last executing test programs: 6.632238379s ago: executing program 3 (id=817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040094}, 0x8004) (async) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000300)={0xf0f02b, 0x1}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000005e6bf02f000000180001801400020076657468315f746f5f626174616476000c000380"], 0x38}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xd6, 0x6, 0x9}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0x6, 0x3}) 6.548437012s ago: executing program 3 (id=818): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r2}}, 0x18) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000029dbdf"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20040040) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) socket$netlink(0x10, 0x3, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111, 0x2}}, 0x20) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r2}}, 0x18) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000029dbdf"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20040040) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) (async) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) (async) 6.449620358s ago: executing program 3 (id=821): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x0) write$vhost_msg(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000000080)=""/60, 0x3c, &(0x7f0000000180)=""/28, 0x1, 0x3}}, 0x48) fcntl$getflags(r0, 0x401) (async) fcntl$getflags(r0, 0x401) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="0c000000002000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) getpid() (async) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100), 0x800004, &(0x7f0000000140)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) (async) mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100), 0x800004, &(0x7f0000000140)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) r6 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.448768878s ago: executing program 3 (id=822): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='/{/.\x1f+#\x00', 0x141400, &(0x7f0000000040)={@align=0x5, {0x7f, 0xe, 0x2, 0x2}}, 0x7f, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x4}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x1, 0x8, 0x1000, 0xd3, {{0xc, 0x4, 0x1, 0x2a, 0x30, 0x65, 0x0, 0x2, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@noop, @lsrr={0x83, 0x1b, 0x97, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1, @multicast2]}]}}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x18f887, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1005848, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @broadcast}, &(0x7f0000000500)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x15c, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x15c}}, 0x8040) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x400}, &(0x7f0000001100)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0xffffffffffffff8e}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="24040000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fddbdf250200000008000100", @ANYRES32, @ANYRES32, @ANYBLOB="1c02028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000040000100240001006d625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff01000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100008040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040008000000080001"], 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 6.335186667s ago: executing program 3 (id=824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)="edc08818", 0x4}, {0x0, 0x13}], 0x2) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000002c00075000000000ffdbdf25037c00000800018004000000100002800c0001"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(seed)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="e7e78f568646c8cf4e59c9226284a2c00c", 0x11}], 0x1}}], 0x1, 0x8001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xb, 0x0, 0xfffffffe}, 0x14}}, 0x10000000) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r6 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f0000000040)) socket$inet6(0xa, 0x4, 0x4) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x9, 0x4}, {0x21, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000001a80)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@none}}}, 0xa) ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 6.003563352s ago: executing program 3 (id=834): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x42f7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x4, 0x4}) 5.978904767s ago: executing program 32 (id=834): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x42f7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x4, 0x4}) 2.906079886s ago: executing program 4 (id=884): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000500)={[{@xattr}]}) 2.905120238s ago: executing program 4 (id=886): r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="de", 0x1}], 0x1}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffe4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="120000001400000004"], 0x50) r9 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) ppoll(&(0x7f00000000c0)=[{r0}, {0xffffffffffffffff, 0xb0}], 0x2, 0x0, 0x0, 0x0) 2.838709696s ago: executing program 0 (id=889): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x1a}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delchain={0x44, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r6, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xb, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 2.723135098s ago: executing program 0 (id=892): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0xd58}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 2.722135053s ago: executing program 0 (id=894): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0xff, 0x55, &(0x7f0000000080)="2b736ee9c158241da9310f062fa99ad746a2124c6ee5089e532db641da089b50fa7df73f6b0bcb612965312f3d72ecd6e6d17e8cbda3c745787c23d1d7b9d44006348f2faa6a15055ad386fcc6a449f3b3f5363d7d") 1.697919459s ago: executing program 2 (id=906): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, '\x00', "6ca0ef44bcdaf33d9060001a65aae2621600f79c1f901d896f9157b1a7166ac1", "abfdff7d", "708958f96700"}, 0x38) syz_genetlink_get_family_id$fou(&(0x7f00000011c0), r0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='romfs\x00', 0x321004d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, '\x00', "6ca0ef44bcdaf33d9060001a65aae2621600f79c1f901d896f9157b1a7166ac1", "abfdff7d", "708958f96700"}, 0x38) (async) syz_genetlink_get_family_id$fou(&(0x7f00000011c0), r0) (async) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='romfs\x00', 0x321004d, 0x0) (async) 1.602596794s ago: executing program 2 (id=907): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = userfaultfd(0x80001) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000180)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\x81\xea\x7f\x8cZ7a_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00$,\xfe\xd5\xe4\xae\x9a\xeb\xd2\xf1\x7f\x15\xde\xb5\xd3vR<&\xfa\xf7\x9f\xf2\x17,\x05=\xed\t\xe1\xeb\x10\a;\xed:\x84|\xf83t/\x1a#\xae\xef^\xe6\xd6/\xd3\x02\xe2;\x8e\x02,\xc5G 4', 0x0) ftruncate(r2, 0x1000006) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000580)=0x1) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000112000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x2}) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x2000, 0x2, 0xeb}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2200}], 0x0, 0xa}, 0x20) 1.431827081s ago: executing program 0 (id=908): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket(0xa, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0xc4, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xb0, 0x1, [@m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a83, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x47, 0x5, 0x2, 0xb}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xc4}}, 0x0) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0x9, 0x8, 0x9e5c, 0x38000, 0x1b, "1039db8d79bea18fa3015ae9ae6901313cf366"}) (async) ptrace(0x10, r0) (async) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000100)) 1.431568047s ago: executing program 0 (id=909): r0 = syz_open_dev$evdev(&(0x7f0000002100), 0x0, 