last executing test programs: 5.284607165s ago: executing program 1 (id=2238): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r2, 0x10005032, 0xc811, 0x17, 0x0, 0x0) syz_socket_connect_nvme_tcp() ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x64) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000080)={0x9, 0x5}) 4.41262664s ago: executing program 0 (id=2247): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x15) ioctl$TCSETS(r1, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x8, 0x3f, 0xb, "3eccd25569e20900"}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) connect(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x7fff}, 0x80) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34888521, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2, 0x1) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) openat(r3, &(0x7f00000002c0)='./file0\x00', 0x301300, 0x80) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x12) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r9, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', r9, 0x0, 0x0, 0x0, 0x0, 0xd, @private2, @loopback, 0x40, 0x7800, 0xfffffffc}}) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r7, 0x5501) write$uinput_user_dev(r6, &(0x7f00000004c0)={'syz0\x00', {0x27, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x9, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xbff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x6, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x4, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0x8, 0xbc1, 0x80000, 0x0, 0x5e81b39d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x100, 0x4, 0x7, 0x9, 0x5, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x807fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x2000006, 0x525ba681, 0x4f74, 0x9, 0x1, 0x1, 0x4, 0x100, 0x6, 0x10000, 0xf51, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x4173, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x4, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x1], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0xd5, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0x8, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) read$hiddev(r7, &(0x7f0000000040)=""/117, 0x75) ioctl$KVM_SET_REGS(r4, 0xc0046686, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000120005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0020000000000000180012800e8701007769726567756172c90e82b550331c927364000000040002802ae8a1ae7aec2635e36cdbd2a4b13b9a2d48ef5595c93c49f06630526684988a3ba11ecc3825b1b4ad33cabce93890b11a23d3904e30b034205f82fdbca26a3927a90da337d181959b432803769062224d7018cb4b37b6241367cc0c0ebefe0a58aedcc78a5bde72df87273333686d62eb5af979e0b4c3a54289f4b0610353a068125845ba320f61398a916ba11af5ab680eb7634be065c3fae85b"], 0x38}}, 0x0) 3.492412368s ago: executing program 0 (id=2251): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffab}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x1, [0x0, 0x0, 0x1, 0x0, 0x1, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x5, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}}, 0x20000000) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffab}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x1, [0x0, 0x0, 0x1, 0x0, 0x1, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x5, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}}, 0x20000000) (async) 3.492115835s ago: executing program 0 (id=2252): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) creat(&(0x7f0000000100)='./bus\x00', 0x100) mount$tmpfs(0x0, &(0x7f00000008c0)='./bus\x00', &(0x7f0000000ec0), 0x2010008, &(0x7f0000001040)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = inotify_init1(0x0) syz_fuse_handle_req(r0, &(0x7f0000004380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cfda37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ea7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000100, 0x20000000, 0x80000000000004, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x2, 0x2, 0x10000, 0x2, 0x0, 0xa000, 0xfffffffc, r2, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) inotify_add_watch(r3, &(0x7f00000001c0)='./file0\x00', 0x810009c0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0xa0, 0x0, 0x8, {{0x3, 0x0, 0x800, 0xbafd, 0x2, 0x8, {0x0, 0xf, 0x5, 0xfffffffffffffff5, 0x9, 0x4, 0x2, 0x6, 0xfffffbff, 0x8000, 0xfff, r2, 0x0, 0x0, 0x2}}, {0x0, 0x1}}}, 0x0, 0x0}) 3.282358772s ago: executing program 1 (id=2257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x581102, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x2, 0x3, 0x4, 0x3}, 0xb, 0x0, 0xd, 0x2, 0x2, 0x1a, 0xe, 0x8, 0x0, 0x7, {0x81, 0x5, 0x5, 0x5, 0x5}}}}]}, 0x78}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x400c044, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3.152300083s ago: executing program 1 (id=2258): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d734fcd00534789c365b2a27ae093068ae6e56bfc6912630d3b162c85ded16af6b759032dff22b2c5b0641f648b18abc6c19c00bcb869871afd3"], 0xc) (async) write$vga_arbiter(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="6465636f646573206e6f6e6500f8f9b080b27d129bbea03b5c1c2a99a168d5d5808661"], 0xd) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) r3 = ioctl$USERFAULTFD_IOC_NEW(r2, 0xaa00) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) (async) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000240)=0xffffffffffffffff, 0x85, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 3.102532056s ago: executing program 1 (id=2259): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xaa}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) (async, rerun: 64) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x6, 0x0) (rerun: 64) 3.048484782s ago: executing program 1 (id=2260): r0 = syz_open_dev$video(&(0x7f0000000000), 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa1}}, './file0\x00'}) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xf000000, 0x1, 0x3, r1, 0x0, &(0x7f00000000c0)={0x10a148c, 0x32d, '\x00', @p_u8=&(0x7f0000000080)=0x3}}) syz_usb_connect(0x0, 0x4f8, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0xff, 0x1c, 0x6b, 0xff, 0x22b8, 0x2a70, 0xa3b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e6, 0x2, 0x9, 0x1, 0x10, 0x5, "", [{{0x9, 0x4, 0x16, 0x2, 0xd, 0xff, 0xff, 0xff, 0x6, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "1b6136a345c9"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5c, 0x4781, 0x5}, {0x6, 0x24, 0x1a, 0x5, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}]}, @uac_control={{0xa, 0x24, 0x1, 0x4, 0xa}}], [{{0x9, 0x5, 0x0, 0x10, 0x0, 0x80, 0x9f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x3}]}}, {{0x9, 0x5, 0xd, 0x1c, 0x204, 0x8, 0x3, 0x54, [@generic={0xa9, 0x22, "dcdafa43b0c64aa6ad1d8800c06bcd174346e1fae98d4855c42a1975af81517951807cca7baca261b64d15aa3d324233e775b2a8860c3ffb502af111e5e68a500b2241c2d452e34423945ade53e2681107d8af5534d784f0657a23fc22631ac42289ae799695da348744c1ee518b1f461382ec4b2d44137012b720234fba9e705172889e045b1f35cb7951e5aed8d9c0ca22f2480b3bccbb0a0117cdc0c2d48cbd256a9d26b001"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x9, 0x0, 0xc0}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0x8, 0xe, 0x4}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0xf7, 0x98, 0x6}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x8, 0xfe, 0x1}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x9, 0xfe, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xdca}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x8, 0x0, 0x8}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x7f, 0x6, 0x6, [@generic={0xfc, 0x3, "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"}, @generic={0xde, 0x1a, "9d2fe7625813dbad5baa0b03d79389ea187eaa99a52e4639351765e80735dd972047d7d0cc68338f01fe3e44b28d902563cf68f84085630613c2c743988e23d6f4ae5a2e99cb469a12dacc10e3a131ce135ab9907e5b5eb212543558461ee2dcfd94fbe35cd916edf51afdaaf7d9aea03d23a975c15f4dfddf447b9eb72d7009771d8678b883c67c5847a8f277f321a316df495e483ebbd3b807601d0e196048bd3218e6b75adeb159becb20a17ff667b72f0b72e7a646a2d06405bdac9b6f70b4fa717ae5e33e42e16eccb2c9df90652b72ae5af60d7210704e157b"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x5, 0xa4, 0x5, [@generic={0x9d, 0x2, "11ba872ac56d8df86cf86f7d75c76635ef94ac303518d47377a2dcd627eae7090704ff7f0dc2eee396eb843e75700dd38b70df480b3d1b26b2c2738f9209de7d592a2a742337c04a338d25220a11fb83b48ac5239396c7c2cff688c7e1ff23772862e75315521bd8f85071bcb57b3a37cb89e26596533de9426bf408ba91bd081f1b69b5bbefa1d2236b513caf96c6a15b3289871c4f63bb527062"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x3, 0x4, 0x4}}, {{0x9, 0x5, 0x5, 0xc, 0x200, 0x1, 0x81, 0x7}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x5, 0x3, 0x1, [@generic={0xf6, 0x4, "2f18d964845503920276fbdbd18c41203fdf8b69c0def4376d7c0b66c7572c7f2640c0e38b9913f1a47f75577b7d768d9cb575dcfc4baf07cb18022ddde31ea6ba1e1858194295c39ac6357f4e007dac4f7bfb5c50889889d6530d35411ef02c58f8ebfc8d668adc57b6a841e3e50c9da0d1ef41d2c6a78911b1fa7dce11cd902d8c4a6a80c000854f54d5c2110797f216f497527b2df5f8842d1e6026015fa1cdbbcfb26915bcfa7413a44420d0f4fecf212f2a2fcc3611934af7e3cf2ca13460a2614e71a9d1c95709ee1fa15f3bc9ec18856d17a1bd7c6ae902209e83e90a6d8b53fd29ee2add14ba33b36ffa6263b0fca3ba"}]}}]}}, {{0x9, 0x4, 0x98, 0x4, 0x0, 0xcf, 0xe1, 0x72, 0x3}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x250, 0x8, 0x2, 0xf7, 0x8}, 0x10, &(0x7f0000000680)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x1, 0x52, 0x0, 0x5}]}, 0x2, [{0xb4, &(0x7f00000006c0)=@string={0xb4, 0x3, "cca054ba856363234fee39143f324f6cc84aab3647fca51bf2c586e46986d607521f1ddd3078913dd3b8a562b974a27db1fc990385d2104d9ef07b2e016c453efbc061a84e81e6e0fe530fbd043da1848b8e0c9cba502bd3c5047c1ae6f63bde04860f27f9ab95189266e9f1fa2654fdf3936d6e0b3213f449b3be3a46c11b8e7ed24325ea2b41a06040556faf8295c637fca60b40baec9ec65d2c2520953f668caa80d50fa284ea7fff5f5f0d2e3074ba69"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc1a}}]}) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e21, @multicast1}, 0x184, 0x0, 0x0, 0x0, 0x2c2d, &(0x7f0000000800), 0x1, 0x100000000, 0x101}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000008c0)={0x2, 0x5, {0xffffffffffffffff}, {0xee01}, 0x3, 0x9}) sched_setscheduler(r2, 0x1, &(0x7f0000000900)=0x7c) r3 = gettid() ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000940)) recvmmsg$unix(r1, &(0x7f0000004840)=[{{&(0x7f0000000980), 0x6e, &(0x7f0000002d00)=[{&(0x7f0000000a00)=""/152, 0x98}, {&(0x7f0000000ac0)=""/186, 0xba}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)}, {&(0x7f0000001bc0)=""/113, 0x71}, {&(0x7f0000001c40)=""/148, 0x94}, {&(0x7f0000001d00)=""/4096, 0x1000}], 0x7, &(0x7f0000002d80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x58}}, {{&(0x7f0000002e00), 0x6e, &(0x7f0000003140)=[{&(0x7f0000002e80)=""/237, 0xed}, {&(0x7f0000002f80)=""/128, 0x80}, {&(0x7f0000003000)=""/65, 0x41}, {&(0x7f0000003080)=""/30, 0x1e}, {&(0x7f00000030c0)=""/71, 0x47}], 0x5, &(0x7f00000031c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f00000032c0), 0x0, &(0x7f0000003300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xe0}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003400)=""/49, 0x31}, {&(0x7f0000003440)=""/165, 0xa5}, {&(0x7f0000003500)=""/84, 0x54}, {&(0x7f0000003580)=""/42, 0x2a}], 0x4, &(0x7f0000003600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000003680)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000003700)=""/17, 0x11}, {&(0x7f0000003740)=""/106, 0x6a}, {&(0x7f00000037c0)=""/4096, 0x1000}], 0x3, &(0x7f0000004800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}}], 0x5, 0x40000060, &(0x7f0000004980)={0x0, 0x3938700}) r37 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000049c0), 0x20000, 0x0) ioctl$SG_GET_PACK_ID(r37, 0x227c, &(0x7f0000004a00)) fcntl$getownex(r13, 0x10, &(0x7f0000004a40)) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000004a80)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0xa57, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0x20, 0x6, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x0, 0x40, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0x783}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x81, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0xf, 0x0, 0x8}}]}}}]}}]}}, &(0x7f0000004e80)={0xa, &(0x7f0000004ac0)={0xa, 0x6, 0x310, 0x9, 0xfc, 0x6, 0x20, 0x6}, 0x51, &(0x7f0000004b00)={0x5, 0xf, 0x51, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x27, "8b76ba943a8958e84c3a1c33baf5a024"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x3, 0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "3e95a0e287c7d157e8b6acda632fb9d4"}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x8, 0x770f, 0xa, [0xff00c0, 0x0]}]}, 0x9, [{0x4, &(0x7f0000004b80)=@lang_id={0x4, 0x3, 0x80c}}, {0x8, &(0x7f0000004bc0)=@string={0x8, 0x3, "ba104d63cc89"}}, {0x4, &(0x7f0000004c00)=@lang_id={0x4, 0x3, 0x860}}, {0xcb, &(0x7f0000004c40)=@string={0xcb, 0x3, "6488f217b366dcd4b8eb1ed3ea624ff875f913edb78386a532ec83ebe7b7b4f860c3fb7f318c97b1f0587d8d0123fc52f16372f75c7fc52c2222f36412e507d100ed2a4ae69f70cd3563853192caadc9b5158bbed839855a93197a9134b7da208b736bf3a6ae0449bd155a04fb34d4b6029f6d4eadc39bbc3fd1bfe131675e094f41027c66ee957006b462b159c665e6f0216967a032ff362498cff406281b44bb3de5f73132fb8b8b48b88b5be311bbd6dd249e6388126634f93f4f0f19e0e26ebacf19fa047b8508"}}, {0x4, &(0x7f0000004d40)=@lang_id={0x4, 0x3, 0x852}}, {0x4, &(0x7f0000004d80)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000004dc0)=@lang_id={0x4, 0x3, 0xfcae}}, {0x4, &(0x7f0000004e00)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000004e40)=@lang_id={0x4, 0x3, 0x440a}}]}) r38 = socket$isdn(0x22, 0x3, 0x26) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000005340)=0x0) statx(r28, &(0x7f0000005380)='./file0\x00', 0x800, 0x8, &(0x7f00000053c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000054c0)='./file0\x00', &(0x7f0000005500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r9, &(0x7f0000005700)={&(0x7f0000004f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000052c0)=[{&(0x7f0000004fc0)="fd79abc212a1f49627aeb55de9ec3a8238a32244057fe70dee0b3dfbac2703fe619f044cb3f2540156329da8b8b5ca76a84d700e4c550de37ad896f24407974ccffd3e78ed68f7d59fe45e3107b49c826e51244997913d", 0x57}, {&(0x7f0000005040)="6e78980d890b069266287289e084bc00ccfae70531b0609699c4e2b3e5c7483913ff7530596167215bef9f46ae5e70ff3ac8cd459517362ffe5099990c1764d7d03cbc9cfb33250caa36da86d3741df713b7663521af40fdea2b5d097de01906f8e9879add5dc56a568bf0fb702e645eac7043ff6402eec32ec0fc5b1ce81bf727f93ff65af4", 0x86}, {&(0x7f0000005100)="6423d0ad6baf29e63f76ab97f6985a3d4c5e42567e6b0b378daeaed9ebac486d0a32d74c04994b9a106cbcb2f9495028c9d49a9d79ffb339f951b6a9448e50574f2a9e3af85a52d8c63c8cafe368161a963afeb4b989484a510f95898261c7205a709b4d82dd8dc64e75cbacca3853e92530a16058989b648fbd9e658ddaebdf256c94e32fc6eb7dcbf75e", 0x8b}, {&(0x7f00000051c0)="f9f6790e7a5ae172e64ab29a58d26714e5c82b8e8f7c9adcd4f8eb38fb8bed7be2b28fa67a6739d2dcf3e176d28f", 0x2e}, {&(0x7f0000005200)="34fa856d4f0eb7d1257dff57593b05e4eedc9e399022b61f7479a5fba52863a3ae43f1c3ef6e02826e991b86d002f6945f5db30b402b6c4a55dea33f8aef4ba64e89a30d16f3c640958b81525d8fee0e529b7d04b31b267f43e044f2319f3f9f02c6880b033156fc57dcc608c38e3655658fa177eb08ac59b0677f1e85bb69cbb6e30335edc34a103c837ae256f3fcb5", 0x90}], 0x5, &(0x7f0000005580)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r26, r35, r36}}}, @rights={{0x38, 0x1, 0x1, [r12, r18, r14, r1, r16, r38, r32, r29, 0xffffffffffffffff, r19]}}, @cred={{0x1c, 0x1, 0x2, {r3, r10, r24}}}, @cred={{0x1c, 0x1, 0x2, {r39, 0xee01, r40}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {r26, r41, r21}}}, @rights={{0x28, 0x1, 0x1, [r25, r34, r29, r8, r5, r31]}}, @rights={{0x2c, 0x1, 0x1, [r30, r17, r5, r31, r20, r12, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r27}}}], 0x160, 0x40090}, 0x1) fcntl$setlease(r15, 0x400, 0x0) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, &(0x7f0000005740)) ioctl$DVB_DEMUX_DMX_QUERYBUF(r11, 0xc0186f3d, &(0x7f0000005780)={0x3ff, 0xffff, 0x52, 0x9}) ioctl$VIDIOC_TRY_EXT_CTRLS(r28, 0xc0205649, &(0x7f0000005800)={0x40000, 0x8, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000057c0)={0x9a091d, 0x2, '\x00', @value=0xf}}) openat$cgroup_pressure(r33, &(0x7f0000005840)='io.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000005880)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0/file0\x00'}) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000005900)={0x0, 0x0, 0x8000000000000001}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r42, 0xc0386447, &(0x7f0000005940)={{0x8, 0x1, &(0x7f00000058c0)=[{0xfc, 0x0, 0x3}]}, 0x66, 0xe, 0x7, 0x2, 0x0, 0x3d3, 0x100, 0x0, r43}) mount(&(0x7f0000005980)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000059c0)='./file0\x00', &(0x7f0000005a00)='hugetlbfs\x00', 0x80080, &(0x7f0000005a40)='/dev/video#\x00') socket$netlink(0x10, 0x3, 0x9) quotactl_fd$Q_SYNC(r30, 0xffffffff80000102, 0x0, 0x0) 1.14018862s ago: executing program 3 (id=2288): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @time={0x8, 0x80}, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0xff, @time={0x10000, 0x4}, {0x10, 0x5}, {0xc, 0x2}, @time=@time={0x5, 0xb436}}, {0x0, 0x3, 0xa, 0x4, @time={0x3, 0x6}, {0xbb, 0x3}, {0xdb}, @result={0x5, 0x9}}], 0x70) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="3e660f00d2b8010000000f01c1c4e2613767002e084c8200c463791d2e2048b839a9fb87bdbcc13e0f23c00f21f835030006000f23f82667660f01590042c10eb6b8010000000f01c1", 0x49}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000040)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 901.792044ms ago: executing program 3 (id=2289): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x1000, 0xf, 0x7, 0x9}, {0xfffe, 0x4, 0x2, 0x5}, {0x4, 0xb, 0x60, 0x4}]}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000100)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000340)={r4, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000100)={r4, 0x0, &(0x7f0000000080)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000001380)={r5}) 901.07316ms ago: executing program 3 (id=2290): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) (async) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(r2, 0x89f0, &(0x7f00000194c0)={0x40, 0x4, 0x10008, 0x2, 0xf, "a533b6aaf9f659ff35036bf79d8b4c22246305", 0x9, 0x9}) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x6, 0x41e}}]}}]}, 0x58}}, 0x0) 842.217912ms ago: executing program 2 (id=2291): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x40086806, &(0x7f0000000100)) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xc100, 0x0) 841.791267ms ago: executing program 2 (id=2292): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000040c0)=0x3, 0x4) r1 = fsopen(&(0x7f0000000080)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) accept4$llc(r0, 0x0, &(0x7f0000000280), 0x400) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x32) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 712.389524ms ago: executing program 3 (id=2293): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f0000001600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000003640)=0x0) mount$nfs(&(0x7f0000000180)='#\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x80000, &(0x7f0000003680)={[{')!