714186][ T30] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 40.714216][ T30] (id 0x00) [ 40.764398][ T30] rc_core: IR keymap rc-imon-pad not found [ 40.764409][ T30] Registered IR keymap rc-empty [ 40.764446][ T30] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 40.764454][ T30] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 40.784120][ T5968] process 'syz.1.38' launched './file1' with NULL argv: empty string added [ 40.922661][ T5976] xt_hashlimit: size too large, truncated to 1048576 [ 40.923637][ T5727] Bluetooth: hci2: command tx timeout [ 40.924584][ T30] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 40.925946][ T30] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input6 [ 40.931723][ T30] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:2> initialized [ 40.934553][ T5727] Bluetooth: hci3: command tx timeout [ 40.934578][ T5727] Bluetooth: hci0: command tx timeout [ 40.934595][ T5727] Bluetooth: hci1: command tx timeout [ 41.032574][ T5980] netlink: 'syz.1.42': attribute type 32 has an invalid length. [ 41.044464][ T5980] bond3: Setting coupled_control to off (0) [ 41.100238][ T5943] gre1: entered allmulticast mode [ 41.118988][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.119216][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.421889][ T5737] Bluetooth: hci2: Dropping invalid advertising data [ 41.421932][ T5737] Bluetooth: hci2: Dropping invalid advertising data [ 41.421941][ T5737] Bluetooth: hci2: Malformed LE Event: 0x02 [ 41.430988][ T5992] bridge0: port 3(ipvlan2) entered blocking state [ 41.431124][ T5992] bridge0: port 3(ipvlan2) entered disabled state [ 41.431234][ T5992] ipvlan2: entered allmulticast mode [ 41.431249][ T5992] bridge0: entered allmulticast mode [ 41.434469][ T5992] ipvlan2: left allmulticast mode [ 41.434488][ T5992] bridge0: left allmulticast mode [ 41.443776][ T5874] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 41.593601][ T43] kauditd_printk_skb: 103 callbacks suppressed [ 41.593613][ T43] audit: type=1400 audit(1789399527.153:275): avc: denied { unmount } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 41.593636][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 41.595560][ T5874] usb 6-1: unable to get BOS descriptor or descriptor too short [ 41.595596][ T5874] usb 6-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 41.597541][ T5874] usb 6-1: config 1 has an invalid interface number: 232 but max is 0 [ 41.597562][ T5874] usb 6-1: config 1 has no interface number 0 [ 41.597600][ T5874] usb 6-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 41.597620][ T5874] usb 6-1: config 1 interface 232 has no altsetting 0 [ 41.605381][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.605402][ T5874] usb 6-1: Product: syz [ 41.605414][ T5874] usb 6-1: Manufacturer: syz [ 41.605426][ T5874] usb 6-1: SerialNumber: syz [ 41.618312][ T5990] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 41.623209][ T43] audit: type=1400 audit(1789399527.183:276): avc: denied { create } for pid=5997 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.624942][ T43] audit: type=1400 audit(1789399527.183:277): avc: denied { setopt } for pid=5997 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.826461][ T5990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.827145][ T5990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.858468][ T6010] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 41.909399][ T1869] usb 8-1: USB disconnect, device number 2 [ 41.909674][ T6008] imon:send_packet: packet tx failed (-71) [ 41.923700][ T6008] imon:vfd_write: send packet #2 failed [ 41.925968][ T43] audit: type=1400 audit(1789399527.493:278): avc: denied { write } for pid=6014 comm="syz.0.55" name="event4" dev="devtmpfs" ino=2847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.028693][ T5990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.028964][ T5990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.036095][ T5874] hub 6-1:1.232: bad descriptor, ignoring hub [ 42.036109][ T5874] hub 6-1:1.232: probe with driver hub failed with error -5 [ 42.036552][ T5874] option 6-1:1.232: GSM modem (1-port) converter detected [ 42.038996][ T5874] usb 6-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 42.063775][ T5874] usb 6-1: USB disconnect, device number 2 [ 42.069531][ T5874] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 42.069818][ T5874] option 6-1:1.232: device disconnected [ 42.463299][ T43] audit: type=1400 audit(1789399528.023:279): avc: denied { getopt } for pid=6016 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.464120][ T43] audit: type=1400 audit(1789399528.033:280): avc: denied { connect } for pid=6016 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.465921][ T43] audit: type=1400 audit(1789399528.033:281): avc: denied { name_connect } for pid=6016 comm="syz.0.56" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 42.514509][ T43] audit: type=1400 audit(1789399528.083:282): avc: denied { write } for pid=6016 comm="syz.0.56" lport=35073 faddr=::ffff:10.1.1.0 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.563935][ T43] audit: type=1400 audit(1789399528.133:283): avc: denied { create } for pid=6019 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.565655][ T43] audit: type=1400 audit(1789399528.133:284): avc: denied { write } for pid=6019 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.637690][ T6030] netlink: 'syz.1.60': attribute type 4 has an invalid length. [ 42.649654][ T6030] netlink: 'syz.1.60': attribute type 4 has an invalid length. [ 42.657961][ T6030] netlink: 'syz.1.60': attribute type 39 has an invalid length. [ 43.003603][ T5737] Bluetooth: hci0: command tx timeout [ 43.003632][ T5727] Bluetooth: hci3: command tx timeout [ 43.003634][ T5737] Bluetooth: hci2: command tx timeout [ 43.013874][ T5084] Bluetooth: hci1: command tx timeout [ 43.048235][ T6040] evm: overlay not supported [ 43.533222][ T6057] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 44.010683][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.011149][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.043196][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.045479][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.124580][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.124608][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.124637][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.124657][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.137146][ T6078] loop5: detected capacity change from 0 to 7 [ 44.141210][ T6078] Dev loop5: unable to read RDB block 7 [ 44.141231][ T6078] loop5: unable to read partition table [ 44.141319][ T6078] loop5: partition table beyond EOD, truncated [ 44.141337][ T6078] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 44.167747][ T6080] __nla_validate_parse: 22 callbacks suppressed [ 44.167759][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 44.190647][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 44.223190][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 44.410099][ T6105] loop5: detected capacity change from 0 to 7 [ 44.412892][ T6105] Dev loop5: unable to read RDB block 7 [ 44.412913][ T6105] loop5: unable to read partition table [ 44.412992][ T6105] loop5: partition table beyond EOD, truncated [ 44.413001][ T6105] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 44.477951][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'. [ 44.492502][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'. [ 44.528174][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 44.554509][ T1032] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 44.556768][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 44.570637][ T6121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.98'. [ 44.629514][ T6126] binder: binder_mmap: 6125 200000000000-200000200000 bad vm_flags failed -1 [ 44.630990][ T6126] binder: 6125:6126 ioctl 40084146 200000000000 returned -22 [ 44.638742][ T6128] loop5: detected capacity change from 0 to 7 [ 44.644625][ T6128] Dev loop5: unable to read RDB block 7 [ 44.644646][ T6128] loop5: unable to read partition table [ 44.644730][ T6128] loop5: partition table beyond EOD, truncated [ 44.644739][ T6128] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 44.673104][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'. [ 44.676558][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.103'. [ 44.704899][ T1032] usb 6-1: Invalid ep0 maxpacket: 16 [ 44.843681][ T1032] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 44.909780][ T6153] SELinux: Context system_u:object_r:groupadd_exec_t:s0 is not valid (left unmapped). [ 44.977094][ T6157] loop5: detected capacity change from 0 to 7 [ 44.979295][ T6157] Dev loop5: unable to read RDB block 7 [ 44.979316][ T6157] loop5: unable to read partition table [ 44.979434][ T6157] loop5: partition table beyond EOD, truncated [ 44.980375][ T6157] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 45.008862][ T6159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47103 sclass=netlink_route_socket pid=6159 comm=syz.3.113 [ 45.008921][ T6159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47103 sclass=netlink_route_socket pid=6159 comm=syz.3.113 [ 45.008967][ T6159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47103 sclass=netlink_route_socket pid=6159 comm=syz.3.113 [ 45.009191][ T6159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47103 sclass=netlink_route_socket pid=6159 comm=syz.3.113 [ 45.009240][ T6159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47103 sclass=netlink_route_socket pid=6159 comm=syz.3.113 [ 45.009284][ T6159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47103 sclass=netlink_route_socket pid=6159 comm=syz.3.113 [ 45.009327][ T6159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47103 sclass=netlink_route_socket pid=6159 comm=syz.3.113 [ 45.009378][ T6159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47103 sclass=netlink_route_socket pid=6159 comm=syz.3.113 [ 45.009424][ T6159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47103 sclass=netlink_route_socket pid=6159 comm=syz.3.113 [ 45.009469][ T6159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47103 sclass=netlink_route_socket pid=6159 comm=syz.3.113 [ 45.013664][ T1032] usb 6-1: Invalid ep0 maxpacket: 16 [ 45.013876][ T1032] usb usb6-port1: attempt power cycle [ 45.084876][ T5084] Bluetooth: hci0: command tx timeout [ 45.084909][ T5084] Bluetooth: hci3: command tx timeout [ 45.084911][ T5727] Bluetooth: hci1: command tx timeout [ 45.084921][ T5084] Bluetooth: hci2: command tx timeout [ 45.128419][ T6167] x_tables: duplicate underflow at hook 1 [ 45.210056][ T6173] FAULT_INJECTION: forcing a failure. [ 45.210056][ T6173] name failslab, interval 1, probability 0, space 0, times 1 [ 45.210076][ T6173] CPU: 2 UID: 0 PID: 6173 Comm: syz.3.118 Not tainted syzkaller #0 PREEMPT(full) [ 45.210088][ T6173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 45.210094][ T6173] Call Trace: [ 45.210098][ T6173] [ 45.210103][ T6173] dump_stack_lvl+0x100/0x190 [ 45.210123][ T6173] should_fail_ex.cold+0x5/0xa [ 45.210139][ T6173] should_failslab+0xc2/0x120 [ 45.210153][ T6173] __kmalloc_noprof+0xfc/0x840 [ 45.210164][ T6173] ? rcu_is_watching+0x13/0xc0 [ 45.210201][ T6173] ? tomoyo_realpath_from_path+0xb6/0x690 [ 45.210224][ T6173] tomoyo_realpath_from_path+0xb6/0x690 [ 45.210248][ T6173] tomoyo_path_number_perm+0x23c/0x580 [ 45.210265][ T6173] ? tomoyo_path_number_perm+0x22e/0x580 [ 45.210285][ T6173] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 45.210312][ T6173] ? __lock_acquire+0x5c0/0x1f40 [ 45.210342][ T6173] ? __fget_files+0x34/0x3d0 [ 45.210367][ T6173] ? find_held_lock+0x2b/0x80 [ 45.210391][ T6173] ? hook_file_ioctl_common+0x140/0x440 [ 45.210420][ T6173] ? __fget_files+0x21f/0x3d0 [ 45.210445][ T6173] security_file_ioctl+0xd3/0x230 [ 45.210465][ T6173] __x64_sys_ioctl+0xb7/0x210 [ 45.210484][ T6173] do_syscall_64+0x123/0x790 [ 45.210509][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.210526][ T6173] RIP: 0033:0x7fcd88f9e159 [ 45.210541][ T6173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.210556][ T6173] RSP: 002b:00007fcd89e17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.210573][ T6173] RAX: ffffffffffffffda RBX: 00007fcd89225fa0 RCX: 00007fcd88f9e159 [ 45.210583][ T6173] RDX: 0000000000000000 RSI: 0000000080044501 RDI: 0000000000000003 [ 45.210593][ T6173] RBP: 00007fcd89e17090 R08: 0000000000000000 R09: 0000000000000000 [ 45.210603][ T6173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.210614][ T6173] R13: 00007fcd89226038 R14: 00007fcd89225fa0 R15: 00007ffd5a824b18 [ 45.210635][ T6173] [ 45.210642][ T6173] ERROR: Out of memory at tomoyo_realpath_from_path. [ 45.248472][ T5737] Bluetooth: hci3: Dropping invalid advertising data [ 45.248490][ T5737] Bluetooth: hci3: Malformed LE Event: 0x02 [ 45.339946][ T6181] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 45.354109][ T1032] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 45.374534][ T1032] usb 6-1: Invalid ep0 maxpacket: 16 [ 45.423858][ T5330] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 45.462951][ T6186] loop5: detected capacity change from 0 to 7 [ 45.467951][ T6186] Dev loop5: unable to read RDB block 7 [ 45.467973][ T6186] loop5: unable to read partition table [ 45.468069][ T6186] loop5: partition table beyond EOD, truncated [ 45.468079][ T6186] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 45.513639][ T1032] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 45.519812][ T6188] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 45.544560][ T1032] usb 6-1: Invalid ep0 maxpacket: 16 [ 45.544677][ T1032] usb usb6-port1: unable to enumerate USB device [ 45.573611][ T5330] usb 5-1: Using ep0 maxpacket: 32 [ 45.574928][ T5330] usb 5-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.40 [ 45.575744][ T5330] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 228, changing to 11 [ 45.575760][ T5330] usb 5-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 45.575772][ T5330] usb 5-1: config 1 interface 0 has no altsetting 0 [ 45.577253][ T5330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.577264][ T5330] usb 5-1: Product: 倊 [ 45.577271][ T5330] usb 5-1: Manufacturer: 鉚꺶핰័ƕ먬ᢺ끰헼妒蟛傱띣윾忤͕⪶㠬뵀擮沑᯶茪ኜ朇㩱嫶港ӱ⺸▱頩펳醤ꙹ帶᦬褷ꎇ퟇獱쒌㮌螨癎븗祎쩤㭤鼢䟞寪尘佉樶툺旱蘖釞䑷憱஌큈䴝省 [ 45.577284][ T5330] usb 5-1: SerialNumber: Ⰱ [ 45.850293][ T6200] FAULT_INJECTION: forcing a failure. [ 45.850293][ T6200] name failslab, interval 1, probability 0, space 0, times 0 [ 45.850320][ T6200] CPU: 2 UID: 0 PID: 6200 Comm: syz.3.130 Not tainted syzkaller #0 PREEMPT(full) [ 45.850339][ T6200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 45.850349][ T6200] Call Trace: [ 45.850355][ T6200] [ 45.850363][ T6200] dump_stack_lvl+0x100/0x190 [ 45.850391][ T6200] should_fail_ex.cold+0x5/0xa [ 45.850415][ T6200] should_failslab+0xc2/0x120 [ 45.850437][ T6200] __kmalloc_noprof+0xfc/0x840 [ 45.850456][ T6200] ? tomoyo_encode2+0xfb/0x3c0 [ 45.850480][ T6200] tomoyo_encode2+0xfb/0x3c0 [ 45.850504][ T6200] tomoyo_encode+0x29/0x50 [ 45.850522][ T6200] tomoyo_realpath_from_path+0x18c/0x690 [ 45.850548][ T6200] tomoyo_path_number_perm+0x23c/0x580 [ 45.850564][ T6200] ? tomoyo_path_number_perm+0x22e/0x580 [ 45.850583][ T6200] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 45.850609][ T6200] ? __lock_acquire+0x5c0/0x1f40 [ 45.850637][ T6200] ? __fget_files+0x34/0x3d0 [ 45.850658][ T6200] ? find_held_lock+0x2b/0x80 [ 45.850680][ T6200] ? hook_file_ioctl_common+0x140/0x440 [ 45.850707][ T6200] ? __fget_files+0x21f/0x3d0 [ 45.850738][ T6200] security_file_ioctl+0xd3/0x230 [ 45.850757][ T6200] __x64_sys_ioctl+0xb7/0x210 [ 45.850776][ T6200] do_syscall_64+0x123/0x790 [ 45.850800][ T6200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.850817][ T6200] RIP: 0033:0x7fcd88f9e159 [ 45.850832][ T6200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.850846][ T6200] RSP: 002b:00007fcd89e17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.850864][ T6200] RAX: ffffffffffffffda RBX: 00007fcd89225fa0 RCX: 00007fcd88f9e159 [ 45.850875][ T6200] RDX: 0000000000000000 RSI: 0000000080044501 RDI: 0000000000000003 [ 45.850885][ T6200] RBP: 00007fcd89e17090 R08: 0000000000000000 R09: 0000000000000000 [ 45.850895][ T6200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.850905][ T6200] R13: 00007fcd89226038 R14: 00007fcd89225fa0 R15: 00007ffd5a824b18 [ 45.850928][ T6200] [ 45.850943][ T6200] ERROR: Out of memory at tomoyo_realpath_from_path. [ 45.970854][ T6208] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 45.971087][ T6208] SELinux: failed to load policy [ 45.998197][ T5330] usbhid 5-1:1.0: can't add hid device: -71 [ 45.998269][ T5330] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 46.001448][ T5330] usb 5-1: USB disconnect, device number 3 [ 46.161338][ T6214] block nbd0: server does not support multiple connections per device. [ 46.161863][ T6214] block nbd0: shutting down sockets [ 46.260987][ T6216] syzkaller0: entered promiscuous mode [ 46.261011][ T6216] syzkaller0: entered allmulticast mode [ 46.561023][ T6220] loop5: detected capacity change from 0 to 7 [ 46.563111][ T6220] Dev loop5: unable to read RDB block 7 [ 46.563176][ T6220] loop5: unable to read partition table [ 46.563266][ T6220] loop5: partition table beyond EOD, truncated [ 46.563282][ T6220] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 46.615978][ T43] kauditd_printk_skb: 61 callbacks suppressed [ 46.615992][ T43] audit: type=1400 audit(1789399532.183:346): avc: denied { mount } for pid=6221 comm="syz.0.137" name="/" dev="configfs" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 46.618308][ T43] audit: type=1400 audit(1789399532.183:347): avc: denied { search } for pid=6221 comm="syz.0.137" name="/" dev="configfs" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 46.618338][ T43] audit: type=1400 audit(1789399532.183:348): avc: denied { search } for pid=6221 comm="syz.0.137" name="usb_gadget" dev="configfs" ino=6263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 46.618358][ T43] audit: type=1400 audit(1789399532.183:349): avc: denied { write search } for pid=6221 comm="syz.0.137" name="usb_gadget" dev="configfs" ino=6263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 46.618377][ T43] audit: type=1400 audit(1789399532.183:350): avc: denied { add_name } for pid=6221 comm="syz.0.137" name="g_uac2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 46.618396][ T43] audit: type=1400 audit(1789399532.183:351): avc: denied { create } for pid=6221 comm="syz.0.137" name="g_uac2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 46.626592][ T43] audit: type=1400 audit(1789399532.193:352): avc: denied { search } for pid=6221 comm="syz.0.137" name="/" dev="configfs" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 46.626766][ T43] audit: type=1400 audit(1789399532.193:353): avc: denied { search } for pid=6221 comm="syz.0.137" name="usb_gadget" dev="configfs" ino=6263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 46.626898][ T43] audit: type=1400 audit(1789399532.193:354): avc: denied { search } for pid=6221 comm="syz.0.137" name="g_uac2" dev="configfs" ino=9989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 46.626991][ T43] audit: type=1400 audit(1789399532.193:355): avc: denied { search } for pid=6221 comm="syz.0.137" name="functions" dev="configfs" ino=9990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 47.357909][ T6245] loop5: detected capacity change from 0 to 7 [ 47.361228][ T6245] Dev loop5: unable to read RDB block 7 [ 47.361261][ T6245] loop5: unable to read partition table [ 47.361377][ T6245] loop5: partition table beyond EOD, truncated [ 47.361411][ T6245] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 47.395257][ T35] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 47.454854][ T6253] mmap: syz.3.146 (6253): VmData 37728256 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 47.457761][ T6253] netlink: 'syz.3.146': attribute type 29 has an invalid length. [ 47.514962][ T6259] warning: `syz.3.151' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 47.553587][ T35] usb 5-1: Using ep0 maxpacket: 16 [ 47.578745][ T35] usb 5-1: unable to get BOS descriptor or descriptor too short [ 47.578789][ T35] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 47.582148][ T35] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 47.582197][ T35] usb 5-1: can't read configurations, error -71 [ 47.604591][ T6263] batadv_slave_0: entered promiscuous mode [ 47.607697][ T6263] loop6: detected capacity change from 0 to 2640 [ 47.609651][ T6262] batadv_slave_0: left promiscuous mode [ 47.611261][ T5724] Buffer I/O error on dev loop6, logical block 0, async page read [ 47.611532][ T5724] Buffer I/O error on dev loop6, logical block 0, async page read [ 47.611744][ T5724] Buffer I/O error on dev loop6, logical block 0, async page read [ 47.611960][ T5724] Buffer I/O error on dev loop6, logical block 0, async page read [ 47.612202][ T5724] Buffer I/O error on dev loop6, logical block 0, async page read [ 47.654990][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.655004][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.695351][ T6271] xt_IDLETIMER: label is empty or not nul-terminated [ 47.703914][ T6271] could not open pipe file descriptor [ 47.828067][ T6277] i2c i2c-0: new_device: Instantiated device rt1719 at 0x04 [ 47.966198][ T5737] Bluetooth: hci2: command 0x0406 tx timeout [ 48.121285][ T6309] SELinux: unknown common  [ 48.121337][ T6309] SELinux: invalid class [ 48.121398][ T6309] SELinux: failed to load policy [ 48.143922][ T5874] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 48.176297][ T6315] NILFS (nullb0): couldn't find nilfs on the device [ 48.293661][ T5874] usb 6-1: device descriptor read/64, error -71 [ 48.316694][ T6327] loop5: detected capacity change from 0 to 7 [ 48.317557][ T6327] Dev loop5: unable to read RDB block 7 [ 48.317582][ T6327] loop5: unable to read partition table [ 48.317665][ T6327] loop5: partition table beyond EOD, truncated [ 48.317674][ T6327] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 48.553601][ T5874] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 48.565761][ T6349] loop5: detected capacity change from 0 to 7 [ 48.569855][ T6349] Dev loop5: unable to read RDB block 7 [ 48.569877][ T6349] loop5: unable to read partition table [ 48.569965][ T6349] loop5: partition table beyond EOD, truncated [ 48.569974][ T6349] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 48.693622][ T5874] usb 6-1: device descriptor read/64, error -71 [ 48.805390][ T5874] usb usb6-port1: attempt power cycle [ 48.973744][ T1032] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 49.133605][ T1032] usb 8-1: Invalid ep0 maxpacket: 64 [ 49.163619][ T5874] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 49.194031][ T5874] usb 6-1: device descriptor read/8, error -71 [ 49.263646][ T1032] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 49.293974][ T6388] __nla_validate_parse: 29 callbacks suppressed [ 49.293986][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 49.366057][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'. [ 49.433773][ T1032] usb 8-1: Invalid ep0 maxpacket: 64 [ 49.434101][ T5874] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 49.434335][ T1032] usb usb8-port1: attempt power cycle [ 49.455846][ T6398] syz.0.205 uses obsolete (PF_INET,SOCK_PACKET) [ 49.467894][ T5874] usb 6-1: device descriptor read/8, error -71 [ 49.573838][ T5874] usb usb6-port1: unable to enumerate USB device [ 49.725585][ T6406] netlink: 'syz.0.207': attribute type 10 has an invalid length. [ 49.739698][ T6406] team0 (unregistering): Port device team_slave_0 removed [ 49.745014][ T6406] team0 (unregistering): Port device team_slave_1 removed [ 49.783605][ T1032] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 49.804015][ T1032] usb 8-1: Invalid ep0 maxpacket: 64 [ 49.943616][ T1032] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 49.973973][ T1032] usb 8-1: Invalid ep0 maxpacket: 64 [ 49.974313][ T1032] usb usb8-port1: unable to enumerate USB device [ 50.870342][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 51.195977][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 51.378438][ T6459] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 51.583625][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 51.713673][ T25] usb 5-1: device descriptor read/64, error -71 [ 51.915991][ T43] kauditd_printk_skb: 44 callbacks suppressed [ 51.916007][ T43] audit: type=1400 audit(1789399537.483:400): avc: denied { mount } for pid=6468 comm="syz.3.229" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.916743][ T43] audit: type=1400 audit(1789399537.483:401): avc: denied { append } for pid=6468 comm="syz.3.229" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 51.953672][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 52.094110][ T25] usb 5-1: device descriptor read/64, error -71 [ 52.204155][ T25] usb usb5-port1: attempt power cycle [ 52.295743][ T43] audit: type=1400 audit(1789399537.863:402): avc: denied { write } for pid=6479 comm="syz.3.232" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 