last executing test programs: 1m2.890456758s ago: executing program 2 (id=1410): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000340)=[@increfs, @request_death, @register_looper, @clear_death], 0x0, 0x0, 0x0}) 1m2.890193747s ago: executing program 2 (id=1411): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@default_permissions}]}) r0 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x102000, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f00000000c0)=0x1) read$FUSE(r0, &(0x7f0000003ac0)={0x2020}, 0x2023) 1m2.820007188s ago: executing program 2 (id=1413): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004"], 0xfc}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x240048c0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f00000000c0)=0x100000001, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$kvm(0x0, &(0x7f00000000c0), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@cpuid={0x64, 0x18, {0xfffffff9, 0x8}}], 0x18}) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x0, 0x200, 0x6, 0x5, 0xfff, 0x3, 0x5}]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20044042, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000580)='dctcp', 0x5) 1m2.73034892s ago: executing program 2 (id=1415): syz_io_uring_setup(0x8d2, &(0x7f0000000000)={0x0, 0x20c3bc, 0x3010, 0x1, 0x39d}, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xa211b602ee43e6e7, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x80b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xc, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = fanotify_init(0x8, 0x40000) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fanotify_mark(r2, 0x1, 0x100018, r3, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x7d97, 0x800) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000003bd25694a0d9b670591600010000000000000000000a0000000c00ca"], 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00') r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r8, 0x0, 0x33, 0x0, &(0x7f0000000540)) setpgid(0x0, r7) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000440)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x72, 0xce06, 0x0, 0x5, 0x2140, 0x936d, "d0248965eb2412c76f9d0071b0e0a26fc681510f263ffb09f850f983770028247ad2ea39bb26d92c8e4df1d57db67ef1e72d46b5be97f6c4f817361763c6da80c7ebb17f1e0b337bdbd60997677b77d471bc027fda49c55972e1965e341fb8f03f37919dd7e526be3cfaaf934ce1628037db"}}, 0x18a) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f00000000c0)) ptrace$setregset(0x4205, r7, 0x200, &(0x7f0000000340)={&(0x7f0000000280)="201287cc3672202369ec8085f13b60caf55b87174abcdd0b7385cc6d579d5892c046c1ed47a7dc4385531106cce112c12ff7cd47dd32559991026e316a1ef868b4cd66563b69038112a98e2e1167bc4a17f43351ea40f4b047298cf2f3b9104e9a52037dc2e0c6b4594143b9afd7da3b77b90b79f7b7be013f5f0e5a3312f0c2b54edb01eedc56ec6835fcd96ab64375954de6ce38ebe39fe55dec4b6a1e86b588b775dce6b6acbff20c5c0c", 0xac}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r4, 0x4) 1m2.627935386s ago: executing program 2 (id=1416): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x65}]}, 0x2c}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x101009, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) syz_fuse_handle_req(r2, &(0x7f0000009b40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1001, 0x24ff87199961d6af, 0xdcf, 0x4004, 0xb, 0xdc1, 0x0, 0x0, 0x2, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000040c0)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x9, {0x20010000000000, 0x0, 0x0, {0x5, 0xfffffffffffffeda, 0x15, 0x80000004, 0x7, 0x5, 0x9e9, 0x0, 0xb877, 0x8000, 0x7, 0x0, 0xee01, 0x42, 0x86}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) stat(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="df7b28bd6000ffdbff2512"], 0x14}}, 0x4010) (async) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040027bd7000fddbdf254400000008000300", @ANYRES32=r5, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x1) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x4c}}, 0x44801) (async) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1m2.429903871s ago: executing program 2 (id=1429): syz_emit_ethernet(0xaf, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb5500450000a1000400000073737800000000e00000014e20ffff008d9078b4e1fa95765798262e83e352be08f88858937290daa680842f452c30d6040000000000000038848cde35b72a6259f080b611ec951e601467dd381201b1a8402587b51fe0ecbb44d049159db7957b28fbe8c64d72d611"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002100000426b17000fedbdf2502142000050000081400000008000200ffffffff08000d0400000008000200c00000020c000c4000ffff00000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x6, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc11}]}, 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)) close(r1) 1m2.379417247s ago: executing program 32 (id=1429): syz_emit_ethernet(0xaf, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb5500450000a1000400000073737800000000e00000014e20ffff008d9078b4e1fa95765798262e83e352be08f88858937290daa680842f452c30d6040000000000000038848cde35b72a6259f080b611ec951e601467dd381201b1a8402587b51fe0ecbb44d049159db7957b28fbe8c64d72d611"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002100000426b17000fedbdf2502142000050000081400000008000200ffffffff08000d0400000008000200c00000020c000c4000ffff00000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x6, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc11}]}, 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)) close(r1) 3.649591423s ago: executing program 1 (id=2231): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x2, 0x2, 0x0, "c1a1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000080)={0x2, 0x100, 0x20a6}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_crypto(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e00000001000000129bd7000fedbdf25787473286c72772d73657270656e742d737365322900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240000002000"/224], 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4084) r5 = accept4$netrom(r4, &(0x7f0000000140)={{0x3, @bcast}, [@bcast, @default, @null, @null, @null, @null, @bcast, @null]}, &(0x7f0000000080)=0x48, 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f00000001c0)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e0000000000000800024000000007090001007379040000000000000002"], 0xbc}}, 0x0) 2.780343794s ago: executing program 4 (id=2238): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x1c, 0x0, @opaque="e31e1a26af101999b92bf734f3b46cfd0cb8bcdf"}}}}}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000004000010026bd700000000000017c0000040042801800018006000600800a00000c001c000700000000000020040002"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f00000001c0)=0x4, 0x4) (async) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) (async) r5 = fcntl$dupfd(r4, 0x406, r4) write$tun(r5, &(0x7f0000001b40)=ANY=[], 0x1266) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 2.780110579s ago: executing program 4 (id=2239): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x21) r5 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x10, 0x1, 0x0) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080006000500010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4c810}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002403000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000018e808116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r9, 0x80304d65, &(0x7f00000000c0)) 2.180231879s ago: executing program 4 (id=2240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$BLKGETZONESZ(0xffffffffffffffff, 0x80041284, &(0x7f0000000000)=0x200) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000002c0)={0x800000000, 0xeeef0000, 0x0, 0xffffffffffffffff, 0x6}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000002b80)=ANY=[], 0x130) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000002e00030026bdf000fcdbdf250400000004000d"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3800009, 0x4000010, r1, 0x8000000) 2.179980861s ago: executing program 0 (id=2241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000900)={&(0x7f0000000140)="a6", &(0x7f0000000180)=""/54, &(0x7f00000005c0)="d3188baf3cf650bb0d131b5dcbdfcbcab640d9cfd28d01c361d48cbdab28b3eb4fb5b5e675d8defed85b3142784ac7b48aecd6cb26f3ede47f91ab68e9f27b07728770723801ccce5fbbe894c2148b1913d3de4589845f6679ce4117523325cd124d6bd26cd00a7b2123b2", &(0x7f0000000400), 0x8}, 0x38) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f00000000c0)) write$nci(r4, &(0x7f0000000040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x0, 0x3, 0x9, 0x6}, 0x3) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2f58a7e101c415aa420c15e7954a412d8f9ec947a918196081037594ccd859643455015ccd3226b5f915b5d0f4119774d550d7d8693e58285549363834a7e78818009be7b007e80db41a18d6d41460acab93478b6946ce48f477dead4bee043016f6a7c4e3f12189ec28b6807101816ce88cb43273e64cc3fe3ed8d2fb2852d028dde341b23d11d133a0ad21c3549988ac2fe97418ee03a4a6d1759c73144a49fb2d57cdcd75d6addde34abb5ad1e2f7eed232b66df403e4258538cf1fb6fef0a75552be1ec61fba7f9eba7b11905ea9b02864fecfd741f9e586e1f1905bc24f451698e6c6e278c7f7938cc392", 0xed}, {&(0x7f0000000840)="bdbed33ab420cd9035bbeff3eeb7adce05586ce19da9f958f61919c5987a45ee7aa068899081cdeed2b080dd10770d84c2611132cd5190e4a556e681aa3c0297db19b2e0f9652bc85011c127749f21eafc383daa444041c116b4413db0c585265639067c59cc4fd23502b7bf956142eab6c669123cb53bf4e885ed3b197f471d82a1b397b9d4", 0x86}, {&(0x7f0000000700)="e17ff227aa0158d8be4796402cd50622de344a760fc7413299104977dee8f61a808249841dcb499697fe8e330df23b0a8faaaf7cba23cfb9c979dda4ebc8907f4c5ebbfbf3dec5792d33d3af5ebb02243974d3ab2f0456360eea962f72397460aace7cfabadd48146c97e7be35cf53caeb8098c5edb6a898048501bebd32ef4d987ff6bcdfb09749c846ff43a2923acf397b49ba", 0x94}, {&(0x7f0000002480)="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", 0x1076}], 0x4}, 0x4000) 2.179458595s ago: executing program 0 (id=2242): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendto(r1, &(0x7f0000000240)="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", 0x1000, 0x10, &(0x7f0000001240)=@x25, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) syz_emit_ethernet(0x176, &(0x7f0000000080)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x140, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x25, "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"}]}}}}}}, 0x0) 2.099667784s ago: executing program 0 (id=2243): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x2700, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r1, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) 2.040187034s ago: executing program 4 (id=2244): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x182df000) (async, rerun: 32) r0 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x110, 0x150, 0x150, 0x110, 0xf8010000, 0x1e0, 0x238, 0x238, 0x1e0, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xff], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}}, 0x18}}, 0x800) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240), 0x462000, 0x0) (async, rerun: 32) r4 = fanotify_init(0x500, 0x400) (async, rerun: 32) r5 = fcntl$dupfd(r1, 0x406, r1) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async, rerun: 32) ptrace$peekuser(0x3, r6, 0x88) (async, rerun: 32) fanotify_mark(r4, 0x1, 0x40000019, r5, 0x0) (async, rerun: 64) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 64) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) (async) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x66) write$char_usb(r7, &(0x7f0000000700)="0440000000000000", 0x8) (async) r9 = semget$private(0x0, 0x3, 0x0) semctl$GETALL(r9, 0x0, 0xd, &(0x7f0000000000)=""/124) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) (async) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x4, 0x1}, 0x9, 0x20, &(0x7f0000000100)={0x1, 0xe, 0x0, 0x93, 0x5}, 0x8, 0x3, 0x1000, 0x0, 0x3, 0xffffffc0, &(0x7f0000000300)="132e1adc5596be778f27ca81ca43a4467e7d3a7e97ebfb411efe91b7f97efae7b4b6909940137487f9d352c591ba7d9384fb9702e01512d1bcfd7f25850db5efc435113641ea5a37ba6b6e66b9f6da95956d1f3024007cbe367a86e2f29b4a9b391312c4efe808ebbe783123edee4c702a5dccdd274b5fdce9cdd6d9e8707974ce1cbabddacc6874c938fb0a00e54aea2823f80c4819295d81ea79a80ed30483bc44891b401ace9bdd4296bb23599be3cb7449fed11d7b6387216c621a0e42ade4657467e601bf1fc0d4c692845032fd36d4c87a0c34b17b6145be57e1d3b91d4312c3ce65fa0fce410af9"}) read$FUSE(r5, &(0x7f000003e800)={0x2020}, 0x2020) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYBLOB="0100"], 0x34}}, 0x4000084) ftruncate(r0, 0xa8b) 2.039973163s ago: executing program 0 (id=2245): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="aeef61ec09d8c32ac63641cd5b0a892adad696235690f2b2db7e4139d4445ddb62fb9627de4e727e54d1aff0792ffdbcfd9553d2f448520da5cefc4c2a"], 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x80, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x7, 0x3, "d9ffe8"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="aeef61ec09d8c32ac63641cd5b0a892adad696235690f2b2db7e4139d4445ddb62fb9627de4e727e54d1aff0792ffdbcfd9553d2f448520da5cefc4c2a"], 0x24}}, 0x20000800) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x80, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x7, 0x3, "d9ffe8"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x0) (async) 1.980193426s ago: executing program 0 (id=2246): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0x2, 0x3, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'vlan1\x00', 0xffffffff}) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.979099768s ago: executing program 4 (id=2247): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x48}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000ac0)=r1, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) close_range(r0, r0, 0x0) getrandom(0xfffffffffffffffe, 0xffffffffffffff9b, 0x4) chdir(&(0x7f0000000080)='./file0\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0x810c9365, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000007840)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES16=r7, @ANYBLOB="390f27bd7000fadbe3d0bcd101c55fc9025ef7144d5a1cdf250100000008000300", @ANYRESOCT=r8, @ANYBLOB="c81f3d10669bbd3c72beb52a368f8c489a7492d0d4e8b6bd6602ff97aba8e3a3da8cfae468695dc55136e959f667fbe6c4b21137262e021dd6ab774d37cc9a5d6c201439af6fda5d9824f4d1d2970d07a3dbdacb4018002b2ed31f90b2cb485bedd59e69733e980e20db94bee1e65e200da0fcf0ee7571b55034db0163992f3542"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) syz_open_dev$vim2m(&(0x7f0000000600), 0x2, 0x2) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="f4103380", @ANYRES16=r5, @ANYBLOB="000128bd7000fedbdf25070000000c000600020000000000000008000500000000000800010001000000080001000200000008000300", @ANYRES32=r9, @ANYBLOB="0c0006000100000001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) keyctl$revoke(0x3, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000200)={[{@release_agent={'release_agent', 0x3d, './file1'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x611840, 0x44) 1.979013158s ago: executing program 0 (id=2248): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x40) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000080)) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x1021}], 0x1, 0x0, 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 1.919176446s ago: executing program 4 (id=2249): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x60, 0x1, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000044}, 0x94) (async) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x60, 0x1, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000044}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10022, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20040000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x95, 0x5a, 0x4f, 0x40, 0xcf3, 0xe019, 0xfb4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x80, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x94, 0x9, 0x2, 0x74, 0x83, 0x31, 0x80, [], [{{0x9, 0x5, 0x7, 0x0, 0x0, 0x6, 0x8, 0x0, [@generic={0x9, 0x11, "62b367e12306af"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x81, 0x5, 0x9}}]}}]}}]}}, 0x0) (async) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x95, 0x5a, 0x4f, 0x40, 0xcf3, 0xe019, 0xfb4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x80, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x94, 0x9, 0x2, 0x74, 0x83, 0x31, 0x80, [], [{{0x9, 0x5, 0x7, 0x0, 0x0, 0x6, 0x8, 0x0, [@generic={0x9, 0x11, "62b367e12306af"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x81, 0x5, 0x9}}]}}]}}]}}, 0x0) syz_usb_disconnect(r3) (async) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b04, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(r2, &(0x7f0000000100)='stack\x00') 1.010145806s ago: executing program 1 (id=2255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x3000, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r1, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) 1.00949362s ago: executing program 1 (id=2256): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) write(r5, &(0x7f0000004200)="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", 0xf81) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}, @TCA_RATE={0x6, 0x5, {0x3e, 0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, r3, 0x2, {0x2, 0xf0}, 0xfe}, 0x18, &(0x7f0000000140)={&(0x7f00000000c0)="b83a0359f67fd57f07ed537dd07284ec6e79af792635baf0e949d8a3b2461d1777503e43ce1bd762b496495fd318430e5c55019cfa5319e70f74242ec34c13b8180cc573afa152039fcec196637e5b71d6a18483230864b478095fb70776cda01bcd", 0x62}, 0x1, 0x0, 0x0, 0x24000080}, 0xc000014) 369.878745ms ago: executing program 3 (id=2268): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x12c, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68c9b9bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x727a13c7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8384}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x93c973b}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2ae2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3730}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x5c, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42ce0079}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36e4c03d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79c0be25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76321246}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7880bdc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a5f37db}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34049073}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21ea77cb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78d31aea}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a43}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8bdd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b81ab26}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ad41823}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7aa4ed71}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa0ae}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004885}, 0x14) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040084}, 0x84) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000580), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r6, 0x20, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40080) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r7, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200448c4}, 0x8000) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x10, 0x3f6, 0x420, 0x70bd2c, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004c84}, 0x20000000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r12, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x80}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r13, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x24}}, 0x801) close(r9) r14 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, r14, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) socket$packet(0x11, 0x3, 0x300) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r13, 0x300, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x44024) r15 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000e80), 0x101000, 0x0) setsockopt$inet_mreq(r15, 0x0, 0x20, &(0x7f0000000ec0)={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x23}}, 0x8) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40260240}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r11, 0xc0605345, &(0x7f0000001000)={0x7fff, 0x2, {0xfffffffffffffffe, 0x1, 0xfffffff8, 0x0, 0x2}, 0x71}) 287.406927ms ago: executing program 3 (id=2269): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x0) lseek(r1, 0x0, 0x1) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, &(0x7f00000000c0)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000005e50"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) (async) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="670000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='zonefs\x00', 0x204001, 0x0) (async) r4 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r7}}) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r5, @ANYRES8=r5, @ANYRES8=r0, @ANYBLOB="984572806b6c6802afe002f865b6cdda8dde4eb07a76c3f4c68915b3d2c811e66a1c71f7ab591a0749d9425f78ce4c2b2330436ac1f5fe4f8b57f0edb70025c2ffb4f23469cc80e9766f4cf05f90a082d5123f6db9b756e5fdff89e5a5f929e1a704001d909e8e204a5f1c7d095fec7991a57cac34f1741eec09c9cb10b1cf81e868760cf7e054d76c7242f5a9646c2a3e005c92b0836dabb385a00a5d8c1421dd09c283a8fc9e065950d1ffb0240e", @ANYRESHEX=r5], 0x4c}, 0x1, 0x0, 0x0, 0x24000081}, 0x20040804) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r8, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x6f}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) 286.560724ms ago: executing program 3 (id=2270): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x4080, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 239.585337ms ago: executing program 3 (id=2271): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x21) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) 237.247561ms ago: executing program 3 (id=2272): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) 180.386966ms ago: executing program 3 (id=2273): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000240)={0x62800, 0x20, 0x12}, 0x18) mkdirat(r3, &(0x7f0000000280)='./cgroup/../file0\x00', 0x1a) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000100)='./cgroup/../file0\x00') write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x8, 0x12) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f00000000c0)={0x10000001, 0x300000000000000}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={r1, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x4, 0xff6b}, 0x90) 110.325481ms ago: executing program 1 (id=2274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, 0x0) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081) (async) fremovexattr(r1, &(0x7f0000000180)=@random={'osx.', '\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5411, &(0x7f0000000040)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000200)={0x5, 0x7, 0x2, 0x80000001, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}]}) (async, rerun: 32) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x3, 0x1, 0x0, 0x2, 0x8, 0x0, 0x6, 0x0, 0x0, 0x7, 0x6, 0x7, 0x3], 0x8000000, 0x59352}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) (async) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6}]}) (async) pwritev(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)='&-', 0x2}], 0x1, 0x0, 0x10001) 300.2µs ago: executing program 1 (id=2275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000000000000200000d0000000000000000020000000100000002000000000000000000000500000000002e"], 0x0, 0x43, 0x0, 0x1}, 0x28) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) 0s ago: executing program 1 (id=2276): r0 = creat(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) shutdown(r1, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000700)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000780)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r3}}, 0x18) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x100000) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x40) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}, 0x1c) syz_usb_connect$uac1(0x2, 0x9e, &(0x7f0000000040)=ANY=[], 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x7, @loopback, 0x1000}, 0x1c) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) dup(r2) kernel console output (not intermixed with test programs): arsing attributes in process `syz.0.1619'. [ 167.995559][T12442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1624'. [ 168.032774][ T40] audit: type=1400 audit(167.946:1098): avc: denied { accept } for pid=12441 comm="syz.1.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.062973][ T40] audit: type=1400 audit(167.976:1099): avc: denied { create } for pid=12509 comm="syz.3.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 168.117848][T12516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1626'. [ 168.262712][T12539] netlink: 'syz.0.1632': attribute type 29 has an invalid length. [ 168.266577][T12539] netlink: 'syz.0.1632': attribute type 29 has an invalid length. [ 168.274610][T12543] Invalid argument reading file caps for ./file0 [ 168.327764][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1633'. [ 168.344446][ T40] audit: type=1400 audit(168.256:1100): avc: denied { firmware_load } for pid=12542 comm="syz.3.1633" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 168.450636][ T40] audit: type=1400 audit(168.356:1101): avc: denied { getopt } for pid=12553 comm="syz.0.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 168.509539][T12561] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1636'. [ 169.115057][T12596] Invalid argument reading file caps for ./file0 [ 169.122727][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'. [ 169.151441][T12601] FAULT_FLAG_ALLOW_RETRY missing 801 [ 169.153174][T12601] CPU: 1 UID: 0 PID: 12601 Comm: syz.3.1646 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.153191][T12601] Tainted: [L]=SOFTLOCKUP [ 169.153195][T12601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.153201][T12601] Call Trace: [ 169.153205][T12601] [ 169.153209][T12601] dump_stack_lvl+0x100/0x190 [ 169.153249][T12601] handle_userfault.cold+0x3b/0x67 [ 169.153269][T12601] ? do_raw_spin_unlock+0x145/0x1e0 [ 169.153283][T12601] ? _raw_spin_unlock+0x28/0x50 [ 169.153300][T12601] ? __free_frozen_pages+0x8b5/0x1130 [ 169.153318][T12601] ? __pfx_handle_userfault+0x10/0x10 [ 169.153337][T12601] ? rcu_read_unlock+0x2d/0xb0 [ 169.153348][T12601] ? rcu_read_unlock+0x2d/0xb0 [ 169.153363][T12601] do_anonymous_page+0x18a8/0x1f40 [ 169.153380][T12601] __handle_mm_fault+0x1d3a/0x2b50 [ 169.153395][T12601] ? __pfx___handle_mm_fault+0x10/0x10 [ 169.153408][T12601] ? __pte_offset_map_lock+0x174/0x320 [ 169.153423][T12601] ? find_held_lock+0x2b/0x80 [ 169.153443][T12601] ? follow_page_pte+0x5b4/0x1410 [ 169.153461][T12601] handle_mm_fault+0x36d/0xa20 [ 169.153475][T12601] __get_user_pages+0xf9c/0x34d0 [ 169.153496][T12601] ? __pfx___get_user_pages+0x10/0x10 [ 169.153516][T12601] populate_vma_page_range+0x267/0x3f0 [ 169.153534][T12601] ? __pfx_populate_vma_page_range+0x10/0x10 [ 169.153553][T12601] ? vma_set_page_prot+0xb1/0x120 [ 169.153569][T12601] mprotect_fixup+0x8a6/0xb40 [ 169.153583][T12601] ? __pfx_mprotect_fixup+0x10/0x10 [ 169.153599][T12601] do_mprotect_pkey+0x9e1/0xe70 [ 169.153614][T12601] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 169.153640][T12601] __x64_sys_mprotect+0x78/0xc0 [ 169.153650][T12601] ? lockdep_hardirqs_on+0x78/0x100 [ 169.153662][T12601] do_syscall_64+0xc9/0xf80 [ 169.153675][T12601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.153686][T12601] RIP: 0033:0x7f732899acb9 [ 169.153695][T12601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.153706][T12601] RSP: 002b:00007f7326bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 169.153716][T12601] RAX: ffffffffffffffda RBX: 00007f7328c16090 RCX: 00007f732899acb9 [ 169.153723][T12601] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 169.153729][T12601] RBP: 00007f7328a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 169.153736][T12601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.153742][T12601] R13: 00007f7328c16128 R14: 00007f7328c16090 R15: 00007fffd8288458 [ 169.153756][T12601] [ 169.180546][T12609] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1647'. [ 169.248869][T12609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1647'. [ 169.343057][T12621] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.344468][T12626] 9p: Unknown access argument 00000000004294967295 : -22 [ 169.345332][T12621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.350107][T12621] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.352868][T12621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.512721][ T46] net_ratelimit: 36 callbacks suppressed [ 169.512753][ T46] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 169.622531][ T9179] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 169.731360][ T9161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 169.841346][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 169.951391][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 170.061278][ T9179] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 170.152369][T12686] Invalid argument reading file caps for ./file0 [ 170.165370][T12686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1656'. [ 170.181174][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 170.293036][ T46] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 170.403573][ T9179] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 170.411337][T12701] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 170.413283][T12701] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 170.431323][T12701] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 170.483146][ T40] audit: type=1400 audit(170.396:1102): avc: denied { ioctl } for pid=12713 comm="syz.0.1665" path="socket:[43205]" dev="sockfs" ino=43205 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 170.511734][ T9179] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 170.545353][T12719] tipc: Cannot configure node identity twice [ 170.615082][T12721] bond5: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 170.619604][T12721] bond5 (unregistering): Released all slaves [ 170.666719][T12787] speed is unknown, defaulting to 1000 [ 170.850958][T12813] Invalid argument reading file caps for ./file0 [ 170.860116][T12813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1668'. [ 170.962879][ T5964] IPVS: starting estimator thread 0... [ 170.983364][T12826] macvlan0: entered allmulticast mode [ 170.985591][T12826] veth1_vlan: entered allmulticast mode [ 170.995574][T12826] pim6reg: entered allmulticast mode [ 170.999872][T12826] tmpfs: Bad value for 'mpol' [ 171.004990][T12826] veth1_vlan: left allmulticast mode [ 171.025519][T12826] macvlan0 (unregistering): left allmulticast mode [ 171.081804][T12824] IPVS: using max 45 ests per chain, 108000 per kthread [ 171.088872][T12836] 9p: Bad value for 'rfdno' [ 171.521925][T12878] xt_hashlimit: size too large, truncated to 1048576 [ 171.611448][ T5964] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 171.779108][ T5964] usb 6-1: Using ep0 maxpacket: 8 [ 171.782395][ T5964] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.787411][ T5964] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.791463][ T5964] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.795482][ T5964] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.800715][ T5964] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.804622][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.017359][ T5964] usb 6-1: GET_CAPABILITIES returned 0 [ 172.019682][ T5964] usbtmc 6-1:16.0: can't read capabilities [ 172.218247][T12862] netlink: 'syz.1.1679': attribute type 2 has an invalid length. [ 172.226057][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.230791][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.234318][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.237302][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.240179][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.244708][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.247566][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.250592][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.253435][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.256422][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.259351][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.262483][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.265309][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.269691][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.273425][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.277041][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 172.284591][ T24] usb 6-1: USB disconnect, device number 20 [ 172.301151][ T1027] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 172.451226][ T1027] usb 8-1: Using ep0 maxpacket: 8 [ 172.454350][ T1027] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 172.457208][ T1027] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.460434][ T1027] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.463700][ T1027] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.466906][ T1027] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.471196][ T1027] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 172.474254][ T1027] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.481212][ T5289] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.664195][T12947] MPI: mpi too large (124808 bits) [ 172.686022][T12910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.692258][T12910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.745496][ T1027] usb 8-1: usb_control_msg returned -32 [ 172.747299][ T1027] usbtmc 8-1:16.0: can't read capabilities [ 172.812534][T12968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=12968 comm=syz.4.1701 [ 172.820809][T12968] erspan1: entered promiscuous mode [ 172.824297][T12968] erspan1: entered allmulticast mode [ 172.827470][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.829457][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.832034][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.833933][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.836502][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.840260][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.842948][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.845175][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.847753][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.848131][T12985] sctp: [Deprecated]: syz.1.1703 (pid 12985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.848131][T12985] Use struct sctp_sack_info instead [ 172.849724][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.857918][T12991] binder_alloc: binder_alloc_mmap_handler: 12978 200000ffd000-200001000000 already mapped failed -16 [ 