$](\xc87\'{*]-\xdf-/'}, {'skcipher\x00'}, {'skcipher\x00'}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@hash}, {@fowner_lt={'fowner<', r4}}, {@hash}, {@euid_eq={'euid', 0x3d, r5}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x52, 0x66, 0x62, 0x32, 0x37, 0x33, 0x36], 0x2d, [0x30, 0x36, 0x35, 0xc], 0x2d, [0x0, 0x62, 0x37, 0x64], 0x2d, [0x31, 0x38, 0x65, 0x33], 0x2d, [0x62, 0x38, 0x31, 0x31, 0x32, 0x65, 0x66, 0x31]}}}, {@uid_eq={'uid', 0x3d, r6}}, {@smackfsdef={'smackfsdef', 0x3d, 'l2tp\x00'}}, {@uid_eq={'uid', 0x3d, r7}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r3, 0x4068aea3, &(0x7f0000000200)={0xdb, 0x0, 0x1}) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r1) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 621.675386ms ago: executing program 2 (id=2294): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44080}, 0x8001) socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000600)={r3, r3, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r3, 0x1) 522.073803ms ago: executing program 3 (id=2295): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000b00)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x3472, 0x40000060, 0x100007f, 0x6, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 521.777707ms ago: executing program 2 (id=2296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a0104000000000000000000000000080014"], 0x80}}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128)\x00'}, 0x58) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0xc0) 352.077177ms ago: executing program 2 (id=2297): socket(0x15, 0x5, 0x0) (async) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271d, 0x0, &(0x7f0000000040)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000040)=0x1f) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7520757365723a6e657f20"], 0x1a, 0xfffffffffffffffc) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7520757365723a6e657f20"], 0x1a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000000506010100000000000000000a0000010900020073797a31000000000900030073797a32000000000500010007"], 0x34}, 0x1, 0x0, 0x0, 0x2004c045}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="494efacb0a00000000000007fb", @ANYRES16=r4, @ANYBLOB="00042abd7000ffdbdf252b00000008000200", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0xb4d8d9e5626b0f59) socket$kcm(0x10, 0x2, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x50) 301.762111ms ago: executing program 0 (id=2298): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) (async) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) (async) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) (async) close(r2) (async) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f00000003c0)) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2}, {0x60}, {}, {0x6}]}) close(r3) (async, rerun: 32) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) (async, rerun: 32) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) (async, rerun: 64) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f00005b3000/0x1000)=nil, &(0x7f00002ce000/0x3000)=nil, 0x5, &(0x7f0000000400)=[{0x1, 0x0, 0x800}, {0x6, 0x3, 0x3}, {0x8, 0x0, 0xffff}], 0x3, 0x7f, 0x1, 0x1, 0x4, 0x42}) (async, rerun: 64) creat(&(0x7f0000000080)='./cgroup\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) (async) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) (async) memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (rerun: 64) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x26}, 0x10) 81.667717ms ago: executing program 2 (id=2299): r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x15) ioctl$TIOCSSOFTCAR(r1, 0x5412, &(0x7f0000000540)=0x13) 80.473297ms ago: executing program 0 (id=2300): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x168) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x10}, {r3, 0x2000}, {r1, 0x6480}, {r1, 0x4140}], 0x4, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={[0xd]}, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0xa, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4288}, [@IFLA_EVENT={0x8, 0x2c, 0x5}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x3c}}, 0x26040090) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r7, 0x0, r7) (async) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @control={0x3, 0x5a, 0x93}}, {0x0, 0x0, 0x0, 0x2, @time={0x367f, 0xfffffffd}, {}, {0x80}, @result={0x2, 0x2}}], 0x38) read$hidraw(r8, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000100)={0x9, 0x0, 0x8, 0x8, 0x2}) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000100)={0x9, 0x0, 0x8, 0x8, 0x2}) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x3, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) (async) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x3, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) 80.107667ms ago: executing program 3 (id=2301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000891f0180c200000ebbbbbbbbbbbb08004500002000670000032f907800001fe1e0000001a00086dd001bd69038655fb9"], 0x32) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000fee000)=0x5, 0x4) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x28001, @empty, 0xffffff5d}, 0x1c) listen(r4, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x30002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4ea3, 0xfffffffb, @rand_addr=' \x01\x00', 0x4}, 0x1c) listen(r5, 0x50) ioctl$TIOCSSOFTCAR(r3, 0x5412, &(0x7f00000001c0)=0x11) 1.376236ms ago: executing program 0 (id=2303): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0x4, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) 0s ago: executing program 1 (id=2304): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000ac0)={0x1, 0x0, @raw_data=[0xdc, 0x8000, 0x7f, 0x3c000, 0x80, 0x2, 0x8, 0x2, 0x6d, 0x7, 0x97, 0x7fffffff, 0x1000, 0x0, 0x2]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 0s ago: executing program 1 (id=2305): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) (async, rerun: 64) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40242) (rerun: 64) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[], 0x125) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) (async, rerun: 32) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, &(0x7f0000000200)={'trans=virtio,', {[{@access_any}]}}) (async) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000040)=[{r2, 0x3}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="0100000000000400000008"], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): ] kvm: user requested TSC rate below hardware speed [ 144.397908][T11004] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 144.458613][T11015] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4242531789 (543044068992 ns) > initial count (393846602496 ns). Using initial count to start timer. [ 144.527409][T11023] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1482'. [ 144.530509][T11023] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 144.549523][T11025] mkiss: ax0: crc mode is auto. [ 144.663250][T11035] overlayfs: failed to resolve './file0': -2 [ 144.675830][T11042] usb usb8: usbfs: process 11042 (syz.3.1487) did not claim interface 0 before use [ 144.809547][T11054] kvm: Disabled LAPIC found during irq injection [ 144.863566][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 145.002940][ T6647] usb 42-1: device descriptor read/8, error -110 [ 145.059934][T11060] kvm: kvm [11056]: vcpu0, guest rIP: 0x9132 Unhandled WRMSR(0xc1) = 0x60000000 [ 145.066321][T11060] kvm: kvm [11056]: vcpu0, guest rIP: 0x9132 Unhandled WRMSR(0xc2) = 0x60000000 [ 145.096768][T11060] kvm: kvm [11056]: vcpu0, guest rIP: 0x9132 Unhandled WRMSR(0x11e) = 0x60000000 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 145.132165][T11060] kvm: kvm [11056]: vcpu0, guest rIP: 0x9132 Unhandled WRMSR(0x186) = 0x60000000 [ 145.137156][T11060] kvm: kvm [11056]: vcpu0, guest rIP: 0x9132 Unhandled WRMSR(0x187) = 0x60000000 [ 145.234790][T11081] sctp: [Deprecated]: syz.1.1496 (pid 11081) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.234790][T11081] Use struct sctp_sack_info instead [ 145.241662][T11081] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 145.243830][T11081] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 145.247336][T11081] vhci_hcd vhci_hcd.0: Device attached [ 145.285659][T11082] vhci_hcd: connection closed [ 145.285845][T10057] vhci_hcd vhci_hcd.1: stop threads [ 145.289696][T10057] vhci_hcd vhci_hcd.1: release socket [ 145.291558][T10057] vhci_hcd vhci_hcd.1: disconnect device [ 145.403214][ T6647] usb usb42-port1: attempt power cycle [ 145.451286][T11095] kAFS: unparsable volume name [ 145.642396][T11116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.653414][T11116] batadv0: mtu less than device minimum [ 145.655693][T11116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.659736][T11116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.663870][T11116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.667950][T11116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.671759][T11116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.675847][T11116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.680296][T11116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.684255][T11116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.688336][T11116] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.699405][T11116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.703252][T11116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.721941][T11116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.727394][T11116] batman_adv: batadv0: Interface deactivated: dummy0 [ 145.730141][T11116] batman_adv: batadv0: Removing interface: dummy0 [ 145.916979][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1505'. [ 145.927631][T11123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1505'. [ 145.973464][T11127] sctp: [Deprecated]: syz.2.1506 (pid 11127) Use of int in maxseg socket option. [ 145.973464][T11127] Use struct sctp_assoc_value instead [ 145.979231][ T6647] usb usb42-port1: unable to enumerate USB device [ 146.023029][T11131] loop6: detected capacity change from 0 to 7 [ 146.026923][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 146.031211][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.035335][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 146.038935][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.042505][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 146.046210][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.049004][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 146.052642][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.077045][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 146.080305][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.083900][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 146.087759][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.095762][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 146.099665][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.104332][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 146.107890][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.111154][ T5932] ldm_validate_partition_table(): Disk read failed. [ 146.113811][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 146.117885][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.120955][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 146.124289][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.127392][ T5932] Dev loop6: unable to read RDB block 0 [ 146.129631][ T5932] loop6: unable to read partition table [ 146.131838][ T5932] loop6: partition table beyond EOD, truncated [ 146.151672][T11131] ldm_validate_partition_table(): Disk read failed. [ 146.165757][T11131] Dev loop6: unable to read RDB block 0 [ 146.168910][T11131] loop6: unable to read partition table [ 146.171555][T11131] loop6: partition table beyond EOD, truncated [ 146.174697][T11131] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 146.230330][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 146.230372][ T40] audit: type=1400 audit(1775526960.912:885): avc: denied { create } for pid=11133 comm="syz.2.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 146.241550][ T40] audit: type=1400 audit(1775526960.922:886): avc: denied { ioctl } for pid=11133 comm="syz.2.1509" path="socket:[38866]" dev="sockfs" ino=38866 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 146.245922][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1509'. [ 146.603741][T11148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1513'. [ 146.625747][ T6647] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 146.741710][T11155] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 146.743990][T11155] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 146.748079][T11155] vhci_hcd vhci_hcd.0: Device attached [ 146.772839][T11160] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 146.775343][T11160] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 146.778520][T11160] vhci_hcd vhci_hcd.0: Device attached [ 146.780362][ T6647] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 146.785167][T11161] vhci_hcd: connection closed [ 146.785325][T11157] vhci_hcd: connection closed [ 146.787823][ T6647] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.793733][T10057] vhci_hcd vhci_hcd.1: stop threads [ 146.796691][T10057] vhci_hcd vhci_hcd.1: release socket [ 146.798871][T10057] vhci_hcd vhci_hcd.1: disconnect device [ 146.802182][ T6647] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.806455][T10057] vhci_hcd vhci_hcd.1: stop threads [ 146.808525][T10057] vhci_hcd vhci_hcd.1: release socket [ 146.810744][T10057] vhci_hcd vhci_hcd.1: disconnect device [ 146.814131][ T6647] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 146.820891][ T6647] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 146.825902][ T6647] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 146.829216][ T6647] usb 7-1: Manufacturer: syz [ 146.841570][ T6647] usb 7-1: config 0 descriptor?? [ 147.274927][ T6647] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 147.304058][ T6647] appleir 0003:05AC:8243.0006: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 147.308451][ T40] audit: type=1400 audit(1775526961.992:887): avc: denied { ioctl } for pid=11173 comm="syz.0.1519" path="socket:[40229]" dev="sockfs" ino=40229 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 147.372804][ T40] audit: type=1400 audit(1775526962.052:888): avc: denied { audit_write } for pid=11176 comm="syz.1.1520" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 147.384069][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1520'. [ 147.406409][ T40] audit: type=1400 audit(1775526962.092:889): avc: denied { firmware_load } for pid=11176 comm="syz.1.1520" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 147.464490][T11177] usb usb7: usbfs: process 11177 (syz.1.1520) did not claim interface 0 before use [ 147.568744][T11182] SELinux: syz.1.1522 (11182) set checkreqprot to 1. This is no longer supported. [ 147.568782][ T40] audit: type=1400 audit(1775526962.252:890): avc: denied { setcheckreqprot } for pid=11181 comm="syz.1.1522" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 147.605933][ T40] audit: type=1400 audit(1775526962.292:891): avc: denied { bind } for pid=11135 comm="syz.2.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.622687][ T40] audit: type=1400 audit(1775526962.302:892): avc: denied { listen } for pid=11135 comm="syz.2.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.641952][ T40] audit: type=1400 audit(1775526962.302:893): avc: denied { write } for pid=11135 comm="syz.2.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.651203][T11184] lo speed is unknown, defaulting to 1000 [ 147.651567][ T40] audit: type=1400 audit(1775526962.302:894): avc: denied { accept } for pid=11135 comm="syz.2.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.263167][T11186] IPv6: NLM_F_CREATE should be specified when creating new route [ 148.630187][T11218] lo speed is unknown, defaulting to 1000 [ 149.243234][T11249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=11249 comm=syz.0.1543 [ 149.330456][T11258] bridge_slave_1: left allmulticast mode [ 149.332335][T11258] bridge_slave_1: left promiscuous mode [ 149.335571][T11258] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.344947][T11258] bridge_slave_0: left allmulticast mode [ 149.347046][T11258] bridge_slave_0: left promiscuous mode [ 149.349095][T11258] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.385109][T11261] netfs: Couldn't get user pages (rc=-14) [ 149.388170][T11261] netfs: Zero-sized read [R=25] [ 149.411299][ T8397] usb 7-1: USB disconnect, device number 9 [ 149.538216][T11268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1549'. [ 149.549138][T11268] xt_hashlimit: size too large, truncated to 1048576 [ 149.708865][T11272] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.1550'. [ 149.995764][T11300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32784 sclass=netlink_route_socket pid=11300 comm=syz.0.1558 [ 150.020035][T11307] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1560'. [ 150.023156][T11307] netlink: 20892 bytes leftover after parsing attributes in process `syz.3.1560'. [ 150.099802][T11309] xt_CT: No such helper "pptp" [ 150.107235][T11309] batman_adv: batadv0: Adding interface: dummy0 [ 150.109250][T11309] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.119049][T11309] batman_adv: batadv0: Interface activated: dummy0 [ 150.160705][T10062] Bluetooth: (null): Invalid header checksum [ 150.218303][T11321] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1566'. [ 150.222194][T11322] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1566'. [ 150.227651][T11321] fuse: Bad value for 'fd' [ 150.274964][T10071] Bluetooth: (null): Too short H5 packet [ 150.277346][T10071] Bluetooth: (null): Invalid header checksum [ 150.282731][ T59] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 150.311470][T11328] xt_SECMARK: invalid mode: 2 [ 150.383188][T10057] Bluetooth: (null): Invalid header checksum [ 150.383446][T11333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11333 comm=syz.0.1570 [ 150.438641][ T59] usb 6-1: config 0 has no interfaces? [ 150.441197][ T59] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.447103][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.447114][T11337] netlink: 'syz.0.1571': attribute type 2 has an invalid length. [ 150.463407][ T59] usb 6-1: config 0 descriptor?? [ 150.494938][T10057] Bluetooth: (null): Invalid header checksum [ 150.537944][T11346] netlink: 'syz.0.1572': attribute type 63 has an invalid length. [ 150.541422][T11346] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1572'. [ 150.549245][T11346] gretap0: entered allmulticast mode [ 150.603549][T10062] Bluetooth: (null): Invalid header checksum [ 150.649002][ T5936] Bluetooth: hci4: sending frame failed (-49) [ 150.654761][ T5938] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 150.674455][ T8397] usb 6-1: USB disconnect, device number 17 [ 150.715674][T10062] Bluetooth: (null): Invalid header checksum [ 150.772679][T11368] netlink: 'syz.2.1580': attribute type 1 has an invalid length. [ 150.779260][T11368] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 150.825832][T10062] Bluetooth: (null): Invalid header checksum [ 150.933181][T10071] Bluetooth: (null): Invalid header checksum [ 151.031317][T11384] bond7: option downdelay: invalid value (18446744073709551615) [ 151.035960][T11384] bond7: option downdelay: allowed values 0 - 2147483647 [ 151.040229][T11381] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 151.040886][T11384] bond7 (unregistering): Released all slaves [ 151.117376][T11392] netlink: 'syz.3.1586': attribute type 28 has an invalid length. [ 151.120815][T11392] netlink: 'syz.3.1586': attribute type 3 has an invalid length. [ 151.124558][T11392] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1586'. [ 151.154601][T11395] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1587'. [ 151.171781][T11395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.204955][T11395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.210454][T11395] bond0 (unregistering): Released all slaves [ 151.248780][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 151.248800][ T40] audit: type=1400 audit(1775526965.932:938): avc: denied { mounton } for pid=11402 comm="syz.0.1589" path="/400/file3" dev="tmpfs" ino=2138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 151.248922][T11403] cgroup: Unknown subsys name 'cpuset' [ 151.433632][ T40] audit: type=1400 audit(1775526966.122:939): avc: denied { ioctl } for pid=11414 comm="syz.0.1593" path="socket:[43318]" dev="sockfs" ino=43318 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.485057][ T40] audit: type=1400 audit(1775526966.172:940): avc: denied { setopt } for pid=11414 comm="syz.0.