0x2101) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2302, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x9, 0x7, 0x6, 0x7fffffff, 0x7, 0x11, 0xe5, 0x3ff, 0xfffffffffffffc00, 0x80000001, 0x3, 0x8, 0x0, 0x5, 0x9, 0x84], 0xeeef0000, 0x28010}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_clone(0x20020011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x62, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0xff, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x4c}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0xff, 0x6}, [@country_functional={0xc, 0x24, 0x7, 0x5, 0x9, [0x2, 0x1dcb, 0xf]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfe, 0x3, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xa, 0x90, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2a, 0x8, 0x8}}}}}]}}]}}, 0x0) close(0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r5) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="06000000eb9dbae569e2c1a07fcfcc3ebe6ac0606fb1f8e05841f767b80396471e2a374ba6d9c25064c697f36e4795df6c27854d", @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x101, 0xd, 0x9, 0xc828, 0xeb5, r4}) syz_open_procfs(r7, &(0x7f0000000180)='net/route\x00') 672.053586ms ago: executing program 4 (id=916): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400000000000000000000000000000000000000000000000013", [0x800]}}) 553.125843ms ago: executing program 4 (id=917): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x400}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge_slave_1\x00', 0xf5fd}) 552.762995ms ago: executing program 1 (id=918): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x9dc, 0x0, 0x5}]}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xf1d, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x24, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r8, {}, {0xfff2, 0xffff}, {0xffff, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008814}, 0x4010) 548.90285ms ago: executing program 4 (id=919): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8, 0x80000) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="000000000000000024001280110001006272696467655f"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@gettfilter={0x13, 0x2e, 0x201, 0x0, 0x0, {}, [{0x8, 0xf}]}, 0x2c}}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) io_setup(0x1, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x406, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x20, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0xc, 0x0, @opaque="75d0148a"}}}}}, 0x0) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f00000004c0), r6) sendmsg$NET_DM_CMD_START(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r7, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$netlink(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1400000021e9ed0029bd7000fddbdf2504008a802b71e17317bfda3fe7a76e77c46d2d3fadb89d28e58d16ca472ceb8c441c99fa134897ff0fcd61cac4f0add432d46aeef68e17c0f83b14818a5bf45024d040382006f4084a3573c6c61b59"], 0x14}], 0x1}, 0x890) 480.854301ms ago: executing program 0 (id=920): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaff2, 0xa, 0x5, 0xc, 0x1, 0x9, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x8}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffb, 0x4002004c0, 0xffe, 0x0, 0x2a, 0x20000000014, 0xffff, 0x0, 0x0, 0x7f, 0x7], 0xeeee8000, 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="b9", 0x1}], 0x1}}], 0x1, 0xc8040) splice(r7, 0x0, r6, 0x0, 0x7ffff000, 0x6) sendto$inet6(r7, &(0x7f0000000140)="feff411dbda71f6dc3414743aa2a39968106af5c58cba06bba95c666e018387f2082d3948aebee91cb6e2a71287f1d08fb158d6703606beb61b7b34a9362b72706b432ff", 0x44, 0x24004041, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd28, 0x0, {0xa, 0x0, 0x14, 0x40, 0x8, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffd}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 352.310543ms ago: executing program 2 (id=921): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$rds(0x15, 0x5, 0x0) (async) socket$inet_sctp(0x2, 0x800000000000001, 0x84) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="08002dbd7000fbdbdf2509000000080003001eee4e5a8d872953509ebb8f8c029c4368c41969c7e00094ed981edd4c6fe4b68c3cacb8bc84977ad5dcdeb4d8f28f343c2788000000000fc97a7bdb78b599766187378e4fe34cd1902ad72bb3c5bc7bc49708ab0c09845def4f7c60d73947fe6b921f273962c1406f38", @ANYRES32=r3, @ANYBLOB="0c0099008700000076000000080037000200000004000b005800508005000200030000000400050008000700000000002800088004000200040001000400010004000200040002000400010004000100040001000400010009000100aaa6253d2b00000009000100858b6ee1d6000000"], 0x8c}}, 0x4014) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) 351.328173ms ago: executing program 1 (id=922): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000084f3e75c5a4bbaf9c5c123d30776"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0xfff9}, 0x92f5e}, 0x6d) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) io_uring_setup(0x37cc, &(0x7f0000000040)={0x0, 0x2a11, 0x1c080, 0xa, 0x20002f7}) 348.929259ms ago: executing program 2 (id=923): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x4c}}, 0x12) 249.415937ms ago: executing program 2 (id=924): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080006"], 0xac}}, 0x0) r2 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0x7005, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000000)={0x8, 0x21, 0xf, 0x13, 0xb, 0x9, 0x3, 0x139, 0x1}) r3 = socket(0x10, 0x80002, 0x0) sendmsg(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) readv(r2, &(0x7f0000000000), 0x0) 248.821694ms ago: executing program 1 (id=925): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f9640000000000000000000000000000000000000000000000001f", [0x800]}}) 181.54729ms ago: executing program 2 (id=926): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x11a, 0x4, 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r2, 0x10, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f00000003c0)=[0x7, 0x7ff, 0x8000, 0xfffffe00, 0x3411, 0x2], &(0x7f0000000400)=[0x0], 0x6) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000080)={0x1a9b, 0x0, &(0x7f0000000040)=[r2, r2, r2, r2, r2]}, 0x5) prlimit64(r3, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) close(r5) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x240, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x224, 0x1, 0x0, 0x1, [@nested={0x4, 0x6}, @typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x214, 0x126, 0x0, 0x1, [@nested={0x210, 0x80, 0x0, 0x1, [@typed={0x6, 0x14a, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x12b, 0x0, 0x0, @pid=r3}, @typed={0x6, 0x32, 0x0, 0x0, @str='\x80\n'}, @generic="6fd7dac4d0d62e3066e041ea881f754aae9c49e8c60488c43b55259003f525401657f50e38cbc9e25f6d5842e1e8971f9f7fe731e75a2773f6320625aa64fb421218fcd74033153c26ea35b08a74066fe59478e34338548cc7b63ec11c06a35c4ef4e3728741aa10abf993d107e5de72c00d2d932341e2f627abdc25", @generic="1991153ed52a8e4b0896b7e0cb4a9839aa4345a6bd97426f13243b7346c7531952c6ea9769e42cfbe59179cfb12e26214850a1ae9e096905dbbc70d8d49320b3117cdd47df07726e287ef99c4fc0046b2471dcf77742a1fca6e8bc55e7016648aed0bcd79daae3555dcf6cabd9192d342038be24a16bc0fd86a58f2407ba637d5be789c9db6b97d8839dd67b5079a20bc14be885d5d49ac82fb46d0344a26175d187e959914fe32d3c82af93d4952eb76ff1687340f4eafc3bc280335bf62bbad3eade8f357164c713820fd2fc6428c7a034988d2ef1f0549d07d132e1015d0204c2192c6dd2a3ece25e92ea8792eaa91ea6d924c7e24ac7f587702139af", @nested={0x4, 0x14a}, @generic="cc4fab816e4e445d", @nested={0x4, 0x11a}, @nested={0x4, 0xd}, @generic="7cdc1b6013f0da6eba110e8e4b4c6c362b0d2cd4b4e63750d8d78192ea06067940a5a2085e5c683ab90b00e8f5b317af046d657ba436a6acc7d2a9bd9dc0d012716b5bdba2bcd0a657417949bae50ffb5fb1991cb8f650eea441564f4ad4dae3ede01f672b19"]}]}]}, @nested={0x4, 0x1}]}, 0x240}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 181.010586ms ago: executing program 1 (id=927): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$can_bcm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x6, 0x208, 0x80000000, {0x77359400}, {}, {0x0, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x3}, 0x35, 0x2, 0x0, 0x0, "99da6e8ee55ee782a1247d6e3bab28edc0f6c479a44a76e528d4074b5719f60b9388907480772e07d29fdc67e801490a1cabf732fcbe76b682ef87801f91a186"}}, 0x80}}, 0x4000010) sendmmsg$alg(r1, &(0x7f0000000500)=[{0x0, 0x0, 0x0, 