172.858132][T12991] binder_alloc: binder_alloc_mmap_handler: 12978 200000ffd000-200001000000 already mapped failed -16 [ 172.858234][T12991] binder_alloc: binder_alloc_mmap_handler: 12978 200000ffd000-200001000000 already mapped failed -16 [ 172.858302][T12991] binder_alloc: binder_alloc_mmap_handler: 12978 200000ffd000-200001000000 already mapped failed -16 [ 172.864475][T12985] binder: BINDER_SET_CONTEXT_MGR already set [ 172.866472][T12991] binder_alloc: binder_alloc_mmap_handler: 12978 200000ffd000-200001000000 already mapped failed -16 [ 172.870274][T12985] binder: 12978:12985 ioctl 4018620d 200000000040 returned -16 [ 172.871807][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.871816][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.871858][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.871863][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.871902][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.871906][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.871945][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.871949][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.871989][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.871993][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.872034][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.872038][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.872079][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.872083][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.872122][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.872126][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.872170][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.872175][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.872214][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.872219][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.872257][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.872261][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.872301][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.872305][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.872344][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.872348][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.872388][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.872392][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.872651][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.872657][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.872695][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.872700][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.872739][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.872744][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.872784][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.872788][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.872828][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.872832][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.872871][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.872875][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.872913][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.872918][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.872956][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.872960][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.872999][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.873004][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.873042][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.873046][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.873085][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.873089][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.873130][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.873135][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.873187][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.873195][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.873253][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.873260][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.873323][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.873330][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.873395][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.873402][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.873446][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.873451][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.873489][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.873493][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.873557][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.873564][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.873626][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.873633][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.873748][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.873761][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.873855][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.873862][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.873903][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.873908][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.873948][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.873952][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.874587][T12983] binder: BINDER_SET_CONTEXT_MGR already set [ 172.920641][T12986] bpf: Bad value for 'mode' [ 172.923979][T12983] binder: 12978:12983 ioctl 4018620d 2000000000c0 returned -16 [ 172.924022][T12985] binder: BINDER_SET_CONTEXT_MGR already set [ 172.924035][T12985] binder: 12978:12985 ioctl 4018620d 200000000040 returned -16 [ 173.013085][T13016] __nla_validate_parse: 5 callbacks suppressed [ 173.013101][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1705'. [ 173.103054][T12910] usbtmc 8-1:16.0: stb usb_control_msg returned -32 [ 173.153525][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 173.153542][ T40] audit: type=1400 audit(173.066:1113): avc: denied { create } for pid=13031 comm="syz.4.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 173.163511][ T40] audit: type=1400 audit(173.076:1114): avc: denied { read write } for pid=13033 comm="syz.0.1711" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 173.165626][ T1027] usb 8-1: USB disconnect, device number 17 [ 173.172234][ T40] audit: type=1400 audit(173.076:1115): avc: denied { open } for pid=13033 comm="syz.0.1711" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 173.254164][ T40] audit: type=1400 audit(173.166:1116): avc: denied { write } for pid=13058 comm="syz.4.1716" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 173.259250][T13059] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1716'. [ 173.370482][ T40] audit: type=1400 audit(173.276:1117): avc: denied { setopt } for pid=13075 comm="syz.1.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 173.378531][ T40] audit: type=1400 audit(173.286:1118): avc: denied { read } for pid=13075 comm="syz.1.1720" path="socket:[45229]" dev="sockfs" ino=45229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 173.591612][ T34] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 173.598353][T13089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13089 comm=syz.1.1722 [ 173.603096][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1722'. [ 173.605914][T13089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1722'. [ 173.608747][T13089] netlink: 'syz.1.1722': attribute type 20 has an invalid length. [ 173.612579][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1722'. [ 173.615487][T13089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1722'. [ 173.618341][T13089] netlink: 'syz.1.1722': attribute type 20 has an invalid length. [ 173.751246][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 173.754068][ T34] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 173.756706][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.759707][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.763234][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.766377][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.770448][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 173.773954][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.795415][T13101] netlink: 'syz.3.1725': attribute type 11 has an invalid length. [ 173.797923][T13101] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1725'. [ 173.941186][ T5994] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 173.985532][ T34] usb 5-1: usb_control_msg returned -32 [ 173.987385][ T34] usbtmc 5-1:16.0: can't read capabilities [ 174.043891][T13121] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.049787][T13121] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 174.091242][ T5994] usb 6-1: Using ep0 maxpacket: 32 [ 174.102498][ T5994] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 174.106021][ T5994] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 174.109690][ T5994] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 174.114139][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.118335][ T5994] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 174.122314][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 174.126964][ T5994] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 174.132989][ T5994] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 174.138636][ T5994] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 174.142331][ T5994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.147581][ T5994] usb 6-1: config 0 descriptor?? [ 174.152945][T13093] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 174.268957][T13149] bond0: (slave wg0): Error: Device can not be enslaved while up [ 174.307915][T13154] gretap1: entered promiscuous mode [ 174.337462][T13161] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 174.359447][T13161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.360377][ T5994] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 174.362489][T13161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.430700][T13177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1738'. [ 174.434031][T13177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1738'. [ 174.551945][ T9179] net_ratelimit: 35 callbacks suppressed [ 174.551959][ T9179] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 174.561284][ T5931] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.567485][ T34] usb 6-1: USB disconnect, device number 21 [ 174.572170][ T34] usblp1: removed [ 174.613958][T13211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1744'. [ 174.672556][T13218] macvlan2: entered promiscuous mode [ 174.674309][T13218] macvlan2: entered allmulticast mode [ 174.682733][ T9179] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 174.772225][T13093] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 174.791341][ T9179] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 174.901263][ T9154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 175.011204][ T9154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 175.041300][ T5994] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 175.121221][T12980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 175.191318][ T5994] usb 8-1: Using ep0 maxpacket: 32 [ 175.194417][ T5994] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 175.197086][ T5994] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 175.199980][ T5994] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 175.203294][ T5994] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.206481][ T5994] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 175.209489][ T5994] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 175.213874][ T5994] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 175.216699][ T5994] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.220434][ T5994] usb 8-1: config 0 descriptor?? [ 175.241248][ T9154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 175.334125][ T40] audit: type=1400 audit(175.246:1119): avc: denied { connect } for pid=13237 comm="syz.1.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 175.345118][T13238] geneve0: Caught tx_queue_len zero misconfig [ 175.361351][ T9154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 175.430586][ T5994] usblp 8-1:0.0: usblp1: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 175.471312][T12980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 175.478025][T13249] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 175.582921][T12980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 175.627817][ T5994] usb 8-1: USB disconnect, device number 18 [ 175.641795][ T5994] usblp1: removed [ 175.941312][ T9] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 176.095510][ T9] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 176.098721][ T9] usb 6-1: config 0 has no interface number 0 [ 176.100773][ T9] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 176.104681][ T9] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 176.108698][ T9] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 176.113133][ T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 176.116074][ T9] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 176.118674][ T9] usb 6-1: Product: syz [ 176.120113][ T9] usb 6-1: SerialNumber: syz [ 176.123736][ T9] usb 6-1: config 0 descriptor?? [ 176.127627][ T9] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 176.131612][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input19 [ 176.172795][ T40] audit: type=1400 audit(176.086:1120): avc: denied { write } for pid=13282 comm="syz.3.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 176.324173][ T40] audit: type=1400 audit(176.236:1121): avc: denied { setopt } for pid=13296 comm="syz.3.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 176.332797][T13269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.335974][T13269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.340397][ C0] cm109_urb_ctl_callback: 33 callbacks suppressed [ 176.340412][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.340551][ T34] usb 6-1: USB disconnect, device number 22 [ 176.342492][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 176.349808][ T53] usb 5-1: USB disconnect, device number 25 [ 176.378764][ T34] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 176.454176][ T40] audit: type=1400 audit(176.366:1122): avc: denied { read } for pid=13325 comm="syz.3.1761" path="socket:[44346]" dev="sockfs" ino=44346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.641323][ T5289] Bluetooth: hci1: command 0x0c1a tx timeout [ 176.675768][T13363] IPVS: set_ctl: invalid protocol: 7 100.1.1.2:20000 [ 176.695844][T13368] speed is unknown, defaulting to 1000 [ 176.732583][T13374] sctp: [Deprecated]: syz.4.1772 (pid 13374) Use of int in max_burst socket option. [ 176.732583][T13374] Use struct sctp_assoc_value instead [ 176.762374][T13375] netlink: 'syz.3.1771': attribute type 1 has an invalid length. [ 176.765762][T13375] NCSI netlink: No device for ifindex 0 [ 176.838854][T13401] FAULT_INJECTION: forcing a failure. [ 176.838854][T13401] name failslab, interval 1, probability 0, space 0, times 0 [ 176.844249][T13401] CPU: 2 UID: 0 PID: 13401 Comm: syz.0.1776 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.844268][T13401] Tainted: [L]=SOFTLOCKUP [ 176.844272][T13401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.844278][T13401] Call Trace: [ 176.844290][T13401] [ 176.844295][T13401] dump_stack_lvl+0x100/0x190 [ 176.844326][T13401] should_fail_ex.cold+0x5/0xa [ 176.844346][T13401] should_failslab+0xc2/0x120 [ 176.844360][T13401] ? tomoyo_realpath_from_path+0xb6/0x690 [ 176.844378][T13401] __kmalloc_noprof+0xf6/0x9c0 [ 176.844393][T13401] ? tomoyo_realpath_from_path+0xb6/0x690 [ 176.844405][T13401] tomoyo_realpath_from_path+0xb6/0x690 [ 176.844420][T13401] tomoyo_path_number_perm+0x23c/0x580 [ 176.844437][T13401] ? tomoyo_path_number_perm+0x22e/0x580 [ 176.844455][T13401] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 176.844485][T13401] ? find_held_lock+0x2b/0x80 [ 176.844500][T13401] ? hook_file_ioctl_common+0x146/0x410 [ 176.844514][T13401] ? __fget_files+0x215/0x3d0 [ 176.844529][T13401] ? __fget_files+0x21f/0x3d0 [ 176.844544][T13401] security_file_ioctl+0xd3/0x230 [ 176.844556][T13401] __x64_sys_ioctl+0xb7/0x210 [ 176.844568][T13401] do_syscall_64+0xc9/0xf80 [ 176.844586][T13401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.844597][T13401] RIP: 0033:0x7ff1bf19acb9 [ 176.844606][T13401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.844617][T13401] RSP: 002b:00007ff1c003b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.844628][T13401] RAX: ffffffffffffffda RBX: 00007ff1bf415fa0 RCX: 00007ff1bf19acb9 [ 176.844635][T13401] RDX: 0000200000000080 RSI: 00000000c0306201 RDI: 0000000000000004 [ 176.844641][T13401] RBP: 00007ff1c003b090 R08: 0000000000000000 R09: 0000000000000000 [ 176.844648][T13401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.844654][T13401] R13: 00007ff1bf416038 R14: 00007ff1bf415fa0 R15: 00007fff22f641e8 [ 176.844668][T13401] [ 176.844672][T13401] ERROR: Out of memory at tomoyo_realpath_from_path. [ 177.133871][T13441] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 177.136378][T13441] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.139608][T13441] vhci_hcd vhci_hcd.0: Device attached [ 177.155740][T13446] fuse: Bad value for 'user_id' [ 177.157816][T13446] fuse: Bad value for 'user_id' [ 177.381256][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 177.412873][ T24] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 177.484463][T13453] batadv_slave_1: entered promiscuous mode [ 177.488037][T13452] batadv_slave_1: left promiscuous mode [ 177.532701][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.536223][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 177.541920][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 177.544965][ T9] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 177.548583][ T9] usb 5-1: Manufacturer: syz [ 177.553779][ T9] usb 5-1: config 0 descriptor?? [ 177.557470][ T9] smsusb:smsusb_probe: board id=9, interface number 0 [ 177.559788][ T9] smsusb:smsusb_probe: Device initialized with return code -19 [ 177.586364][T13480] workqueue: name exceeds WQ_NAME_LEN. Truncating to: πFVluc'f`ކ;1 [ 177.631275][ T53] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 177.669581][T13400] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 177.775326][ T9] usb 5-1: USB disconnect, device number 26 [ 177.779689][T13442] usb 37-1: recv xbuf, 0 [ 177.785365][ T9154] vhci_hcd vhci_hcd.0: stop threads [ 177.788359][ T9154] vhci_hcd vhci_hcd.0: release socket [ 177.792476][ T53] usb 6-1: Using ep0 maxpacket: 16 [ 177.794804][ T9154] vhci_hcd vhci_hcd.0: disconnect device [ 177.797717][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.802391][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.806200][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 177.811504][ T53] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 177.815158][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.819624][ T53] usb 6-1: config 0 descriptor?? [ 177.851431][ T24] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 178.037927][ T53] usbhid 6-1:0.0: can't add hid device: -71 [ 178.046476][ T53] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 178.055181][ T53] usb 6-1: USB disconnect, device number 23 [ 178.263332][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 178.263349][ T40] audit: type=1400 audit(178.176:1135): avc: denied { read } for pid=13538 comm="syz.4.1800" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 178.274294][ T40] audit: type=1400 audit(178.176:1136): avc: denied { open } for pid=13538 comm="syz.4.1800" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 178.282080][ T40] audit: type=1400 audit(178.176:1137): avc: denied { ioctl } for pid=13538 comm="syz.4.1800" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 178.473258][ T40] audit: type=1400 audit(178.386:1138): avc: denied { read } for pid=13562 comm="syz.0.