52.296844][ T43] audit: type=1400 audit(1789399537.863:403): avc: denied { mounton } for pid=6482 comm="syz.1.233" path="/54/file0" dev="tmpfs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 52.320237][ T6480] syzkaller1: entered promiscuous mode [ 52.320265][ T6480] syzkaller1: entered allmulticast mode [ 52.516044][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 52.558439][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 52.576229][ T25] usb 5-1: device descriptor read/8, error -71 [ 52.709179][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 52.734414][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 52.813608][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 52.834385][ T25] usb 5-1: device descriptor read/8, error -71 [ 52.953838][ T25] usb usb5-port1: unable to enumerate USB device [ 53.221202][ T6505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.243'. [ 53.261885][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 53.337856][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 53.378122][ T43] audit: type=1400 audit(1789399538.943:404): avc: denied { search } for pid=6512 comm="syz.1.247" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 53.380298][ T43] audit: type=1400 audit(1789399538.943:405): avc: denied { search } for pid=6512 comm="syz.1.247" name="per_cpu" dev="tracefs" ino=5543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 53.380341][ T43] audit: type=1400 audit(1789399538.943:406): avc: denied { search } for pid=6512 comm="syz.1.247" name="cpu0" dev="tracefs" ino=5544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 53.380376][ T43] audit: type=1400 audit(1789399538.943:407): avc: denied { read write } for pid=6512 comm="syz.1.247" name="trace" dev="tracefs" ino=5546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 53.380411][ T43] audit: type=1400 audit(1789399538.943:408): avc: denied { open } for pid=6512 comm="syz.1.247" path="/61/dir0/per_cpu/cpu0/trace" dev="tracefs" ino=5546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 53.513024][ T6524] jffs2: notice: (6524) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 53.518512][ T6524] trusted_key: encrypted_key: insufficient parameters specified [ 53.520257][ T43] audit: type=1400 audit(1789399539.083:409): avc: denied { write } for pid=6523 comm="syz.1.250" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.643252][ T6534] overlay: filesystem on ./file0 not supported as upperdir [ 53.757990][ T6542] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 53.758410][ T6542] batman_adv: batadv0: Adding interface: gretap1 [ 53.758418][ T6542] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.758432][ T6542] batman_adv: batadv0: Interface activated: gretap1 [ 53.863926][ T25] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 54.014077][ T25] usb 6-1: Invalid ep0 maxpacket: 32 [ 54.163695][ T25] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 54.313608][ T25] usb 6-1: Invalid ep0 maxpacket: 32 [ 54.313815][ T25] usb usb6-port1: attempt power cycle [ 54.393361][ T6569] __nla_validate_parse: 7 callbacks suppressed [ 54.393379][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 54.500994][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 54.537172][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 54.666967][ T25] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 54.695174][ T25] usb 6-1: Invalid ep0 maxpacket: 32 [ 54.715422][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 54.833615][ T25] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 54.854060][ T25] usb 6-1: Invalid ep0 maxpacket: 32 [ 54.854295][ T25] usb usb6-port1: unable to enumerate USB device [ 54.979029][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 55.003742][ T30] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 55.145755][ T30] usb 5-1: device descriptor read/64, error -71 [ 55.383682][ T30] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 55.513612][ T30] usb 5-1: device descriptor read/64, error -71 [ 55.624760][ T30] usb usb5-port1: attempt power cycle [ 55.963630][ T30] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 55.984182][ T30] usb 5-1: device descriptor read/8, error -71 [ 56.233823][ T30] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 56.264140][ T30] usb 5-1: device descriptor read/8, error -71 [ 56.383400][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.384174][ T30] usb usb5-port1: unable to enumerate USB device [ 56.485516][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.558728][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.622996][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.712608][ T12] bridge_slave_1: left allmulticast mode [ 56.712630][ T12] bridge_slave_1: left promiscuous mode [ 56.713171][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.721165][ T12] bridge_slave_0: left allmulticast mode [ 56.721184][ T12] bridge_slave_0: left promiscuous mode [ 56.721330][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.810584][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.812832][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.813795][ T12] bond0 (unregistering): Released all slaves [ 56.816965][ T12] bond1 (unregistering): Released all slaves [ 56.823108][ T12] bond2 (unregistering): Released all slaves [ 56.936579][ T43] kauditd_printk_skb: 32 callbacks suppressed [ 56.936592][ T43] audit: type=1400 audit(1789399542.503:442): avc: denied { write } for pid=6601 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.937043][ T43] audit: type=1400 audit(1789399542.503:443): avc: denied { remove_name } for pid=6601 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=3228 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.972705][ T5439] 8021q: adding VLAN 0 to HW filter on device eth2 [ 57.033178][ T43] audit: type=1400 audit(1789399542.593:444): avc: denied { write } for pid=6604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.065816][ T12] hsr_slave_0: left promiscuous mode [ 57.066225][ T12] hsr_slave_1: left promiscuous mode [ 57.066638][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.066654][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.067404][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.067414][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.070606][ T12] veth1_macvtap: left promiscuous mode [ 57.070664][ T12] veth0_macvtap: left promiscuous mode [ 57.070716][ T12] veth1_vlan: left promiscuous mode [ 57.070755][ T12] veth0_vlan: left promiscuous mode [ 57.085216][ T43] audit: type=1400 audit(1789399542.653:445): avc: denied { write } for pid=6607 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.188129][ T12] team0 (unregistering): Port device team_slave_1 removed [ 57.193059][ T12] team0 (unregistering): Port device team_slave_0 removed [ 57.259184][ T5439] 8021q: adding VLAN 0 to HW filter on device eth3 [ 57.321874][ T43] audit: type=1400 audit(1789399542.883:446): avc: denied { write } for pid=6610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.373065][ T43] audit: type=1400 audit(1789399542.933:447): avc: denied { write } for pid=6613 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.406343][ T5439] 8021q: adding VLAN 0 to HW filter on device eth4 [ 57.503419][ T43] audit: type=1400 audit(1789399543.063:448): avc: denied { write } for pid=6616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.552682][ T43] audit: type=1400 audit(1789399543.113:449): avc: denied { write } for pid=6619 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.591332][ T5439] 8021q: adding VLAN 0 to HW filter on device eth5 [ 66.978355][ T43] audit: type=1400 audit(1789399552.543:450): avc: denied { write } for pid=6633 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.026898][ T43] audit: type=1400 audit(1789399552.593:451): avc: denied { write } for pid=6636 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.131766][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 68.160886][ T6651] loop5: detected capacity change from 0 to 7 [ 68.164832][ T6651] Dev loop5: unable to read RDB block 7 [ 68.164866][ T6651] loop5: unable to read partition table [ 68.165019][ T6651] loop5: partition table beyond EOD, truncated [ 68.165033][ T6651] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 68.200806][ T5737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.204049][ T5737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.204451][ T5737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.205004][ T5737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.205550][ T5737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.277482][ T43] audit: type=1400 audit(1789399553.843:452): avc: denied { write } for pid=6654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.284559][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 68.345516][ T43] audit: type=1400 audit(1789399553.913:453): avc: denied { write } for pid=6673 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.453105][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 68.493042][ T43] audit: type=1400 audit(1789399554.053:454): avc: denied { create } for pid=6688 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.494520][ T6689] 9p: Unknown access argument : -22 [ 68.495056][ T43] audit: type=1326 audit(1789399554.063:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6688 comm="syz.3.288" exe="/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fcd88f9e159 code=0x0 [ 68.516121][ T43] audit: type=1400 audit(1789399554.083:456): avc: denied { write } for pid=6688 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.516345][ T6691] netlink: 'syz.3.288': attribute type 2 has an invalid length. [ 68.516359][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 68.583599][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 68.620438][ T43] audit: type=1400 audit(1789399554.183:457): avc: denied { write } for pid=6698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.661949][ T43] audit: type=1400 audit(1789399554.223:458): avc: denied { write } for pid=6704 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.723586][ T25] usb 5-1: device descriptor read/64, error -71 [ 68.740595][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.740682][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.740740][ T6653] bridge_slave_0: entered allmulticast mode [ 68.741478][ T6653] bridge_slave_0: entered promiscuous mode [ 68.742921][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.742986][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.743038][ T6653] bridge_slave_1: entered allmulticast mode [ 68.743793][ T6653] bridge_slave_1: entered promiscuous mode [ 68.761227][ T43] audit: type=1400 audit(1789399554.323:459): avc: denied { write } for pid=6709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.763095][ T6653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.765638][ T6653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.786603][ T6653] team0: Port device team_slave_0 added [ 68.789099][ T6653] team0: Port device team_slave_1 added [ 68.805095][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.805106][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.805118][ T6653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.805971][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.805979][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.805990][ T6653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.825016][ T6653] hsr_slave_0: entered promiscuous mode [ 68.825432][ T6653] hsr_slave_1: entered promiscuous mode [ 68.825721][ T6653] debugfs: 'hsr0' already exists in 'hsr' [ 68.825732][ T6653] Cannot create hsr debugfs directory [ 68.954995][ T6653] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.957322][ T6653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.957836][ T6653] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.959506][ T6653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.959990][ T6653] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.961943][ T6653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.962314][ T6653] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.964007][ T6653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.973669][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 68.977639][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.977693][ T6653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.977795][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.977837][ T6653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.006901][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.012339][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.012696][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.028140][ T6653] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.032592][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.032675][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.038697][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.038805][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.123782][ T25] usb 5-1: device descriptor read/64, error -71 [ 69.234110][ T25] usb usb5-port1: attempt power cycle [ 69.274862][ T6653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.573648][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 69.594797][ T25] usb 5-1: device descriptor read/8, error -71 [ 69.863678][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 69.884025][ T25] usb 5-1: device descriptor read/8, error -71 [ 69.983931][ T25] usb usb5-port1: unable to enumerate USB device [ 70.273329][ T6653] veth0_vlan: entered promiscuous mode [ 70.279291][ T6653] veth1_vlan: entered promiscuous mode [ 70.284278][ T5084] Bluetooth: hci0: command tx timeout [ 70.295768][ T6653] veth0_macvtap: entered promiscuous mode [ 70.299573][ T6653] veth1_macvtap: entered promiscuous mode [ 70.311441][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.314673][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.316535][ T6774] loop5: detected capacity change from 0 to 7 [ 70.323127][ T6774] Dev loop5: unable to read RDB block 7 [ 70.323148][ T6774] loop5: unable to read partition table [ 70.323226][ T6774] loop5: partition table beyond EOD, truncated [ 70.323242][ T6774] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 70.380708][ T6781] FAULT_INJECTION: forcing a failure. [ 70.380708][ T6781] name failslab, interval 1, probability 0, space 0, times 0 [ 70.380728][ T6781] CPU: 2 UID: 0 PID: 6781 Comm: syz.3.292 Not tainted syzkaller #0 PREEMPT(full) [ 70.380740][ T6781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.380746][ T6781] Call Trace: [ 70.380750][ T6781] [ 70.380755][ T6781] dump_stack_lvl+0x100/0x190 [ 70.380775][ T6781] should_fail_ex.cold+0x5/0xa [ 70.380791][ T6781] should_failslab+0xc2/0x120 [ 70.380806][ T6781] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 70.380818][ T6781] ? shmem_alloc_inode+0x25/0x50 [ 70.380831][ T6781] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 70.380843][ T6781] shmem_alloc_inode+0x25/0x50 [ 70.380854][ T6781] alloc_inode+0x68/0x250 [ 70.380866][ T6781] new_inode+0x22/0x1c0 [ 70.380877][ T6781] shmem_get_inode+0x1e3/0xf70 [ 70.380891][ T6781] ? __pfx_shmem_get_inode+0x10/0x10 [ 70.380907][ T6781] __shmem_file_setup+0x382/0x460 [ 70.380921][ T6781] ? __pfx___shmem_file_setup+0x10/0x10 [ 70.380936][ T6781] ? vm_area_alloc+0x1f/0x160 [ 70.380952][ T6781] shmem_zero_setup+0x96/0x1b0 [ 70.380970][ T6781] __mmap_region+0x2692/0x32c0 [ 70.380991][ T6781] ? __pfx___mmap_region+0x10/0x10 [ 70.381014][ T6781] ? process_measurement+0x1567/0x2350 [ 70.381027][ T6781] ? __pfx___might_resched+0x10/0x10 [ 70.381039][ T6781] ? find_held_lock+0x2b/0x80 [ 70.381054][ T6781] ? process_measurement+0x4c8/0x2350 [ 70.381065][ T6781] ? process_measurement+0x4c8/0x2350 [ 70.381077][ T6781] ? down_write+0x146/0x1f0 [ 70.381107][ T6781] ? lock_acquire+0x1d1/0x380 [ 70.381140][ T6781] mmap_region+0x3db/0x6d0 [ 70.381157][ T6781] ? __pfx_mmap_region+0x10/0x10 [ 70.381168][ T6781] ? shmem_get_unmapped_area+0x141/0x960 [ 70.381182][ T6781] ? selinux_mmap_addr+0x2b/0x110 [ 70.381193][ T6781] ? bpf_lsm_mmap_addr+0x9/0x30 [ 70.381207][ T6781] ? security_mmap_addr+0x71/0x1e0 [ 70.381221][ T6781] ? __get_unmapped_area+0x255/0x3e0 [ 70.381235][ T6781] do_mmap+0x12c7/0x1c30 [ 70.381251][ T6781] ? lock_acquire+0x1d1/0x380 [ 70.381262][ T6781] ? __pfx_do_mmap+0x10/0x10 [ 70.381276][ T6781] ? selinux_mmap_file+0x154/0x1c0 [ 70.381293][ T6781] ? __pfx_down_write_killable+0x10/0x10 [ 70.381309][ T6781] ? find_held_lock+0x2b/0x80 [ 70.381326][ T6781] vm_mmap_pgoff+0x28d/0x470 [ 70.381340][ T6781] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 70.381351][ T6781] ? lock_acquire+0x1d1/0x380 [ 70.381363][ T6781] ? __mutex_unlock_slowpath+0x35d/0x930 [ 70.381382][ T6781] ksys_mmap_pgoff+0xe4/0x610 [ 70.381397][ T6781] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 70.381408][ T6781] ? fput+0x7c/0x100 [ 70.381422][ T6781] ? ksys_write+0x1ac/0x250 [ 70.381433][ T6781] ? __pfx_ksys_write+0x10/0x10 [ 70.381445][ T6781] __x64_sys_mmap+0x125/0x190 [ 70.381460][ T6781] do_syscall_64+0x123/0x790 [ 70.381476][ T6781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.381487][ T6781] RIP: 0033:0x7fcd88f9e159 [ 70.381496][ T6781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.381506][ T6781] RSP: 002b:00007fcd89e17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 70.381518][ T6781] RAX: ffffffffffffffda RBX: 00007fcd89225fa0 RCX: 00007fcd88f9e159 [ 70.381524][ T6781] RDX: 0000000003000001 RSI: 0000000000b36000 RDI: 0000200000000000 [ 70.381531][ T6781] RBP: 00007fcd89e17090 R08: ffffffffffffffff R09: 000000007fda8000 [ 70.381537][ T6781] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 70.381543][ T6781] R13: 00007fcd89226038 R14: 00007fcd89225fa0 R15: 00007ffd5a824b18 [ 70.381557][ T6781] [ 70.382033][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.382046][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.407281][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.407300][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.416909][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.416933][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.416950][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.416967][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.476897][ T6788] ipt_REJECT: TCP_RESET invalid for non-tcp [ 70.522560][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 70.632823][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 70.665318][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 70.701430][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 70.701461][ T6812] netlink: 'syz.1.297': attribute type 30 has an invalid length. [ 70.701474][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 70.702811][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 70.702836][ T6812] netlink: 'syz.1.297': attribute type 30 has an invalid length. [ 70.749466][ T6819] loop5: detected capacity change from 0 to 7 [ 70.749870][ T6819] Dev loop5: unable to read RDB block 7 [ 70.749889][ T6819] loop5: unable to read partition table [ 70.749969][ T6819] loop5: partition table beyond EOD, truncated [ 70.749977][ T6819] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 70.778502][ T6821] gadgetfs: bound to dummy_udc driver [ 70.931967][ T6838] netlink: 'syz.3.309': attribute type 30 has an invalid length. [ 70.932497][ T6838] netlink: 'syz.3.309': attribute type 30 has an invalid length. [ 71.168481][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.168521][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.173411][ T851] cfg80211: failed to load regulatory.db [ 71.236702][ T6851] md: could not open device unknown-block(1,0). [ 71.283915][ T6854] loop5: detected capacity change from 0 to 7 [ 71.287300][ T6854] Dev loop5: unable to read RDB block 7 [ 71.287334][ T6854] loop5: unable to read partition table [ 71.287479][ T6854] loop5: partition table beyond EOD, truncated [ 71.287500][ T6854] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 71.400528][ T6862] FAULT_INJECTION: forcing a failure. [ 71.400528][ T6862] name failslab, interval 1, probability 0, space 0, times 0 [ 71.400557][ T6862] CPU: 3 UID: 0 PID: 6862 Comm: syz.3.318 Not tainted syzkaller #0 PREEMPT(full) [ 71.400577][ T6862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.400587][ T6862] Call Trace: [ 71.400593][ T6862] [ 71.400600][ T6862] dump_stack_lvl+0x100/0x190 [ 71.400644][ T6862] should_fail_ex.cold+0x5/0xa [ 71.400668][ T6862] should_failslab+0xc2/0x120 [ 71.400697][ T6862] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 71.400724][ T6862] ? __d_alloc+0x35/0xa50 [ 71.400752][ T6862] __d_alloc+0x35/0xa50 [ 71.400778][ T6862] d_alloc_pseudo+0x1c/0xc0 [ 71.400795][ T6862] alloc_file_pseudo+0x118/0x290 [ 71.400821][ T6862] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 71.400851][ T6862] __shmem_file_setup+0x205/0x460 [ 71.400874][ T6862] ? __pfx___shmem_file_setup+0x10/0x10 [ 71.400896][ T6862] ? vm_area_alloc+0x1f/0x160 [ 71.400922][ T6862] shmem_zero_setup+0x96/0x1b0 [ 71.400949][ T6862] __mmap_region+0x2692/0x32c0 [ 71.400979][ T6862] ? __pfx___mmap_region+0x10/0x10 [ 71.401017][ T6862] ? process_measurement+0x1567/0x2350 [ 71.401039][ T6862] ? __pfx___might_resched+0x10/0x10 [ 71.401058][ T6862] ? find_held_lock+0x2b/0x80 [ 71.401080][ T6862] ? process_measurement+0x4c8/0x2350 [ 71.401098][ T6862] ? process_measurement+0x4c8/0x2350 [ 71.401115][ T6862] ? down_write+0x146/0x1f0 [ 71.401170][ T6862] ? lock_acquire+0x1d1/0x380 [ 71.401227][ T6862] mmap_region+0x3db/0x6d0 [ 71.401246][ T6862] ? __pfx_mmap_region+0x10/0x10 [ 71.401264][ T6862] ? shmem_get_unmapped_area+0x141/0x960 [ 71.401286][ T6862] ? selinux_mmap_addr+0x2b/0x110 [ 71.401303][ T6862] ? bpf_lsm_mmap_addr+0x9/0x30 [ 71.401325][ T6862] ? security_mmap_addr+0x71/0x1e0 [ 71.401344][ T6862] ? __get_unmapped_area+0x255/0x3e0 [ 71.401368][ T6862] do_mmap+0x12c7/0x1c30 [ 71.401393][ T6862] ? lock_acquire+0x1d1/0x380 [ 71.401411][ T6862] ? __pfx_do_mmap+0x10/0x10 [ 71.401433][ T6862] ? selinux_mmap_file+0x154/0x1c0 [ 71.401461][ T6862] ? __pfx_down_write_killable+0x10/0x10 [ 71.401485][ T6862] ? find_held_lock+0x2b/0x80 [ 71.401511][ T6862] vm_mmap_pgoff+0x28d/0x470 [ 71.401534][ T6862] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 71.401552][ T6862] ? lock_acquire+0x1d1/0x380 [ 71.401573][ T6862] ? __mutex_unlock_slowpath+0x35d/0x930 [ 71.401602][ T6862] ksys_mmap_pgoff+0xe4/0x610 [ 71.401626][ T6862] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 71.401644][ T6862] ? fput+0x7c/0x100 [ 71.401664][ T6862] ? ksys_write+0x1ac/0x250 [ 71.401683][ T6862] ? __pfx_ksys_write+0x10/0x10 [ 71.401701][ T6862] __x64_sys_mmap+0x125/0x190 [ 71.401730][ T6862] do_syscall_64+0x123/0x790 [ 71.401755][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.401774][ T6862] RIP: 0033:0x7fcd88f9e159 [ 71.401788][ T6862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.401804][ T6862] RSP: 002b:00007fcd89e17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 71.401821][ T6862] RAX: ffffffffffffffda RBX: 00007fcd89225fa0 RCX: 00007fcd88f9e159 [ 71.401831][ T6862] RDX: 0000000003000001 RSI: 0000000000b36000 RDI: 0000200000000000 [ 71.401843][ T6862] RBP: 00007fcd89e17090 R08: ffffffffffffffff R09: 000000007fda8000 [ 71.401853][ T6862] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 71.401862][ T6862] R13: 00007fcd89226038 R14: 00007fcd89225fa0 R15: 00007ffd5a824b18 [ 71.401887][ T6862] [ 71.923611][ T25] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 71.942662][ T6894] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 72.074023][ T25] usb 6-1: device descriptor read/64, error -71 [ 72.256603][ T6911] loop5: detected capacity change from 0 to 7 [ 72.257375][ T6911] Dev loop5: unable to read RDB block 7 [ 72.257395][ T6911] loop5: unable to read partition table [ 72.257475][ T6911] loop5: partition table beyond EOD, truncated [ 72.257484][ T6911] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 72.270008][ T6913] veth0_to_bond: default FDB implementation only supports local addresses [ 72.277000][ T6913] netlink: 'syz.3.340': attribute type 2 has an invalid length. [ 72.290505][ T6913] : entered promiscuous mode [ 72.295010][ T6918] netlink: 'syz.3.340': attribute type 2 has an invalid length. [ 72.309134][ T6922] ip6t_hbh: too many supported opts specified [ 72.337447][ T25] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 72.359335][ T6924] ipt_ah: unknown flags FF [ 72.373713][ T5084] Bluetooth: hci0: command tx timeout [ 72.419235][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.421415][ T43] kauditd_printk_skb: 33 callbacks suppressed [ 72.421428][ T43] audit: type=1400 audit(1789399557.983:493): avc: denied { unlink } for pid=6932 comm="syz.0.346" name="#7" dev="tmpfs" ino=497 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 72.422579][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.423170][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.428603][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.437858][ T43] audit: type=1400 audit(1789399558.003:494): avc: denied { connect } for pid=6938 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.438418][ T43] audit: type=1400 audit(1789399558.003:495): avc: denied { read } for pid=6938 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.454284][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.454674][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.466714][ T25] usb 6-1: device descriptor read/64, error -71 [ 72.470149][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.475526][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.480780][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.483336][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.488679][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.489721][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.489770][ T43] audit: type=1400 audit(1789399558.053:496): avc: denied { write } for pid=6938 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.492125][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.498844][ T6944] Line length is too long: Should be less than 4094 [ 72.498935][ T6943] Line length is too long: Should be less than 4094 [ 72.500552][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.504495][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.505161][ T6939] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 72.514142][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.514884][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.516514][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.521304][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.527185][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.537346][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.540203][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.544557][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.545095][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.546096][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.552159][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.558758][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.566786][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.569220][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.571669][ T6949] loop5: detected capacity change from 0 to 7 [ 72.573439][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.578414][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.578939][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.579027][ T6949] Dev loop5: unable to read RDB block 7 [ 72.579045][ T6949] loop5: unable to read partition table [ 72.579127][ T6949] loop5: partition table beyond EOD, truncated [ 72.579157][ T6949] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 72.584623][ T25] usb usb6-port1: attempt power cycle [ 72.598328][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.602729][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.608180][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.612964][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.616597][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.621618][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.626517][ T43] audit: type=1400 audit(1789399558.193:497): avc: denied { create } for pid=6950 comm="syz.3.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 72.629240][ T43] audit: type=1400 audit(1789399558.193:498): avc: denied { ioctl } for pid=6950 comm="syz.3.352" path="socket:[15157]" dev="sockfs" ino=15157 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 72.629780][ T43] audit: type=1400 audit(1789399558.193:499): avc: denied { write } for pid=6950 comm="syz.3.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 72.633091][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.644611][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.644816][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.649655][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.655415][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.655873][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.657258][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.661689][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.662460][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.668037][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.671404][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.671974][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.674986][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.675336][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.680264][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.691117][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.701656][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.722526][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.726001][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.728696][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.734652][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.739988][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.740987][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.746365][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.746885][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.751902][ T6937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.765526][ T6934] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.787310][ T43] audit: type=1400 audit(1789399558.353:500): avc: denied { map } for pid=6960 comm="syz.4.356" path="socket:[15241]" dev="sockfs" ino=15241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 72.787516][ T43] audit: type=1400 audit(1789399558.353:501): avc: denied { accept } for pid=6960 comm="syz.4.356" path="socket:[15241]" dev="sockfs" ino=15241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 72.802326][ T6959] xt_hashlimit: size too large, truncated to 1048576 [ 72.824624][ T43] audit: type=1400 audit(1789399558.383:502): avc: denied { set_context_mgr } for pid=6960 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 72.920251][ T6971] binder: 6960:6971 ioctl 4018620d 200000000100 returned -22 [ 72.943622][ T25] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 72.974912][ T25] usb 6-1: device descriptor read/8, error -71 [ 73.233951][ T25] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 73.254846][ T25] usb 6-1: device descriptor read/8, error -71 [ 73.265388][ T6989] xt_hashlimit: size too large, truncated to 1048576 [ 73.271711][ T6991] __nla_validate_parse: 25 callbacks suppressed [ 73.271727][ T6991] netlink: 36 bytes leftover after parsing attributes in process `syz.3.363'. [ 73.313392][ T6995] xt_policy: output policy not valid in PREROUTING and INPUT [ 73.370085][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 73.371881][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 73.374166][ T25] usb usb6-port1: unable to enumerate USB device [ 73.437248][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 73.576391][ T70] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 73.695038][ T7027] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 73.700325][ T7027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.373'. [ 73.700343][ T7027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.373'. [ 73.743658][ T70] usb 9-1: Using ep0 maxpacket: 16 [ 73.745517][ T70] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.746572][ T70] usb 9-1: config 1 interface 0 altsetting 250 bulk endpoint 0x82 has invalid maxpacket 16 [ 73.746594][ T70] usb 9-1: config 1 interface 0 altsetting 250 bulk endpoint 0x3 has invalid maxpacket 1023 [ 73.746612][ T70] usb 9-1: config 1 interface 0 has no altsetting 0 [ 73.748597][ T70] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.748619][ T70] usb 9-1: Product: syz [ 73.748630][ T70] usb 9-1: Manufacturer: syz [ 73.748642][ T70] usb 9-1: SerialNumber: syz [ 73.755705][ T6995] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 73.755785][ T6995] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 73.865631][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'. [ 73.928829][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 73.964870][ T7041] xt_policy: output policy not valid in PREROUTING and INPUT [ 73.967357][ T7041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.967756][ T7041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.987645][ T70] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 73.997411][ T70] usb 9-1: USB disconnect, device number 2 [ 74.007412][ T7045] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 74.031114][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 74.085479][ T7049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.381'. [ 74.179368][ T7055] sctp: [Deprecated]: syz.3.384 (pid 7055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 74.179368][ T7055] Use struct sctp_sack_info instead [ 74.182445][ T7055] i8042 kbd 00:00: in use; can't configure [ 74.617893][ T7080] loop5: detected capacity change from 0 to 7 [ 74.624379][ T7080] Dev loop5: unable to read RDB block 7 [ 74.624400][ T7080] loop5: unable to read partition table [ 74.624484][ T7080] loop5: partition table beyond EOD, truncated [ 74.626813][ T7080] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 74.640225][ T7081] netlink: 'syz.4.392': attribute type 1 has an invalid length. [ 74.658270][ T7081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.719841][ T7087] program syz.3.396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.723267][ T7087] netlink: 'syz.3.396': attribute type 39 has an invalid length. [ 74.738770][ T7087] hsr_slave_0 (unregistering): left promiscuous mode [ 74.853632][ T5084] Bluetooth: hci0: command tx timeout [ 75.134917][ T7136] netlink: 'syz.3.413': attribute type 12 has an invalid length. [ 75.137536][ T7137] netlink: 'syz.3.413': attribute type 12 has an invalid length. [ 75.152926][ T7139] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 75.152942][ T7139] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 75.602586][ T7203] selinux_netlink_send: 55 callbacks suppressed [ 75.602599][ T7203] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=118 sclass=netlink_audit_socket pid=7203 comm=syz.0.440 [ 75.752567][ T7235] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 75.769499][ T7237] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 75.769685][ T7237] CIFS: Attempting to mount //1#7.0.0.1/7/䅯yshare [ 75.771270][ T7239] tipc: Started in network mode [ 75.771282][ T7239] tipc: Node identity 2000004, cluster identity 4711 [ 75.771288][ T7239] tipc: Node number set to 33554436 [ 75.773127][ T7237] CIFS: VFS: Error connecting to socket. Aborting operation. [ 75.773172][ T7237] CIFS: VFS: cifs_mount failed w/return code = -111 [ 75.803325][ T7243] capability: warning: `syz.3.451' uses 32-bit capabilities (legacy support in use) [ 75.874403][ T7252] sctp: [Deprecated]: syz.3.455 (pid 7252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 75.874403][ T7252] Use struct sctp_sack_info instead [ 75.879701][ T7257] Bluetooth: MGMT ver 1.23 [ 75.879734][ T7257] Bluetooth: hci0: unsupported parameter 5151 [ 75.879746][ T7257] Bluetooth: hci0: unsupported parameter 8192 [ 75.879757][ T7257] Bluetooth: hci0: unsupported parameter 5151 [ 75.879770][ T7257] Bluetooth: hci0: unsupported parameter 8192 [ 75.910478][ T7260] loop5: detected capacity change from 0 to 7 [ 75.912318][ T7260] Dev loop5: unable to read RDB block 7 [ 75.912339][ T7260] loop5: unable to read partition table [ 75.912423][ T7260] loop5: partition table beyond EOD, truncated [ 75.912459][ T7260] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 76.032085][ T55] nvmet: connect request for invalid subsystem n! [ 76.034549][ T7265] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 76.058691][ T5084] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 76.078498][ T7275] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 76.223278][ T7285] loop5: detected capacity change from 0 to 7 [ 76.226307][ T7285] Dev loop5: unable to read RDB block 7 [ 76.226328][ T7285] loop5: unable to read partition table [ 76.226410][ T7285] loop5: partition table beyond EOD, truncated [ 76.226424][ T7285] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 76.448481][ T7314] loop5: detected capacity change from 0 to 7 [ 76.452409][ T7314] Dev loop5: unable to read RDB block 7 [ 76.452445][ T7314] loop5: unable to read partition table [ 76.452601][ T7314] loop5: partition table beyond EOD, truncated [ 76.452617][ T7314] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 76.488490][ T7316] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 76.535251][ T7316] md: array md0 already has disks! [ 76.569594][ T7316] md/raid10:md0: not enough operational mirrors. [ 76.577611][ T7316] md: pers->run() failed ... [ 76.654428][ T7337] xt_hashlimit: size too large, truncated to 1048576 [ 76.808107][ T7358] loop5: detected capacity change from 0 to 7 [ 76.809035][ T7358] Dev loop5: unable to read RDB block 7 [ 76.809056][ T7358] loop5: unable to read partition table [ 76.809137][ T7358] loop5: partition table beyond EOD, truncated [ 76.809153][ T7358] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 77.193576][ T1869] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 77.361204][ T1869] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 77.362350][ T1869] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.362374][ T1869] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.365394][ T1869] usb 9-1: config 0 descriptor?? [ 77.581320][ T1869] usbhid 9-1:0.0: can't add hid device: -71 [ 77.581371][ T1869] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 77.585667][ T1869] usb 9-1: USB disconnect, device number 3 [ 77.884074][ T1869] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 78.044454][ T1869] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 78.045436][ T1869] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 78.045473][ T1869] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 78.045493][ T1869] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.047409][ T1869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.047430][ T1869] usb 9-1: Product: syz [ 78.047442][ T1869] usb 9-1: Manufacturer: syz [ 78.047453][ T1869] usb 9-1: SerialNumber: syz [ 78.220081][ T7411] loop5: detected capacity change from 0 to 7 [ 78.220887][ T7411] Dev loop5: unable to read RDB block 7 [ 78.220906][ T7411] loop5: unable to read partition table [ 78.220986][ T7411] loop5: partition table beyond EOD, truncated [ 78.223669][ T7411] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 78.224133][ T43] kauditd_printk_skb: 37 callbacks suppressed [ 78.224142][ T43] audit: type=1400 audit(1789399563.793:540): avc: denied { write } for pid=7408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.284143][ T7416] __nla_validate_parse: 61 callbacks suppressed [ 78.284156][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 78.322076][ T43] audit: type=1400 audit(1789399563.873:541): avc: denied { write } for pid=7417 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.370658][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'. [ 78.434439][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'. [ 78.436582][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 78.487423][ T30] usb 9-1: USB disconnect, device number 4 [ 78.515894][ T7442] loop5: detected capacity change from 0 to 7 [ 78.518275][ T7442] Dev loop5: unable to read RDB block 7 [ 78.518299][ T7442] loop5: unable to read partition table [ 78.518382][ T7442] loop5: partition table beyond EOD, truncated [ 78.518414][ T7442] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 78.602439][ T7447] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 78.631321][ T7449] netlink: 40 bytes leftover after parsing attributes in process `syz.3.507'. [ 78.883569][ T5330] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 78.885892][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'. [ 78.919103][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 78.972533][ T43] audit: type=1400 audit(1789399564.533:542): avc: denied { write } for pid=7457 comm="syz.0.521" name="/" dev="9p" ino=74743229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.972696][ T43] audit: type=1400 audit(1789399564.533:543): avc: denied { add_name } for pid=7457 comm="syz.0.521" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.972878][ T43] audit: type=1400 audit(1789399564.533:544): avc: denied { associate } for pid=7457 comm="syz.0.521" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 79.001374][ T43] audit: type=1400 audit(1789399564.573:545): avc: denied { read write } for pid=7457 comm="syz.0.521" name="file0" dev="9p" ino=74743237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.001542][ T43] audit: type=1400 audit(1789399564.573:546): avc: denied { open } for pid=7457 comm="syz.0.521" path="/141/file0/file0" dev="9p" ino=74743237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.034096][ T5330] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 79.034152][ T5330] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 79.034917][ T5330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.034940][ T5330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.034953][ T5330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.035672][ T5330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.035693][ T5330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.035705][ T5330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.036421][ T5330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.036441][ T5330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.036454][ T5330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.037169][ T5330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.037189][ T5330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.037201][ T5330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.037924][ T5330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.037944][ T5330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.037957][ T5330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.038679][ T5330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.038699][ T5330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.038712][ T5330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.039418][ T5330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.039437][ T5330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.039450][ T5330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.040147][ T5330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.040167][ T5330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.040180][ T5330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.041852][ T43] audit: type=1400 audit(1789399564.603:547): avc: denied { unmount } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 79.042034][ T5330] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 79.042047][ T5330] usb 6-1: Product: syz [ 79.042054][ T5330] usb 6-1: Manufacturer: syz [ 79.042061][ T5330] usb 6-1: SerialNumber: syz [ 79.043403][ T5330] usb 6-1: config 0 descriptor?? [ 79.079010][ T5330] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 79.216850][ T43] audit: type=1400 audit(1789399564.783:548): avc: denied { watch } for pid=7461 comm="syz.4.524" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="hugetlbfs" ino=19506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 79.218212][ T43] audit: type=1400 audit(1789399564.783:549): avc: denied { execute_no_trans } for pid=7461 comm="syz.4.524" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="hugetlbfs" ino=19506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 79.280271][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 79.307668][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 79.375011][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 79.385052][ T7475] ip6t_srh: unknown srh match flags 7700 [ 79.553003][ T7488] loop5: detected capacity change from 0 to 7 [ 79.553779][ T7488] Dev loop5: unable to read RDB block 7 [ 79.553812][ T7488] loop5: unable to read partition table [ 79.553959][ T7488] loop5: partition table beyond EOD, truncated [ 79.553984][ T7488] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 79.709642][ T7507] fuse: fd is not a fuse device [ 79.711494][ T7507] ip6t_rt: unknown flags D [ 79.826011][ T7518] loop5: detected capacity change from 0 to 7 [ 79.828758][ T7518] Dev loop5: unable to read RDB block 7 [ 79.828780][ T7518] loop5: unable to read partition table [ 79.828911][ T7518] loop5: partition table beyond EOD, truncated [ 79.828927][ T7518] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 79.884548][ T1869] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 79.997899][ T7531] ip6t_rt: too many addresses specified [ 80.034669][ T1869] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 80.035488][ T1869] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.035511][ T1869] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 80.035523][ T1869] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.036692][ T1869] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 80.036703][ T1869] usb 8-1: Product: syz [ 80.036710][ T1869] usb 8-1: Manufacturer: syz [ 80.039305][ T7503] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 80.040190][ T1869] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 80.051031][ T1869] usb 8-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 80.141329][ T7542] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 80.141346][ T7542] binder: 7541:7542 ioctl 4018620d 200000004a80 returned -1 [ 80.142453][ T7542] trusted_key: syz.4.557 sent an empty control message without MSG_MORE. [ 80.247283][ T1348] usb 8-1: USB disconnect, device number 7 [ 80.271412][ T1348] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 80.271941][ T1348] garmin_gps 8-1:1.0: device disconnected [ 80.375469][ T7556] jffs2: notice: (7556) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 80.377981][ T7556] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 80.522942][ T7573] fuse: Bad value for 'rootmode' [ 80.563293][ T7577] netlink: 'syz.4.569': attribute type 64 has an invalid length. [ 80.720513][ T7587] pim6reg1: entered promiscuous mode [ 80.720527][ T7587] pim6reg1: entered allmulticast mode [ 80.836527][ T7595] : renamed from vlan0 (while UP) [ 81.020348][ T7626] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 81.020497][ T7622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=7622 comm=syz.3.585 [ 81.137429][ C1] sr 2:0:0:0: [sr0] tag#13 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 81.137458][ C1] sr 2:0:0:0: [sr0] tag#13 CDB: Pre-fetch(16) 90 e1 4a 71 42 fe 3e 5d f7 c1 74 fb [ 81.177966][ T7642] loop5: detected capacity change from 0 to 7 [ 81.184366][ T7642] Dev loop5: unable to read RDB block 7 [ 81.184388][ T7642] loop5: unable to read partition table [ 81.184467][ T7642] loop5: partition table beyond EOD, truncated [ 81.186098][ T7642] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 81.334743][ C3] usb 6-1: yurex_control_callback - control failed: -2 [ 81.346593][ T5330] usb 6-1: USB disconnect, device number 19 [ 81.354546][ T5330] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 81.444717][ T7662] loop5: detected capacity change from 0 to 7 [ 81.445093][ T7662] Dev loop5: unable to read RDB block 7 [ 81.445112][ T7662] loop5: unable to read partition table [ 81.445195][ T7662] loop5: partition table beyond EOD, truncated [ 81.445205][ T7662] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 81.524823][ T7675] CacheFiles: Failed to register: -95 [ 81.529859][ T7676] CacheFiles: Second cache directory specified [ 81.530777][ T7677] CacheFiles: Failed to register: -95 [ 81.536248][ T7667] raw_sendmsg: syz.4.598 forgot to set AF_INET. Fix it! [ 81.824121][ T7691] nbd: must specify an index to disconnect [ 81.957360][ T7707] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.347724][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.347737][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.347802][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.347808][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.347869][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.347876][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.347939][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.347945][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.348008][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.348014][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.348076][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.348082][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.348142][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.348149][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.348210][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.348216][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.348278][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.348284][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.348346][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.348352][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.348413][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.348419][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.348482][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.348488][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.348550][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.348556][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.348617][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.348624][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.348691][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.348698][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.348761][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.348767][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.348829][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.348835][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.348897][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.348903][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.348962][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.348969][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.349032][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.349039][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.349100][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.349107][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.349128][ T7741] binder: 7738:7741 ioctl c0306201 200000000040 returned -14 [ 82.349169][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.349175][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.349216][ T7741] binder: 7738:7741 ioctl c0306201 200000000640 returned -22 [ 82.349519][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.349525][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.349589][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.349595][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.349656][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.349663][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.349730][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.349737][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.349799][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.349805][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.349868][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.349875][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.349936][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.349943][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.350031][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.350038][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.350102][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.350109][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.350173][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 82.350180][ T7740] binder: 7738:7740 ioctl 4018620d 200000000340 returned -16 [ 82.512304][ T7756] overlayfs: overlapping lowerdir path [ 82.634795][ T7769] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 82.650705][ T7771] bond2: (slave gretap1): making interface the new active one [ 82.651038][ T7771] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 82.656323][ T7768] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.666420][ T7749] sg_write: data in/out 14/70 bytes for SCSI command 0x0-- guessing data in; [ 82.666420][ T7749] program syz.3.632 not setting count and/or reply_len properly [ 82.820847][ T7783] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 82.820865][ T7783] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 82.822387][ T7783] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 82.822399][ T7783] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 82.822426][ T7783] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 83.153617][ T5330] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 83.269963][ T43] kauditd_printk_skb: 30 callbacks suppressed [ 83.269982][ T43] audit: type=1400 audit(1789399568.833:580): avc: denied { mounton } for pid=7806 comm="syz.1.652" path="/121/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 83.270685][ T7807] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.282465][ T7807] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.315444][ T5330] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 83.323454][ T5330] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 83.323471][ T5330] usb 5-1: config 0 has no interface number 0 [ 83.332174][ T5330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.332189][ T5330] usb 5-1: Product: syz [ 83.332197][ T5330] usb 5-1: Manufacturer: syz [ 83.332205][ T5330] usb 5-1: SerialNumber: syz [ 83.340492][ T5330] usb 5-1: config 0 descriptor?? [ 83.341709][ T43] audit: type=1400 audit(1789399568.903:581): avc: denied { write } for pid=7817 comm="syz.4.657" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 83.341990][ T43] audit: type=1400 audit(1789399568.903:582): avc: denied { open } for pid=7817 comm="syz.4.657" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 83.342164][ T7818] random: crng reseeded on system resumption [ 83.347706][ T43] audit: type=1400 audit(1789399568.913:583): avc: denied { ioctl } for pid=7817 comm="syz.4.657" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 83.401888][ T43] audit: type=1400 audit(1789399568.963:584): avc: denied { ioctl } for pid=7817 comm="syz.4.657" path="socket:[18926]" dev="sockfs" ino=18926 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.420119][ T7821] macvtap1: entered allmulticast mode [ 83.420148][ T7821] veth1_vlan: entered allmulticast mode [ 83.436760][ T7819] Restarting kernel threads ... [ 83.437338][ T7819] Done restarting kernel threads. [ 83.451055][ T7826] __nla_validate_parse: 39 callbacks suppressed [ 83.451071][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'. [ 83.500580][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.659'. [ 83.548081][ T43] audit: type=1400 audit(1789399569.113:585): avc: denied { mmap_zero } for pid=7837 comm="syz.3.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 83.550348][ T7794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.647'. [ 83.554529][ T851] usb 5-1: USB disconnect, device number 18 [ 83.597115][ T7835] smpboot: CPU 1 is now offline [ 83.606975][ T43] audit: type=1400 audit(1789399569.163:586): avc: denied { create } for pid=7837 comm="syz.3.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 83.675821][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.664'. [ 83.720909][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 83.780866][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 83.837074][ T43] audit: type=1400 audit(1789399569.403:587): avc: denied { shutdown } for pid=7881 comm="syz.1.671" lport=39775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.839255][ T43] audit: type=1400 audit(1789399569.403:588): avc: denied { read } for pid=7881 comm="syz.1.671" lport=39775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.877934][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 83.929305][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'. [ 83.958498][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 84.013445][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 84.049827][ T7910] netlink: 'syz.1.680': attribute type 26 has an invalid length. [ 84.050460][ T7910] netlink: 'syz.1.680': attribute type 26 has an invalid length. [ 84.052465][ T7910] netlink: 'syz.1.680': attribute type 26 has an invalid length. [ 84.053040][ T7910] netlink: 'syz.1.680': attribute type 26 has an invalid length. [ 84.057014][ T7899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.057028][ T7899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.061807][ T7899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.061820][ T7899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.159996][ T7924] befs: (nullb0): No write support. Marking filesystem read-only [ 84.162149][ T7924] befs: (nullb0): invalid magic header [ 84.304082][ T7941] loop5: detected capacity change from 0 to 7 [ 84.306943][ T7941] Dev loop5: unable to read RDB block 7 [ 84.306966][ T7941] loop5: unable to read partition table [ 84.307050][ T7941] loop5: partition table beyond EOD, truncated [ 84.307059][ T7941] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 84.378738][ T43] audit: type=1400 audit(1789399569.943:589): avc: denied { append } for pid=7953 comm="syz.0.698" name="comedi0" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.513939][ T7970] jffs2: notice: (7970) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 84.552497][ T7968] hpfs: hpfs_map_sector(): read error [ 85.090969][ T7970] Set syz1 is full, maxelem 6117 reached [ 85.170369][ T7989] netlink: 'syz.1.712': attribute type 26 has an invalid length. [ 85.405364][ T5084] Bluetooth: hci1: connection err: -111 [ 85.549201][ T5084] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 85.837972][ T8056] FAULT_INJECTION: forcing a failure. [ 85.837972][ T8056] name failslab, interval 1, probability 0, space 0, times 0 [ 85.838020][ T8056] CPU: 0 UID: 0 PID: 8056 Comm: syz.3.739 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.838037][ T8056] Tainted: [L]=SOFTLOCKUP [ 85.838040][ T8056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.838047][ T8056] Call Trace: [ 85.838051][ T8056] [ 85.838057][ T8056] dump_stack_lvl+0x100/0x190 [ 85.838076][ T8056] should_fail_ex.cold+0x5/0xa [ 85.838094][ T8056] should_failslab+0xc2/0x120 [ 85.838109][ T8056] kmem_cache_alloc_noprof+0x92/0x6a0 [ 85.838122][ T8056] ? alloc_empty_file+0x5b/0x1c0 [ 85.838153][ T8056] alloc_empty_file+0x5b/0x1c0 [ 85.838172][ T8056] path_openat+0xdb/0x2440 [ 85.838188][ T8056] ? __pfx_path_openat+0x10/0x10 [ 85.838205][ T8056] do_file_open+0x20e/0x430 [ 85.838220][ T8056] ? __pfx_do_file_open+0x10/0x10 [ 85.838244][ T8056] ? _raw_spin_unlock+0x28/0x50 [ 85.838258][ T8056] ? alloc_fd+0x471/0x7a0 [ 85.838276][ T8056] do_sys_openat2+0x10f/0x1e0 [ 85.838291][ T8056] ? __pfx_do_sys_openat2+0x10/0x10 [ 85.838307][ T8056] ? do_sock_setsockopt+0x101/0x1d0 [ 85.838322][ T8056] ? kfree+0x1e5/0x6d0 [ 85.838337][ T8056] ? selinux_socket_setsockopt+0x6a/0x80 [ 85.838352][ T8056] __x64_sys_openat+0x12d/0x210 [ 85.838367][ T8056] ? __pfx___x64_sys_openat+0x10/0x10 [ 85.838387][ T8056] do_syscall_64+0x123/0x790 [ 85.838405][ T8056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.838416][ T8056] RIP: 0033:0x7fcd88f9e159 [ 85.838425][ T8056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.838435][ T8056] RSP: 002b:00007fcd89e17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 85.838447][ T8056] RAX: ffffffffffffffda RBX: 00007fcd89225fa0 RCX: 00007fcd88f9e159 [ 85.838454][ T8056] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 85.838461][ T8056] RBP: 00007fcd8903503b R08: 0000000000000000 R09: 0000000000000000 [ 85.838467][ T8056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.838474][ T8056] R13: 00007fcd89226038 R14: 00007fcd89225fa0 R15: 00007ffd5a824b18 [ 85.838488][ T8056] [ 85.891701][ T8062] FAT-fs (nullb0): bogus number of reserved sectors [ 85.891714][ T8062] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 85.897647][ T5840] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 85.900398][ T8062] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 85.901880][ T8062] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 86.054355][ T5840] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 86.055210][ T5840] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 86.056047][ T5840] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 86.057538][ T5840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.057549][ T5840] usb 9-1: Product: syz [ 86.057557][ T5840] usb 9-1: Manufacturer: syz [ 86.057564][ T5840] usb 9-1: SerialNumber: syz [ 86.063453][ T5840] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 86.068358][ T5840] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 86.070905][ T5840] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 86.264825][ T8043] cgroup: noprefix used incorrectly [ 86.451964][ T8073] netlink: 'syz.0.744': attribute type 1 has an invalid length. [ 86.638597][ T8081] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 86.787990][ T8092] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 86.788010][ T8092] overlayfs: overlapping lowerdir path [ 87.119936][ T8144] ip_tables: iptables: counters copy to user failed while replacing table [ 87.122259][ T8144] binder: binder_mmap: 8143 200000000000-200000200000 bad vm_flags failed -1 [ 87.158777][ T8140] ip6gretap0: entered promiscuous mode [ 87.161801][ T5084] Bluetooth: hci3: failed to read key size for handle 200 [ 87.213609][ T1869] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 87.384092][ T1869] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.385023][ T1869] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.385039][ T1869] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.385060][ T1869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.597333][ T1869] usb 5-1: usb_control_msg returned -32 [ 87.597357][ T1869] usbtmc 5-1:16.0: can't read capabilities [ 87.636979][ T8176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.940491][ T8190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.295961][ T43] kauditd_printk_skb: 216 callbacks suppressed [ 88.295973][ T43] audit: type=1400 audit(1789399573.863:689): avc: denied { write } for pid=8232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.361693][ T43] audit: type=1400 audit(1789399573.923:690): avc: denied { setopt } for pid=8242 comm="syz.3.