0xce, &(0x7f00000006c0)=ANY=[], 0xc8}, {0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="f24d7f9df1a43f1a6941506b810f3f7eb052cf20ba59041aa9b6d7b1a6cdc09fd71f7573f948bb49fb5d9e27eed023eed6254fed237248d05d17c1e8ff86a87236ad204c2b4040121c2f400e78ed9a5aafda00e1661f1db3a6ed14812109fd6bcbcae7", 0x63}, {&(0x7f0000000080)="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", 0xfc}, {&(0x7f0000000180)="e41d3b323965b6a7ba3e4f76af163b6159fc489b3f09f2471943ba73a8bc61b4910fda9e554000474919bdd4a532b30d83fd20f8aeec5af9725481fe9df8a6a40570850d90f4a9f82171d4fad4f802a0775a526b", 0x54}, {&(0x7f0000000200)="1575db09b900686f013299e81d262e2f424d892ebe6ca6f2ca887cda21a5dd8a452ec975b949b9ac3ca04ed6a2f2c40f25a554a2cbe1ee91a20955681db41ae0d10bec2e27887853", 0x48}, {&(0x7f0000000280)="3c039c520488163ee23923b66d85d1b7a6acf1a737ca6e0c32f99a8ad933d25e9a11909f84e75087eb6efc6874c7ad4e7dd57f0e77f32c4debe14f681e9d6a4f3795a083a36fa6c614b447cf4f12729cde1f7ef2f4083a8f60671897e51afdfd555c846e083369b1eb8961cfa9fb58fec7f109eb0b83675a156fec220f831ca2f8a63a66f8c36a0819dfc296dfd4fd626cf2603d4086efbc4f6bf5f25df34e96195038bc6548", 0xa6}], 0x5, &(0x7f0000000480)=[@op, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x24008880}], 0x2, 0x40800) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x7], 0x1}}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x2, 0x0, 0xa, 0x6}}}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x1644}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8000, 0x3, 0x7, 0x0, {0x2, 0x5, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x400, 0x8, 0x3}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfff}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4040) 180.686871ms ago: executing program 4 (id=928): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$evdev(&(0x7f0000002000), 0x0, 0x20441) syz_usb_disconnect(r0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000002040)=ANY=[], 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="2ff8a81b133d", 0x0, 0x0, 0x10060, 0x0, 0x0}) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)=0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000001080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="8e", 0x1}], 0x1, 0x0, 0x0, 0x810}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/235, 0xeb}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x2280, 0x40a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e23}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 106.395313ms ago: executing program 1 (id=929): r0 = socket(0x0, 0x3, 0x10000) r1 = socket(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000140)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="6e725f696e6f6465733d312c0074529904c0c3db344db7cdb7b91259d993f79c023b039fcb1e2c504ff60a694263482ee84e79d40557a2ecf9af0917a867088c28efc98bcda2c9d327910878fc7b51dc51095fd0ac0aa9ad6fd9bebe3c25aa7142ed443c3bfcdd6aa0a50236a59eeeb162d7a48391cbfd2693520ef871abc921fb61dcac779a05ca4879a58a99e1fa092246d39460b00361c51c5598045a7265a6f0007a088914c88ecb186201dc32f3d99fd49d57b54958bfa7d17aaf6aec5c8798d4a73cde4a269ba91b9f0f7346b36799c512817e18e41b838012276febce2423c1394b2a9994c500dbcb420956e83e92f9099c32114129133712cb84bef8d1c1828bea5b82643f"]) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x410201, 0x20) getsockopt(r1, 0x200000000114, 0x8, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) close(0x3) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r2, 0x89f3, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x20, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}}, 0x0) socketpair(0x4, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x2, 0x5, 0x84) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e07000000000000002c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000440)={r7, 0x50, "0ddae393370669b04a6efc6059a21af672e0421fc2dc201b5fe22f07eb1d2013b1fe86f4f5ba38444bf6f429a59d6a613a2280206a89c334f004c46315d0f9916d785d00495108ae0705528b55940a6a"}, &(0x7f00000004c0)=0x58) sendmsg$inet(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='A', 0x1}], 0x1}, 0x24008051) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x94) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r9 = open(&(0x7f0000000100)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x10, &(0x7f0000000000)=r12, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) 0s ago: executing program 1 (id=930): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x40}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000001228110081e949b93897bc3b00001f0000007d01ff020000000000000000000000000001"], 0xfdef) close_range(r1, r2, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) ioctl$BLKPG(r3, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x98, &(0x7f00000000c0)={0x400, 0x1000, 0xd}}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r5 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0xc00) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000380)={0x2, 0x1, 0x7, {0x80000004, 0x7, 0x2, 0x8000001}}) read$FUSE(r4, &(0x7f0000001b00)={0x2020}, 0x173f) write$P9_RSETATTR(r4, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000010000104000c0000fddbdf25000000f4b1793f4d7019e2145a1542e84a09e7d6d1eeb1a223261fafd5278a0f9bf694340e97f4ae1d6aa03294f5cc61927e2803b2786169c10a7c6118b39fa0a14c458f4dc4ade1f61d3b4b1766357a6ecb78298cfc73bc426f5058c4c3dfd1cabd034feef90012bfc4b99d05b0803a938beb25032444bb57fa2c48500cd20208b9f15fdfe6286612712520a7900d6ff55ee2eb89d5537c923308cb76124fc8d8541308c2d0a2336c8f83e2", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c00028005000e0000000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) 0s ago: executing program 1 (id=931): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000500)={0x50, r7, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, '|q'}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x109, 0x0) kernel console output (not intermixed with test programs): : hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.835558][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 71.879254][ T1169] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.947348][ T6723] : entered promiscuous mode [ 71.961698][ T1169] netdevsim netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.985112][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 72.075893][ T1169] bridge_slave_1: left allmulticast mode [ 72.078121][ T1169] bridge_slave_1: left promiscuous mode [ 72.080763][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.090213][ T1169] bridge_slave_0: left allmulticast mode [ 72.093153][ T1169] bridge_slave_0: left promiscuous mode [ 72.094962][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.228868][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.233877][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.237800][ T1169] bond0 (unregistering): Released all slaves [ 72.244780][ T1169] bond1 (unregistering): Released all slaves [ 72.254613][ T5441] 8021q: adding VLAN 0 to HW filter on device eth2 [ 72.464474][ T5441] 8021q: adding VLAN 0 to HW filter on device eth3 [ 72.526791][ T6720] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.529719][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.532890][ T6720] bridge_slave_0: entered allmulticast mode [ 72.536464][ T6720] bridge_slave_0: entered promiscuous mode [ 72.541036][ T6720] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.543856][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.546977][ T6720] bridge_slave_1: entered allmulticast mode [ 72.550724][ T6720] bridge_slave_1: entered promiscuous mode [ 72.586609][ T5733] Bluetooth: hci0: command 0x080f tx timeout [ 72.587022][ T6720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.601390][ T6720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.686560][ T6765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.689646][ T6765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.704653][ T1169] hsr_slave_0: left promiscuous mode [ 72.708318][ T1169] hsr_slave_1: left promiscuous mode [ 72.710510][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.715123][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.718372][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.720767][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.733863][ T1169] veth1_macvtap: left promiscuous mode [ 72.738640][ T1169] veth0_macvtap: left promiscuous