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 178.480239][T13565] __nla_validate_parse: 3 callbacks suppressed [ 178.480259][T13565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1806'. [ 178.544381][T13575] dlm: non-version read from control device 0 [ 178.606818][T13582] autofs: Unknown parameter '' [ 178.689438][ T40] audit: type=1400 audit(178.596:1139): avc: denied { append } for pid=13590 comm="syz.4.1812" name="usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 178.713908][T13593] IPVS: Scheduler module ip_vs_sip not found [ 178.722007][ T5289] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.903865][T13612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1815'. [ 178.980453][T13625] FAULT_INJECTION: forcing a failure. [ 178.980453][T13625] name failslab, interval 1, probability 0, space 0, times 0 [ 178.986160][T13625] CPU: 2 UID: 0 PID: 13625 Comm: syz.0.1817 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.986189][T13625] Tainted: [L]=SOFTLOCKUP [ 178.986195][T13625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.986206][T13625] Call Trace: [ 178.986213][T13625] [ 178.986220][T13625] dump_stack_lvl+0x100/0x190 [ 178.986270][T13625] should_fail_ex.cold+0x5/0xa [ 178.986301][T13625] should_failslab+0xc2/0x120 [ 178.986325][T13625] __kmalloc_cache_noprof+0x80/0x810 [ 178.986342][T13625] ? binder_inc_ref_for_node+0x172/0x1280 [ 178.986366][T13625] ? binder_inc_ref_for_node+0x1a7/0x1280 [ 178.986381][T13625] ? binder_inc_ref_for_node+0x172/0x1280 [ 178.986401][T13625] ? binder_inc_ref_for_node+0x1a7/0x1280 [ 178.986417][T13625] ? _raw_spin_unlock+0x28/0x50 [ 178.986432][T13625] binder_inc_ref_for_node+0x1a7/0x1280 [ 178.986456][T13625] ? __might_fault+0xc5/0x140 [ 178.986473][T13625] ? __might_fault+0xc5/0x140 [ 178.986499][T13625] binder_thread_write+0x2efb/0x4d70 [ 178.986525][T13625] ? __lock_acquire+0x4a5/0x2630 [ 178.986543][T13625] ? __pfx_binder_thread_write+0x10/0x10 [ 178.986560][T13625] ? binder_debug+0xe0/0x190 [ 178.986586][T13625] ? binder_debug+0xe0/0x190 [ 178.986609][T13625] ? __pfx_binder_debug+0x10/0x10 [ 178.986635][T13625] ? __might_fault+0xc5/0x140 [ 178.986663][T13625] binder_ioctl+0x28b8/0x7450 [ 178.986689][T13625] ? tomoyo_path_number_perm+0x188/0x580 [ 178.986732][T13625] ? __pfx_binder_ioctl+0x10/0x10 [ 178.986752][T13625] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 178.986779][T13625] ? do_vfs_ioctl+0x226/0x13e0 [ 178.986797][T13625] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 178.986811][T13625] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 178.986832][T13625] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 178.986880][T13625] ? selinux_file_ioctl+0x139/0x290 [ 178.986898][T13625] ? selinux_file_ioctl+0xb4/0x290 [ 178.986918][T13625] ? __pfx_binder_ioctl+0x10/0x10 [ 178.986936][T13625] __x64_sys_ioctl+0x18e/0x210 [ 178.986954][T13625] do_syscall_64+0xc9/0xf80 [ 178.986975][T13625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.986993][T13625] RIP: 0033:0x7ff1bf19acb9 [ 178.987008][T13625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.987024][T13625] RSP: 002b:00007ff1c003b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.987041][T13625] RAX: ffffffffffffffda RBX: 00007ff1bf415fa0 RCX: 00007ff1bf19acb9 [ 178.987051][T13625] RDX: 0000200000000080 RSI: 00000000c0306201 RDI: 0000000000000004 [ 178.987063][T13625] RBP: 00007ff1c003b090 R08: 0000000000000000 R09: 0000000000000000 [ 178.987073][T13625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.987083][T13625] R13: 00007ff1bf416038 R14: 00007ff1bf415fa0 R15: 00007fff22f641e8 [ 178.987216][T13625] [ 179.116079][ T6105] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 179.274466][ T6105] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 179.278168][ T6105] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 179.283490][ T6105] usb 9-1: config 0 interface 0 has no altsetting 0 [ 179.288401][ T6105] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 179.293553][ T6105] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 179.296563][ T6105] usb 9-1: Product: syz [ 179.298188][ T6105] usb 9-1: Manufacturer: syz [ 179.299705][ T6105] usb 9-1: SerialNumber: syz [ 179.302894][ T6105] usb 9-1: config 0 descriptor?? [ 179.306949][ T6105] hub 9-1:0.0: bad descriptor, ignoring hub [ 179.309528][ T6105] hub 9-1:0.0: probe with driver hub failed with error -5 [ 179.316786][ T6105] usb 9-1: selecting invalid altsetting 0 [ 179.489512][T13682] FAULT_INJECTION: forcing a failure. [ 179.489512][T13682] name failslab, interval 1, probability 0, space 0, times 0 [ 179.495755][T13682] CPU: 0 UID: 0 PID: 13682 Comm: syz.1.1828 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.495782][T13682] Tainted: [L]=SOFTLOCKUP [ 179.495788][T13682] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.495797][T13682] Call Trace: [ 179.495802][T13682] [ 179.495809][T13682] dump_stack_lvl+0x100/0x190 [ 179.495835][T13682] should_fail_ex.cold+0x5/0xa [ 179.495862][T13682] should_failslab+0xc2/0x120 [ 179.495882][T13682] __kmalloc_cache_noprof+0x80/0x810 [ 179.495898][T13682] ? binder_thread_write+0x232b/0x4d70 [ 179.495918][T13682] ? binder_thread_write+0x232b/0x4d70 [ 179.495933][T13682] binder_thread_write+0x232b/0x4d70 [ 179.495955][T13682] ? __lock_acquire+0x4a5/0x2630 [ 179.495971][T13682] ? __pfx_binder_thread_write+0x10/0x10 [ 179.495988][T13682] ? binder_debug+0xe0/0x190 [ 179.496012][T13682] ? binder_debug+0xe0/0x190 [ 179.496032][T13682] ? __pfx_binder_debug+0x10/0x10 [ 179.496055][T13682] ? __might_fault+0xc5/0x140 [ 179.496079][T13682] binder_ioctl+0x28b8/0x7450 [ 179.496100][T13682] ? tomoyo_path_number_perm+0x188/0x580 [ 179.496130][T13682] ? __pfx_binder_ioctl+0x10/0x10 [ 179.496147][T13682] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 179.496171][T13682] ? do_vfs_ioctl+0x226/0x13e0 [ 179.496187][T13682] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 179.496199][T13682] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 179.496219][T13682] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 179.496249][T13682] ? selinux_file_ioctl+0x139/0x290 [ 179.496264][T13682] ? selinux_file_ioctl+0xb4/0x290 [ 179.496280][T13682] ? __pfx_binder_ioctl+0x10/0x10 [ 179.496296][T13682] __x64_sys_ioctl+0x18e/0x210 [ 179.496312][T13682] do_syscall_64+0xc9/0xf80 [ 179.496331][T13682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.496347][T13682] RIP: 0033:0x7f87ccd9acb9 [ 179.496360][T13682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.496375][T13682] RSP: 002b:00007f87cdd0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.496392][T13682] RAX: ffffffffffffffda RBX: 00007f87cd015fa0 RCX: 00007f87ccd9acb9 [ 179.496402][T13682] RDX: 0000200000000080 RSI: 00000000c0306201 RDI: 0000000000000004 [ 179.496412][T13682] RBP: 00007f87cdd0a090 R08: 0000000000000000 R09: 0000000000000000 [ 179.496422][T13682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.496431][T13682] R13: 00007f87cd016038 R14: 00007f87cd015fa0 R15: 00007fff272d0238 [ 179.496461][T13682] [ 179.525954][T13688] 9p: Bad value for 'wfdno' [ 179.583258][ T40] audit: type=1400 audit(179.496:1140): avc: denied { name_bind } for pid=13675 comm="syz.3.1829" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 179.594362][ T1147] net_ratelimit: 32 callbacks suppressed [ 179.594380][ T1147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 179.603066][ T40] audit: type=1400 audit(179.496:1141): avc: denied { listen } for pid=13675 comm="syz.3.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.603143][T13693] 9p: Bad value for 'rfdno' [ 179.686214][ T40] audit: type=1400 audit(179.596:1142): avc: denied { read } for pid=13706 comm="syz.1.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.722014][T12981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 179.814792][T13717] speed is unknown, defaulting to 1000 [ 179.831293][ T9156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 179.854077][T13733] FAULT_INJECTION: forcing a failure. [ 179.854077][T13733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.857836][T13733] CPU: 1 UID: 0 PID: 13733 Comm: syz.0.1838 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.857855][T13733] Tainted: [L]=SOFTLOCKUP [ 179.857859][T13733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.857865][T13733] Call Trace: [ 179.857870][T13733] [ 179.857874][T13733] dump_stack_lvl+0x100/0x190 [ 179.857893][T13733] should_fail_ex.cold+0x5/0xa [ 179.857913][T13733] _copy_to_user+0x32/0xd0 [ 179.857929][T13733] binder_ioctl+0x286d/0x7450 [ 179.857944][T13733] ? tomoyo_path_number_perm+0x188/0x580 [ 179.857966][T13733] ? __pfx_binder_ioctl+0x10/0x10 [ 179.857977][T13733] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 179.857995][T13733] ? do_vfs_ioctl+0x226/0x13e0 [ 179.858005][T13733] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 179.858014][T13733] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 179.858028][T13733] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 179.858048][T13733] ? selinux_file_ioctl+0x139/0x290 [ 179.858059][T13733] ? selinux_file_ioctl+0xb4/0x290 [ 179.858071][T13733] ? __pfx_binder_ioctl+0x10/0x10 [ 179.858081][T13733] __x64_sys_ioctl+0x18e/0x210 [ 179.858093][T13733] do_syscall_64+0xc9/0xf80 [ 179.858106][T13733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.858141][T13733] RIP: 0033:0x7ff1bf19acb9 [ 179.858154][T13733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.858166][T13733] RSP: 002b:00007ff1c003b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.858177][T13733] RAX: ffffffffffffffda RBX: 00007ff1bf415fa0 RCX: 00007ff1bf19acb9 [ 179.858184][T13733] RDX: 0000200000000080 RSI: 00000000c0306201 RDI: 0000000000000004 [ 179.858190][T13733] RBP: 00007ff1c003b090 R08: 0000000000000000 R09: 0000000000000000 [ 179.858197][T13733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.858203][T13733] R13: 00007ff1bf416038 R14: 00007ff1bf415fa0 R15: 00007fff22f641e8 [ 179.858217][T13733] [ 179.858222][T13733] binder: 13732:13733 ioctl c0306201 200000000080 returned -14 [ 179.897106][T13730] kvm: MONITOR instruction emulated as NOP! [ 179.944776][T13730] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1837'. [ 179.981684][ T1147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 179.982263][T13755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1840'. [ 180.055074][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'. [ 180.107116][T12981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 180.117176][T13784] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1843'. [ 180.123209][T13788] batman_adv: batadv: cannot create tp meter kthread [ 180.211285][T12981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 180.262516][T13591] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 180.321286][ T9179] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 180.401546][T13591] usb 9-1: device descriptor read/64, error -71 [ 180.440053][T12981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 180.475680][T13816] FAULT_INJECTION: forcing a failure. [ 180.475680][T13816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.483046][T13816] CPU: 2 UID: 0 PID: 13816 Comm: syz.0.1848 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.483076][T13816] Tainted: [L]=SOFTLOCKUP [ 180.483083][T13816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.483093][T13816] Call Trace: [ 180.483099][T13816] [ 180.483106][T13816] dump_stack_lvl+0x100/0x190 [ 180.483135][T13816] should_fail_ex.cold+0x5/0xa [ 180.483165][T13816] _copy_to_user+0x32/0xd0 [ 180.483191][T13816] simple_read_from_buffer+0xcb/0x170 [ 180.483213][T13816] proc_fail_nth_read+0x1af/0x230 [ 180.483238][T13816] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.483262][T13816] ? rw_verify_area+0xce/0x6d0 [ 180.483278][T13816] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.483301][T13816] vfs_read+0x1e4/0xb30 [ 180.483340][T13816] ? __pfx_vfs_read+0x10/0x10 [ 180.483356][T13816] ? find_held_lock+0x2b/0x80 [ 180.483381][T13816] ? __fget_files+0x215/0x3d0 [ 180.483406][T13816] ? __fget_files+0x21f/0x3d0 [ 180.483433][T13816] ksys_read+0x12a/0x250 [ 180.483459][T13816] ? __pfx_ksys_read+0x10/0x10 [ 180.483479][T13816] ? fput+0x79/0x100 [ 180.483507][T13816] do_syscall_64+0xc9/0xf80 [ 180.483528][T13816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.483547][T13816] RIP: 0033:0x7ff1bf15b58e [ 180.483562][T13816] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.483578][T13816] RSP: 002b:00007ff1c003afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.483596][T13816] RAX: ffffffffffffffda RBX: 00007ff1c003b6c0 RCX: 00007ff1bf15b58e [ 180.483607][T13816] RDX: 000000000000000f RSI: 00007ff1c003b0a0 RDI: 0000000000000005 [ 180.483617][T13816] RBP: 00007ff1c003b090 R08: 0000000000000000 R09: 0000000000000000 [ 180.483627][T13816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.483637][T13816] R13: 00007ff1bf416038 R14: 00007ff1bf415fa0 R15: 00007fff22f641e8 [ 180.483662][T13816] [ 180.567050][ T9156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 180.615623][ T40] audit: type=1400 audit(180.526:1143): avc: denied { read } for pid=13823 comm="syz.3.1851" path="socket:[44895]" dev="sockfs" ino=44895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 180.615890][T13826] netlink: 'syz.3.1851': attribute type 1 has an invalid length. [ 180.632468][T13827] batadv_slave_0: Caught tx_queue_len zero misconfig [ 180.633766][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1851'. [ 180.639093][T13826] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1851'. [ 180.657528][T13829] tmpfs: Bad value for 'mpol' [ 180.658403][ T40] audit: type=1400 audit(180.566:1144): avc: denied { ioctl } for pid=13823 comm="syz.3.1851" path="socket:[44902]" dev="sockfs" ino=44902 ioctlcmd=0x7211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 180.678295][ T1147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 180.701476][T13591] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 180.769944][T13829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1855'. [ 180.822155][T13847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1860'. [ 180.835595][T13591] usb 9-1: device descriptor read/64, error -71 [ 180.853218][T13836] infiniband syz0: set down [ 180.855481][T13836] infiniband syz0: added bond0 [ 180.891308][T13836] RDS/IB: syz0: added [ 180.894357][T13836] smc: adding ib device syz0 with port count 1 [ 180.897011][T13836] smc: ib device syz0 port 1 has no pnetid [ 181.091292][T13591] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 181.121923][T13591] usb 9-1: device descriptor read/8, error -71 [ 181.331175][ T34] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 181.371917][T13591] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 181.392158][T13591] usb 9-1: device descriptor read/8, error -71 [ 181.491280][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 181.495164][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.499003][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.503517][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.507509][ T6105] usb 9-1: USB disconnect, device