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.361816][ T43] audit: type=1400 audit(1789399573.923:691): avc: denied { write } for pid=8239 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.449913][ T8255] netlink: 'syz.3.809': attribute type 6 has an invalid length. [ 88.460478][ T43] audit: type=1400 audit(1789399574.023:692): avc: denied { write } for pid=8248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.503415][ T8259] loop5: detected capacity change from 0 to 7 [ 88.506725][ T8259] Dev loop5: unable to read RDB block 7 [ 88.506746][ T8259] loop5: unable to read partition table [ 88.506830][ T8259] loop5: partition table beyond EOD, truncated [ 88.506847][ T8259] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 88.532919][ T43] audit: type=1400 audit(1789399574.093:693): avc: denied { write } for pid=8257 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.550574][ T8265] __nla_validate_parse: 63 callbacks suppressed [ 88.550588][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.811'. [ 88.614234][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 88.644821][ T851] usb 9-1: USB disconnect, device number 5 [ 88.647361][ T8273] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.815/8273 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 88.647375][ T8273] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 88.647398][ T8273] CPU: 0 UID: 0 PID: 8273 Comm: syz.1.815 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.647413][ T8273] Tainted: [L]=SOFTLOCKUP [ 88.647417][ T8273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.647423][ T8273] Call Trace: [ 88.647428][ T8273] [ 88.647432][ T8273] dump_stack_lvl+0x100/0x190 [ 88.647450][ T8273] check_preemption_disabled+0xd2/0xe0 [ 88.647467][ T8273] ? tun_queue_purge+0x1ee/0x340 [ 88.647478][ T8273] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 88.647495][ T8273] ? tun_queue_purge+0x1ee/0x340 [ 88.647506][ T8273] trace_kfree_skb+0x18b/0x230 [ 88.647523][ T8273] sk_skb_reason_drop+0xb7/0x1b0 [ 88.647538][ T8273] tun_queue_purge+0x1ee/0x340 [ 88.647552][ T8273] __tun_detach+0xb70/0x1850 [ 88.647563][ T8273] ? locks_remove_file+0xd1/0x600 [ 88.647576][ T8273] ? __pfx_tun_chr_close+0x10/0x10 [ 88.647588][ T8273] tun_chr_close+0xc2/0x220 [ 88.647599][ T8273] ? __pfx_tun_chr_close+0x10/0x10 [ 88.647609][ T8273] __fput+0x3ff/0xb50 [ 88.647626][ T8273] task_work_run+0x150/0x240 [ 88.647644][ T8273] ? __pfx_task_work_run+0x10/0x10 [ 88.647667][ T8273] exit_to_user_mode_loop+0x1d8/0x700 [ 88.647681][ T8273] ? rcu_is_watching+0x13/0xc0 [ 88.647704][ T8273] do_syscall_64+0x661/0x790 [ 88.647723][ T8273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.647737][ T8273] RIP: 0033:0x7fb151b9e159 [ 88.647749][ T8273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.647762][ T8273] RSP: 002b:00007fffc02edcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 88.647774][ T8273] RAX: 0000000000000000 RBX: 00007fffc02edde0 RCX: 00007fb151b9e159 [ 88.647788][ T8273] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 88.647800][ T8273] RBP: 00000000000159bf R08: 0000000000000001 R09: 0000000000000000 [ 88.647810][ T8273] R10: 0000001b31520000 R11: 0000000000000246 R12: 00007fffc02ede20 [ 88.647820][ T8273] R13: 00007fb151e25fac R14: 00000000000159fb R15: 00007fb151e25fa0 [ 88.647842][ T8273] [ 88.647972][ T8273] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.815/8273 [ 88.647986][ T8273] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 88.648009][ T8273] CPU: 0 UID: 0 PID: 8273 Comm: syz.1.815 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.648023][ T8273] Tainted: [L]=SOFTLOCKUP [ 88.648027][ T8273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.648036][ T8273] Call Trace: [ 88.648040][ T8273] [ 88.648045][ T8273] dump_stack_lvl+0x100/0x190 [ 88.648064][ T8273] check_preemption_disabled+0xd2/0xe0 [ 88.648109][ T8273] ? tun_queue_purge+0x1ee/0x340 [ 88.648125][ T8273] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 88.648155][ T8273] ? tun_queue_purge+0x1ee/0x340 [ 88.648173][ T8273] trace_kfree_skb+0x18b/0x230 [ 88.648193][ T8273] sk_skb_reason_drop+0xb7/0x1b0 [ 88.648214][ T8273] tun_queue_purge+0x1ee/0x340 [ 88.648243][ T8273] __tun_detach+0xb70/0x1850 [ 88.648260][ T8273] ? locks_remove_file+0xd1/0x600 [ 88.648281][ T8273] ? __pfx_tun_chr_close+0x10/0x10 [ 88.648297][ T8273] tun_chr_close+0xc2/0x220 [ 88.648315][ T8273] ? __pfx_tun_chr_close+0x10/0x10 [ 88.648330][ T8273] __fput+0x3ff/0xb50 [ 88.648358][ T8273] task_work_run+0x150/0x240 [ 88.648383][ T8273] ? __pfx_task_work_run+0x10/0x10 [ 88.648413][ T8273] exit_to_user_mode_loop+0x1d8/0x700 [ 88.648434][ T8273] ? rcu_is_watching+0x13/0xc0 [ 88.648458][ T8273] do_syscall_64+0x661/0x790 [ 88.648483][ T8273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.648500][ T8273] RIP: 0033:0x7fb151b9e159 [ 88.648514][ T8273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.648529][ T8273] RSP: 002b:00007fffc02edcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 88.648546][ T8273] RAX: 0000000000000000 RBX: 00007fffc02edde0 RCX: 00007fb151b9e159 [ 88.648557][ T8273] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 88.648567][ T8273] RBP: 00000000000159bf R08: 0000000000000001 R09: 0000000000000000 [ 88.648577][ T8273] R10: 0000001b31520000 R11: 0000000000000246 R12: 00007fffc02ede20 [ 88.648588][ T8273] R13: 00007fb151e25fac R14: 00000000000159fb R15: 00007fb151e25fa0 [ 88.648611][ T8273] [ 88.690483][ T851] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 88.708394][ T851] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 88.708773][ T851] ti_usb_3410_5052 9-1:2.0: device disconnected [ 89.215709][ T70] usb 5-1: USB disconnect, device number 19 [ 89.382232][ T5775] bridge_slave_1: left allmulticast mode [ 89.382250][ T5775] bridge_slave_1: left promiscuous mode [ 89.382350][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.383415][ T5775] bridge_slave_0: left allmulticast mode [ 89.383427][ T5775] bridge_slave_0: left promiscuous mode [ 89.383826][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.448891][ T5775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.450642][ T5775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.451122][ T5775] bond0 (unregistering): Released all slaves [ 89.456793][ T5775] bond1 (unregistering): Released all slaves [ 89.461878][ T5775] bond2 (unregistering): Released all slaves [ 89.466968][ T5775] bond3 (unregistering): Released all slaves [ 89.474321][ T5775] bond4 (unregistering): Released all slaves [ 89.531828][ T43] audit: type=1400 audit(1789399575.093:694): avc: denied { write } for pid=8279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.571408][ T43] audit: type=1400 audit(1789399575.133:695): avc: denied { write } for pid=8282 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.622244][ T5439] 8021q: adding VLAN 0 to HW filter on device eth6 [ 89.687960][ T43] audit: type=1400 audit(1789399575.253:696): avc: denied { write } for pid=8285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.743474][ T5775] hsr_slave_0: left promiscuous mode [ 89.744728][ T5775] hsr_slave_1: left promiscuous mode [ 89.745088][ T5775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.745442][ T5775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.830828][ T5775] team0 (unregistering): Port device team_slave_1 removed [ 89.837819][ T5775] team0 (unregistering): Port device team_slave_0 removed [ 89.887880][ T5439] 8021q: adding VLAN 0 to HW filter on device eth7 [ 90.051015][ T5439] 8021q: adding VLAN 0 to HW filter on device eth8 [ 90.202051][ T5439] 8021q: adding VLAN 0 to HW filter on device eth9 [ 90.259230][ T5775] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.350537][ T5775] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.408779][ T5775] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.475023][ T5775] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.638324][ T5775] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.723826][ T5775] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.801203][ T5775] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.809907][ T5439] 8021q: adding VLAN 0 to HW filter on device eth10 [ 90.843198][ T5775] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.967745][ T5775] bridge_slave_1: left allmulticast mode [ 90.967762][ T5775] bridge_slave_1: left promiscuous mode [ 90.967871][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.969199][ T5775] bridge_slave_0: left allmulticast mode [ 90.969211][ T5775] bridge_slave_0: left promiscuous mode [ 90.969304][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.987436][ T5775] bridge_slave_1: left allmulticast mode [ 90.987460][ T5775] bridge_slave_1: left promiscuous mode [ 90.987628][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.991209][ T5775] bridge_slave_0: left allmulticast mode [ 90.991234][ T5775] bridge_slave_0: left promiscuous mode [ 90.991374][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.005890][ T5775] batman_adv: batadv0: Interface deactivated: gretap1 [ 91.113159][ T5775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.118830][ T5775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.119845][ T5775] bond0 (unregistering): Released all slaves [ 91.128181][ T5775] bond1 (unregistering): Released all slaves [ 91.133073][ T5775] bond2 (unregistering): Released all slaves [ 91.197615][ T5775] batman_adv: batadv0: Removing interface: gretap1 [ 91.218470][ T5775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.220081][ T5775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.221371][ T5775] bond0 (unregistering): Released all slaves [ 91.224681][ T5775] bond1 (unregistering): Released all slaves [ 91.229902][ T5775] bond2 (unregistering): Released all slaves [ 91.238915][ T5775] bond3 (unregistering): Released all slaves [ 91.245348][ T5439] 8021q: adding VLAN 0 to HW filter on device eth11 [ 91.331455][ T5775] : left promiscuous mode [ 91.448192][ T5439] 8021q: adding VLAN 0 to HW filter on device eth12 [ 91.624507][ T5439] 8021q: adding VLAN 0 to HW filter on device eth13 [ 91.698827][ T5775] hsr_slave_0: left promiscuous mode [ 91.699472][ T5775] hsr_slave_1: left promiscuous mode [ 91.706242][ T5775] hsr_slave_1: left promiscuous mode [ 91.706906][ T5775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.706923][ T5775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.709070][ T5775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.709085][ T5775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.723609][ T5775] veth1_vlan: left allmulticast mode [ 91.723658][ T5775] veth1_macvtap: left promiscuous mode [ 91.723679][ T5775] veth0_macvtap: left promiscuous mode [ 91.723737][ T5775] veth1_vlan: left promiscuous mode [ 91.723788][ T5775] veth0_vlan: left promiscuous mode [ 91.725914][ T5775] veth1_macvtap: left promiscuous mode [ 91.725930][ T5775] veth0_macvtap: left promiscuous mode [ 91.725992][ T5775] veth1_vlan: left promiscuous mode [ 91.726024][ T5775] veth0_vlan: left promiscuous mode [ 91.906061][ T5775] team0 (unregistering): Port device team_slave_1 removed [ 91.910635][ T5775] team0 (unregistering): Port device team_slave_0 removed [ 92.064238][ T5775] team0 (unregistering): Port device team_slave_1 removed [ 92.068703][ T5775] team0 (unregistering): Port device team_slave_0 removed [ 92.133874][ T5439] 8021q: adding VLAN 0 to HW filter on device eth14 [ 92.291205][ T5439] 8021q: adding VLAN 0 to HW filter on device eth15 [ 92.446532][ T5439] 8021q: adding VLAN 0 to HW filter on device eth16 [ 92.596884][ T5439] 8021q: adding VLAN 0 to HW filter on device eth17