mode [ 72.740493][ T1169] veth1_vlan: left promiscuous mode [ 72.752751][ T1169] veth0_vlan: left promiscuous mode [ 72.755198][ T5733] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.755561][ T5740] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.778021][ T6772] SELinux: ebitmap: empty map [ 72.782527][ T6772] SELinux: failed to load policy [ 72.951416][ T6800] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 72.954310][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 72.955573][ T6800] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 72.964325][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 73.078123][ T6720] team0: Port device team_slave_0 added [ 73.087046][ T5441] 8021q: adding VLAN 0 to HW filter on device eth4 [ 73.111548][ T6803] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 73.119056][ T6803] bond1 (unregistering): Released all slaves [ 73.138069][ T6720] team0: Port device team_slave_1 added [ 73.172293][ T6804] vlan2: entered allmulticast mode [ 73.174103][ T6804] bond0: entered allmulticast mode [ 73.175812][ T6804] bond_slave_0: entered allmulticast mode [ 73.177691][ T6804] bond_slave_1: entered allmulticast mode [ 73.196693][ T6720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.207771][ T6720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.216075][ T6720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.221121][ T6720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.223533][ T6720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.232171][ T6720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.254433][ T6720] hsr_slave_0: entered promiscuous mode [ 73.257305][ T6720] hsr_slave_1: entered promiscuous mode [ 73.257386][ T6811] netlink: 'syz.1.255': attribute type 64 has an invalid length. [ 73.259541][ T6720] debugfs: 'hsr0' already exists in 'hsr' [ 73.264481][ T6720] Cannot create hsr debugfs directory [ 73.817543][ T6869] FAULT_INJECTION: forcing a failure. [ 73.817543][ T6869] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 73.821914][ T6869] CPU: 0 UID: 0 PID: 6869 Comm: syz.0.263 Not tainted syzkaller #0 PREEMPT(full) [ 73.821928][ T6869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.821934][ T6869] Call Trace: [ 73.821939][ T6869] [ 73.821943][ T6869] dump_stack_lvl+0x100/0x190 [ 73.821970][ T6869] should_fail_ex.cold+0x5/0xa [ 73.821985][ T6869] _copy_from_user+0x2e/0xd0 [ 73.822008][ T6869] copy_msghdr_from_user+0x9f/0x4f0 [ 73.822028][ T6869] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 73.822048][ T6869] ___sys_sendmsg+0x106/0x1e0 [ 73.822061][ T6869] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.822088][ T6869] __sys_sendmsg+0x170/0x220 [ 73.822104][ T6869] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.822125][ T6869] ? rcu_is_watching+0x12/0xc0 [ 73.822143][ T6869] do_syscall_64+0x10b/0xf80 [ 73.822164][ T6869] ? clear_bhb_loop+0x40/0x90 [ 73.822176][ T6869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.822187][ T6869] RIP: 0033:0x7f9808d9cdd9 [ 73.822196][ T6869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.822205][ T6869] RSP: 002b:00007f9809c9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.822216][ T6869] RAX: ffffffffffffffda RBX: 00007f9809015fa0 RCX: 00007f9808d9cdd9 [ 73.822222][ T6869] RDX: 00000000000000d0 RSI: 00002000000001c0 RDI: 0000000000000003 [ 73.822228][ T6869] RBP: 00007f9809c9b090 R08: 0000000000000000 R09: 0000000000000000 [ 73.822234][ T6869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.822239][ T6869] R13: 00007f9809016038 R14: 00007f9809015fa0 R15: 00007ffec7b03d68 [ 73.822252][ T6869] [ 73.899631][ T6873] __nla_validate_parse: 32 callbacks suppressed [ 73.899642][ T6873] netlink: 48 bytes leftover after parsing attributes in process `syz.0.264'. [ 74.036211][ T5740] Bluetooth: hci1: command tx timeout [ 74.198965][ T41] kauditd_printk_skb: 46 callbacks suppressed [ 74.198980][ T41] audit: type=1400 audit(1777638320.830:390): avc: denied { map } for pid=6874 comm="syz.0.265" path="socket:[12236]" dev="sockfs" ino=12236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 75.237263][ T6889] syzkaller0: entered promiscuous mode [ 75.239779][ T6889] syzkaller0: entered allmulticast mode [ 75.353210][ T41] audit: type=1400 audit(1777638321.906:391): avc: denied { bind } for pid=6892 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 76.258222][ T5740] Bluetooth: hci1: command tx timeout [ 76.365057][ T1169] net_ratelimit: 25 callbacks suppressed [ 76.365077][ T1169] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 76.482465][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 76.534691][ T6816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.556569][ T6720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.568475][ T6720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.572124][ T6720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.579137][ T6720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.583516][ T6720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.591236][ T6720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.595092][ T6720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.600451][ T6720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.658494][ T6908] netlink: 156 bytes leftover after parsing attributes in process `syz.3.273'. [ 76.662585][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 76.668318][ T6908] SELinux: policydb string length 67174656 does not match expected length 8 [ 76.674092][ T6908] SELinux: failed to load policy [ 76.675507][ T1169] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 76.681976][ C2] vcan0: j1939_tp_rxtimer: 0xffff888037025000: rx timeout, send abort [ 76.684586][ T6908] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 76.686982][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888037025000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 76.688542][ T41] audit: type=1400 audit(1777638323.151:392): avc: denied { read } for pid=5121 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 76.688568][ T41] audit: type=1400 audit(1777638323.151:393): avc: denied { search } for pid=5121 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.688587][ T41] audit: type=1400 audit(1777638323.151:394): avc: denied { search } for pid=5121 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.688605][ T41] audit: type=1400 audit(1777638323.151:395): avc: denied { add_name } for pid=5121 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.688627][ T41] audit: type=1400 audit(1777638323.151:396): avc: denied { create } for pid=5121 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.688646][ T41] audit: type=1400 audit(1777638323.151:397): avc: denied { append open } for pid=5121 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.688665][ T41] audit: type=1400 audit(1777638323.151:398): avc: denied { getattr } for pid=5121 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.699682][ T6720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.767559][ T6720] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.774189][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.776484][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.789850][ T115] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.792875][ T115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.877702][ T1169] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 76.927963][ T6926] syzkaller0: entered promiscuous mode [ 76.930216][ T6926] syzkaller0: entered allmulticast mode [ 76.985420][ T1478] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 76.995260][ T115] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 77.064286][ T6720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.100934][ T6720] veth0_vlan: entered promiscuous mode [ 77.109167][ T6720] veth1_vlan: entered promiscuous mode [ 77.113159][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 77.123680][ T1478] usb 8-1: device descriptor read/64, error -71 [ 77.138728][ T6720] veth0_macvtap: entered promiscuous mode [ 77.147525][ T6720] veth1_macvtap: entered promiscuous mode [ 77.161683][ T6720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.175537][ T6720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.186928][ T115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.191005][ T115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.196058][ T115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.201399][ T115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.258506][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.261059][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.280124][ T115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.282675][ T115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.283798][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 77.298599][ T41] audit: type=1400 audit(1777638323.722:399): avc: denied { mounton } for pid=6720 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 77.382671][ T5733] Bluetooth: hci0: command 0x080f tx timeout [ 77.384037][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.389876][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.390509][ T1478] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 77.401519][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 77.530585][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 77.534113][ T1478] usb 8-1: device descriptor read/64, error -71 [ 77.646990][ T115] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 77.647313][ T1478] usb usb8-port1: attempt power cycle [ 77.915775][ T6949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=6949 comm=syz.0.281 [ 77.921345][ T6949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6949 comm=syz.0.281 [ 77.926885][ T6949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=6949 comm=syz.0.281 [ 77.932457][ T6949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6949 comm=syz.0.281 [ 77.938054][ T6949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6949 comm=syz.0.281 [ 77.943520][ T6949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=6949 comm=syz.0.281 [ 77.947876][ T6949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=6949 comm=syz.0.281 [ 77.952839][ T6949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=6949 comm=syz.0.281 [ 77.956967][ T6949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6949 comm=syz.0.281 [ 77.961151][ T6949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=6949 comm=syz.0.281 [ 78.020794][ T1478] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 78.049699][ T1478] usb 8-1: device descriptor read/8, error -71 [ 78.321018][ T1478] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 78.354189][ T1478] usb 8-1: device descriptor read/8, error -71 [ 78.480448][ T1478] usb usb8-port1: unable to enumerate USB device [ 78.487280][ T6953] netlink: 'syz.2.283': attribute type 32 has an invalid length. [ 78.490933][ T5733] Bluetooth: hci1: command tx timeout [ 78.861940][ T6966] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 79.021099][ T6948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.281'. [ 79.103459][ T6975] netlink: 44 bytes leftover after parsing attributes in process `syz.0.287'. [ 79.106271][ T6975] netlink: 'syz.0.287': attribute type 6 has an invalid length. [ 79.110506][ T6975] netlink: 'syz.0.287': attribute type 5 has an invalid length. [ 79.113017][ T6975] netlink: 'syz.0.287': attribute type 4 has an invalid length. [ 79.215534][ T6985] Invalid ELF header type: 0 != 1 [ 79.219319][ T6985] netlink: 'syz.1.292': attribute type 1 has an invalid length. [ 79.258028][ T6985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.263773][ T6985] bond1: (slave bond2): making interface the new active one [ 79.267868][ T6985] bond1: (slave bond2): Enslaving as an active interface with an up link [ 79.274088][ T6985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.292'. [ 79.278090][ T6985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.356786][ T6989] macsec1: entered promiscuous mode [ 79.358530][ T6989] macsec1: entered allmulticast mode [ 79.591394][ T5733] Bluetooth: hci0: command 0x080f tx timeout [ 79.816007][ T5877] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 79.975663][ T5877] usb 6-1: Using ep0 maxpacket: 8 [ 79.994048][ T5877] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.004962][ T5877] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.005646][ T7010] tmpfs: Bad value for 'mpol' [ 80.015785][ T5877] usb 6-1: config 0 interface 0 has no altsetting 0 [ 80.020557][ T5877] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 80.030456][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.040851][ T5877] usb 6-1: config 0 descriptor?? [ 80.174297][ T7017] ata1.00: invalid multi_count 128 ignored [ 80.216218][ T41] kauditd_printk_skb: 14 callbacks suppressed [ 80.216232][ T41] audit: type=1400 audit(1777638326.456:414): avc: denied { setopt } for pid=7013 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 80.235477][ T41] audit: type=1400 audit(1777638326.475:415): avc: denied { read write } for pid=7024 comm="syz.2.305" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 80.243774][ T41] audit: type=1400 audit(1777638326.475:416): avc: denied { open } for pid=7024 comm="syz.2.305" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 80.340540][ T7035] 9pnet_virtio: no channels available for device syz [ 80.344921][ T7035] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 80.347854][ T7035] overlayfs: missing 'lowerdir' [ 80.355081][ T7033] fuse: Unknown parameter 'permit_directio' [ 80.355364][ T41] audit: type=1400 audit(1777638326.587:417): avc: denied { mounton } for pid=7032 comm="syz.0.307" path="/93/file0" dev="9p" ino=84410441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.411832][ T41] audit: type=1400 audit(1777638326.634:418): avc: denied { write } for pid=7032 comm="syz.0.307" name="/" dev="9p" ino=84410441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.419450][ T41] audit: type=1400 audit(1777638326.634:419): avc: denied { setattr } for pid=7032 comm="syz.0.307" name="/" dev="9p" ino=84410441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.692613][ T6999] random: crng reseeded on system resumption [ 80.712858][ T5740] Bluetooth: hci1: command tx timeout [ 80.779662][ T7050] tmpfs: Cannot enable quota on remount [ 80.927865][ T7054] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 80.992231][ T7056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.313'. [ 81.033781][ T7058] netlink: 'syz.3.314': attribute type 10 has an invalid length. [ 81.056099][ T41] audit: type=1400 audit(1777638327.233:420): avc: denied { execute_no_trans } for pid=7055 comm="syz.0.313" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=15697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 81.080786][ T41] audit: type=1400 audit(1777638327.270:421): avc: denied { append } for pid=7060 comm="syz.3.315" name="frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 81.460652][ T29] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 81.464131][ T41] audit: type=1400 audit(1777638327.617:422): avc: denied { ioctl } for pid=7082 comm="syz.2.323" path="socket:[17641]" dev="sockfs" ino=17641 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.633182][ T29] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.638193][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 81.643609][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 81.647734][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.654365][ T29] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.658231][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.663682][ T29] usb 8-1: config 0 descriptor?? [ 81.717204][ T40] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.759766][ T1169] net_ratelimit: 24 callbacks suppressed [ 81.759781][ T1169] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 81.855829][ T40] usb 5-1: device descriptor read/64, error -71 [ 81.888317][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 82.005694][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 82.122950][ T40] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.133060][ T7103] sg_read: process 68 (syz.2.329) changed security contexts after opening file descriptor, this is not allowed. [ 82.137369][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 82.145262][ T29] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 82.196851][ T7106] 8021q: VLANs not supported on gre0 [ 82.251355][ T1169] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 82.272634][ T40] usb 5-1: device descriptor read/64, error -71 [ 82.312271][ T7114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.316861][ T41] audit: type=1400 audit(1777638328.431:423): avc: denied { create } for pid=7113 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 82.368844][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 82.401322][ T40] usb usb5-port1: attempt power cycle [ 82.486102][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 82.603655][ T1169] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 82.722143][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 82.761537][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 82.765490][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'. [ 82.769213][ T7115] netlink: 'syz.3.318': attribute type 18 has an invalid length. [ 82.772476][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 82.776935][ T40] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 82.798133][ T40] usb 5-1: device descriptor read/8, error -71 [ 82.839968][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 82.973791][ T39] usb 8-1: USB disconnect, device number 8 [ 83.062933][ T40] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 83.067517][ T7126] Bluetooth: MGMT ver 1.23 [ 83.086428][ T40] usb 5-1: device descriptor read/8, error -71 [ 83.204717][ T40] usb usb5-port1: unable to enumerate USB device [ 83.555487][ T7128] pim6reg1: entered promiscuous mode [ 83.557395][ T7128] pim6reg1: entered allmulticast mode [ 83.563687][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 83.579610][ T7128] hsr_slave_1 (unregistering): left promiscuous mode [ 83.877850][ T7134] binder: 7133:7134 ioctl c0306201 200000000640 returned -22 [ 83.974306][ T7142] BIDI support in bsg has been removed. [ 84.042693][ T7149] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 84.959599][ T7182] netlink: 'syz.0.355': attribute type 3 has an invalid length. [ 85.008505][ T7193] capability: warning: `syz.0.359' uses 32-bit capabilities (legacy support in use) [ 85.059545][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 85.064030][ T7200] team_slave_1: Caught tx_queue_len zero misconfig [ 85.317024][ T40] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 85.435354][ T7226] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 85.478078][ T40] usb 5-1: not running at top speed; connect to a high speed hub [ 85.481678][ T40] usb 5-1: config 6 has an invalid interface number: 188 but max is 1 [ 85.484512][ T40] usb 5-1: config 6 has an invalid interface number: 166 but max is 1 [ 85.487130][ T40] usb 5-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 85.490161][ T40] usb 5-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 85.495097][ T40] usb 5-1: config 6 has no interface number 0 [ 85.497067][ T40] usb 5-1: config 6 has no interface number 1 [ 85.499643][ T40] usb 5-1: config 6 interface 188 altsetting 4 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 85.503157][ T40] usb 5-1: config 6 interface 188 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 85.506617][ T40] usb 5-1: config 6 interface 166 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 85.510089][ T40] usb 5-1: config 6 interface 166 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 85.513484][ T40] usb 5-1: config 6 interface 166 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 85.516901][ T40] usb 5-1: config 6 interface 166 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 85.520550][ T40] usb 5-1: config 6 interface 166 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 85.523935][ T40] usb 5-1: config 6 interface 166 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 85.527186][ T40] usb 5-1: config 6 interface 166 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 85.530474][ T40] usb 5-1: config 6 interface 166 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 85.534213][ T40] usb 5-1: config 6 interface 166 altsetting 0 has a duplicate endpoint with address 0x83, skipping [ 85.537599][ T40] usb 5-1: config 6 interface 166 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 85.541838][ T40] usb 5-1: config 6 interface 188 has no altsetting 0 [ 85.545675][ T40] usb 5-1: New USB device found, idVendor=2639, idProduct=0012, bcdDevice=22.17 [ 85.548609][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.551082][ T40] usb 5-1: Product: ⠛ [ 85.552477][ T40] usb 5-1: Manufacturer: 鴡㥟哨㦣ꬡ룊挭ㅲ௱텚鞽噄㠶竔꿩淣趁袝麚닼ꨐ埗突ﻛ [ 85.555870][ T40] usb 5-1: SerialNumber: syz [ 85.831972][ T5877] usbhid 6-1:0.0: can't add hid device: -32 [ 85.833942][ T5877] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 85.976349][ T40] usb 5-1: USB disconnect, device number 7 [ 85.991719][ T29] usb 6-1: USB disconnect, device number 4 [ 86.091151][ T7233] netlink: 92 bytes leftover after parsing attributes in process `syz.3.368'. [ 86.160050][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 86.164338][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 86.168233][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 86.176354][ T41] kauditd_printk_skb: 13 callbacks suppressed [ 86.176368][ T41] audit: type=1400 audit(1777638332.035:437): avc: denied { map } for pid=7240 comm="syz.3.371" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 86.187375][ T41] audit: type=1400 audit(1777638332.054:438): avc: denied { execute } for pid=7240 comm="syz.3.371" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 86.366403][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 86.382331][ T7255] ip6erspan0: entered promiscuous mode [ 86.510048][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 86.561184][ T7263] netlink: 36 bytes leftover after parsing attributes in process `syz.3.380'. [ 86.566919][ T7263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.380'. [ 86.681183][ T7285] syzkaller1: entered promiscuous mode [ 86.683580][ T7285] syzkaller1: entered allmulticast mode [ 86.699596][ T41] audit: type=1400 audit(1777638332.522:439): avc: denied { mount } for pid=7284 comm="syz.3.389" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 86.708501][ T7287] netlink: 196 bytes leftover after parsing attributes in process `syz.0.390'. [ 86.755761][ T41] audit: type=1400 audit(1777638332.578:440): avc: denied { setopt } for pid=7292 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.764948][ T5740] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 86.811307][ T7297] lo: entered promiscuous mode [ 86.844209][ T7299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7299 comm=syz.2.394 [ 86.848379][ T7299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7299 comm=syz.2.394 [ 86.858077][ T41] audit: type=1400 audit(1777638332.672:441): avc: denied { unmount } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 86.896075][ T41] audit: type=1400 audit(1777638332.709:442): avc: denied { read } for pid=7305 comm="syz.3.396" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 86.919072][ T41] audit: type=1400 audit(1777638332.709:443): avc: denied { open } for pid=7305 comm="syz.3.396" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 86.929215][ T41] audit: type=1400 audit(1777638332.728:444): avc: denied { ioctl } for pid=7305 comm="syz.3.396" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 86.935042][ T7310] netlink: 'syz.2.397': attribute type 30 has an invalid length. [ 86.971134][ T41] audit: type=1400 audit(1777638332.774:445): avc: denied { getopt } for pid=7301 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 87.078951][ T41] audit: type=1400 audit(1777638332.877:446): avc: denied { create } for pid=7323 comm="syz.2.401" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 87.079107][ T7324] (syz.2.401,7324,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 87.112453][ T47] net_ratelimit: 88 callbacks suppressed [ 87.112488][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 87.229194][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 87.257336][ T7335] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8 sclass=netlink_xfrm_socket pid=7335 comm=syz.1.405 [ 87.348540][ T1169] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 87.464475][ T115] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 87.474925][ T39] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 87.483575][ T7348] netlink: 'syz.0.408': attribute type 10 has an invalid length. [ 