number 2 [ 181.510136][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.520316][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.528350][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.712447][ T6105] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 181.752465][T13871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.761246][T13871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.769420][ T34] usb 8-1: GET_CAPABILITIES returned 0 [ 181.771922][ T34] usbtmc 8-1:16.0: can't read capabilities [ 181.779605][T13919] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 181.784897][T13919] overlayfs: overlapping lowerdir path [ 182.192080][ T5964] usb 8-1: USB disconnect, device number 19 [ 182.570035][T14040] netlink: 'syz.4.1881': attribute type 1 has an invalid length. [ 182.653652][T14049] xt_hashlimit: size too large, truncated to 1048576 [ 182.798872][T14057] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 182.911032][T14068] block nbd0: not configured, cannot reconfigure [ 183.319653][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 183.319663][ T40] audit: type=1400 audit(183.226:1148): avc: denied { write } for pid=14114 comm="syz.3.1901" name="cpu.stat" dev="9p" ino=72614205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 183.335379][ T40] audit: type=1400 audit(183.246:1149): avc: denied { map } for pid=14114 comm="syz.3.1901" path="/522/file0/cpu.stat" dev="9p" ino=72614205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 183.401215][ T34] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 183.482285][T14126] tmpfs: Bad value for 'mpol' [ 183.551299][ T34] usb 9-1: Invalid ep0 maxpacket: 32 [ 183.606734][ T40] audit: type=1400 audit(183.516:1150): avc: denied { mount } for pid=14130 comm="syz.3.1905" name="/" dev="pstore" ino=1891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 183.681446][ T34] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 183.802047][T14151] netlink: 'syz.1.1913': attribute type 1 has an invalid length. [ 183.831525][ T34] usb 9-1: Invalid ep0 maxpacket: 32 [ 183.834111][ T34] usb usb9-port1: attempt power cycle [ 183.859498][T14151] 8021q: adding VLAN 0 to HW filter on device bond6 [ 183.865285][T14151] bond5: (slave bond6): making interface the new active one [ 183.870758][T14151] bond5: (slave bond6): Enslaving as an active interface with an up link [ 183.915997][ T40] audit: type=1400 audit(183.826:1151): avc: denied { mount } for pid=14219 comm="syz.0.1914" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 183.930132][ T40] audit: type=1400 audit(183.826:1152): avc: denied { unmount } for pid=14219 comm="syz.0.1914" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 183.939520][T14224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14224 comm=syz.1.1916 [ 184.078537][T14242] sctp: [Deprecated]: syz.0.1920 (pid 14242) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.078537][T14242] Use struct sctp_sack_info instead [ 184.181190][ T34] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 184.181190][ T5994] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 184.202839][ T34] usb 9-1: Invalid ep0 maxpacket: 32 [ 184.331250][ T5994] usb 8-1: Using ep0 maxpacket: 32 [ 184.331266][ T34] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 184.343344][ T5994] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 184.347346][ T5994] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 184.350992][ T5994] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 184.352038][ T34] usb 9-1: Invalid ep0 maxpacket: 32 [ 184.359537][ T34] usb usb9-port1: unable to enumerate USB device [ 184.359768][ T5994] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.366417][ T5994] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 184.373081][T14258] efs: device does not support 512 byte blocks [ 184.374915][ T5994] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 184.376250][T14258] device does not support 512 byte blocks [ 184.376250][T14258] [ 184.382316][ T5994] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 184.389053][ T5994] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.396560][ T5994] usb 8-1: config 0 descriptor?? [ 184.411666][ T5964] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 184.563650][ T5964] usb 6-1: config 0 has no interfaces? [ 184.566103][ T5964] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 184.569892][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.573934][ T5964] usb 6-1: config 0 descriptor?? [ 184.603112][T14228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14228 comm=syz.3.1917 [ 184.612811][ T5994] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 184.618322][ T40] audit: type=1400 audit(184.526:1153): avc: denied { read write } for pid=14265 comm="syz.0.1925" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 184.621827][ T5994] usb 8-1: USB disconnect, device number 20 [ 184.625981][ T40] audit: type=1400 audit(184.526:1154): avc: denied { open } for pid=14265 comm="syz.0.1925" path="/396/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 184.637073][ T5994] usblp0: removed [ 184.647185][ T40] audit: type=1400 audit(184.546:1155): avc: denied { ioctl } for pid=14265 comm="syz.0.1925" path="/396/file0/file0" dev="fuse" ino=64 ioctlcmd=0x542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 184.661166][T12979] net_ratelimit: 35 callbacks suppressed [ 184.661179][T12979] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 184.771630][ T9154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 184.787079][ T5964] usb 6-1: USB disconnect, device number 24 [ 184.881616][T12980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 184.991215][ T9156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 185.111206][ T9156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 185.221824][T12980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 185.334247][T14313] netlink: 'syz.3.1933': attribute type 15 has an invalid length. [ 185.341359][ T9156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 185.352941][T14313] speed is unknown, defaulting to 1000 [ 185.403736][T14321] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 185.405931][T14321] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 185.408717][T14321] vhci_hcd vhci_hcd.0: Device attached [ 185.411527][T14324] vhci_hcd: connection closed [ 185.411847][T12980] vhci_hcd vhci_hcd.1: stop threads [ 185.415154][T12980] vhci_hcd vhci_hcd.1: release socket [ 185.416884][T12980] vhci_hcd vhci_hcd.1: disconnect device [ 185.451290][ T9154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 185.574324][ T9156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 185.693561][ T9156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 185.783278][T14371] IPVS: set_ctl: invalid protocol: 44 172.20.20.12:21 [ 185.913968][T14382] __nla_validate_parse: 4 callbacks suppressed [ 185.913985][T14382] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1939'. [ 185.967247][T14384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1940'. [ 185.981135][ T40] audit: type=1400 audit(185.886:1156): avc: denied { name_bind } for pid=14387 comm="syz.3.1941" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 186.010767][T14391] binder: 14389:14391 ioctl 4018620d 0 returned -22 [ 186.025883][ T40] audit: type=1400 audit(185.936:1157): avc: denied { execute } for pid=14392 comm="syz.3.1943" path="/selinux/context" dev="selinuxfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 186.114770][T14403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1946'. [ 186.186598][T14403] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14403 comm=syz.3.1946 [ 186.233873][T14422] binder: 14421:14422 unknown command 0 [ 186.236432][T14422] binder: 14421:14422 ioctl c0306201 200000000080 returned -22 [ 186.239929][T14394] 9pnet: p9_errstr2errno: server reported unknown error ./file0 [ 186.294579][T14429] binder: 14427:14429 ioctl 4018620d 0 returned -22 [ 186.353968][T14434] netlink: 'syz.0.1953': attribute type 13 has an invalid length. [ 186.360200][T14434] gretap0: refused to change device tx_queue_len [ 186.528796][T14455] Bluetooth: MGMT ver 1.23 [ 186.530636][T14455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1959'. [ 187.490533][T14512] xt_hashlimit: invalid interval [ 187.712609][ T5936] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 187.717869][T14532] speed is unknown, defaulting to 1000 [ 187.871992][ T5936] usb 5-1: Using ep0 maxpacket: 8 [ 187.875721][ T5936] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 187.879125][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.883576][T14561] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 187.900190][ T5936] pvrusb2: Hardware description: Terratec Grabster AV400 [ 187.906120][ T5936] pvrusb2: ********** [ 187.907811][ T5936] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 187.913036][ T5936] pvrusb2: Important functionality might not be entirely working. [ 187.917746][ T5936] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 187.922754][ T5936] pvrusb2: ********** [ 187.997987][T14575] binder: 14574:14575 unknown command 1074553621 [ 188.000056][T14575] binder: 14574:14575 ioctl c0306201 200000000080 returned -22 [ 188.086965][ T2489] pvrusb2: Invalid write control endpoint [ 188.118349][ T6105] usb 5-1: USB disconnect, device number 27 [ 188.134296][ T2489] pvrusb2: Invalid write control endpoint [ 188.136235][ T2489] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 188.139277][ T2489] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 188.143376][ T2489] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 188.146705][ T2489] pvrusb2: Device being rendered inoperable [ 188.149838][ T2489] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 188.152261][ T2489] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 188.156223][ T2489] pvrusb2: Attached sub-driver cx25840 [ 188.158003][ T2489] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 188.161990][ T2489] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 188.295151][T14643] loop9: detected capacity change from 0 to 7 [ 188.297767][ C2] blk_print_req_error: 25 callbacks suppressed [ 188.297777][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.302880][ C2] buffer_io_error: 25 callbacks suppressed [ 188.302890][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.308628][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.312709][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.317944][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.321011][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.323878][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.326948][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.329743][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.332993][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.335721][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.339090][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.342110][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.345185][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.348002][T14643] ldm_validate_partition_table(): Disk read failed. [ 188.350457][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.353724][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.356503][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.360291][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.363408][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.366522][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.369229][T14643] Dev loop9: unable to read RDB block 0 [ 188.371813][T14643] loop9: unable to read partition table [ 188.373850][T14643] loop9: partition table beyond EOD, truncated [ 188.376534][T14643] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 188.521848][ T53] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 188.531660][T14672] netlink: 'syz.3.1998': attribute type 1 has an invalid length. [ 188.567526][T14672] bond3: (slave geneve3): making interface the new active one [ 188.573102][T14672] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 188.576735][ T9154] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 188.579617][ T9154] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 188.582655][ T9154] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 188.585513][ T9154] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 188.675126][T14720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2000'. [ 188.678063][ T53] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.690220][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.693708][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 188.696809][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.700833][ T53] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.703837][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.719995][ T53] usb 6-1: config 0 descriptor?? [ 188.743431][T14728] fuse: Bad value for 'group_id' [ 188.746256][T14728] fuse: Bad value for 'group_id' [ 188.799776][T14728] syzkaller0: entered promiscuous mode [ 188.801727][T14728] syzkaller0: entered allmulticast mode [ 188.965470][T14758] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2005'. [ 188.968753][T14758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2005'. [ 188.977672][T14758] No source specified [ 189.014286][T14753] could not allocate digest TFM handle cryptd(blake2b-160) [ 189.142088][ T53] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 189.198317][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 189.198328][ T40] audit: type=1400 audit(189.106:1163): avc: denied { setopt } for pid=14790 comm="syz.4.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 189.279633][T14796] netlink: 'syz.4.2015': attribute type 10 has an invalid length. [ 189.287537][ T40] audit: type=1400 audit(189.196:1164): avc: denied { connect } for pid=14799 comm="syz.3.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 189.297185][ T40] audit: type=1400 audit(189.196:1165): avc: denied { read } for pid=14799 comm="syz.3.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 189.297290][T14796] tipc: Resetting bearer [ 189.307685][T14796] batman_adv: batadv0: Adding interface: team0 [ 189.309743][T14796] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.317682][T14796] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 189.331650][T14796] netlink: 'syz.4.2015': attribute type 10 has an invalid length. [ 189.334861][T14796] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2015'. [ 189.340276][T14796] team0: entered promiscuous mode [ 189.345933][ T40] audit: type=1400 audit(189.256:1166): avc: denied { setattr } for pid=14799 comm="syz.3.2014" name="XDP" dev="sockfs" ino=49507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 189.355222][T14796] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.358365][T14796] batman_adv: batadv0: Interface activated: team0 [ 189.360747][T14796] batman_adv: batadv0: Interface deactivated: team0 [ 189.364027][T14797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=14797 comm=syz.4.2015 [ 189.368313][T14796] batman_adv: batadv0: Removing interface: team0 [ 189.372127][T14796] bridge0: port 1(team0) entered blocking state [ 189.374279][T14796] bridge0: port 1(team0) entered disabled state [ 189.376434][T14796] team0: entered allmulticast mode [ 189.378141][T14796] vlan0: entered allmulticast mode [ 189.390837][T14796] veth0_vlan: entered allmulticast mode [ 189.394289][T14796] bridge0: port 1(team0) entered blocking state [ 189.396317][T14796] bridge0: port 1(team0) entered forwarding state [ 189.403222][T14798] overlayfs: overlapping lowerdir path [ 189.448638][T14826] binder: 14824:14826 ioctl c0306201 0 returned -14 [ 189.490729][ T40] audit: type=1400 audit(189.396:1167): avc: denied { write } for pid=14827 comm="syz.0.2022" name="file0" dev="tmpfs" ino=2271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 189.502511][ T40] audit: type=1400 audit(189.396:1168): avc: denied { open } for pid=14827 comm="syz.0.2022" path="/419/file0" dev="tmpfs" ino=2271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 189.509679][ T40] audit: type=1400 audit(189.396:1169): avc: denied { ioctl } for pid=14827 comm="syz.0.2022" path="/419/file0" dev="tmpfs" ino=2271 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 189.710271][T14854] Device name not specified. [ 189.710271][T14854] [ 189.713314][T14854] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 189.717013][T14854] netlink: 'syz.3.2027': attribute type 142 has an invalid length. [ 189.721256][ T5936] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 189.721811][T14854] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2027'. [ 189.751324][T12981] net_ratelimit: 37 callbacks suppressed [ 189.751341][T12981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 189.809190][T12979] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 189.832732][T14867] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.2029'. [ 189.837079][T14867] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 189.861232][ T9156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 189.876865][ T5936] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 189.879945][ T5936] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 189.882857][ T5936] usb 9-1: Product: syz [ 189.884278][ T5936] usb 9-1: Manufacturer: syz [ 189.885875][ T5936] usb 9-1: SerialNumber: syz [ 189.889104][ T5936] usb 9-1: config 0 descriptor?? [ 189.892809][ T5936] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 189.895329][ T5936] dvb-usb: bulk message