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.605334][ T5985] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 151.762745][ T5985] usb 7-1: Using ep0 maxpacket: 32 [ 151.765891][ T5985] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 151.768599][ T5985] usb 7-1: config 0 has no interface number 0 [ 151.770604][ T5985] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 151.774068][ T5985] usb 7-1: config 0 interface 196 has no altsetting 0 [ 151.777854][ T5985] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 151.781367][ T5985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.784679][ T5985] usb 7-1: Product: syz [ 151.786030][ T5985] usb 7-1: Manufacturer: syz [ 151.787919][ T5985] usb 7-1: SerialNumber: syz [ 151.799250][ T5985] usb 7-1: config 0 descriptor?? [ 151.801495][T11408] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 152.294968][ T40] audit: type=1326 audit(1775526966.982:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11424 comm="syz.0.1595" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde3299c819 code=0x0 [ 152.482901][T11439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.980718][T11444] tipc: Started in network mode [ 152.983195][T11444] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 152.987315][T11444] tipc: Enabling of bearer rejected, failed to enable media [ 153.029460][T11446] tipc: Failed to remove unknown binding: 66,2,2/0:115081347/115081352 [ 153.041243][T11447] tipc: Failed to remove unknown binding: 66,2,2/0:115081347/115081352 [ 153.045590][T11446] __nla_validate_parse: 3 callbacks suppressed [ 153.045608][T11446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1602'. [ 153.052378][T11446] net_ratelimit: 33 callbacks suppressed [ 153.052395][T11446] openvswitch: netlink: Flow key attr not present in new flow. [ 153.061295][ T40] audit: type=1400 audit(1775526967.742:942): avc: denied { lock } for pid=11445 comm="syz.1.1602" path="socket:[42408]" dev="sockfs" ino=42408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.072313][ T40] audit: type=1400 audit(1775526967.752:943): avc: denied { mount } for pid=11445 comm="syz.1.1602" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 153.086801][ T40] audit: type=1400 audit(1775526967.752:944): avc: denied { unmount } for pid=11445 comm="syz.1.1602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 153.271240][T11453] could not allocate digest TFM handle cryptd(blake2b-160) [ 153.356837][T11466] overlayfs: failed to clone upperpath [ 153.356899][T11467] overlayfs: failed to clone upperpath [ 153.363168][T11466] overlayfs: failed to clone upperpath [ 153.435666][ T59] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 153.582642][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 153.586788][ T59] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 153.590887][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.593776][T11479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1610'. [ 153.601644][ T59] pvrusb2: Hardware description: Terratec Grabster AV400 [ 153.604903][ T59] pvrusb2: ********** [ 153.606742][ T59] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 153.611219][ T59] pvrusb2: Important functionality might not be entirely working. [ 153.615059][ T59] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 153.620290][T11479] lo speed is unknown, defaulting to 1000 [ 153.620834][ T59] pvrusb2: ********** [ 153.803305][ T2493] pvrusb2: Invalid write control endpoint [ 153.887872][ T2493] pvrusb2: Invalid write control endpoint [ 153.890567][ T2493] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 153.897830][ T2493] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 153.901402][ T2493] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 153.906032][ T2493] pvrusb2: Device being rendered inoperable [ 153.911336][ T2493] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 153.914698][ T2493] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 153.921292][ T2493] pvrusb2: Attached sub-driver cx25840 [ 153.924397][ T2493] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 153.928726][ T2493] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 154.007686][T11459] pvrusb2: Killing an I2C write to 16 that is too large (desired=62 limit=61) [ 154.013242][ T830] usb 6-1: USB disconnect, device number 18 [ 154.488697][ T5985] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 154.491253][ T5985] ipheth 7-1:0.196: probe with driver ipheth failed with error -71 [ 154.501302][ T5985] usb 7-1: USB disconnect, device number 10 [ 154.623606][T11494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1615'. [ 154.630148][T11494] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 154.633207][T11494] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 154.759697][T11502] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 154.776116][T11498] hfs: unable to load iocharset "io#harset" [ 154.780855][ T40] audit: type=1400 audit(1775526969.462:945): avc: denied { ioctl } for pid=11497 comm="syz.1.1617" path="socket:[43396]" dev="sockfs" ino=43396 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 154.792369][ T40] audit: type=1400 audit(1775526969.472:946): avc: denied { bind } for pid=11497 comm="syz.1.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.799877][ T40] audit: type=1400 audit(1775526969.472:947): avc: denied { connect } for pid=11497 comm="syz.1.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.019670][T11519] netlink: 'syz.3.1622': attribute type 1 has an invalid length. [ 155.022661][T11519] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.1622'. [ 155.294066][T11528] sp0: Synchronizing with TNC [ 155.405175][T11528] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1625'. [ 155.408445][T11528] openvswitch: netlink: Flow key attr not present in new flow. [ 155.424765][T11534] kvm: user requested TSC rate below hardware speed [ 155.429316][T11534] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 155.437339][T11534] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4242531789 (543044068992 ns) > initial count (393846602496 ns). Using initial count to start timer. [ 155.650940][T11548] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 155.653781][T11548] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 155.659435][T11548] vhci_hcd vhci_hcd.0: Device attached [ 155.737435][T11544] could not allocate digest TFM handle cryptd(blake2b-160) [ 155.797882][T11549] vhci_hcd: connection closed [ 155.798224][T10070] vhci_hcd vhci_hcd.1: stop threads [ 155.801644][T10070] vhci_hcd vhci_hcd.1: release socket [ 155.807292][T10070] vhci_hcd vhci_hcd.1: disconnect device [ 155.832785][ T8397] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 156.056229][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'. [ 156.175298][T11570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1634'. [ 156.180822][T11570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1634'. [ 156.281276][T11572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.468547][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 156.468565][ T40] audit: type=1400 audit(2000000001.389:968): avc: denied { read } for pid=11577 comm="syz.1.1640" laddr=::ffff:127.0.0.1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.827647][ T40] audit: type=1400 audit(2000000001.749:969): avc: denied { shutdown } for pid=11580 comm="syz.3.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.835771][ T40] audit: type=1400 audit(2000000001.759:970): avc: denied { mount } for pid=11580 comm="syz.3.1641" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 156.844828][ T40] audit: type=1400 audit(2000000001.759:971): avc: denied { watch watch_reads } for pid=11580 comm="syz.3.1641" path="/429/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 156.853299][ T40] audit: type=1400 audit(2000000001.759:972): avc: denied { unmount } for pid=11580 comm="syz.3.1641" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 156.863338][ T40] audit: type=1400 audit(2000000001.779:973): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=57798 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 156.877931][ T40] audit: type=1400 audit(2000000001.779:974): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=57798 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 156.890445][ T40] audit: type=1400 audit(2000000001.779:975): avc: denied { allowed } for pid=11580 comm="syz.3.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 156.898359][ T40] audit: type=1400 audit(2000000001.779:976): avc: denied { node_bind } for pid=11582 comm="syz.0.1642" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 156.907416][ T40] audit: type=1400 audit(2000000001.789:977): avc: denied { create } for pid=11580 comm="syz.3.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 157.397193][T11614] sctp: [Deprecated]: syz.1.1650 (pid 11614) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.397193][T11614] Use struct sctp_sack_info instead [ 157.407289][T11613] sctp: [Deprecated]: syz.1.1650 (pid 11613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.407289][T11613] Use struct sctp_sack_info instead [ 157.525858][T11619] vlan2: entered allmulticast mode [ 157.527901][T11619] bond0: entered allmulticast mode [ 157.589235][T11619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=11619 comm=syz.1.1652 [ 157.599334][T11619] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1652'. [ 157.603519][T11619] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1652'. [ 158.044120][T11661] ªªªªª5gæ¹Q[Ô: renamed from lo [ 158.387604][T11673] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 158.927369][T11678] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 158.980770][T11682] __nla_validate_parse: 2 callbacks suppressed [ 158.980788][T11682] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1669'. [ 159.112140][T11692] netlink: 'syz.1.1674': attribute type 11 has an invalid length. [ 159.118896][T11690] overlayfs: regular lower layers cannot follow data lower layers [ 159.181802][T11696] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1676'. [ 159.252132][T11704] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 159.324500][T11708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11708 comm=syz.1.1682 [ 159.430936][T11706] overlayfs: failed to resolve './bus': -2 [ 159.435633][T11710] Bluetooth: MGMT ver 1.23 [ 159.526344][T11717] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 159.852867][ T59] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 159.900983][T11745] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 160.012672][ T59] usb 6-1: Using ep0 maxpacket: 32 [ 160.017166][ T59] usb 6-1: config 3 has an invalid interface number: 107 but max is 2 [ 160.020479][ T59] usb 6-1: config 3 has an invalid interface number: 130 but max is 2 [ 160.024603][ T59] usb 6-1: config 3 has an invalid interface number: 103 but max is 2 [ 160.027926][ T59] usb 6-1: config 3 has no interface number 0 [ 160.030572][ T59] usb 6-1: config 3 has no interface number 1 [ 160.033762][ T59] usb 6-1: config 3 has no interface number 2 [ 160.035760][ T59] usb 6-1: config 3 interface 107 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 160.040149][ T59] usb 6-1: config 3 interface 107 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 160.044228][ T59] usb 6-1: config 3 interface 107 altsetting 13 has an endpoint descriptor with address 0x64, changing to 0x4 [ 160.052187][ T59] usb 6-1: config 3 interface 107 altsetting 13 endpoint 0x4 has an invalid bInterval 138, changing to 11 [ 160.057614][ T59] usb 6-1: config 3 interface 107 altsetting 13 endpoint 0x4 has invalid maxpacket 26376, setting to 1024 [ 160.061839][ T59] usb 6-1: config 3 interface 107 altsetting 13 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 160.066574][ T59] usb 6-1: config 3 interface 107 altsetting 13 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 160.073199][ T59] usb 6-1: config 3 interface 107 altsetting 13 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 160.077506][ T59] usb 6-1: config 3 interface 107 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 160.081691][ T59] usb 6-1: config 3 interface 107 altsetting 13 has a duplicate endpoint with address 0x4, skipping [ 160.085255][ T59] usb 6-1: config 3 interface 107 altsetting 13 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 160.090607][ T59] usb 6-1: config 3 interface 130 altsetting 102 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 160.095384][ T59] usb 6-1: config 3 interface 130 altsetting 102 has a duplicate endpoint with address 0x4, skipping [ 160.099280][ T59] usb 6-1: config 3 interface 130 altsetting 102 has an invalid descriptor for endpoint zero, skipping [ 160.105672][ T59] usb 6-1: config 3 interface 130 altsetting 102 has a duplicate endpoint with address 0x4, skipping [ 160.109806][ T59] usb 6-1: config 3 interface 130 altsetting 102 has a duplicate endpoint with address 0x5, skipping [ 160.113755][ T59] usb 6-1: config 3 interface 130 altsetting 102 has an invalid descriptor for endpoint zero, skipping [ 160.118272][ T59] usb 6-1: config 3 interface 130 altsetting 102 endpoint 0xB has an invalid bInterval 90, changing to 10 [ 160.122433][ T59] usb 6-1: config 3 interface 103 altsetting 252 has a duplicate endpoint with address 0x8, skipping [ 160.126963][ T59] usb 6-1: config 3 interface 103 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 160.130550][ T59] usb 6-1: config 3 interface 103 altsetting 252 endpoint 0xA has an invalid bInterval 128, changing to 11 [ 160.135783][ T59] usb 6-1: config 3 interface 103 altsetting 252 has a duplicate endpoint with address 0x1, skipping [ 160.140108][ T59] usb 6-1: config 3 interface 103 altsetting 252 endpoint 0xD has an invalid bInterval 250, changing to 7 [ 160.144533][ T59] usb 6-1: config 3 interface 103 altsetting 252 has a duplicate endpoint with address 0xD, skipping [ 160.148073][ T59] usb 6-1: config 3 interface 103 altsetting 252 has a duplicate endpoint with address 0x3, skipping [ 160.153222][ T59] usb 6-1: config 3 interface 107 has no altsetting 0 [ 160.156399][ T59] usb 6-1: config 3 interface 130 has no altsetting 0 [ 160.159234][ T59] usb 6-1: config 3 interface 103 has no altsetting 0 [ 160.165553][ T59] usb 6-1: New USB device found, idVendor=07ca, idProduct=c039, bcdDevice=fd.be [ 160.168883][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.172207][ T59] usb 6-1: Product: syz [ 160.180892][ T59] usb 6-1: Manufacturer: syz [ 160.182520][ T59] usb 6-1: SerialNumber: syz [ 160.188520][T11725] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 160.542464][T11772] Set syz1 is full, maxelem 65536 reached [ 160.602099][T11784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1704'. [ 160.609308][T11784] geneve2: entered promiscuous mode [ 160.634488][T11787] overlayfs: failed to clone upperpath [ 160.874191][ T5985] IPVS: starting estimator thread 0... [ 160.919008][T11808] PKCS7: Unknown OID: [4] 0.38.35.36.951720.33.17 [ 160.922185][T11808] PKCS7: Only support pkcs7_signedData type [ 160.963463][T11804] IPVS: using max 31 ests per chain, 74400 per kthread [ 160.964918][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'. [ 160.975863][T11812] tipc: Enabled bearer , priority 0 [ 161.003556][T11816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.007009][T11816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.010802][T11816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.016147][T11821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1709'. [ 161.029859][T11816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.035571][T11816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.039337][T11816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.045918][T11816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.049938][T11816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.055561][T11816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.059359][T11816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.159157][T11833] ipt_REJECT: TCP_RESET invalid for non-tcp [ 161.462021][T11860] fuse: Unknown parameter '' [ 161.620959][ T40] kauditd_printk_skb: 239 callbacks suppressed [ 161.620978][ T40] audit: type=1400 audit(2000000006.539:1217): avc: denied { ioctl } for pid=11873 comm="syz.0.1731" path="socket:[40958]" dev="sockfs" ino=40958 ioctlcmd=0xb101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.634929][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 161.792149][ T10] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 161.796540][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.797109][ T40] audit: type=1400 audit(2000000006.719:1218): avc: denied { ioctl } for pid=11853 comm="syz.2.1725" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.799732][ T10] usb 7-1: Product: syz [ 161.811167][ T10] usb 7-1: Manufacturer: syz [ 161.813122][ T10] usb 7-1: SerialNumber: syz [ 161.820128][ T10] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 161.823571][ T40] audit: type=1400 audit(2000000006.749:1219): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=57798 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 161.845755][ T40] audit: type=1400 audit(2000000006.769:1220): avc: denied { firmware_load } for pid=8397 comm="kworker/0:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 161.846448][T11889] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 161.846448][T11889] The task syz.0.1735 (11889) triggered the difference, watch for misbehavior. [ 161.856162][ T8397] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 162.106211][ T830] tipc: Node number set to 4269801491 [ 162.364955][ T10] usb 7-1: USB disconnect, device number 11 [ 162.404579][ T40] audit: type=1400 audit(2000000007.329:1221): avc: denied { write } for pid=11891 comm="syz.1.