87.582575][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 87.635792][ T39] usb 7-1: Using ep0 maxpacket: 16 [ 87.648672][ T39] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.653397][ T39] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.657774][ T39] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.660725][ T39] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 87.664625][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.677151][ T39] usb 7-1: config 0 descriptor?? [ 87.699392][ T115] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 87.818272][ T115] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 87.918226][ T39] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 87.930205][ T39] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 87.932609][ T39] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 87.935243][ T39] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 87.935550][ T1169] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 87.937612][ T39] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 87.939029][ T39] nzxt-smart2 0003:1E71:2009.0003: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 88.055561][ T1169] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 88.108255][ T7404] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1539 sclass=netlink_audit_socket pid=7404 comm=syz.3.422 [ 88.169403][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 88.316327][ T1041] cfg80211: failed to load regulatory.db [ 88.341812][ T1345] usb 7-1: USB disconnect, device number 2 [ 89.502036][ T7466] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 89.896813][ T7481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7481 comm=syz.1.443 [ 89.902376][ T7481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=7481 comm=syz.1.443 [ 89.934237][ T1345] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 90.098181][ T7500] vlan2: entered allmulticast mode [ 90.100010][ T7500] bond0: entered allmulticast mode [ 90.101693][ T7500] bond_slave_0: entered allmulticast mode [ 90.104599][ T7500] bond_slave_1: entered allmulticast mode [ 90.110874][ T1345] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 90.116478][ T1345] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.121723][ T1345] usb 7-1: Product: syz [ 90.123279][ T1345] usb 7-1: Manufacturer: syz [ 90.125015][ T1345] usb 7-1: SerialNumber: syz [ 90.135619][ T1345] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 90.181149][ T5877] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 90.198929][ T7506] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 90.323690][ T7514] netlink: 'syz.3.455': attribute type 1 has an invalid length. [ 90.444682][ T5740] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 90.446455][ T5733] Bluetooth: hci4: command 0x1003 tx timeout [ 90.569836][ T7531] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 90.630354][ T1041] usb 7-1: USB disconnect, device number 3 [ 90.721729][ T7539] __nla_validate_parse: 10 callbacks suppressed [ 90.721747][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 91.299368][ T5877] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 91.304824][ T5877] ath9k_htc: Failed to initialize the device [ 91.314437][ T1041] usb 7-1: ath9k_htc: USB layer deinitialized [ 91.403763][ T7560] loop6: detected capacity change from 0 to 8 [ 91.458808][ T7562] 9pnet_virtio: no channels available for device ./file0 [ 91.524815][ T7560] Dev loop6: unable to read RDB block 8 [ 91.527406][ T7560] loop6: unable to read partition table [ 91.529859][ T7560] loop6: partition table beyond EOD, truncated [ 91.533283][ T7560] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 91.575560][ T41] kauditd_printk_skb: 28 callbacks suppressed [ 91.575573][ T41] audit: type=1400 audit(1777638337.090:475): avc: denied { connect } for pid=7564 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.641750][ T41] audit: type=1400 audit(1777638337.146:476): avc: denied { accept } for pid=7564 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.749837][ T7577] netlink: 36 bytes leftover after parsing attributes in process `syz.3.474'. [ 91.756386][ T7576] netlink: 260 bytes leftover after parsing attributes in process `syz.2.473'. [ 91.796545][ T41] audit: type=1400 audit(1777638337.296:477): avc: denied { getopt } for pid=7581 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 92.057745][ T5877] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 92.068522][ T1041] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 92.213029][ T7590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.478'. [ 92.219115][ T5877] usb 6-1: Using ep0 maxpacket: 32 [ 92.225088][ T5877] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 92.228638][ T5877] usb 6-1: config 0 has no interface number 0 [ 92.233017][ T5877] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 92.236982][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.241309][ T5877] usb 6-1: Product: syz [ 92.243265][ T5877] usb 6-1: Manufacturer: syz [ 92.243437][ T1041] usb 7-1: not running at top speed; connect to a high speed hub [ 92.245439][ T5877] usb 6-1: SerialNumber: syz [ 92.256397][ T5877] usb 6-1: config 0 descriptor?? [ 92.259168][ T1041] usb 7-1: config 3 has an invalid interface number: 180 but max is 1 [ 92.264664][ T5877] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 92.269132][ T1041] usb 7-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 92.270164][ T5877] usb 6-1: selecting invalid altsetting 1 [ 92.274110][ T1041] usb 7-1: config 3 has an invalid interface number: 197 but max is 1 [ 92.274135][ T1041] usb 7-1: config 3 has an invalid descriptor of length 229, skipping remainder of the config [ 92.274154][ T1041] usb 7-1: config 3 has no interface number 0 [ 92.274169][ T1041] usb 7-1: config 3 has no interface number 1 [ 92.277107][ T5877] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 92.285292][ T1041] usb 7-1: config 3 interface 180 altsetting 8 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 92.298055][ T5877] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 92.298946][ T1041] usb 7-1: config 3 interface 180 altsetting 8 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 92.304459][ T5877] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 92.309409][ T1041] usb 7-1: config 3 interface 180 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 92.312358][ T5877] usb 6-1: media controller created [ 92.317750][ T1041] usb 7-1: config 3 interface 197 altsetting 10 has a duplicate endpoint with address 0x4, skipping [ 92.325347][ T1041] usb 7-1: config 3 interface 197 altsetting 10 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 92.330822][ T41] audit: type=1400 audit(1777638337.792:478): avc: denied { accept } for pid=7589 comm="syz.0.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 92.331894][ T7590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.478'. [ 92.336281][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.340491][ T1041] usb 7-1: config 3 interface 197 altsetting 10 has a duplicate endpoint with address 0x4, skipping [ 92.340520][ T1041] usb 7-1: config 3 interface 197 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 92.360051][ T1041] usb 7-1: config 3 interface 197 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 92.365258][ T1041] usb 7-1: config 3 interface 197 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 92.371676][ T1041] usb 7-1: config 3 interface 197 altsetting 10 has a duplicate endpoint with address 0x4, skipping [ 92.376904][ T1041] usb 7-1: config 3 interface 197 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 92.382934][ T1041] usb 7-1: config 3 interface 197 altsetting 10 has a duplicate endpoint with address 0x8B, skipping [ 92.389145][ T1041] usb 7-1: config 3 interface 197 altsetting 10 has an endpoint descriptor with address 0x4B, changing to 0xB [ 92.392573][ T5740] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 92.394295][ T7590] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 92.394803][ T1041] usb 7-1: config 3 interface 197 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 92.394827][ T1041] usb 7-1: config 3 interface 197 altsetting 10 has 14 endpoint descriptors, different from the interface descriptor's value: 15 [ 92.413512][ T1041] usb 7-1: config 3 interface 180 has no altsetting 