failed: -22 (2/0) [ 189.899931][ T5936] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.903731][ T5936] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 189.906290][ T5936] usb 9-1: media controller created [ 189.913976][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.937587][ T53] usb 6-1: USB disconnect, device number 25 [ 189.971217][ T1147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 190.081328][ T1147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 190.093920][T14834] cxusb: i2c wr: len=112 is too big! [ 190.093920][T14834] [ 190.100672][ T5936] cxusb: set interface failed [ 190.102425][ T5936] dvb-usb: bulk message failed: -22 (1/0) [ 190.125925][ T5936] DVB: Unable to find symbol mt352_attach() [ 190.127997][ T5936] dvb-usb: bulk message failed: -22 (5/0) [ 190.130082][ T5936] zl10353_read_register: readreg error (reg=127, ret==-121) [ 190.132701][ T5936] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 190.191284][ T9156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 190.201379][ T5936] rc_core: IR keymap rc-dvico-mce not found [ 190.203369][ T5936] Registered IR keymap rc-empty [ 190.205718][ T5936] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 190.210349][ T5936] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input21 [ 190.214726][ T5936] dvb-usb: schedule remote query interval to 100 msecs. [ 190.217191][ T5936] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 190.221851][ T5936] usb 9-1: USB disconnect, device number 8 [ 190.251340][ T5936] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 190.301238][ T9156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 190.421179][T12981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 190.531308][T12981] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 190.533693][T14913] netlink: 'syz.1.2031': attribute type 2 has an invalid length. [ 190.563709][T14915] binder: 14914:14915 ioctl c0306201 0 returned -14 [ 190.641578][ T9156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 190.662864][ T40] audit: type=1400 audit(190.576:1170): avc: denied { ioctl } for pid=14925 comm="syz.3.2035" path="socket:[49536]" dev="sockfs" ino=49536 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 190.684441][T14936] loop5: detected capacity change from 0 to 7 [ 190.690073][T14936] ldm_validate_partition_table(): Disk read failed. [ 190.696582][T14936] Dev loop5: unable to read RDB block 0 [ 190.696620][T14940] tmpfs: Bad value for 'mpol' [ 190.699610][T14936] loop5: unable to read partition table [ 190.705935][T14936] loop5: partition table beyond EOD, truncated [ 190.706381][T14940] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 190.710139][T14936] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 190.719399][T14940] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 190.761143][ T9154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 190.791601][T14959] macvlan0: entered allmulticast mode [ 190.793989][T14959] veth1_vlan: entered allmulticast mode [ 190.807870][T14959] pim6reg: entered allmulticast mode [ 190.817103][T14965] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 190.861351][ T5337] ldm_validate_partition_table(): Disk read failed. [ 190.863726][ T5337] Dev loop5: unable to read RDB block 0 [ 190.865776][ T5337] loop5: unable to read partition table [ 190.867696][ T5337] loop5: partition table beyond EOD, truncated [ 190.951227][ T40] audit: type=1400 audit(190.856:1171): avc: denied { create } for pid=14988 comm="syz.3.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 190.961856][T14993] tipc: Cannot configure node identity twice [ 190.964069][T14989] tipc: Cannot configure node identity twice [ 191.000059][T14999] netlink: 'syz.4.2052': attribute type 4 has an invalid length. [ 191.091234][ T40] audit: type=1400 audit(190.996:1172): avc: denied { connect } for pid=15019 comm="syz.0.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 191.420253][T15060] team0: No ports can be present during mode change [ 191.497291][T15069] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2070'. [ 191.502652][T15076] syz.4.2073: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 191.641451][T15091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2078'. [ 191.705971][T15105] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2081'. [ 191.711970][T15110] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2083'. [ 191.726463][T15105] netlink: 868 bytes leftover after parsing attributes in process `syz.3.2081'. [ 191.816495][T15118] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2084'. [ 191.891240][T15126] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 192.087045][T15153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 192.090228][T15153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2094'. [ 192.093149][T15153] netlink: 'syz.1.2094': attribute type 12 has an invalid length. [ 192.192099][T15151] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2093'. [ 192.426737][T15179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2102'. [ 192.429686][T15179] netlink: 'syz.0.2102': attribute type 30 has an invalid length. [ 192.439590][T12979] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.443093][T12979] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.445741][T12979] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.448412][T12979] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.811317][ T5930] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 192.975004][T15212] speed is unknown, defaulting to 1000 [ 192.989561][ T5930] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 192.992917][ T5930] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 192.996177][ T5930] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.999928][ T5930] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 193.003555][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 193.006191][ T5930] usb 5-1: Product: syz [ 193.007523][ T5930] usb 5-1: Manufacturer: syz [ 193.009058][ T5930] usb 5-1: SerialNumber: syz [ 193.014705][ T5930] usb 5-1: config 0 descriptor?? [ 193.017575][ T5930] hub 5-1:0.0: bad descriptor, ignoring hub [ 193.019561][ T5930] hub 5-1:0.0: probe with driver hub failed with error -5 [ 193.024462][ T5930] usb 5-1: selecting invalid altsetting 0 [ 193.049268][T15223] Bluetooth: hci4: Frame reassembly failed (-84) [ 193.241935][T15247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=15247 comm=syz.1.2115 [ 193.539710][T15290] syzkaller0: entered promiscuous mode [ 193.543101][T15290] syzkaller0: entered allmulticast mode [ 193.611170][T15191] usb 5-1: reset high-speed USB device number 28 using dummy_hcd [ 193.774556][T15191] usb 5-1: device firmware changed [ 193.778471][ T53] usb 5-1: USB disconnect, device number 28 [ 193.882688][T15321] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=50 sclass=netlink_xfrm_socket pid=15321 comm=syz.3.2122 [ 193.932097][ T53] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 194.092797][ T53] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 194.096221][ T53] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 194.099948][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 194.105063][ T53] usb 5-1: string descriptor 0 read error: -22 [ 194.107821][ T53] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 194.111511][ T53] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 194.117400][ T53] usb 5-1: config 0 descriptor?? [ 194.121762][ T53] hub 5-1:0.0: bad descriptor, ignoring hub [ 194.124143][ T53] hub 5-1:0.0: probe with driver hub failed with error -5 [ 194.128821][ T53] usb 5-1: selecting invalid altsetting 0 [ 194.431495][ T5994] usb 5-1: USB disconnect, device number 29 [ 194.821293][T12970] net_ratelimit: 42 callbacks suppressed [ 194.821310][T12970] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 194.941195][T12995] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 195.042042][ T5938] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 195.046186][ T5938] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 195.049733][ T5938] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 195.051322][T12973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 195.057025][ T5938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 195.060014][ T5938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 195.095252][T15443] speed is unknown, defaulting to 1000 [ 195.121223][ T5289] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 195.181404][T12995] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 195.285572][T15460] binder: Binderfs stats mode cannot be changed during a remount [ 195.290175][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 195.290186][ T40] audit: type=1400 audit(195.196:1181): avc: denied { remount } for pid=15459 comm="syz.4.2141" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 195.291535][ T91] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 195.325790][T15460] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 195.331923][T15460] bond1 (unregistering): Released all slaves [ 195.333277][T15485] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 195.348604][T15485] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 195.361533][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.364256][T15485] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 195.396010][ T40] audit: type=1400 audit(195.306:1182): avc: denied { create } for pid=15536 comm="syz.0.2143" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 195.441597][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.451212][ T91] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 195.466979][T15557] fuse: Unknown parameter '0x00000000000000030x0000000000000003' [ 195.547887][T15443] chnl_net:caif_netlink_parms(): no params data found [ 195.690370][T12973] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.695730][T12973] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.699696][T12973] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 195.710791][T15443] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.713414][T15443] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.716322][T15443] bridge_slave_0: entered allmulticast mode [ 195.719248][T15443] bridge_slave_0: entered promiscuous mode [ 195.723552][T15443] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.725948][T15443] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.728323][T15443] bridge_slave_1: entered allmulticast mode [ 195.731133][T15443] bridge_slave_1: entered promiscuous mode [ 195.753392][T15443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.758095][T15443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.780865][T15443] team0: Port device team_slave_0 added [ 195.785843][T15443] team0: Port device team_slave_1 added [ 195.817573][T12973] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.820926][T12973] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.824740][T12973] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 195.834051][T15443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.836356][T15443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.844786][T15443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.849080][T15443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.851513][T15443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.859532][T15443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.887191][T15443] hsr_slave_0: entered promiscuous mode [ 195.889734][T15443] hsr_slave_1: entered promiscuous mode [ 195.893375][T15443] debugfs: 'hsr0' already exists in 'hsr' [ 195.895230][T15443] Cannot create hsr debugfs directory [ 195.911516][ T5936] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 195.975797][T12973] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.980083][T12973] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.983736][T12973] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 195.991171][T12982] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 196.063101][ T5936] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 196.066064][ T5936] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 196.069339][ T5936] usb 9-1: config 0 interface 0 has no altsetting 0 [ 196.075964][ T5936] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 196.079086][ T5936] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 196.081809][ T5936] usb 9-1: Product: syz [ 196.083227][ T5936] usb 9-1: Manufacturer: syz [ 196.084796][ T5936] usb 9-1: SerialNumber: syz [ 196.092145][ T5936] usb 9-1: config 0 descriptor?? [ 196.096092][ T5936] hub 9-1:0.0: bad descriptor, ignoring hub [ 196.098082][ T5936] hub 9-1:0.0: probe with driver hub failed with error -5 [ 196.103368][ T9176] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 196.103583][ T5936] usb 9-1: selecting invalid altsetting 0 [ 196.146099][T12973] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.150356][T12973] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.171521][T12973] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 196.325039][T12973] bridge_slave_1: left allmulticast mode [ 196.327942][T12973] bridge_slave_1: left promiscuous mode [ 196.332208][T12973] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.349717][T12973] bridge_slave_0: left allmulticast mode [ 196.353095][T12973] bridge_slave_0: left promiscuous mode [ 196.355717][T12973] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.689292][T12973] bond3 (unregistering): (slave geneve3): Releasing active interface [ 196.991261][T15665] usb 9-1: reset high-speed USB device number 9 using dummy_hcd [ 196.995358][T15665] usb 9-1: device reset changed ep0 maxpacket size! [ 196.998543][ T24] usb 9-1: USB disconnect, device number 9 [ 197.121226][ T5289] Bluetooth: hci5: command tx timeout [ 197.147531][T12973] bond1 (unregistering): (slave bond0): Releasing active interface [ 197.151241][ T24] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 197.154268][T12973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.159974][T12973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.165883][T12973] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 197.170461][T12973] bond0 (unregistering): Released all slaves [ 197.284696][T12973] bond1 (unregistering): Released all slaves [ 197.295356][T12973] bond2 (unregistering): Released all slaves [ 197.306030][T12973] bond3 (unregistering): Released all slaves [ 197.311251][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 197.316753][ T24] usb 9-1: config 0 has no interfaces? [ 197.320063][ T24] usb 9-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 197.323220][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.325861][ T24] usb 9-1: Product: syz [ 197.327244][ T24] usb 9-1: Manufacturer: syz [ 197.328804][ T24] usb 9-1: SerialNumber: syz [ 197.334071][ T24] usb 9-1: config 0 descriptor?? [ 197.420558][T12973] : left promiscuous mode [ 197.511754][T12973] tipc: Left network mode [ 197.531275][T12973] IPVS: stopping master sync thread 8264 ... [ 197.540779][ T24] usb 9-1: USB disconnect, device number 10 [ 197.920290][T15443] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 197.933840][T15443] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 197.939160][T15443] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 197.948691][T15443] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 197.990966][T15443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.000581][T15443] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.006239][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.008512][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.014398][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.016893][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.088371][T12973] hsr_slave_0: left promiscuous mode [ 198.091237][T12973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.093618][T12973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.096614][T12973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.099017][T12973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.103174][T12973] batman_adv: batadv0: Interface deactivated: dummy0 [ 198.105595][T12973] batman_adv: batadv0: Removing interface: dummy0 [ 198.126806][T12973] team_slave_0: left promiscuous mode [ 198.129621][T12973] team_slave_1: left promiscuous mode [ 198.132752][T12973] veth1_macvtap: left allmulticast mode [ 198.134616][T12973] veth1_macvtap: left promiscuous mode [ 198.137276][T12973] veth0_macvtap: left promiscuous mode [ 198.139456][T12973] veth1_vlan: left promiscuous mode [ 198.141500][T12973] veth0_vlan: left promiscuous mode [ 198.226436][T12973] pimreg (unregistering): left allmulticast mode [ 198.538654][T12973] team0 (unregistering): Port device team_slave_1 removed [ 198.568714][T12973] team0 (unregistering): Port device team_slave_0 removed [ 198.976791][T15443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.025081][T15443] veth0_vlan: entered promiscuous mode [ 199.033037][T15443] veth1_vlan: entered promiscuous mode [ 199.063114][T15443] veth0_macvtap: entered promiscuous mode [ 199.068960][T15443] veth1_macvtap: entered promiscuous mode [ 199.081929][T15443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.089763][T15443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.111185][ T91] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.120522][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.128392][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.129017][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.131412][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.135128][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.183964][ T9176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.187325][ T9176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.201973][ T5289] Bluetooth: hci5: command tx timeout [ 199.206402][ T9176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.209613][ T9176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.245119][T12973] IPVS: stop unused estimator thread 0... [ 199.356849][ T40] audit: type=1400 audit(199.266:1183): avc: denied { ioctl } for pid=15952 comm="syz.3.2138" path="socket:[51492]" dev="sockfs" ino=51492 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 199.831281][ T91] net_ratelimit: 21 callbacks suppressed [ 199.831294][ T91] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 199.941194][ T91] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 200.061312][ T9176] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 200.171358][T12973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 200.281362][ T91] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 200.391466][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 200.511556][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 200.621456][ T91] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 200.731322][T12973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 200.731469][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.291286][ T5289] Bluetooth: hci5: command tx timeout [ 203.362184][ T5289] Bluetooth: hci5: command tx timeout [ 204.852330][ T9176] net_ratelimit: 43 callbacks suppressed [ 204.852346][ T9176] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 204.883212][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.971559][ T9176] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 205.081460][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 205.191331][ T9176] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 205.301360][ T91] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 205.411287][ T91] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 205.521739][T12973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 205.631244][ T46] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 205.741374][ T91] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 209.861292][T12982] net_ratelimit: 42 callbacks suppressed [ 209.861311][T12982] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 209.971327][T12982] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 210.081466][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.082065][T12982] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 210.191283][T12982] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 210.301993][ T91] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 210.411533][ T91] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 210.521237][T12973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 210.641305][ T46] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 210.644631][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.878977][T15962] __nla_validate_parse: 9 callbacks suppressed [ 210.878995][T15962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2153'. [ 210.935470][T15971] netlink: 'syz.3.2157': attribute type 21 has an invalid length. [ 210.938047][T15971] netlink: 'syz.3.2157': attribute type 6 has an invalid length. [ 210.940519][T15971] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2157'. [ 210.978541][T15962] fuse: Bad value for 'rootmode' [ 210.979034][ T5931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.987905][ T5931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.991210][ T5931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.994033][ T5931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.997187][ T5931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.027993][T15992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2160'. [ 211.033777][T15976] speed is unknown, defaulting to 1000 [ 211.046505][T15992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2160'. [ 211.056585][T15996] (syz.3.2161,15996,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 211.095610][T15999] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2162'. [ 211.163631][T16012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2166'. [ 211.174306][T16012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2166'. [ 211.371004][T15976] chnl_net:caif_netlink_parms(): no params data found [ 211.433057][T15976] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.436984][T15976] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.440164][T15976] bridge_slave_0: entered allmulticast mode [ 211.443970][T15976] bridge_slave_0: entered promiscuous mode [ 211.448961][T15976] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.452857][T15976] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.455542][T16133] binder: 16131:16133 ioctl c00c642e 200000000600 returned -22 [ 211.455963][T15976] bridge_slave_1: entered allmulticast mode [ 211.461158][T16110] ip6t_srh: unknown srh match flags 4000 [ 211.462809][T15976] bridge_slave_1: entered promiscuous mode [ 211.490038][T15976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.504660][ T6710] bridge0: port 3(syz_tun) entered disabled state [ 211.527361][ T6710] syz_tun (unregistering): left allmulticast mode [ 211.529460][ T6710] syz_tun (unregistering): left promiscuous mode [ 211.532682][ T6710] bridge0: port 3(syz_tun) entered disabled state [ 211.555775][T16163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=16163 comm=syz.0.2171 [ 211.562277][T15976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.585528][T15976] team0: Port device team_slave_0 added [ 211.590525][T15976] team0: Port device team_slave_1 added [ 211.607857][T15976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.610136][T15976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.622755][T15976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.627015][T15976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.629260][T15976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.638170][T15976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.663020][T15976] hsr_slave_0: entered promiscuous mode [ 211.665225][T15976] hsr_slave_1: entered promiscuous mode [ 211.667333][T15976] debugfs: 'hsr0' already exists in 'hsr' [ 211.669214][T15976] Cannot create hsr debugfs directory [ 211.825387][ T91] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.829988][ T91] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.834513][T16304] overlay: ./file1 is not a directory [ 211.877975][T16322] tmpfs: Bad value for 'mpol' [ 211.942829][ T91] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.946587][ T91] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.956223][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2180'. [ 211.959334][T16331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2180'. [ 212.010911][T16338] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 212.010911][T16338] program syz.0.2179 not setting count and/or reply_len properly [ 212.080830][ T91] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.085248][ T91] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.143505][T16347] bridge1: entered promiscuous mode [ 212.185241][ T91] netdevsim netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.189482][ T91] netdevsim netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.251186][ T5930] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 212.378599][ T91] bridge_slave_1: left allmulticast mode [ 212.380943][ T91] bridge_slave_1: left promiscuous mode [ 212.383603][ T5930] usb 9-1: device descriptor read/64, error -71 [ 212.392184][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.405019][ T91] bridge_slave_0: left allmulticast mode [ 212.407466][ T91] bridge_slave_0: left promiscuous mode [ 212.410032][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.456733][ T40] audit: type=1400 audit(212.366:1184): avc: denied { name_connect } for pid=16373 comm="syz.3.2186" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 212.541719][ T91] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 212.545499][ T91] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 212.548098][ T91] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 2a:25:3d:c4:0c:da - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 212.625594][ T5930] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 212.680488][ T91] bond0 (unregistering): (slave gretap1): Releasing active interface [ 212.754782][ T5930] usb 9-1: device descriptor read/64, error -71 [ 212.862809][ T5930] usb usb9-port1: attempt power cycle [ 213.041295][ T5931] Bluetooth: hci3: command tx timeout [ 213.203891][ T5930] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 213.221893][ T5930] usb 9-1: device descriptor read/8, error -71 [ 213.312576][ T91] bond1 (unregistering): (slave veth3): Releasing backup interface [ 213.319469][ T91] bond1 (unregistering): Released all slaves [ 213.427775][ T91] bond2 (unregistering): Released all slaves [ 213.461325][ T5930] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 213.481912][ T5930] usb 9-1: device descriptor read/8, error -71 [ 213.554719][ T91] bond3 (unregistering): Released all slaves [ 213.591472][ T5930] usb usb9-port1: unable to enumerate USB device [ 213.668631][ T91] bond4 (unregistering): (slave veth7): Releasing active interface [ 213.674055][ T91] bond4 (unregistering): Released all slaves [ 213.684131][ T91] smc: removing net device bond0 with user defined pnetid SYZ2 [ 213.689710][ T91] bond0 (unregistering): Released all slaves [ 213.690722][ T13] smc: removing ib device syz0 [ 213.701278][ T91] bond5 (unregistering): (slave bond6): Releasing backup interface [ 213.705159][ T91] bond5 (unregistering): Released all slaves [ 213.830223][ T91] bond6 (unregistering): Released all slaves [ 213.839233][ T91] bond7 (unregistering): Released all slaves [ 214.000817][T16403] QAT: Invalid ioctl -2144835806 [ 214.007777][T16395] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 214.090400][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2191'. [ 214.171865][T16425] netlink: 'syz.0.2192': attribute type 39 has an invalid length. [ 214.418965][T16450] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 214.433559][ T40] audit: type=1400 audit(214.346:1185): avc: denied { read write } for pid=16448 comm="syz.3.2195" name="file0" dev="overlay" ino=72614203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 214.441670][ T40] audit: type=1400 audit(214.346:1186): avc: denied { ioctl open } for pid=16448 comm="syz.3.2195" path="/17/bus/file0" dev="overlay" ino=72614203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 214.491558][ T40] audit: type=1400 audit(214.396:1187): avc: denied { accept } for pid=16462 comm="syz.0.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 214.532659][T15976] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.541028][T15976] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.578286][T15976] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.588555][T15976] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 214.640238][T15976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.677533][T15976] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.688372][ T9154] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.690717][ T9154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.711142][T12995] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.714230][T12995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.732872][T16489] exFAT-fs (nbd3): unable to read boot sector [ 214.736070][T16489] exFAT-fs (nbd3): failed to read boot sector [ 214.739827][T16489] exFAT-fs (nbd3): failed to recognize exfat type [ 214.793742][T15976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.818103][ T91] : left promiscuous mode [ 214.903567][T16504] netlink: 'syz.0.2207': attribute type 1 has an invalid length. [ 214.982889][T16515] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 214.987579][T15976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.013314][T16515] overlayfs: failed lookup in lower (newroot/20, name='file0', err=-40): overlapping layers [ 215.034778][T16515] overlayfs: failed lookup in lower (newroot/20, name='file0', err=-40): overlapping layers [ 215.104330][T15976] veth0_vlan: entered promiscuous mode [ 215.121192][ T5931] Bluetooth: hci3: command tx timeout [ 215.125619][T15976] veth1_vlan: entered promiscuous mode [ 215.159626][T15976] veth0_macvtap: entered promiscuous mode [ 215.181528][T15976] veth1_macvtap: entered promiscuous mode [ 215.200054][T15976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.211880][T15976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.220305][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.227774][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.237126][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.243907][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.254397][ T40] audit: type=1400 audit(215.166:1188): avc: denied { setattr } for pid=16541 comm="syz.3.2209" name="NETLINK" dev="sockfs" ino=55320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.289158][ T5936] net_ratelimit: 19 callbacks suppressed [ 215.289175][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.374043][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.374064][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.410784][ T91] hsr_slave_0: left promiscuous mode [ 215.416138][ T91] hsr_slave_1: left promiscuous mode [ 215.429846][ T91] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.433841][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.440939][T16565] netlink: 'syz.3.2211': attribute type 178 has an invalid length. [ 215.442101][ T91] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.446735][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.456219][ T91] veth1_macvtap: left promiscuous mode [ 215.458108][ T91] veth0_macvtap: left promiscuous mode [ 215.460037][ T91] veth1_vlan: left promiscuous mode [ 215.463709][ T91] veth0_vlan: left promiscuous mode [ 215.529694][ T91] pim6reg (unregistering): left allmulticast mode [ 215.603034][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.926072][ T40] audit: type=1400 audit(215.836:1189): avc: denied { append } for pid=16569 comm="syz.0.2212" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 215.965842][ T40] audit: type=1400 audit(215.876:1190): avc: denied { map } for pid=16574 comm="syz.0.2213" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 216.067078][ T91] team0 (unregistering): Port device team_slave_1 removed [ 216.100259][ T91] team0 (unregistering): Port device team_slave_0 removed [ 216.224125][ T53] hid (null): unknown global tag 0xd [ 216.240429][ T53] hid (null): unknown global tag 0xd [ 216.242509][ T53] hid (null): unknown global tag 0xd [ 216.244224][ T53] hid (null): unknown global tag 0xe9 [ 216.245937][ T53] hid (null): unknown global tag 0xe [ 216.247605][ T53] hid (null): global environment stack underflow [ 216.250579][ T53] hid (null): unknown global tag 0xc [ 216.252454][ T53] hid (null): unknown global tag 0xe [ 216.254141][ T53] hid (null): report_id 0 is invalid [ 216.255825][ T53] hid (null): unknown global tag 0xe [ 216.257692][ T53] hid (null): unknown global tag 0xd [ 216.259483][ T53] hid (null): unknown global tag 0xe [ 216.261396][ T53] hid (null): report_id 2036270232 is invalid [ 216.263374][ T53] hid (null): unknown global tag 0xd [ 216.265069][ T53] hid (null): unknown global tag 0xd [ 216.266775][ T53] hid (null): unknown global tag 0xc [ 216.268481][ T53] hid (null): global environment stack underflow [ 216.270538][ T53] hid (null): unknown global tag 0xd [ 216.281443][ T53] hid (null): unknown global tag 0xe [ 216.283198][ T53] hid (null): unknown global tag 0xe [ 216.284890][ T53] hid (null): bogus close delimiter [ 216.286552][ T53] hid (null): unknown global tag 0xe [ 216.288227][ T53] hid (null): unknown global tag 0xc [ 216.289990][ T53] hid (null): bogus close delimiter [ 216.300564][ T53] hid (null): invalid report_count 682071022 [ 216.302736][ T53] hid (null): unknown global tag 0xd [ 216.304475][ T53] hid (null): unknown global tag 0xc [ 216.306176][ T53] hid (null): unknown global tag 0xf5 [ 216.308110][ T53] hid (null): unknown global tag 0x68 [ 216.310656][ T53] hid (null): unknown global tag 0x83 [ 216.312710][ T53] hid (null): unknown global tag 0xf [ 216.314443][ T53] hid (null): invalid report_count 1078878624 [ 216.316456][ T53] hid (null): invalid report_count 33762 [ 216.318285][ T53] hid (null): unknown global tag 0xc [ 216.320051][ T53] hid (null): bogus close delimiter [ 216.322511][ T53] hid (null): report_id 0 is invalid [ 216.324221][ T53] hid (null): unknown global tag 0x95 [ 216.333342][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.336423][ T53] hid-generic 0002:03FF:0080.000C: unexpected long global item [ 216.339266][ T53] hid-generic 0002:03FF:0080.000C: probe with driver hid-generic failed with error -22 [ 216.342469][T16591] use of bytesused == 0 is deprecated and will be removed in the future, [ 216.347624][T16591] use the actual size instead. [ 216.412514][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.522715][T16565] __nla_validate_parse: 5 callbacks suppressed [ 216.522729][T16565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2211'. [ 216.551180][ T9154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.554413][ T9154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.684775][T16606] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 