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 162.423265][ T40] audit: type=1400 audit(2000000007.349:1222): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=57798 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 162.682236][T11902] lo speed is unknown, defaulting to 1000 [ 162.697487][ T40] audit: type=1400 audit(2000000007.619:1223): avc: denied { execmem } for pid=11903 comm="syz.1.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 162.704232][ T40] audit: type=1400 audit(2000000007.619:1224): avc: denied { write } for pid=11903 comm="syz.1.1740" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 162.711662][ T40] audit: type=1400 audit(2000000007.619:1225): avc: denied { open } for pid=11903 comm="syz.1.1740" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 162.720541][ T40] audit: type=1400 audit(2000000007.619:1226): avc: denied { ioctl } for pid=11903 comm="syz.1.1740" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 162.939307][T11911] netlink: 'syz.1.1742': attribute type 1 has an invalid length. [ 162.942485][T11911] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.1742'. [ 163.067413][T11926] netlink: 'syz.0.1747': attribute type 1 has an invalid length. [ 163.072898][ T8397] usb 7-1: Service connection timeout for: 256 [ 163.075234][ T8397] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 163.088383][ T8397] ath9k_htc: Failed to initialize the device [ 163.101154][ T10] usb 7-1: ath9k_htc: USB layer deinitialized [ 163.111533][T11931] tmpfs: Unknown parameter 'mpolµvGAnd:0-1:1/5N' [ 163.217749][T11926] 8021q: adding VLAN 0 to HW filter on device bond7 [ 163.242898][T11926] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1747'. [ 163.271227][T11932] bond7: (slave veth5): Enslaving as an active interface with a down link [ 163.287148][T11934] batman_adv: batadv0: Interface deactivated: dummy0 [ 163.321453][T11934] batman_adv: batadv0: Removing interface: dummy0 [ 163.341110][T11934] bond7: (slave dummy0): making interface the new active one [ 163.359254][T11934] dummy0: entered promiscuous mode [ 163.363127][T11934] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 163.372444][T11938] binder: 11937:11938 ioctl 4018620d 0 returned -22 [ 163.379221][T11926] bond7: (slave dummy0): Releasing active interface [ 163.379622][T11938] binder: 11937:11938 ioctl c0306201 200000000240 returned -11 [ 163.381364][T11926] dummy0 (unregistering): left promiscuous mode [ 164.216319][T12003] netlink: 'syz.1.1767': attribute type 13 has an invalid length. [ 164.233494][T12003] bond3: (slave macvlan2): speed changed to 0 on port 1 [ 164.253118][T10070] bond3: (slave macvlan2): link status up again after 0 ms [ 164.257937][T10070] bond3: (slave macvlan2): failed to get link speed/duplex [ 164.261299][ T5985] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 164.362082][T12003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12003 comm=syz.1.1767 [ 164.373335][T10070] bond3: (slave macvlan2): failed to get link speed/duplex [ 164.402632][ T5985] usb 8-1: Using ep0 maxpacket: 8 [ 164.406148][ T5985] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.410850][ T5985] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.415181][ T5985] usb 8-1: config 0 interface 0 has no altsetting 0 [ 164.417737][ T5985] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 164.421022][ T5985] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.426589][ T5985] usb 8-1: config 0 descriptor?? [ 164.492934][T10071] bond3: (slave macvlan2): failed to get link speed/duplex [ 164.565102][T12026] befs: (nullb0): No write support. Marking filesystem read-only [ 164.569508][T12026] befs: (nullb0): invalid magic header [ 164.603519][T10062] bond3: (slave macvlan2): failed to get link speed/duplex [ 164.697078][T12028] befs: (nullb0): No write support. Marking filesystem read-only [ 164.701632][T12028] befs: (nullb0): invalid magic header [ 164.712796][T10070] bond3: (slave macvlan2): failed to get link speed/duplex [ 164.822827][T10067] bond3: (slave macvlan2): failed to get link speed/duplex [ 164.849346][ T5985] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 164.851937][ T5985] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 164.856741][ T5985] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 164.859603][ T5985] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 164.862139][ T5985] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 164.865657][ T5985] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 164.942771][T10067] bond3: (slave macvlan2): failed to get link speed/duplex [ 164.990172][T12041] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 164.996925][T12041] block device autoloading is deprecated and will be removed. [ 165.052910][T10070] bond3: (slave macvlan2): failed to get link speed/duplex [ 165.055900][ T6647] usb 8-1: USB disconnect, device number 15 [ 165.167775][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1778'. [ 165.192403][T10067] bond3: (slave macvlan2): failed to get link speed/duplex [ 165.233091][T12047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1780'. [ 165.249317][T12049] netlink: 'syz.0.1781': attribute type 2 has an invalid length. [ 165.253915][T12049] netlink: 'syz.0.1781': attribute type 1 has an invalid length. [ 165.337602][T12057] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 165.638892][T12077] syzkaller1: entered promiscuous mode [ 165.641186][T12077] syzkaller1: entered allmulticast mode [ 165.777387][T12088] syz_tun: entered allmulticast mode [ 165.783393][T12088] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 165.859270][T12097] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1797'. [ 165.920423][T12102] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1794 sclass=netlink_tcpdiag_socket pid=12102 comm=syz.0.1799 [ 165.951966][T12105] overlayfs: failed to clone upperpath [ 166.096449][T12121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1806'. [ 166.172434][T12126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.176571][T12126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.198975][T12129] debugfs: '1ùà^!' already exists in 'ieee80211' [ 166.218955][T12131] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!' [ 166.222533][T12131] CPU: 1 UID: 0 PID: 12131 Comm: syz.2.1801 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.222588][T12131] Tainted: [L]=SOFTLOCKUP [ 166.222596][T12131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.222607][T12131] Call Trace: [ 166.222716][T12131] [ 166.222742][T12131] dump_stack_lvl+0x100/0x190 [ 166.223083][T12131] sysfs_warn_dup.cold+0x1c/0x28 [ 166.223113][T12131] sysfs_do_create_link_sd+0x113/0x140 [ 166.223184][T12131] sysfs_create_link+0x61/0xc0 [ 166.223202][T12131] device_add+0x675/0x1950 [ 166.223309][T12131] ? __pfx_device_add+0x10/0x10 [ 166.223329][T12131] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 166.223399][T12131] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 166.223571][T12131] wiphy_register+0x1e5b/0x2d30 [ 166.223593][T12131] ? __rtnl_unlock+0xb9/0xf0 [ 166.223644][T12131] ? netdev_run_todo+0x800/0x12c0 [ 166.223666][T12131] ? __pfx_wiphy_register+0x10/0x10 [ 166.223679][T12131] ? __asan_memset+0x23/0x50 [ 166.223698][T12131] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 166.223717][T12131] ieee80211_register_hw+0x2cfd/0x4140 [ 166.223739][T12131] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 166.223752][T12131] ? __pfx___debug_object_init+0x10/0x10 [ 166.223806][T12131] ? find_held_lock+0x2b/0x80 [ 166.223825][T12131] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 166.223843][T12131] ? __hrtimer_setup+0x178/0x280 [ 166.223858][T12131] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 166.223923][T12131] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 166.223944][T12131] ? __asan_memcpy+0x3c/0x60 [ 166.223962][T12131] hwsim_new_radio_nl+0xc1f/0x1340 [ 166.223983][T12131] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 166.224007][T12131] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 166.224023][T12131] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 166.224040][T12131] genl_family_rcv_msg_doit+0x214/0x300 [ 166.224056][T12131] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 166.224074][T12131] ? bpf_lsm_capable+0x9/0x10 [ 166.224087][T12131] ? security_capable+0x80/0x260 [ 166.224136][T12131] ? ns_capable+0xd2/0xf0 [ 166.224152][T12131] genl_rcv_msg+0x560/0x800 [ 166.224167][T12131] ? __pfx_genl_rcv_msg+0x10/0x10 [ 166.224181][T12131] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 166.224205][T12131] netlink_rcv_skb+0x159/0x420 [ 166.224216][T12131] ? __pfx_genl_rcv_msg+0x10/0x10 [ 166.224230][T12131] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 166.224247][T12131] ? netlink_deliver_tap+0x1ae/0xcc0 [ 166.224267][T12131] genl_rcv+0x28/0x40 [ 166.224278][T12131] netlink_unicast+0x5aa/0x870 [ 166.224291][T12131] ? __pfx_netlink_unicast+0x10/0x10 [ 166.224308][T12131] netlink_sendmsg+0x8b0/0xda0 [ 166.224322][T12131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.224332][T12131] ? __might_fault+0x10/0x140 [ 166.224355][T12131] ____sys_sendmsg+0x9e1/0xb70 [ 166.224366][T12131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.224379][T12131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.224394][T12131] ? __pfx_futex_wake_mark+0x10/0x10 [ 166.224412][T12131] ___sys_sendmsg+0x190/0x1e0 [ 166.224427][T12131] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.224459][T12131] __sys_sendmsg+0x170/0x220 [ 166.224476][T12131] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.224492][T12131] ? __x64_sys_futex+0x34f/0x4d0 [ 166.224514][T12131] do_syscall_64+0x106/0xf80 [ 166.224583][T12131] ? clear_bhb_loop+0x40/0x90 [ 166.224597][T12131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.224608][T12131] RIP: 0033:0x7fe2f059c819 [ 166.224620][T12131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.224631][T12131] RSP: 002b:00007fe2f14a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.224672][T12131] RAX: ffffffffffffffda RBX: 00007fe2f0816180 RCX: 00007fe2f059c819 [ 166.224678][T12131] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 166.224684][T12131] RBP: 00007fe2f0632c91 R08: 0000000000000000 R09: 0000000000000000 [ 166.224690][T12131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.224696][T12131] R13: 00007fe2f0816218 R14: 00007fe2f0816180 R15: 00007ffd2b758978 [ 166.224711][T12131] [ 166.290695][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1809'. [ 166.383658][T12126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.386750][T12126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.419901][T12126] lo speed is unknown, defaulting to 1000 [ 166.556946][T12147] team0: Device gtp0 is of different type [ 166.593639][T12086] syz_tun: left allmulticast mode [ 166.627752][ T40] kauditd_printk_skb: 259 callbacks suppressed [ 166.627772][ T40] audit: type=1400 audit(2000000011.549:1486): avc: denied { read } for pid=12150 comm="syz.3.1814" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 166.641841][ T40] audit: type=1400 audit(2000000011.549:1487): avc: denied { open } for pid=12150 comm="syz.3.1814" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 166.649777][ T40] audit: type=1400 audit(2000000011.569:1488): avc: denied { read write } for pid=12150 comm="syz.3.1814" name="video6" dev="devtmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 166.658358][ T40] audit: type=1400 audit(2000000011.569:1489): avc: denied { open } for pid=12150 comm="syz.3.1814" path="/dev/video6" dev="devtmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 166.669139][ T40] audit: type=1400 audit(2000000011.569:1490): avc: denied { ioctl } for pid=12150 comm="syz.3.1814" path="/dev/video6" dev="devtmpfs" ino=963 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 166.679570][ T40] audit: type=1400 audit(2000000011.569:1491): avc: denied { read } for pid=12150 comm="syz.3.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.688560][ T40] audit: type=1400 audit(2000000011.569:1492): avc: denied { ioctl } for pid=12150 comm="syz.3.1814" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 166.713937][ T40] audit: type=1400 audit(2000000011.639:1493): avc: denied { read append } for pid=12155 comm="syz.2.1816" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.722329][ T40] audit: type=1400 audit(2000000011.639:1494): avc: denied { open } for pid=12155 comm="syz.2.1816" path="/dev/dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.780228][T12164] netlink: 'syz.3.1817': attribute type 6 has an invalid length. [ 166.795695][ T40] audit: type=1400 audit(2000000011.719:1495): avc: denied { create } for pid=12155 comm="syz.2.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.895999][T12176] netlink: 'syz.0.1820': attribute type 1 has an invalid length. [ 166.899588][T12176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1820'. [ 166.912052][T12182] xt_limit: Overflow, try lower: 271964/0 [ 166.919763][T12182] netlink: 'syz.3.1822': attribute type 10 has an invalid length. [ 166.929784][T12182] team0: Cannot enslave team device to itself [ 166.961075][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'. [ 166.965729][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'. [ 166.970477][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'. [ 167.050955][T12200] netlink: 'syz.3.1828': attribute type 10 has an invalid length. [ 167.059576][T12200] bond0: (slave wlan1): Opening slave failed [ 167.066981][T12199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.075354][T12203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1829'. [ 167.151918][T12208] netlink: 'syz.0.1831': attribute type 13 has an invalid length. [ 167.258978][T12218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.265664][T12208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12208 comm=syz.0.1831 [ 167.272817][ C3] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 167.279477][T12218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.298796][T12218] NILFS (nbd1): device size too small [ 167.320989][T12221] netlink: 'syz.0.1834': attribute type 21 has an invalid length. [ 167.608660][T12236] /dev/sg0: Can't lookup blockdev [ 167.686548][T12240] xt_HMARK: spi-set and port-set can't be combined [ 167.689970][T12240] xt_HMARK: spi-set and port-set can't be combined [ 167.692301][T12240] xt_HMARK: spi-set and port-set can't be combined [ 167.695036][T12240] xt_HMARK: spi-set and port-set can't be combined [ 167.697367][T12240] xt_HMARK: spi-set and port-set can't be combined [ 167.699815][T12240] xt_HMARK: spi-set and port-set can't be combined [ 167.702168][T12240] xt_HMARK: spi-set and port-set can't be combined [ 167.708238][T12240] xt_HMARK: spi-set and port-set can't be combined [ 167.710793][T12240] xt_HMARK: spi-set and port-set can't be combined [ 167.715427][T12240] xt_HMARK: spi-set and port-set can't be combined [ 167.818864][T12255] xt_recent: Unsupported userspace flags (000000b2) [ 167.832016][T12260] kAFS: unparsable volume name [ 167.859730][T12262] mkiss: ax0: crc mode is auto. [ 167.945533][T12276] binder: 12265:12276 ioctl c0306201 200000000080 returned -22 [ 167.949000][T12276] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 168.033531][T12282] tipc: Started in network mode [ 168.036644][T12282] tipc: Node identity 080211000001, cluster identity 4711 [ 168.038964][T12282] tipc: Enabled bearer , priority 0 [ 168.329848][T12319] PKCS8: Unsupported PKCS#8 version [ 168.387101][T12326] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 168.406035][T12329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12329 comm=syz.1.1870 [ 168.539113][T12349] netlink: 'syz.1.1877': attribute type 1 has an invalid length. [ 168.554642][T12349] bond7: entered promiscuous mode [ 168.556683][T12349] 8021q: adding VLAN 0 to HW filter on device bond7 [ 168.809924][T12376] bond8: Invalid ad_actor_system MAC address. [ 168.814818][T12376] bond8: option ad_actor_system: invalid value (27571) [ 168.821786][T12376] bond8 (unregistering): Released all slaves [ 169.084333][T12385] sctp: [Deprecated]: syz.1.1891 (pid 12385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.084333][T12385] Use struct sctp_sack_info instead [ 169.152686][ T5985] tipc: Node number set to 134418688 [ 169.165913][T12389] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1iÒûm÷]7ä(äaŠàó H˜] ³¹¿ÃÇ [ 169.343485][T10071] net_ratelimit: 33 callbacks suppressed [ 169.343506][T10071] bond3: (slave macvlan2): failed to get link speed/duplex [ 169.454755][T10071] bond3: (slave macvlan2): failed to get link speed/duplex [ 169.501272][ T8397] usb 6-1: USB disconnect, device number 19 [ 169.562726][T10071] bond3: (slave macvlan2): failed to get link speed/duplex [ 169.673092][T10069] bond3: (slave macvlan2): failed to get link speed/duplex [ 169.793052][ T1146] bond3: (slave macvlan2): failed to get link speed/duplex [ 169.904448][T10066] bond3: (slave macvlan2): failed to get link speed/duplex qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xaa000) [ 170.013933][T10060] bond3: (slave macvlan2): failed to get link speed/duplex [ 170.065203][ T1116] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 170.068034][ T1116] ata1: failed to read log page 10h (errno=-5) [ 170.070801][ T1116] ata1.00: exception Emask 0x1 SAct 0x40000020 SErr 0x0 action 0x0 [ 170.076026][ T1116] ata1.00: irq_stat 0x41000000 [ 170.078355][ T1116] ata1.00: failed command: READ FPDMA QUEUED [ 170.080738][ T1116] ata1.00: cmd 60/c0:28:4e:2c:08/02:00:00:00:00/40 tag 5 ncq dma 360448 in [ 170.080738][ T1116] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 170.087702][ T1116] ata1.00: status: { DRDY } [ 170.089590][ T1116] ata1.00: failed command: READ FPDMA QUEUED [ 170.092149][ T1116] ata1.00: cmd 60/50:f0:fe:26:08/05:00:00:00:00/40 tag 30 ncq dma 696320 in [ 170.092149][ T1116] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 170.100387][ T1116] ata1.00: status: { DRDY } [ 170.102486][ T1116] ata1.00: error: { ABRT } [ 170.105824][ T1116] ata1.00: configured for UDMA/100 [ 170.113743][ T1116] sd 0:0:0:0: [sda] tag#5 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 170.117607][ T1116] sd 0:0:0:0: [sda] tag#5 Sense Key : Aborted Command [current] [ 170.121227][ T1116] sd 0:0:0:0: [sda] tag#5 Add. Sense: No additional sense information [ 170.124775][ T1116] sd 0:0:0:0: [sda] tag#5 CDB: Read(10) 28 00 00 08 2c 4e 00 02 c0 00 [ 170.126189][T10060] bond3: (slave macvlan2): failed to get link speed/duplex [ 170.129728][ T1116] blk_print_req_error: 26 callbacks suppressed [ 170.129747][ T1116] I/O error, dev sda, sector 535630 op 0x0:(READ) flags 0x80700 phys_seg 88 prio class 2 [ 170.137788][ T1116] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 170.141751][ T1116] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 170.144511][ T1116] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 170.147228][ T1116] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 08 26 fe 00 05 50 00 [ 170.149976][ T1116] I/O error, dev sda, sector 534270 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 170.153468][ T1116] ata1: EH complete [ 170.233291][T10066] bond3: (slave macvlan2): failed to get link speed/duplex [ 170.367326][T10054] bond3: (slave macvlan2): failed to get link speed/duplex [ 170.496898][T12440] __nla_validate_parse: 6 callbacks suppressed [ 170.496915][T12440] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1906'. [ 170.507284][ T5936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.511022][ T5936] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.516834][ T5936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.518892][T12440] overlayfs: missing 'lowerdir' [ 170.522133][ T5936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.540460][ T5936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.553425][ T5938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.556262][ T5938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.558873][ T5938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.562864][ T5938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.565469][ T5938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.624341][T12443] lo speed is unknown, defaulting to 1000 [ 170.766856][T12454] fuse: Bad value for 'fd' [ 170.883464][T12443] chnl_net:caif_netlink_parms(): no params data found [ 170.934463][T12443] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.937115][T12443] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.939527][T12443] bridge_slave_0: entered allmulticast mode [ 170.942430][T12443] bridge_slave_0: entered promiscuous mode [ 170.946506][T12443] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.948850][T12443] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.951360][T12443] bridge_slave_1: entered allmulticast mode [ 170.954716][T12443] bridge_slave_1: entered promiscuous mode [ 170.981478][T12443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.986751][T12443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.007638][T12443] team0: Port device team_slave_0 added [ 171.011146][T12443] team0: Port device team_slave_1 added [ 171.026585][T12443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.028905][T12443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.038068][T12443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.043163][T12443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.045950][T12443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.056347][T12443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.070022][T12463] xt_hashlimit: size too large, truncated to 1048576 [ 171.100813][T12443] hsr_slave_0: entered promiscuous mode [ 171.103767][T12443] hsr_slave_1: entered promiscuous mode [ 171.106012][T12443] debugfs: 'hsr0' already exists in 'hsr' [ 171.107863][T12443] Cannot create hsr debugfs directory [ 171.122369][T12465] netlink: 'syz.0.1911': attribute type 1 has an invalid length. [ 171.223669][T12467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1912'. [ 171.245215][T12467] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 172.183478][ T40] kauditd_printk_skb: 348 callbacks suppressed [ 172.183497][ T40] audit: type=1400 audit(2000000017.109:1844): avc: denied { create } for pid=12486 comm="syz.0.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 172.198336][ T40] audit: type=1400 audit(2000000017.109:1845): avc: denied { setopt } for pid=12486 comm="syz.0.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 172.207103][ T40] audit: type=1400 audit(2000000017.109:1846): avc: denied { map } for pid=12486 comm="syz.0.1916" path="socket:[47814]" dev="sockfs" ino=47814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 172.216809][ T40] audit: type=1400 audit(2000000017.109:1847): avc: denied { map } for pid=12486 comm="syz.0.1916" path="socket:[47814]" dev="sockfs" ino=47814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 172.227764][ T40] audit: type=1400 audit(2000000017.109:1848): avc: denied { read accept } for pid=12486 comm="syz.0.1916" path="socket:[47814]" dev="sockfs" ino=47814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 172.238895][ T40] audit: type=1400 audit(2000000017.139:1849): avc: denied { write } for pid=12489 comm="syz.0.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.252880][ T40] audit: type=1400 audit(2000000017.179:1850): avc: denied { create } for pid=12494 comm="syz.0.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 172.343161][ T40] audit: type=1400 audit(2000000017.269:1851): avc: denied { create } for pid=12501 comm="syz.0.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 172.351631][ T40] audit: type=1400 audit(2000000017.269:1852): avc: denied { ioctl } for pid=12501 comm="syz.0.1920" path="socket:[48221]" dev="sockfs" ino=48221 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.399300][ T40] audit: type=1400 audit(2000000017.319:1853): avc: denied { write } for pid=12501 comm="syz.0.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.555760][T12511] hub 8-0:1.0: USB hub found [ 172.557763][T12511] hub 8-0:1.0: 1 port detected [ 172.591140][T12513] xt_hashlimit: size too large, truncated to 1048576 [ 172.602730][ T5938] Bluetooth: hci2: command tx timeout [ 172.648128][T12521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1922'. [ 172.653549][T12518] bond3 (unregistering): Released all slaves [ 172.679885][T12523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1924'. [ 172.746299][T12521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'. [ 172.782472][T12531] 9pnet_virtio: no channels available for device syz [ 172.802348][T12518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1924'. [ 172.806105][T12518] nbd: device at index 64 is going down [ 172.835106][ T6670] udevd[6670]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 172.840726][ T5932] udevd[5932]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 172.956987][T12443] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.970663][T12443] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.989396][T12443] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.997062][T12443] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.067386][T12443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.081309][T12443] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.090766][T10061] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.093122][T10061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.100001][T10070] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.102359][T10070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.144726][T12554] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1927'. [ 173.230745][T12443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.263412][T12443] veth0_vlan: entered promiscuous mode [ 173.266183][T12568] veth1_macvtap: left promiscuous mode [ 173.267939][T12568] macsec0: entered allmulticast mode [ 173.278031][T12443] veth1_vlan: entered promiscuous mode [ 173.292479][T12443] veth0_macvtap: entered promiscuous mode [ 173.298677][T12443] veth1_macvtap: entered promiscuous mode [ 173.308591][T12443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.309801][T12571] SELinux: failed to load policy [ 173.316632][T12443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.317582][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1934'. [ 173.330284][T12571] veth1_macvtap: entered promiscuous mode [ 173.332799][T12571] macsec2: entered promiscuous mode [ 173.336073][T10070] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.339490][T10070] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.346192][T10070] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.350073][T10070] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.390648][T10061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.397463][T10061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.413621][T10054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.416292][T10054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.479201][T12575] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 173.853662][T12614] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1946'. [ 173.873495][T12614] sch_tbf: burst 88 is lower than device veth1_virt_wifi mtu (1514) ! [ 174.031372][T12614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.038324][T12614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.127087][T10060] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.132784][T10060] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.136387][T10060] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.165286][T10060] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.216828][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1953'. [ 174.371990][T12650] netlink: 'syz.0.1959': attribute type 10 has an invalid length. [ 174.376799][T12650] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 174.379801][T12650] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 174.383561][T12650] netlink: 'syz.0.1959': attribute type 10 has an invalid length. [ 174.397670][T12650] netlink: 'syz.0.1959': attribute type 10 has an invalid length. [ 174.401294][T12650] netlink: 'syz.0.1959': attribute type 10 has an invalid length. [ 174.412678][T10054] net_ratelimit: 23 callbacks suppressed [ 174.412693][T10054] bond3: (slave macvlan2): failed to get link speed/duplex [ 174.424265][T12650] netlink: 'syz.0.1959': attribute type 10 has an invalid length. [ 174.427146][T12650] netlink: 'syz.0.1959': attribute type 10 has an invalid length. [ 174.430183][T12650] netlink: 'syz.0.1959': attribute type 10 has an invalid length. [ 174.445648][T12650] netlink: 'syz.0.1959': attribute type 10 has an invalid length. [ 174.448579][T12650] netlink: 'syz.0.1959': attribute type 10 has an invalid length. [ 174.523991][T10060] bond3: (slave macvlan2): failed to get link speed/duplex [ 174.632805][T10060] bond3: (slave macvlan2): failed to get link speed/duplex [ 174.672627][ T5938] Bluetooth: hci2: command tx timeout [ 174.742732][T10054] bond3: (slave macvlan2): failed to get link speed/duplex [ 174.852729][T10061] bond3: (slave macvlan2): failed to get link speed/duplex [ 174.881357][T12684] openvswitch: netlink: Flow key attr not present in new flow. [ 174.885182][T12684] openvswitch: netlink: Flow key attr not present in new flow. [ 174.893919][T12684] openvswitch: netlink: Flow key attr not present in new flow. [ 174.897311][T12684] openvswitch: netlink: Flow key attr not present in new flow. [ 174.962691][T10060] bond3: (slave macvlan2): failed to get link speed/duplex [ 175.023518][T12695] rtc_cmos 00:05: Alarms can be up to one day in the future [ 175.195125][T12712] batman_adv: batadv0: Adding interface: gretap1 [ 175.197624][T12712] batman_adv: batadv0: Interface activated: gretap1 [ 175.206865][T12712] xt_bpf: check failed: parse error [ 175.463741][T12741] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 175.483223][T12742] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 175.528759][T12746] mac80211_hwsim hwsim24 ªªªªª;: renamed from wlan0 (while UP) [ 175.765355][T12765] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 175.767870][T12765] overlayfs: failed to set xattr on upper [ 175.769761][T12765] overlayfs: ...falling back to redirect_dir=nofollow. [ 175.772152][T12765] overlayfs: ...falling back to index=off. [ 175.776137][T12764] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 175.780827][T12765] overlayfs: ...falling back to uuid=null. [ 175.783095][T12765] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 175.797733][T12767] __nla_validate_parse: 8 callbacks suppressed [ 175.797745][T12767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1991'. [ 176.028899][T12789] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 176.279735][T12802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1999'. [ 176.332674][ T6018] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 176.503167][ T6018] usb 6-1: no configurations [ 176.504751][ T6018] usb 6-1: can't read configurations, error -22 [ 176.535275][T12827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2004'. [ 176.652826][ T6018] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 176.752675][ T5938] Bluetooth: hci2: command tx timeout [ 176.803260][ T6018] usb 6-1: no configurations [ 176.805129][ T6018] usb 6-1: can't read configurations, error -22 [ 176.808256][ T6018] usb usb6-port1: attempt power cycle [ 177.152707][ T6018] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 177.180591][ T6018] usb 6-1: no configurations [ 177.182491][ T6018] usb 6-1: can't read configurations, error -22 [ 177.233228][ T40] kauditd_printk_skb: 369 callbacks suppressed [ 177.233248][ T40] audit: type=1400 audit(2000000022.159:2223): avc: denied { read write } for pid=12837 comm="syz.2.2009" name="vbi9" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 177.247681][ T40] audit: type=1400 audit(2000000022.159:2224): avc: denied { open } for pid=12837 comm="syz.2.2009" path="/dev/vbi9" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 177.262900][ T40] audit: type=1400 audit(2000000022.169:2225): avc: denied { ioctl } for pid=12837 comm="syz.2.2009" path="/dev/vbi9" dev="devtmpfs" ino=1030 ioctlcmd=0x5604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 177.282337][ T40] audit: type=1400 audit(2000000022.199:2226): avc: denied { watch watch_reads } for pid=12842 comm="syz.3.2011" path="/500" dev="tmpfs" ino=2630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 177.315134][T12845] sch_fq: defrate 257 ignored. [ 177.323136][ T6018] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 177.345919][ T6018] usb 6-1: no configurations [ 177.347076][ T40] audit: type=1400 audit(2000000022.269:2227): avc: denied { read } for pid=12842 comm="syz.3.2011" dev="nsfs" ino=4026533023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 177.347922][ T6018] usb 6-1: can't read configurations, error -22 [ 177.356881][ T40] audit: type=1400 audit(2000000022.269:2228): avc: denied { open } for pid=12842 comm="syz.3.2011" path="net:[4026533023]" dev="nsfs" ino=4026533023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 177.361949][ T6018] usb usb6-port1: unable to enumerate USB device [ 177.370963][ T40] audit: type=1400 audit(2000000022.269:2229): avc: denied { create } for pid=12842 comm="syz.3.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 177.377755][ T40] audit: type=1400 audit(2000000022.279:2230): avc: denied { setopt } for pid=12842 comm="syz.3.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 177.392621][ T40] audit: type=1400 audit(2000000022.289:2231): avc: denied { create } for pid=12842 comm="syz.3.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 177.399249][ T40] audit: type=1400 audit(2000000022.289:2232): avc: denied { write } for pid=12842 comm="syz.3.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 177.462391][T12857] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2016'. [ 177.466377][T12857] unsupported nlmsg_type 40 [ 177.476758][T12859] validate_nla: 24 callbacks suppressed [ 177.476770][T12859] netlink: 'syz.0.2017': attribute type 1 has an invalid length. [ 177.477473][T12857] kAFS: unable to lookup cell '1' [ 177.491398][T12859] 8021q: adding VLAN 0 to HW filter on device bond8 [ 177.682714][ T5985] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 177.832904][ T5985] usb 7-1: Using ep0 maxpacket: 16 [ 177.837766][ T5985] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 177.844854][ T5985] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 177.848804][ T5985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.852860][ T5985] usb 7-1: Product: syz [ 177.854809][ T5985] usb 7-1: Manufacturer: syz [ 177.856881][ T5985] usb 7-1: SerialNumber: syz [ 177.865092][ T5985] usb 7-1: config 0 descriptor?? [ 177.875496][ T5985] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 177.879565][ T5985] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 178.108370][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 178.170900][T12881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2025'. [ 178.234761][T12886] batadv_slave_0: entered promiscuous mode [ 178.477575][ T5985] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 178.478721][T12909] lo speed is unknown, defaulting to 1000 [ 178.832752][ T5938] Bluetooth: hci2: command tx timeout [ 179.149796][ T5985] em28xx 7-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 179.162697][ T5985] em28xx 7-1:0.0: board has no eeprom [ 179.187052][T12919] netlink: 'syz.3.2035': attribute type 10 has an invalid length. [ 179.190602][T12919] syz_tun: entered promiscuous mode [ 179.284386][T12924] comedi: valid board names for 8255 driver are: [ 179.287413][T12924] 8255 [ 179.288864][T12924] comedi: valid board names for vmk80xx driver are: [ 179.291939][T12924] vmk80xx [ 179.293841][T12924] comedi: valid board names for usbduxsigma driver are: [ 179.296827][T12924] usbduxsigma [ 179.298359][T12924] comedi: valid board names for usbduxfast driver are: [ 179.301191][T12924] usbduxfast [ 179.303084][T12924] comedi: valid board names for usbdux driver are: [ 179.305853][T12924] usbdux [ 179.307235][T12924] comedi: valid board names for ni6501 driver are: [ 179.310010][T12924] ni6501 [ 179.311383][T12924] comedi: valid board names for dt9812 driver are: [ 179.315452][T12924] dt9812 [ 179.316757][T12924] comedi: valid board names for ni_labpc_cs driver are: [ 179.319839][T12924] ni_labpc_cs [ 179.321373][T12924] comedi: valid board names for ni_daq_700 driver are: [ 179.328871][T12924] ni_daq_700 [ 179.330386][T12924] comedi: valid board names for labpc_pci driver are: [ 179.333732][T12924] labpc_pci [ 179.335202][T12924] comedi: valid board names for adl_pci9118 driver are: [ 179.338633][T12924] pci9118dg [ 179.340119][T12924] pci9118hg [ 179.341587][T12924] pci9118hr [ 179.352792][T12924] comedi: valid board names for 8255_pci driver are: [ 179.354926][T12924] 8255_pci [ 179.355921][T12924] comedi: valid board names for s526 driver are: [ 179.357907][T12924] s526 [ 179.358850][T12924] comedi: valid board names for multiq3 driver are: [ 179.361034][T12924] multiq3 [ 179.362127][T12924] comedi: valid board names for pcmuio driver are: [ 179.364729][T12924] pcmuio48 [ 179.365010][T12916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.365815][T12924] pcmuio96 [ 179.369952][T12916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.370767][T12924] comedi: valid board names for pcmmio driver are: [ 179.376837][T12924] pcmmio [ 179.378244][T12924] comedi: valid board names for pcmda12 driver are: [ 179.381083][T12924] pcmda12 [ 179.382387][T12924] comedi: valid board names for pcmad driver are: [ 179.385613][T12924] pcmad12 [ 179.386982][T12924] pcmad16 [ 179.388443][T12924] comedi: valid board names for ni_labpc driver are: [ 179.391627][T12924] lab-pc-1200 [ 179.393749][T12924] lab-pc-1200ai [ 179.395476][T12924] lab-pc+ [ 179.396933][T12924] comedi: valid board names for atmio16 driver are: [ 179.399824][T12924] atmio16 [ 179.401210][T12924] atmio16d [ 179.407838][T12924] comedi: valid board names for ni_at_ao driver are: [ 179.411211][T12924] at-ao-6 [ 179.413157][T12924] at-ao-10 [ 179.414737][T12924] comedi: valid board names for ni_at_a2150 driver are: [ 179.417756][T12924] ni_at_a2150 [ 179.419265][T12924] comedi: valid board names for