216.748507][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2221'. [ 216.798010][T16616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2220'. [ 216.872999][T16620] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2222'. [ 216.881832][T16620] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.886549][T16620] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.976470][T16630] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 217.211432][ T5931] Bluetooth: hci3: command tx timeout [ 217.265056][T16652] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.269745][T16652] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 217.275019][T16652] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 217.362175][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.372460][T16652] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.377504][T16652] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 217.381712][T16652] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 217.381957][ T1027] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 217.455874][T16652] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.459912][T16652] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 217.465409][T16652] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 217.485398][T16674] could not allocate digest TFM handle cryptd(blake2b-160) [ 217.526425][T16652] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.529649][T16652] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 217.531607][T16681] random: crng reseeded on system resumption [ 217.531608][ T40] audit: type=1400 audit(217.446:1191): avc: denied { ioctl } for pid=16680 comm="syz.4.2233" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 217.532846][T16652] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 217.542843][ T1027] usb 8-1: Using ep0 maxpacket: 16 [ 217.552189][ T1027] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.556107][ T1027] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.559219][ T1027] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 217.564830][ T1027] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 217.567814][ T1027] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.571928][ T1027] usb 8-1: config 0 descriptor?? [ 217.591367][ T53] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 217.659447][T12995] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.664828][T12995] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 217.667585][T12995] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 217.679518][T12995] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.682491][T12995] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 217.685143][T12995] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 217.699658][ T91] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.702843][ T91] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 217.705484][ T91] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 217.716440][ T91] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.719276][ T91] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 217.722363][ T91] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 217.753129][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.757640][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.771315][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.776664][ T53] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.780144][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.796749][ T53] usb 6-1: config 0 descriptor?? [ 217.826243][T16704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2236'. [ 217.834009][T16704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2236'. [ 217.861828][T16704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2236'. [ 217.984714][ T1027] hid_parser_main: 8 callbacks suppressed [ 217.984729][ T1027] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 217.988941][ T1027] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 218.001273][ T1027] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 218.003538][ T1027] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 218.005742][ T1027] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 218.009659][ T1027] input: HID 0955:7214 Haptics as /devices/virtual/input/input22 [ 218.028820][ T1027] shield 0003:0955:7214.000D: Registered Thunderstrike controller [ 218.032429][ T1027] shield 0003:0955:7214.000D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 218.183573][T16654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2229'. [ 218.219207][ T53] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 218.331538][ T9176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.335257][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.401329][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.524004][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2231'. [ 218.527016][T16749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2231'. [ 218.839209][ T40] audit: type=1400 audit(218.746:1192): avc: denied { map } for pid=16754 comm="syz.4.2240" path="socket:[52119]" dev="sockfs" ino=52119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 218.847552][T16765] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 218.866867][ T5994] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 218.866968][ T6011] usb 8-1: USB disconnect, device number 21 [ 218.870820][ T5994] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 218.881651][ T5994] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 218.885284][ T5994] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 219.083026][T16805] hsr0: entered promiscuous mode [ 219.089639][T16805] hsr_slave_0: left promiscuous mode [ 219.093917][T16805] hsr_slave_1: left promiscuous mode [ 219.119438][T16805] hsr0 (unregistering): left promiscuous mode [ 219.146596][T16804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.157033][T16804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.281534][ T5931] Bluetooth: hci3: command tx timeout [ 219.381264][ T5994] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 219.407926][T16820] netlink: del zone limit has 4 unknown bytes [ 219.483515][T16826] bond1: option xmit_hash_policy: invalid value (6) [ 219.487908][T16826] bond1 (unregistering): Released all slaves [ 219.533580][ T5994] usb 9-1: config 128 has an invalid interface number: 148 but max is 0 [ 219.536978][ T5994] usb 9-1: config 128 has no interface number 0 [ 219.539590][ T5994] usb 9-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 219.543595][ T5994] usb 9-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 219.548052][ T5994] usb 9-1: config 128 interface 148 has no altsetting 0 [ 219.552267][ T5994] usb 9-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 219.555155][ T5994] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.557657][ T5994] usb 9-1: Product: syz [ 219.559041][ T5994] usb 9-1: Manufacturer: syz [ 219.560515][ T5994] usb 9-1: SerialNumber: syz [ 219.773462][ T5994] usb 9-1: USB disconnect, device number 15 [ 219.854151][T16917] netlink: 'syz.3.2254': attribute type 10 has an invalid length. [ 219.880211][T16917] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 220.013978][T16924] pimreg3: entered allmulticast mode [ 220.212288][ T1027] usb 6-1: USB disconnect, device number 26 [ 220.291265][ T5994] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 220.461250][ T5994] usb 9-1: Using ep0 maxpacket: 8 [ 220.466088][ T5994] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 220.469686][ T5994] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.473945][ T5994] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.478096][ T5994] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 220.481785][ T5980] net_ratelimit: 1 callbacks suppressed [ 220.481798][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.482412][ T5994] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.493572][ T5994] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 220.497437][ T5994] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.680800][T16986] zonefs (loop3) ERROR: Not a zoned block device [ 220.684449][T16987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16987 comm=syz.3.2269 [ 220.720973][ T5994] usb 9-1: usb_control_msg returned -32 [ 220.724639][ T5994] usbtmc 9-1:16.0: can't read capabilities [ 221.040147][ C0] [ 221.041179][ C0] ============================= [ 221.043194][ C0] [ BUG: Invalid wait context ] [ 221.045155][ C0] syzkaller #0 Tainted: G L [ 221.047268][ C0] ----------------------------- [ 221.048836][ C0] swapper/0/0 is trying to lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 221.050537][ C0] ffff8880135ed2e0 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x253/0xe80 [ 221.053699][ C0] other info that might help us debug this: [ 221.055810][ C0] context-{2:2} [ 221.057077][ C0] 1 lock held by swapper/0/0: [ 221.058633][ C0] #0: ffff8880135ed838 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x245/0xe80 [ 221.061987][ C0] stack backtrace: [ 221.063396][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.063414][ C0] Tainted: [L]=SOFTLOCKUP [ 221.063418][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.063426][ C0] Call Trace: [ 221.063432][ C0] [ 221.063438][ C0] dump_stack_lvl+0x100/0x190 [ 221.063460][ C0] __lock_acquire+0xfa4/0x2630 [ 221.063476][ C0] ? __lock_acquire+0x4a5/0x2630 [ 221.063490][ C0] ? xa_load+0x149/0x2c0 [ 221.063512][ C0] ? xa_load+0x149/0x2c0 [ 221.063523][ C0] lock_acquire+0x17c/0x330 [ 221.063532][ C0] ? kvm_xen_set_evtchn_fast+0x253/0xe80 [ 221.063545][ C0] _raw_read_lock_irqsave+0x46/0x90 [ 221.063554][ C0] ? kvm_xen_set_evtchn_fast+0x253/0xe80 [ 221.063565][ C0] kvm_xen_set_evtchn_fast+0x253/0xe80 [ 221.063575][ C0] ? kvm_xen_set_evtchn_fast+0x245/0xe80 [ 221.063586][ C0] ? __pfx_kvm_xen_set_evtchn_fast+0x10/0x10 [ 221.063597][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 221.063609][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 221.063618][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 221.063636][ C0] xen_timer_callback+0x1db/0x2a0 [ 221.063646][ C0] ? __pfx_xen_timer_callback+0x10/0x10 [ 221.063656][ C0] ? __hrtimer_run_queues+0x433/0x990 [ 221.063669][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 221.063680][ C0] ? __pfx_xen_timer_callback+0x10/0x10 [ 221.063690][ C0] __hrtimer_run_queues+0x1ad/0x990 [ 221.063703][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 221.063715][ C0] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 221.063727][ C0] hrtimer_interrupt+0x397/0x8c0 [ 221.063741][ C0] __sysvec_apic_timer_interrupt+0x109/0x3c0 [ 221.063755][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 221.063766][ C0] [ 221.063769][ C0] [ 221.063772][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.063785][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 221.063796][ C0] Code: 76 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 cc 14 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 221.063806][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000206 [ 221.063814][ C0] RAX: 000000000027c421 RBX: ffffffff8e297ac0 RCX: ffffffff8b76b4b5 [ 221.063821][ C0] RDX: 0000000000000000 RSI: ffffffff8dc45515 RDI: ffffffff8bfa35a0 [ 221.063827][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100d48673d [ 221.063833][ C0] R10: ffff88806a4339eb R11: 0000000000000000 R12: fffffbfff1c52f58 [ 221.063838][ C0] R13: 0000000000000000 R14: ffffffff90b74bd0 R15: 0000000000000000 [ 221.063846][ C0] ? ct_kernel_exit+0x125/0x180 [ 221.063857][ C0] default_idle+0x9/0x10 [ 221.063869][ C0] default_idle_call+0x6c/0xb0 [ 221.063880][ C0] do_idle+0x35b/0x4b0 [ 221.063894][ C0] ? __pfx_do_idle+0x10/0x10 [ 221.063907][ C0] cpu_startup_entry+0x4f/0x60 [ 221.063920][ C0] rest_init+0x251/0x260 [ 221.063932][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 221.063948][ C0] start_kernel+0x47a/0x480 [ 221.063959][ C0] x86_64_start_reservations+0x24/0x30 [ 221.063969][ C0] x86_64_start_kernel+0x122/0x130 [ 221.063979][ C0] common_startup_64+0x13e/0x148 [ 221.063995][ C0] [ 221.167754][T16812] usbtmc 9-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 221.176597][ T40] audit: type=1400 audit(220.956:1193): avc: denied { write } for pid=5837 comm="syz-executor" path="pipe:[7355]" dev="pipefs" ino=7355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 221.182627][ T6013] usb 9-1: USB disconnect, device number 16 [ 221.183983][ T40] audit: type=1400 audit(221.076:1194): avc: denied { mounton } for pid=16802 comm="syz.4.2249" path="/proc/471/task" dev="proc" ino=55910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 221.314875][ T5994] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 221.371414][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.521629][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.546159][ T9154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.674834][ T9154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.746376][ T9154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.834330][ T9154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.915549][ T9154] bridge_slave_1: left allmulticast mode [ 221.918037][ T9154] bridge_slave_1: left promiscuous mode [ 221.920544][ T9154] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.925310][ T9154] bridge_slave_0: left allmulticast mode [ 221.927691][ T9154] bridge_slave_0: left promiscuous mode [ 221.930353][ T9154] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.165464][ T9154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.170748][ T9154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.176135][ T9154] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 222.180907][ T9154] bond0 (unregistering): Released all slaves [ 222.557597][ T9154] hsr_slave_0: left promiscuous mode [ 222.559745][ T9154] hsr_slave_1: left promiscuous mode [ 222.561450][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.566030][ T9154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.569508][ T9154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.573753][ T9154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.576093][ T9154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.580178][ T9154] veth1_macvtap: left promiscuous mode [ 222.582133][ T9154] veth0_macvtap: left promiscuous mode [ 222.584066][ T9154] veth1_vlan: left promiscuous mode [ 222.585765][ T9154] veth0_vlan: left promiscuous mode [ 222.688948][ T9154] team0 (unregistering): Port device team_slave_1 removed [ 222.703286][ T9154] team0 (unregistering): Port device team_slave_0 removed [ 223.306068][ T9154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.394558][ T9154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.444163][ T9154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.499583][ T9154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.589218][ T9154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.644694][ T9154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.735317][ T9154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.796730][ T9154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.885708][ T9154] team0: left allmulticast mode [ 223.887841][ T9154] vlan0: left allmulticast mode [ 223.889960][ T9154] veth0_vlan: left allmulticast mode [ 223.893656][ T9154] bridge0: port 1(team0) entered disabled state [ 223.899652][ T9154] bridge_slave_1: left allmulticast mode [ 223.901889][ T9154] bridge_slave_1: left promiscuous mode [ 223.903769][ T9154] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.907031][ T9154] bridge_slave_0: left allmulticast mode [ 223.908833][ T9154] bridge_slave_0: left promiscuous mode [ 223.910671][ T9154] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.193159][ T9154] bond0 (unregistering): Released all slaves [ 224.283677][ T9154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.287550][ T9154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.290985][ T9154] bond0 (unregistering): Released all slaves [ 224.422309][ T9154] tipc: Disabling bearer [ 224.431835][ T9154] tipc: Left network mode [ 224.949153][ T9154] hsr_slave_0: left promiscuous mode [ 224.960185][ T9154] hsr_slave_1: left promiscuous mode [ 224.984619][ T9154] hsr_slave_0: left promiscuous mode [ 224.986799][ T9154] hsr_slave_1: left promiscuous mode [ 224.988812][ T9154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.991499][ T9154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.994199][ T9154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.996555][ T9154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.002349][ T9154] veth1_macvtap: left promiscuous mode [ 225.004115][ T9154] veth0_macvtap: left promiscuous mode [ 225.005939][ T9154] veth1_vlan: left allmulticast mode [ 225.007605][ T9154] veth1_vlan: left promiscuous mode [ 225.009697][ T9154] veth1_macvtap: left promiscuous mode [ 225.012170][ T9154] veth0_macvtap: left promiscuous mode [ 225.014590][ T9154] veth1_vlan: left promiscuous mode [ 225.016840][ T9154] veth0_vlan: left promiscuous mode [ 225.079851][ T9154] pim6reg (unregistering): left allmulticast mode [ 225.103264][ T9154] macvlan0 (unregistering): left allmulticast mode [ 225.121189][ T9154] team0 (unregistering): Port device vlan0 removed [ 225.328470][ T9154] pimreg3 (unregistering): left allmulticast mode [ 225.398626][ T9154] team0 (unregistering): Port device team_slave_1 removed [ 225.414690][ T9154] team0 (unregistering): Port device team_slave_0 removed [ 226.259156][ T9154] IPVS: stop unused estimator thread 0...