adq12b driver are: [ 179.425918][T10054] net_ratelimit: 37 callbacks suppressed [ 179.425934][T10054] bond3: (slave macvlan2): failed to get link speed/duplex [ 179.430684][T12924] adq12b [ 179.433072][T12924] comedi: valid board names for mpc624 driver are: [ 179.435998][T12924] mpc624 [ 179.437411][T12924] comedi: valid board names for c6xdigio driver are: [ 179.442331][T12924] c6xdigio [ 179.444485][T12924] comedi: valid board names for aio_iiro_16 driver are: [ 179.447115][T12924] aio_iiro_16 [ 179.449089][T12924] comedi: valid board names for aio_aio12_8 driver are: [ 179.452132][T12924] aio_aio12_8 [ 179.454324][T12924] aio_ai12_8 [ 179.455908][T12924] aio_ao12_4 [ 179.457446][T12924] comedi: valid board names for fl512 driver are: [ 179.460295][T12924] fl512 [ 179.461520][T12924] comedi: valid board names for dmm32at driver are: [ 179.465240][T12924] dmm32at [ 179.466673][T12924] comedi: valid board names for dt282x driver are: [ 179.469558][T12924] dt2821 [ 179.470913][T12924] dt2821-f [ 179.472348][T12924] dt2821-g [ 179.475207][T12924] dt2823 [ 179.476534][T12924] dt2824-pgh [ 179.477989][T12924] dt2824-pgl [ 179.479444][T12924] dt2825 [ 179.482937][T12924] dt2827 [ 179.483982][T12924] dt2828 [ 179.484958][T12924] dt2829 [ 179.485987][T12924] dt21-ez [ 179.489881][T12924] dt23-ez [ 179.491226][T12924] dt24-ez [ 179.502611][T12924] dt24-ez-pgl [ 179.503857][T12924] comedi: valid board names for dt2817 driver are: [ 179.505831][T12924] dt2817 [ 179.506809][T12924] comedi: valid board names for dt2815 driver are: [ 179.508845][T12924] dt2815 [ 179.509821][T12924] comedi: valid board names for dt2814 driver are: [ 179.512239][T12924] dt2814 [ 179.519028][T12924] comedi: valid board names for dt2811 driver are: [ 179.521136][T12924] dt2811-pgh [ 179.522494][T12924] dt2811-pgl [ 179.524100][T12924] comedi: valid board names for dt2801 driver are: [ 179.526437][T12924] dt2801 [ 179.527611][T12924] comedi: valid board names for das6402 driver are: [ 179.529916][T12924] das6402-12 [ 179.531236][T12924] das6402-16 [ 179.532731][T10066] bond3: (slave macvlan2): failed to get link speed/duplex [ 179.534622][T12924] comedi: valid board names for das1800 driver are: [ 179.538162][T12924] das-1701st [ 179.539303][T12924] das-1701st-da [ 179.540540][T12924] das-1702st [ 179.541762][T12924] das-1702st-da [ 179.543090][T12924] das-1702hr [ 179.544378][T12924] das-1702hr-da [ 179.545664][T12924] das-1701ao [ 179.546827][T12924] das-1702ao [ 179.562723][T12924] das-1801st [ 179.564415][T12924] das-1801st-da [ 179.565985][T12924] das-1802st [ 179.567544][T12924] das-1802st-da [ 179.569105][T12924] das-1802hr [ 179.570573][T12924] das-1802hr-da [ 179.572127][T12924] das-1801hc [ 179.574447][T12924] das-1802hc [ 179.576071][T12924] das-1801ao [ 179.578609][T12924] das-1802ao [ 179.580600][T12924] comedi: valid board names for das800 driver are: [ 179.584597][T12924] das-800 [ 179.586027][T12924] cio-das800 [ 179.587621][T12924] das-801 [ 179.589066][T12924] cio-das801 [ 179.590875][T12924] das-802 [ 179.593508][T12924] cio-das802 [ 179.595189][T12924] cio-das802/16 [ 179.596955][T12924] comedi: valid board names for isa-das08 driver are: [ 179.600203][T12924] isa-das08 [ 179.601821][T12924] das08-pgm [ 179.605755][T12924] das08-pgh [ 179.608178][T12924] das08-pgl [ 179.609712][T12924] das08-aoh [ 179.611235][T12924] das08-aol [ 179.615051][T12924] das08-aom [ 179.616543][T12924] das08/jr-ao [ 179.618264][T12924] das08jr-16-ao [ 179.620091][T12924] pc104-das08 [ 179.621789][T12924] das08jr/16 [ 179.621927][T12946] syzkaller0: entered promiscuous mode [ 179.628387][T12924] comedi: valid board names for das16m1 driver are: [ 179.632472][T12924] das16m1 [ 179.633975][T12924] comedi: valid board names for dac02 driver are: [ 179.636605][T12924] dac02 [ 179.637547][T12924] comedi: valid board names for rti802 driver are: [ 179.639657][T12924] rti802 [ 179.640664][T12924] comedi: valid board names for rti800 driver are: [ 179.643004][T12924] rti800 [ 179.644094][T12924] rti815 [ 179.645384][T12924] comedi: valid board names for pcm3724 driver are: [ 179.647587][T12924] pcm3724 [ 179.648586][T12924] comedi: valid board names for pcl818 driver are: [ 179.650702][T12924] pcl818l [ 179.651812][T12924] pcl818h [ 179.653263][T12924] pcl818hd [ 179.654412][T12924] pcl818hg [ 179.655520][T12924] pcl818 [ 179.656480][T12924] pcl718 [ 179.657540][T12924] pcm3718 [ 179.658564][T12924] comedi: valid board names for pcl816 driver are: [ 179.660736][T12924] pcl816 [ 179.661811][T12924] pcl814b [ 179.662789][T10054] bond3: (slave macvlan2): failed to get link speed/duplex [ 179.663093][T12924] comedi: valid board names for pcl812 driver are: [ 179.668310][T12924] pcl812 [ 179.669594][T12924] pcl812pg [ 179.670996][T12924] acl8112pg [ 179.672419][T12924] acl8112dg [ 179.673617][T12950] netlink: 'syz.0.2045': attribute type 10 has an invalid length. [ 179.674020][T12924] acl8112hg [ 179.676306][T12950] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2045'. [ 179.677755][T12924] a821pgl [ 179.677765][T12924] a821pglnda [ 179.683056][T12924] a821pgh [ 179.684640][T12924] a822pgl [ 179.685981][T12924] a822pgh [ 179.687059][T12924] a823pgl [ 179.688095][T12924] a823pgh [ 179.689147][T12924] pcl813 [ 179.690132][T12924] pcl813b [ 179.691176][T12924] acl8113 [ 179.692239][T12924] iso813 [ 179.693355][T12924] acl8216 [ 179.694519][T12924] a826pg [ 179.695498][T12924] comedi: valid board names for pcl730 driver are: [ 179.697587][T12924] pcl730 [ 179.698587][T12924] iso730 [ 179.699573][T12924] acl7130 [ 179.700624][T12924] pcm3730 [ 179.701657][T12924] pcl725 [ 179.704970][T12924] p8r8dio [ 179.706374][T12924] acl7225b [ 179.707792][T12924] p16r16dio [ 179.709247][T12924] pcl733 [ 179.710551][T12924] pcl734 [ 179.711841][T12924] opmm-1616-xt [ 179.713543][T12924] pearl-mm-p [ 179.715055][T12924] ir104-pbf [ 179.716471][T12924] comedi: valid board names for pcl726 driver are: [ 179.719256][T12924] pcl726 [ 179.720545][T12924] pcl727 [ 179.721824][T12924] pcl728 [ 179.723216][T12924] acl6126 [ 179.724608][T12924] acl6128 [ 179.725964][T12924] comedi: valid board names for pcl724 driver are: [ 179.728266][T12924] pcl724 [ 179.729239][T12924] pcl722 [ 179.730197][T12924] pcl731 [ 179.731164][T12924] acl7122 [ 179.732170][T12924] acl7124 [ 179.733339][T12924] pet48dio [ 179.734428][T12924] pcmio48 [ 179.735444][T12924] onyx-mm-dio [ 179.736551][T12924] comedi: valid board names for pcl711 driver are: [ 179.738634][T12924] pcl711 [ 179.739604][T12924] pcl711b [ 179.740623][T12924] acl8112hg [ 179.741681][T12924] acl8112dg [ 179.751452][T12924] comedi: valid board names for amplc_pc263 driver are: [ 179.754060][T12924] pc263 [ 179.755090][T12924] comedi: valid board names for amplc_pc236 driver are: [ 179.757438][T12924] pc36at [ 179.758453][T12924] comedi: valid board names for amplc_dio200 driver are: [ 179.760680][T12924] pc212e [ 179.761808][T12924] pc214e [ 179.764379][T12924] pc215e [ 179.765437][T12924] pc218e [ 179.766535][T12924] pc272e [ 179.767683][T12924] comedi: valid board names for comedi_parport driver are: [ 179.770110][T12924] comedi_parport [ 179.771337][T12924] comedi: valid board names for comedi_test driver are: [ 179.774508][T12924] comedi_test [ 179.775675][T12924] comedi: valid board names for comedi_bond driver are: [ 179.777910][T12924] comedi_bond [ 179.782694][T10054] bond3: (slave macvlan2): failed to get link speed/duplex [ 179.848384][T12959] syz_tun: entered allmulticast mode [ 179.851133][T12959] syz_tun: left allmulticast mode [ 179.852102][T12961] comedi comedi3: comedi_config --init_data is deprecated [ 179.893100][T10054] bond3: (slave macvlan2): failed to get link speed/duplex [ 180.002851][T10054] bond3: (slave macvlan2): failed to get link speed/duplex [ 180.062909][ T830] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 180.113588][T10066] bond3: (slave macvlan2): failed to get link speed/duplex [ 180.196169][T12855] em28xx 7-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 180.216094][ T830] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 180.219215][ T830] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 180.221893][ T830] usb 6-1: Product: syz [ 180.223583][T10063] bond3: (slave macvlan2): failed to get link speed/duplex [ 180.227824][T12990] netlink: 'syz.3.2054': attribute type 10 has an invalid length. [ 180.233686][ T830] usb 6-1: Manufacturer: syz [ 180.234686][T12990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.236042][ T830] usb 6-1: SerialNumber: syz [ 180.240582][ T830] usb 6-1: config 0 descriptor?? [ 180.253254][ T5985] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 180.255808][ T5985] em28xx 7-1:0.0: dvb set to bulk mode. [ 180.261538][ T39] em28xx 7-1:0.0: Binding DVB extension [ 180.281252][ T5985] usb 7-1: USB disconnect, device number 12 [ 180.293290][ T5985] em28xx 7-1:0.0: Disconnecting em28xx [ 180.307280][ T39] em28xx 7-1:0.0: Registering input extension [ 180.310230][ T5985] em28xx 7-1:0.0: Closing input extension [ 180.322118][T13006] netlink: 'syz.0.2063': attribute type 1 has an invalid length. [ 180.325870][T13008] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 180.383301][ T5985] em28xx 7-1:0.0: Freeing device [ 180.439567][T13006] ªªªªªª: renamed from vlan0 (while UP) [ 180.451358][ T6018] usb 6-1: USB disconnect, device number 24 [ 180.464483][T10070] bond3: (slave macvlan2): failed to get link speed/duplex [ 180.572704][T10070] bond3: (slave macvlan2): failed to get link speed/duplex [ 180.586168][T13020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=13020 comm=syz.0.2067 [ 180.600767][T13020] bond10: Removing last arp target with arp_interval on [ 180.694960][T13029] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2070'. [ 180.725526][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2071'. [ 180.862207][T13050] overlayfs: failed to clone upperpath [ 180.868928][T13050] mac80211_hwsim hwsim6 ªªªªª;: renamed from wlan0 [ 181.204934][T13064] netlink: 'syz.2.2082': attribute type 29 has an invalid length. [ 181.207996][T13064] netlink: 'syz.2.2082': attribute type 29 has an invalid length. [ 181.211012][T13064] netlink: 'syz.2.2082': attribute type 32 has an invalid length. [ 181.213638][T13064] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2082'. [ 181.322936][ T6018] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 181.472757][ T6018] usb 6-1: Using ep0 maxpacket: 8 [ 181.476170][ T6018] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.480662][ T6018] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.484947][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 181.487391][ T6018] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 181.490465][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.496725][ T6018] usb 6-1: config 0 descriptor?? [ 181.666906][T13073] xfrm0: entered promiscuous mode [ 181.734864][T13082] overlayfs: failed to clone upperpath [ 181.745881][T13082] netlink: 344 bytes leftover after parsing attributes in process `syz.0.2088'. [ 181.917544][ T6018] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 181.923384][ T6018] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 181.926060][ T6018] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 181.928796][ T6018] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 181.931846][ T6018] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 181.935800][ T6018] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 182.163316][ T5985] usb 6-1: USB disconnect, device number 25 [ 182.262789][ T40] kauditd_printk_skb: 231 callbacks suppressed [ 182.262801][ T40] audit: type=1400 audit(2000000027.189:2464): avc: denied { recv } for pid=5842 comm="syz-executor" saddr=127.0.0.1 src=57798 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 182.505637][ T40] audit: type=1400 audit(2000000027.429:2465): avc: denied { create } for pid=13098 comm="syz.0.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 182.514308][ T40] audit: type=1400 audit(2000000027.439:2466): avc: denied { read } for pid=13098 comm="syz.0.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 182.549944][ T40] audit: type=1400 audit(2000000027.469:2467): avc: denied { create } for pid=13100 comm="syz.0.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 182.557105][ T40] audit: type=1400 audit(2000000027.469:2468): avc: denied { bind } for pid=13100 comm="syz.0.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 182.563407][ T40] audit: type=1400 audit(2000000027.469:2469): avc: denied { setopt } for pid=13100 comm="syz.0.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 182.569708][ T40] audit: type=1400 audit(2000000027.469:2470): avc: denied { create } for pid=13100 comm="syz.0.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.578164][ T40] audit: type=1400 audit(2000000027.479:2471): avc: denied { write } for pid=13100 comm="syz.0.2095" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.585936][ T40] audit: type=1400 audit(2000000027.479:2472): avc: denied { setopt } for pid=13100 comm="syz.0.2095" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.592425][ T40] audit: type=1400 audit(2000000027.479:2473): avc: denied { create } for pid=13100 comm="syz.0.2095" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 182.697104][T13109] omfs: Invalid superblock (0) [ 182.710262][T13109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2097'. [ 182.712524][T13113] ip6gre1: entered promiscuous mode [ 182.716235][T13113] ip6gre1: entered allmulticast mode [ 183.183154][T13124] nbd0: detected capacity change from 0 to 127 [ 183.197697][ T5938] block nbd0: Receive control failed (result -32) [ 183.197697][ T5936] block nbd0: Receive control failed (result -104) [ 183.204485][ T5934] block nbd0: Receive control failed (result -32) [ 183.230079][T13130] ptrace attach of "/syz-executor exec"[13131] was attempted by "/syz-executor exec"[13130] [ 183.434661][T13134] binder: 13132:13134 ioctl 501c4814 200000000640 returned -22 [ 183.607311][T13138] futex_wake_op: syz.0.2107 tries to shift op by -1; fix this program [ 183.648681][T13138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2107'. [ 183.883404][T13159] lo speed is unknown, defaulting to 1000 [ 184.349840][ T5938] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.368790][ T5938] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.374466][ T5938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.378920][ T5938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.382463][ T5938] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 184.486742][T13185] lo speed is unknown, defaulting to 1000 [ 184.493643][T10070] net_ratelimit: 34 callbacks suppressed [ 184.493656][T10070] bond3: (slave macvlan2): failed to get link speed/duplex [ 184.517095][T13200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2126'. [ 184.520112][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2126'. [ 184.522008][T13203] 9pnet_virtio: no channels available for device syz [ 184.523220][T13200] netlink: 'syz.2.2126': attribute type 20 has an invalid length. [ 184.523794][T13200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2126'. [ 184.531366][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2126'. [ 184.535656][T13200] netlink: 'syz.2.2126': attribute type 20 has an invalid length. [ 184.602755][T10054] bond3: (slave macvlan2): failed to get link speed/duplex [ 184.734323][T10066] bond3: (slave macvlan2): failed to get link speed/duplex [ 184.781088][T13185] chnl_net:caif_netlink_parms(): no params data found [ 184.843802][T10060] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.848770][T10060] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.938434][T13230] lo speed is unknown, defaulting to 1000 [ 184.956424][T13185] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.964037][T13185] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.968030][T13185] bridge_slave_0: entered allmulticast mode [ 184.973144][T13185] bridge_slave_0: entered promiscuous mode [ 184.978526][T13185] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.982091][T13185] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.986505][T13185] bridge_slave_1: entered allmulticast mode [ 184.991166][T13185] bridge_slave_1: entered promiscuous mode [ 185.028514][T13242] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 185.041176][T10060] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.052764][T10060] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.105326][T13185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.216228][T13185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.279635][T10060] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.284118][T10060] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.343356][T13185] team0: Port device team_slave_0 added [ 185.351523][T13185] team0: Port device team_slave_1 added [ 185.409837][T10060] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.415474][T10060] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.454019][T13185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.462695][T13185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.471091][T13185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.479730][T13185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.492838][T13185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.504833][T13185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.564202][T13271] IPv6: syztnl0: Disabled Multicast RS [ 185.592232][T13185] hsr_slave_0: entered promiscuous mode [ 185.601140][T13185] hsr_slave_1: entered promiscuous mode [ 185.603841][T13185] debugfs: 'hsr0' already exists in 'hsr' [ 185.605719][T13185] Cannot create hsr debugfs directory [ 185.630731][T13271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=13271 comm=syz.1.2144 [ 185.678818][T10060] bridge_slave_1: left allmulticast mode [ 185.682366][T10060] bridge_slave_1: left promiscuous mode [ 185.687651][T10060] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.688971][T13280] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2146'. [ 185.700910][T10060] bridge_slave_0: left allmulticast mode [ 185.703294][T10060] bridge_slave_0: left promiscuous mode [ 185.705400][T10060] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.742467][T10060] batman_adv: batadv0: Interface deactivated: gretap1 [ 185.831343][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2147'. [ 185.883525][T10060] gretap0 (unregistering): left promiscuous mode [ 185.899673][T10060] batman_adv: batadv0: Removing interface: gretap1 [ 186.319229][T10060] bond0 (unregistering): left promiscuous mode [ 186.321316][T10060] bond_slave_0: left promiscuous mode [ 186.323445][T10060] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 186.327046][T10060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.333945][T10060] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 186.338816][T10060] bond0 (unregistering): Released all slaves [ 186.357095][T10060] bond1 (unregistering): Released all slaves [ 186.366727][T10060] bond2 (unregistering): Released all slaves [ 186.379533][T10060] bond3 (unregistering): Released all slaves [ 186.389337][T10060] bond4 (unregistering): Released all slaves [ 186.399191][T10060] bond5 (unregistering): Released all slaves [ 186.412258][T10060] bond6 (unregistering): Released all slaves [ 186.430229][T10060] bond7 (unregistering): (slave veth5): Releasing active interface [ 186.432852][ T5938] Bluetooth: hci4: command tx timeout [ 186.442454][T10060] bond7 (unregistering): Released all slaves [ 186.445444][T13288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2148'. [ 186.450020][T10060] bond8 (unregistering): Released all slaves [ 186.458470][T10060] bond9 (unregistering): Released all slaves [ 186.466420][T10060] bond10 (unregistering): Released all slaves [ 186.532688][T10066] bond3: (slave macvlan2): failed to get link speed/duplex [ 186.556375][ T5985] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 186.586466][T13304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=13304 comm=syz.1.2152 [ 186.599793][ T5985] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz1] on syz0 [ 186.653722][T10060] tipc: Left network mode [ 186.662686][ T61] bond3: (slave macvlan2): failed to get link speed/duplex [ 186.743703][T10060] IPVS: stopping master sync thread 6031 ... [ 186.792788][T10068] bond3: (slave macvlan2): failed to get link speed/duplex [ 186.903366][T10068] bond3: (slave macvlan2): failed to get link speed/duplex [ 187.013553][T10068] bond3: (slave macvlan2): failed to get link speed/duplex [ 187.082941][ T6018] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 187.143483][T10066] bond3: (slave macvlan2): failed to get link speed/duplex [ 187.249066][ T6018] usb 6-1: not running at top speed; connect to a high speed hub [ 187.256212][ T6018] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 187.264334][ T6018] usb 6-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 187.268299][ T6018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.272123][ T6018] usb 6-1: Product: syz [ 187.284093][ T6018] usb 6-1: Manufacturer: syz [ 187.285921][ T6018] usb 6-1: SerialNumber: syz [ 187.294040][ T40] kauditd_printk_skb: 258 callbacks suppressed [ 187.294057][ T40] audit: type=1400 audit(2000000032.219:2732): avc: denied { unlink } for pid=13335 comm="rm" name="resolv.conf.eth3.link" dev="tmpfs" ino=6766 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 187.315206][ T40] audit: type=1400 audit(2000000032.239:2733): avc: denied { create } for pid=13185 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.316996][T13185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 187.325053][ T40] audit: type=1400 audit(2000000032.239:2734): avc: denied { write } for pid=13185 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.335756][ T40] audit: type=1400 audit(2000000032.239:2735): avc: denied { read } for pid=13185 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.351207][T13185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 187.351913][ T40] audit: type=1400 audit(2000000032.269:2736): avc: denied { search } for pid=13336 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.368905][ T40] audit: type=1400 audit(2000000032.269:2737): avc: denied { search } for pid=13336 comm="rm" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.375498][T13185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 187.390180][ T40] audit: type=1400 audit(2000000032.269:2738): avc: denied { search } for pid=13336 comm="rm" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.415776][T13185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 187.484330][ T61] bond3: (slave macvlan2): failed to get link speed/duplex [ 187.522386][ T40] audit: type=1400 audit(2000000032.439:2739): avc: denied { map_create } for pid=13345 comm="syz.2.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 187.542680][ T40] audit: type=1400 audit(2000000032.449:2740): avc: denied { perfmon } for pid=13345 comm="syz.2.2157" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 187.562741][ T40] audit: type=1400 audit(2000000032.449:2741): avc: denied { map_read map_write } for pid=13345 comm="syz.2.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 187.591895][T10060] veth0_to_batadv: left promiscuous mode [ 187.601075][T10060] hsr_slave_0: left promiscuous mode [ 187.606673][T10060] hsr_slave_1: left promiscuous mode [ 187.609847][T10060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.613253][T10060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.620816][T10060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.623672][T10060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.630288][T10060] veth1_to_batadv: left promiscuous mode [ 187.633682][T10060] veth1_macvtap: left promiscuous mode [ 187.635644][T10060] veth0_macvtap: left promiscuous mode [ 187.637492][T10060] veth1_vlan: left promiscuous mode [ 187.639412][T10060] veth0_vlan: left promiscuous mode [ 187.936236][T10060] team0 (unregistering): Port device team_slave_1 removed [ 187.959204][T10060] team0 (unregistering): Port device team_slave_0 removed [ 188.145818][ T6018] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 188.149266][ T6018] usb 6-1: MIDIStreaming interface descriptor not found [ 188.250292][T13185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.259241][ T6018] usb 6-1: USB disconnect, device number 26 [ 188.261574][T13185] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.271363][T10066] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.273944][T10066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.289877][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.292796][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.391406][T13373] binder: 13371:13373 ioctl 4018620d 200000004a80 returned -22 [ 188.397205][T13372] binder: 13371:13372 ioctl 4018620d 200000004a80 returned -22 [ 188.481064][T13185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.512514][T13185] veth0_vlan: entered promiscuous mode [ 188.512907][ T5938] Bluetooth: hci4: command tx timeout [ 188.521262][T13185] veth1_vlan: entered promiscuous mode [ 188.548210][T13185] veth0_macvtap: entered promiscuous mode [ 188.554850][T13185] veth1_macvtap: entered promiscuous mode [ 188.564305][T13185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.573984][T13185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.582291][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.585961][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.591957][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.597712][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.653833][T10060] IPVS: stop unused estimator thread 0... [ 188.687870][T10070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.691348][T10070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.720132][T10068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.723081][T10068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.208406][T13390] comedi comedi4: bad chanlist[0]=0x00009993 chan=39315 range length=2 [ 189.515463][T13404] lo speed is unknown, defaulting to 1000 [ 189.562752][ T61] net_ratelimit: 10 callbacks suppressed [ 189.562883][ T61] bond3: (slave macvlan2): failed to get link speed/duplex [ 189.660996][T13409] netlink: 'syz.0.2172': attribute type 11 has an invalid length. [ 189.672715][T10070] bond3: (slave macvlan2): failed to get link speed/duplex [ 189.761657][T13412] netlink: 'syz.0.2173': attribute type 9 has an invalid length. [ 189.764248][T13412] netlink: 'syz.0.2173': attribute type 11 has an invalid length. [ 189.766974][T13412] netlink: 'syz.0.2173': attribute type 12 has an invalid length. [ 189.769870][T13412] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.2173'. [ 189.774734][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 189.783723][ T61] bond3: (slave macvlan2): failed to get link speed/duplex [ 189.788298][T13414] random: crng reseeded on system resumption [ 189.872738][ T6647] page_pool_release_retry() stalled pool shutdown: id 42, 1 inflight 60 sec [ 189.892668][T10060] bond3: (slave macvlan2): failed to get link speed/duplex [ 190.002743][T10060] bond3: (slave macvlan2): failed to get link speed/duplex [ 190.156453][T10068] bond3: (slave macvlan2): failed to get link speed/duplex [ 190.262771][T10060] bond3: (slave macvlan2): failed to get link speed/duplex [ 190.364792][T13427] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 190.372748][T10060] bond3: (slave macvlan2): failed to get link speed/duplex [ 190.483674][T10068] bond3: (slave macvlan2): failed to get link speed/duplex [ 190.592824][ T5938] Bluetooth: hci4: command tx timeout [ 190.772952][T13433] input: syz1 as /devices/virtual/input/input26 [ 190.834835][T13435] CUSE: unknown device info "" [ 190.836539][T13435] CUSE: zero length info key specified [ 190.896430][T13436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2181'. [ 191.019786][T13438] netlink: 'syz.1.2182': attribute type 2 has an invalid length. [ 191.022521][T13438] netlink: 'syz.1.2182': attribute type 2 has an invalid length. [ 191.297828][T13454] 9p: p9: multiple sources not supported [ 191.301320][T13454] netlink: 'syz.2.2188': attribute type 12 has an invalid length. [ 191.503816][T13465] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.507399][T13465] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.549199][T13471] tmpfs: Bad value for 'mpol' [ 191.550905][T13471] tmpfs: Bad value for 'mpol' [ 191.552677][T13471] tmpfs: Bad value for 'mpol' [ 191.554342][T13471] tmpfs: Bad value for 'mpol' [ 191.556211][T13471] tmpfs: Bad value for 'mpol' [ 191.558063][T13471] tmpfs: Bad value for 'mpol' [ 191.559818][T13471] tmpfs: Bad value for 'mpol' [ 191.561471][T13471] tmpfs: Bad value for 'mpol' [ 191.564124][T13471] tmpfs: Bad value for 'mpol' [ 191.566563][T13471] tmpfs: Bad value for 'mpol' [ 191.568796][T13471] tmpfs: Bad value for 'mpol' [ 191.570641][T13471] tmpfs: Bad value for 'mpol' [ 191.572610][T13471] tmpfs: Bad value for 'mpol' [ 191.574927][T13471] tmpfs: Bad value for 'mpol' [ 191.577127][T13471] tmpfs: Bad value for 'mpol' [ 191.578852][T13471] tmpfs: Bad value for 'mpol' [ 191.580804][T13471] tmpfs: Bad value for 'mpol' [ 191.583326][T13471] tmpfs: Bad value for 'mpol' [ 191.585495][T13471] tmpfs: Bad value for 'mpol' [ 191.587751][T13471] tmpfs: Bad value for 'mpol' [ 191.590161][T13471] tmpfs: Bad value for 'mpol' [ 191.592916][T13471] tmpfs: Bad value for 'mpol' [ 191.595580][T13471] tmpfs: Bad value for 'mpol' [ 191.598263][T13471] tmpfs: Bad value for 'mpol' [ 191.652940][T13479] input: syz0 as /devices/virtual/input/input27 [ 191.656850][T13479] input: failed to attach handler leds to device input27, error: -6 [ 192.361420][ T40] kauditd_printk_skb: 255 callbacks suppressed [ 192.361489][ T40] audit: type=1400 audit(2000000037.279:2997): avc: denied { map_read map_write } for pid=13496 comm="syz.0.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 192.396510][T13498] lo speed is unknown, defaulting to 1000 [ 192.612889][ T40] audit: type=1400 audit(2000000037.539:2999): avc: denied { allowed } for pid=13501 comm="syz.0.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 192.622926][ T40] audit: type=1400 audit(2000000037.539:2998): avc: denied { allowed } for pid=13501 comm="syz.0.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 192.672735][ T5938] Bluetooth: hci4: command tx timeout [ 192.712599][ T40] audit: type=1400 audit(2000000037.629:3000): avc: denied { create } for pid=13505 comm="syz.1.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 192.724162][ T40] audit: type=1400 audit(2000000037.629:3001): avc: denied { ioctl } for pid=13505 comm="syz.1.2202" path="socket:[53895]" dev="sockfs" ino=53895 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 192.749877][ T40] audit: type=1400 audit(2000000037.629:3002): avc: denied { create } for pid=13505 comm="syz.1.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 192.760280][ T40] audit: type=1400 audit(2000000037.629:3003): avc: denied { write } for pid=13505 comm="syz.1.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 192.770104][ T40] audit: type=1400 audit(2000000037.649:3004): avc: denied { bpf } for pid=13507 comm="syz.0.2203" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 192.777240][ T40] audit: type=1400 audit(2000000037.649:3005): avc: denied { perfmon } for pid=13507 comm="syz.0.2203" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 192.787078][ T40] audit: type=1400 audit(2000000037.649:3006): avc: denied { prog_run } for pid=13507 comm="syz.0.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 192.824212][T13514] SELinux: syz.1.2207 (13514) set checkreqprot to 1. This is no longer supported. [ 193.981715][T13534] 8021q: VLANs not supported on sit0 [ 194.602986][T10070] net_ratelimit: 35 callbacks suppressed [ 194.603056][T10070] bond3: (slave macvlan2): failed to get link speed/duplex [ 194.608880][T13585] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2228'. [ 194.651264][T13591] usb usb7: usbfs: process 13591 (syz.2.2229) did not claim interface 0 before use [ 194.712727][T10060] bond3: (slave macvlan2): failed to get link speed/duplex [ 194.726050][T13597] bridge_slave_0: left allmulticast mode [ 194.728054][T13597] bridge_slave_0: left promiscuous mode [ 194.731484][T13597] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.739778][T13597] bridge_slave_1: left allmulticast mode [ 194.742185][T13597] bridge_slave_1: left promiscuous mode [ 194.745066][T13597] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.752529][T13597] bond0: (slave bond_slave_0): Releasing backup interface [ 194.763325][T13597] bond0: (slave bond_slave_1): Releasing backup interface [ 194.776040][T13597] team0: Port device team_slave_0 removed [ 194.782666][T13597] team0: Port device team_slave_1 removed [ 194.784965][T13597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.787585][T13597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.791498][T13597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.794060][T13597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.797750][T13597] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 194.822776][T10070] bond3: (slave macvlan2): failed to get link speed/duplex [ 194.879062][T13613] CUSE: unknown device info "" [ 194.880791][T13613] CUSE: zero length info key specified [ 194.933554][T10070] bond3: (slave macvlan2): failed to get link speed/duplex [ 194.946622][T13616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2237'. [ 195.009093][T10066] Bluetooth: hci3: Frame reassembly failed (-84) [ 195.042801][T10066] bond3: (slave macvlan2): failed to get link speed/duplex [ 195.152822][T10070] bond3: (slave macvlan2): failed to get link speed/duplex [ 195.263154][T10066] bond3: (slave macvlan2): failed to get link speed/duplex [ 195.372796][T10063] bond3: (slave macvlan2): failed to get link speed/duplex [ 195.482946][T10066] bond3: (slave macvlan2): failed to get link speed/duplex [ 195.942832][T13634] netlink: 'syz.0.2243': attribute type 1 has an invalid length. [ 195.946331][T13634] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2243'. [ 195.950160][T13634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2243'. [ 195.980245][T13630] netlink: 'syz.3.2242': attribute type 21 has an invalid length. [ 196.078544][T13649] sch_fq: defrate 0 ignored. [ 196.086989][T13651] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2249'. [ 196.164680][T13657] input: syz0 as /devices/virtual/input/input28 [ 196.177519][T13657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2247'. [ 196.946383][T13664] tmpfs: Bad value for 'mpol' [ 196.957751][T13666] netlink: 'syz.2.2253': attribute type 28 has an invalid length. [ 196.961315][T13666] netlink: 'syz.2.2253': attribute type 3 has an invalid length. [ 196.964975][T13666] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2253'. [ 197.072738][ T5938] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 197.262289][T13684] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 197.272216][T13683] macsec1: entered promiscuous mode [ 197.274207][T13683] macsec1: entered allmulticast mode [ 197.376057][ T40] kauditd_printk_skb: 167 callbacks suppressed [ 197.376070][ T40] audit: type=1400 audit(2000000042.299:3174): avc: denied { read } for pid=13688 comm="syz.1.2260" name="video6" dev="devtmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 197.387017][ T40] audit: type=1400 audit(2000000042.299:3175): avc: denied { open } for pid=13688 comm="syz.1.2260" path="/dev/video6" dev="devtmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 197.395345][ T40] audit: type=1400 audit(2000000042.299:3176): avc: denied { ioctl } for pid=13688 comm="syz.1.2260" path="/dev/video6" dev="devtmpfs" ino=963 ioctlcmd=0x5648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 197.403662][ T40] audit: type=1400 audit(2000000042.299:3177): avc: denied { read write } for pid=13688 comm="syz.1.2260" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.411096][ T40] audit: type=1400 audit(2000000042.299:3178): avc: denied { open } for pid=13688 comm="syz.1.2260" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.418971][ T40] audit: type=1400 audit(2000000042.299:3179): avc: denied { ioctl } for pid=13688 comm="syz.1.2260" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.622803][ T6018] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 197.756935][ T6018] usb 6-1: device descriptor read/64, error -71 [ 197.840418][ T40] audit: type=1400 audit(2000000042.759:3180): avc: denied { execmem } for pid=13690 comm="syz.2.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 197.863013][ T40] audit: type=1400 audit(2000000042.789:3181): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=57798 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 197.923494][ T40] audit: type=1400 audit(2000000042.849:3182): avc: denied { write } for pid=13692 comm="syz.3.2262" name="video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 197.931133][ T40] audit: type=1400 audit(2000000042.849:3183): avc: denied { create } for pid=13692 comm="syz.3.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.944030][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2261'. [ 197.946964][T13694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2261'. [ 197.999119][ T6018] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 198.021541][T13697] [U]  [ 198.052199][T13702] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 198.094192][T13702] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 198.100203][T13702] overlayfs: failed to look up (tracing) for ino (-66) [ 198.152661][ T6018] usb 6-1: device descriptor read/64, error -71 [ 198.273040][ T6018] usb usb6-port1: attempt power cycle [ 198.348304][T13720] xt_ecn: cannot match TCP bits for non-tcp packets [ 198.414233][T13725] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2273'. [ 198.632307][T13730] JFS: discard option not supported on device [ 198.635769][ T6018] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 198.639447][T13730] Mount JFS Failure: -5 [ 198.673256][ T6018] usb 6-1: device descriptor read/8, error -71 [ 198.922672][ T6018] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 198.953561][ T6018] usb 6-1: device descriptor read/8, error -71 [ 199.066969][T13755] dvmrp1: entered allmulticast mode [ 199.072730][ T6018] usb usb6-port1: unable to enumerate USB device [ 199.075871][T13754] dvmrp1: left allmulticast mode [ 199.314300][T13765] lo speed is unknown, defaulting to 1000 [ 199.413356][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.516110][T13771] xt_TCPMSS: Only works on TCP SYN packets [ 199.556343][T13773] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 199.659405][T13778] xt_hashlimit: size too large, truncated to 1048576 [ 199.703506][T10071] net_ratelimit: 36 callbacks suppressed [ 199.703580][T10071] bond3: (slave macvlan2): failed to get link speed/duplex [ 199.797155][T13787] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input29 [ 199.822808][ T1199] bond3: (slave macvlan2): failed to get link speed/duplex [ 199.943557][T10053] bond3: (slave macvlan2): failed to get link speed/duplex [ 200.052791][T10053] bond3: (slave macvlan2): failed to get link speed/duplex [ 200.056795][T13805] ubi31: attaching mtd0 [ 200.062212][T13805] ubi31: scanning is finished [ 200.064176][T13805] ubi31: empty MTD device detected [ 200.106602][T13806] trusted_key: encrypted_key: keyword 'u' not recognized [ 200.173346][T10053] bond3: (slave macvlan2): failed to get link speed/duplex [ 200.282761][T10078] bond3: (slave macvlan2): failed to get link speed/duplex [ 200.287664][T13805] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 200.345332][T13822] geneve1: entered allmulticast mode [ 200.398322][T10066] bond3: (slave macvlan2): failed to get link speed/duplex [ 200.513076][T10078] bond3: (slave macvlan2): failed to get link speed/duplex [ 200.541738][T13835] [ 200.542654][T13835] ====================================================== [ 200.544868][T13835] WARNING: possible circular locking dependency detected [ 200.546956][T13835] syzkaller #0 Tainted: G L [ 200.548962][T13835] ------------------------------------------------------ [ 200.551152][T13835] syz.1.2305/13835 is trying to acquire lock: [ 200.553380][T13835] ffffffff8e9ab8a0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 200.557609][T13835] [ 200.557609][T13835] but task is already holding lock: [ 200.560181][T13835] ffff8880371b4ee0 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x43/0xa0 [ 200.563266][T13835] [ 200.563266][T13835] which lock already depends on the new lock. [ 200.563266][T13835] [ 200.566297][T13835] [ 200.566297][T13835] the existing dependency chain (in reverse order) is: [ 200.569027][T13835] [ 200.569027][T13835] -> #7 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 200.571426][T13835] lock_sock_nested+0x41/0xf0 [ 200.573465][T13835] __inet_bind+0x8a5/0xc60 [ 200.575401][T13835] inet_bind_sk+0xb8/0xf0 [ 200.577094][T13835] mptcp_bind+0x18e/0x1e0 [ 200.578737][T13835] __sys_bind+0x1a9/0x260 [ 200.580280][T13835] __x64_sys_bind+0x72/0xb0 [ 200.581802][T13835] do_syscall_64+0x106/0xf80 [ 200.582960][ T5934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.583392][T13835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.583407][T13835] [ 200.583407][T13835] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 200.583425][T13835] lock_sock_nested+0x41/0xf0 [ 200.585774][ T5934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.587684][T13835] inet_shutdown+0x67/0x410 [ 200.590346][ T5934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.591964][T13835] nbd_mark_nsock_dead+0xae/0x5c0 [ 200.594969][ T5934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.596583][T13835] recv_work+0x5fb/0x8c0 [ 200.596604][T13835] process_one_work+0xa23/0x19a0 [ 200.599213][ T5934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.600951][T13835] worker_thread+0x5ef/0xe50 [ 200.611546][T13835] kthread+0x370/0x450 [ 200.613594][T13835] ret_from_fork+0x754/0xd80 [ 200.615617][T13833] lo speed is unknown, defaulting to 1000 [ 200.615786][T13835] ret_from_fork_asm+0x1a/0x30 [ 200.619879][T13835] [ 200.619879][T13835] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 200.623024][T13835] __mutex_lock+0x1a2/0x1b90 [ 200.625094][T13835] nbd_queue_rq+0x428/0x1080 [ 200.626859][T13835] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 200.629607][T13835] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 200.632826][T13835] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 200.635624][T13835] blk_mq_run_hw_queue+0x23c/0x670 [ 200.638038][T13835] blk_mq_dispatch_list+0x51d/0x1360 [ 200.640482][T13835] blk_mq_flush_plug_list+0x130/0x600 [ 200.643070][T13835] __blk_flush_plug+0x2c4/0x4b0 [ 200.645505][T13835] __submit_bio+0x584/0x6c0 [ 200.647672][T13835] submit_bio_noacct_nocheck+0x562/0xc10 [ 200.650338][T13835] submit_bio_noacct+0xd17/0x2010 [ 200.652768][T13835] submit_bh_wbc+0x59c/0x770 [ 200.655251][T13835] block_read_full_folio+0x264/0x8e0 [ 200.657843][T13835] filemap_read_folio+0xfc/0x3b0 [ 200.660200][T13835] do_read_cache_folio+0x2d7/0x6b0 [ 200.662504][T13835] read_part_sector+0xd1/0x370 [ 200.664694][T13835] adfspart_check_ICS+0x93/0x910 [ 200.667135][T13835] bdev_disk_changed+0x7f8/0xc80 [ 200.669832][T13835] blkdev_get_whole+0x187/0x290 [ 200.671793][T13835] bdev_open+0x2c7/0xe40 [ 200.673318][T13835] blkdev_open+0x34e/0x4f0 [ 200.674997][T13835] do_dentry_open+0x6d8/0x1660 [ 200.676686][T13835] vfs_open+0x82/0x3f0 [ 200.678393][T13835] path_openat+0x208c/0x31a0 [ 200.680332][T13835] do_file_open+0x20e/0x430 [ 200.681981][T13835] do_sys_openat2+0x10d/0x1e0 [ 200.682745][T10071] bond3: (slave macvlan2): failed to get link speed/duplex [ 200.683671][T13835] __x64_sys_openat+0x12d/0x210 [ 200.688166][T13835] do_syscall_64+0x106/0xf80 [ 200.689931][T13835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.692020][T13835] [ 200.692020][T13835] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 200.694338][T13835] __mutex_lock+0x1a2/0x1b90 [ 200.695980][T13835] nbd_queue_rq+0xba/0x1080 [ 200.697652][T13835] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 200.699643][T13835] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 200.701858][T13835] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 200.704017][T13835] blk_mq_run_hw_queue+0x23c/0x670 [ 200.705774][T13835] blk_mq_dispatch_list+0x51d/0x1360 [ 200.707632][T13835] blk_mq_flush_plug_list+0x130/0x600 [ 200.709666][T13835] __blk_flush_plug+0x2c4/0x4b0 [ 200.711394][T13835] __submit_bio+0x584/0x6c0 [ 200.713009][T13835] submit_bio_noacct_nocheck+0x562/0xc10 [ 200.715033][T13835] submit_bio_noacct+0xd17/0x2010 [ 200.716850][T13835] submit_bh_wbc+0x59c/0x770 [ 200.718752][T13835] block_read_full_folio+0x264/0x8e0 [ 200.720811][T13835] filemap_read_folio+0xfc/0x3b0 [ 200.722613][T13835] do_read_cache_folio+0x2d7/0x6b0 [ 200.724430][T13835] read_part_sector+0xd1/0x370 [ 200.726296][T13835] adfspart_check_ICS+0x93/0x910 [ 200.728135][T13835] bdev_disk_changed+0x7f8/0xc80 [ 200.729891][T13835] blkdev_get_whole+0x187/0x290 [ 200.731610][T13835] bdev_open+0x2c7/0xe40 [ 200.733137][T13835] blkdev_open+0x34e/0x4f0 [ 200.734826][T13835] do_dentry_open+0x6d8/0x1660 [ 200.736627][T13835] vfs_open+0x82/0x3f0 [ 200.738264][T13835] path_openat+0x208c/0x31a0 [ 200.739910][T13835] do_file_open+0x20e/0x430 [ 200.741489][T13835] do_sys_openat2+0x10d/0x1e0 [ 200.743128][T13835] __x64_sys_openat+0x12d/0x210 [ 200.744823][T13835] do_syscall_64+0x106/0xf80 [ 200.746456][T13835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.748750][T13835] [ 200.748750][T13835] -> #3 (set->srcu){.+.+}-{0:0}: [ 200.750954][T13835] __synchronize_srcu+0xa2/0x300 [ 200.752657][T13835] blk_mq_quiesce_queue+0x149/0x1c0 [ 200.754427][T13835] elevator_switch+0x17b/0x7e0 [ 200.756060][T13835] elevator_change+0x352/0x530 [ 200.758015][T13835] elevator_set_default+0x29e/0x360 [ 200.759880][T13835] blk_register_queue+0x412/0x590 [ 200.761690][T13835] __add_disk+0x73f/0xe40 [ 200.763360][T13835] add_disk_fwnode+0x118/0x5c0 [ 200.765069][T13835] nbd_dev_add+0x77a/0xb10 [ 200.766671][T13835] nbd_init+0x291/0x2b0 [ 200.768587][T13835] do_one_initcall+0x11d/0x760 [ 200.770298][T13835] kernel_init_freeable+0x6e5/0x7a0 [ 200.772106][T13835] kernel_init+0x1f/0x1e0 [ 200.773689][T13835] ret_from_fork+0x754/0xd80 [ 200.775440][T13835] ret_from_fork_asm+0x1a/0x30 [ 200.777361][T13835] [ 200.777361][T13835] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 200.780175][T13835] __mutex_lock+0x1a2/0x1b90 [ 200.781780][T13835] elevator_change+0x1bc/0x530 [ 200.783333][T13835] elevator_set_none+0x92/0xf0 [ 200.784814][T13835] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 200.786821][T13835] nbd_start_device+0x1a6/0xbd0 [ 200.788761][T13835] nbd_genl_connect+0xff2/0x1a40 [ 200.790638][T13835] genl_family_rcv_msg_doit+0x214/0x300 [ 200.792696][T13835] genl_rcv_msg+0x560/0x800 [ 200.792999][T10078] bond3: (slave macvlan2): failed to get link speed/duplex [ 200.794492][T13835] netlink_rcv_skb+0x159/0x420 [ 200.798965][T13835] genl_rcv+0x28/0x40 [ 200.800525][T13835] netlink_unicast+0x5aa/0x870 [ 200.802273][T13835] netlink_sendmsg+0x8b0/0xda0 [ 200.803986][T13835] ____sys_sendmsg+0x9e1/0xb70 [ 200.805770][T13835] ___sys_sendmsg+0x190/0x1e0 [ 200.807663][T13835] __sys_sendmsg+0x170/0x220 [ 200.809497][T13835] do_syscall_64+0x106/0xf80 [ 200.811233][T13835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.813380][T13835] [ 200.813380][T13835] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 200.816171][T13835] blk_alloc_queue+0x610/0x790 [ 200.818069][T13835] blk_mq_alloc_queue+0x174/0x290 [ 200.819879][T13835] __blk_mq_alloc_disk+0x29/0x120 [ 200.821718][T13835] nbd_dev_add+0x492/0xb10 [ 200.823360][T13835] nbd_init+0x291/0x2b0 [ 200.824954][T13835] do_one_initcall+0x11d/0x760 [ 200.826743][T13835] kernel_init_freeable+0x6e5/0x7a0 [ 200.829093][T13835] kernel_init+0x1f/0x1e0 [ 200.831129][T13835] ret_from_fork+0x754/0xd80 [ 200.833235][T13835] ret_from_fork_asm+0x1a/0x30 [ 200.835455][T13835] [ 200.835455][T13835] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 200.838450][T13835] __lock_acquire+0x14b8/0x2630 [ 200.840727][T13835] lock_acquire+0x1cf/0x380 [ 200.842953][T13835] fs_reclaim_acquire+0xc4/0x100 [ 200.845044][T13835] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 200.847017][T13835] __alloc_skb+0x140/0x710 [ 200.848528][T13835] tcp_stream_alloc_skb+0x34/0x660 [ 200.850450][T13835] tcp_connect+0xe8c/0x5630 [ 200.852538][T13835] tcp_v4_connect+0x1603/0x1b40 [ 200.854719][T13835] __inet_stream_connect+0x208/0xfa0 [ 200.856569][T13835] inet_stream_connect+0x57/0xa0 [ 200.858503][T13835] kernel_connect+0x107/0x160 [ 200.860361][T13835] smc_connect+0x394/0x750 [ 200.862188][T13835] __sys_connect_file+0x141/0x1a0 [ 200.864488][T13835] __sys_connect+0x141/0x170 [ 200.864568][T13842] IPVS: set_ctl: invalid protocol: 2 172.20.20.20:20004 [ 200.866328][T13835] __x64_sys_connect+0x72/0xb0 [ 200.871114][T13835] do_syscall_64+0x106/0xf80 [ 200.873304][T13835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.876401][T13835] [ 200.876401][T13835] other info that might help us debug this: [ 200.876401][T13835] [ 200.880746][T13835] Chain exists of: [ 200.880746][T13835] fs_reclaim --> sk_lock-AF_INET --> k-sk_lock-AF_INET [ 200.880746][T13835] [ 200.885392][T13835] Possible unsafe locking scenario: [ 200.885392][T13835] [ 200.888498][T13835] CPU0 CPU1 [ 200.890517][T13835] ---- ---- [ 200.892413][T13835] lock(k-sk_lock-AF_INET); [ 200.894128][T13835] lock(sk_lock-AF_INET); [ 200.896315][T13835] lock(k-sk_lock-AF_INET); [ 200.899277][T13835] lock(fs_reclaim); [ 200.900947][T13835] [ 200.900947][T13835] *** DEADLOCK *** [ 200.900947][T13835] [ 200.904134][T13835] 2 locks held by syz.1.2305/13835: [ 200.906371][T13835] #0: ffff88805857c0e0 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_connect+0xd5/0x750 [ 200.910486][T13835] #1: ffff8880371b4ee0 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x43/0xa0 [ 200.914839][T13835] [ 200.914839][T13835] stack backtrace: [ 200.917378][T13835] CPU: 1 UID: 0 PID: 13835 Comm: syz.1.2305 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.917404][T13835] Tainted: [L]=SOFTLOCKUP [ 200.917410][T13835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.917420][T13835] Call Trace: [ 200.917467][T13835] [ 200.917474][T13835] dump_stack_lvl+0x100/0x190 [ 200.917504][T13835] print_circular_bug.cold+0x178/0x1c7 [ 200.917530][T13835] check_noncircular+0x146/0x160 [ 200.917558][T13835] __lock_acquire+0x14b8/0x2630 [ 200.917576][T13835] ? ipv4_dst_check+0x1a8/0x3b0 [ 200.917595][T13835] lock_acquire+0x1cf/0x380 [ 200.917609][T13835] ? kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 200.917634][T13835] ? __lock_acquire+0x4a5/0x2630 [ 200.917651][T13835] fs_reclaim_acquire+0xc4/0x100 [ 200.917667][T13835] ? kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 200.917690][T13835] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 200.917714][T13835] ? __alloc_skb+0x140/0x710 [ 200.917737][T13835] __alloc_skb+0x140/0x710 [ 200.917758][T13835] ? __pfx___alloc_skb+0x10/0x10 [ 200.917781][T13835] tcp_stream_alloc_skb+0x34/0x660 [ 200.917801][T13835] tcp_connect+0xe8c/0x5630 [ 200.917826][T13835] ? __pfx_tcp_connect+0x10/0x10 [ 200.917845][T13835] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 200.917875][T13835] tcp_v4_connect+0x1603/0x1b40 [ 200.917896][T13835] ? __pfx_tcp_v4_connect+0x10/0x10 [ 200.917912][T13835] ? __lock_acquire+0x4a5/0x2630 [ 200.917929][T13835] __inet_stream_connect+0x208/0xfa0 [ 200.917949][T13835] ? __pfx___inet_stream_connect+0x10/0x10 [ 200.917966][T13835] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 200.917987][T13835] ? __local_bh_enable_ip+0x9e/0x120 [ 200.918008][T13835] inet_stream_connect+0x57/0xa0 [ 200.918026][T13835] kernel_connect+0x107/0x160 [ 200.918050][T13835] ? __pfx_kernel_connect+0x10/0x10 [ 200.918078][T13835] ? __local_bh_enable_ip+0x9e/0x120 [ 200.918125][T13835] smc_connect+0x394/0x750 [ 200.918147][T13835] ? __pfx_smc_connect+0x10/0x10 [ 200.918167][T13835] __sys_connect_file+0x141/0x1a0 [ 200.918187][T13835] __sys_connect+0x141/0x170 [ 200.918206][T13835] ? __pfx___sys_connect+0x10/0x10 [ 200.918230][T13835] __x64_sys_connect+0x72/0xb0 [ 200.918249][T13835] ? lockdep_hardirqs_on+0x78/0x100 [ 200.918272][T13835] do_syscall_64+0x106/0xf80 [ 200.918289][T13835] ? clear_bhb_loop+0x40/0x90 [ 200.918307][T13835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.918322][T13835] RIP: 0033:0x7f3ec4f9c819 [ 200.918337][T13835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.918352][T13835] RSP: 002b:00007f3ec5e3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 200.918407][T13835] RAX: ffffffffffffffda RBX: 00007f3ec5215fa0 RCX: 00007f3ec4f9c819 [ 200.918418][T13835] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 200.918428][T13835] RBP: 00007f3ec5032c91 R08: 0000000000000000 R09: 0000000000000000 [ 200.918437][T13835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.918452][T13835] R13: 00007f3ec5216038 R14: 00007f3ec5215fa0 R15: 00007fff3d6fea38 [ 200.918468][T13835] [ 201.048508][T13844] __nla_validate_parse: 3 callbacks suppressed [ 201.048520][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2307'. [ 201.060006][T13833] chnl_net:caif_netlink_parms(): no params data found SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 201.082883][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2307'. [ 201.445940][T10071] bond0 (unregistering): Released all slaves [ 202.173732][T10071] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.227416][T10071] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.298581][T10071] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.369117][T10071] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.490606][T10071] bridge_slave_1: left allmulticast mode [ 202.493835][T10071] bridge_slave_1: left promiscuous mode [ 202.495920][T10071] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.500461][T10071] bridge_slave_0: left allmulticast mode [ 202.503232][T10071] bridge_slave_0: left promiscuous mode [ 202.505831][T10071] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.664274][T10071] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 202.666952][T10071] bridge2 (unregistering): left promiscuous mode [ 202.872741][T10071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.876268][T10071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.879404][T10071] bond0 (unregistering): Released all slaves [ 202.882929][T10071] bond1 (unregistering): Released all slaves [ 202.888660][T10071] bond2 (unregistering): Released all slaves [ 202.972788][T10071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.978355][T10071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.983391][T10071] bond0 (unregistering): Released all slaves [ 203.094979][T10071] : left promiscuous mode [ 203.172845][T10071] tipc: Left network mode [ 203.688104][T10071] hsr_slave_0: left promiscuous mode [ 203.690525][T10071] hsr_slave_1: left promiscuous mode [ 203.692839][T10071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.695793][T10071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.701225][T10071] hsr_slave_0: left promiscuous mode [ 203.703340][T10071] hsr_slave_1: left promiscuous mode [ 203.706445][T10071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.709977][T10071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.714012][T10071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.717435][T10071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.724527][T10071] veth1_macvtap: left promiscuous mode [ 203.726854][T10071] veth0_macvtap: left promiscuous mode [ 203.729281][T10071] veth1_vlan: left promiscuous mode [ 203.731551][T10071] veth0_vlan: left promiscuous mode [ 203.886953][T10071] team0 (unregistering): Port device team_slave_1 removed [ 203.894454][T10071] team0 (unregistering): Port device team_slave_0 removed [ 204.007772][T10071] team0 (unregistering): Port device team_slave_1 removed [ 204.020065][T10071] team0 (unregistering): Port device team_slave_0 removed [ 204.600824][T10071] IPVS: stop unused estimator thread 0... [ 204.762822][ T1199] net_ratelimit: 26 callbacks suppressed [ 204.762847][ T1199] bond3: (slave macvlan2): failed to get link speed/duplex [ 204.873089][T10053] bond3: (slave macvlan2): failed to get link speed/duplex [ 204.992805][T10071] bond3: (slave macvlan2): failed to get link speed/duplex [ 205.103924][T10071] bond3: (slave macvlan2): failed to get link speed/duplex [ 205.212774][ T1199] bond3: (slave macvlan2): failed to get link speed/duplex [ 205.324843][T10053] bond3: (slave macvlan2): failed to get link speed/duplex [ 205.432783][T10071] bond3: (slave macvlan2): failed to get link speed/duplex [ 205.542816][T10071] bond3: (slave macvlan2): failed to get link speed/duplex [ 205.652760][T10071] bond3: (slave macvlan2): failed to get link speed/duplex [ 205.762764][T10071] bond3: (slave macvlan2): failed to get link speed/duplex [ 209.772745][T10066] net_ratelimit: 35 callbacks suppressed [ 209.772761][T10066] bond3: (slave macvlan2): failed to get link speed/duplex [ 209.882784][T10053] bond3: (slave macvlan2): failed to get link speed/duplex [ 209.992735][ T1199] bond3: (slave macvlan2): failed to get link speed/duplex [ 210.102697][ T1199] bond3: (slave macvlan2): failed to get link speed/duplex [ 210.212774][ T1199] bond3: (slave macvlan2): failed to get link speed/duplex [ 210.322799][T10071] bond3: (slave macvlan2): failed to get link speed/duplex [ 210.432982][T10071] bond3: (slave macvlan2): failed to get link speed/duplex [ 210.542837][ T1199] bond3: (slave macvlan2): failed to get link speed/duplex