0 [ 92.417228][ T1041] usb 7-1: config 3 interface 197 has no altsetting 0 [ 92.423300][ T1041] usb 7-1: New USB device found, idVendor=050d, idProduct=935b, bcdDevice=2e.90 [ 92.427648][ T1041] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.431483][ T1041] usb 7-1: Product: 榌儱覷Х或升ᨢ꜀忑ᠡ旞ﳝⷳ쒇肤螸ぉ뭝兜⒉혻䴀ዖቔꓳ龇枒땬僇쪻忪㠅휣뮩캌䙔קּ꓅᭠䵢䓥枓ᥓᬼ᎝執ꘙ⊔ꧨ [ 92.439865][ T1041] usb 7-1: Manufacturer: ఉ [ 92.442099][ T1041] usb 7-1: SerialNumber: syz [ 92.539295][ T12] net_ratelimit: 36 callbacks suppressed [ 92.539317][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 92.546550][ T7593] fuse: Unknown parameter '' [ 92.656542][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 92.686652][ T1041] usb 7-1: USB disconnect, device number 4 [ 92.738437][ T7598] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.480'. [ 92.738652][ T7599] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.480'. [ 92.773638][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 92.891072][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 92.984705][ T41] audit: type=1400 audit(1777638338.410:479): avc: denied { load_policy } for pid=7603 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 92.989818][ T7604] SELinux: ebitmap: high bit 1536 is not equal to the expected value 1152 [ 93.006021][ T7604] SELinux: failed to load policy [ 93.008621][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 93.065488][ T41] audit: type=1400 audit(1777638338.485:480): avc: denied { ioctl } for pid=7605 comm="syz.3.483" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 ioctlcmd=0x5532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 93.121045][ T7608] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7608 comm=syz.3.484 [ 93.128185][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 93.136371][ T7609] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=45 sclass=netlink_tcpdiag_socket pid=7609 comm=syz.3.484 [ 93.141977][ T7609] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=7609 comm=syz.3.484 [ 93.148756][ T7609] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=64 sclass=netlink_tcpdiag_socket pid=7609 comm=syz.3.484 [ 93.153855][ T7609] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=31 sclass=netlink_tcpdiag_socket pid=7609 comm=syz.3.484 [ 93.161102][ T7609] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=54 sclass=netlink_tcpdiag_socket pid=7609 comm=syz.3.484 [ 93.243727][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 93.349306][ T7620] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.386351][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 93.505615][ T7620] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.522853][ T5877] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 93.529594][ T5877] zl10353_read_register: readreg error (reg=127, ret==-110) [ 93.532360][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 93.544724][ T7584] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 93.579269][ T5877] usb 6-1: USB disconnect, device number 5 [ 93.635731][ T7620] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.670918][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 93.740676][ T5740] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 93.744545][ T5740] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 93.768605][ T7620] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.871445][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.881261][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.894714][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.917339][ T47] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.966047][ T7667] ip6gretap1: entered promiscuous mode [ 93.968030][ T7667] ip6gretap1: entered allmulticast mode [ 94.049817][ T41] audit: type=1400 audit(1777638339.402:481): avc: denied { bind } for pid=7674 comm="syz.2.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.050970][ T7675] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 94.121238][ T7677] tipc: Failed to remove unknown binding: 66,0,0/0:2004313494/2004313495 [ 94.706416][ T7687] tap0: tun_chr_ioctl cmd 1074025673 [ 94.708376][ T7686] tap0: tun_chr_ioctl cmd 1074025678 [ 94.710567][ T7686] tap0: group set to 0 [ 94.805730][ T41] audit: type=1400 audit(1777638340.113:482): avc: denied { append } for pid=7688 comm="syz.3.505" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.808708][ T7689] ALSA: mixer_oss: invalid OSS volume 'f7вBMbkr[kO\. E' [ 94.819808][ T7689] ALSA: mixer_oss: invalid OSS volume '' [ 94.896588][ T7696] netlink: 'syz.3.507': attribute type 9 has an invalid length. [ 94.899936][ T7696] netlink: 32 bytes leftover after parsing attributes in process `syz.3.507'. [ 94.905460][ T7692] netlink: 'syz.3.507': attribute type 9 has an invalid length. [ 94.908547][ T7692] netlink: 32 bytes leftover after parsing attributes in process `syz.3.507'. [ 94.951483][ T7704] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 95.149144][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 95.230123][ T7725] tmpfs: Bad value for 'mpol' [ 95.236993][ T7725] netlink: 'syz.2.516': attribute type 1 has an invalid length. [ 95.271677][ T7725] bond1: entered promiscuous mode [ 95.274553][ T7725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.290903][ T7725] bond1: (slave bridge1): making interface the new active one [ 95.293811][ T7725] bridge1: entered promiscuous mode [ 95.299907][ T7725] bridge1: left promiscuous mode [ 95.387975][ T7726] bond1: (slave bridge1): making interface the new active one [ 95.391590][ T7726] bridge1: entered promiscuous mode [ 95.396112][ T7726] bridge1: left promiscuous mode [ 95.433471][ T5877] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 95.546468][ T7732] binder: 7731:7732 unknown command 1986356271 [ 95.548487][ T7732] binder: 7731:7732 ioctl c0306201 200000000640 returned -22 [ 95.604364][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 95.609309][ T5877] usb 5-1: config index 0 descriptor too short (expected 8192, got 56) [ 95.612704][ T5877] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.616365][ T5877] usb 5-1: config 0 has no interfaces? [ 95.622716][ T5877] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 95.627134][ T5877] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 95.629868][ T5877] usb 5-1: Manufacturer: syz [ 95.638122][ T5877] usb 5-1: config 0 descriptor?? [ 95.697998][ T7739] overlayfs: failed to resolve './file0': -2 [ 95.734289][ T7746] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 95.738459][ T7744] overlayfs: conflicting options: userxattr,redirect_dir=on [ 95.828358][ T41] audit: type=1400 audit(1777638341.068:483): avc: denied { ioctl } for pid=7751 comm="syz.1.523" path="socket:[17337]" dev="sockfs" ino=17337 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 95.888059][ T5877] usb 5-1: USB disconnect, device number 8 [ 95.921786][ T7758] netlink: 'syz.2.526': attribute type 64 has an invalid length. [ 95.924572][ T7758] netlink: 'syz.2.526': attribute type 4 has an invalid length. [ 95.931018][ T41] audit: type=1400 audit(1777638341.171:484): avc: denied { create } for pid=7759 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 95.939492][ T7756] netlink: 'syz.3.525': attribute type 30 has an invalid length. [ 96.005459][ T7768] ptrace attach of "/syz-executor exec"[5738] was attempted by "/syz-executor exec"[7768] [ 96.037426][ T7771] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 96.156058][ T7771] __nla_validate_parse: 2 callbacks suppressed [ 96.156084][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 96.241597][ T7783] netlink: 'syz.1.534': attribute type 1 has an invalid length. [ 96.244136][ T7783] netlink: 'syz.1.534': attribute type 3 has an invalid length. [ 96.248076][ T7783] netlink: 224 bytes leftover after parsing attributes in process `syz.1.534'. [ 96.252518][ T7783] binder: BINDER_SET_CONTEXT_MGR already set [ 96.256778][ T7783] binder: 7782:7783 ioctl 4018620d 200000004a80 returned -16 [ 96.259900][ T7783] binder: 7782:7783 unknown command 0 [ 96.261908][ T7783] binder: 7782:7783 ioctl c0306201 2000000001c0 returned -22 [ 96.266979][ T1345] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 96.437619][ T1345] usb 7-1: Using ep0 maxpacket: 8 [ 96.443960][ T1345] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 96.450483][ T1345] usb 7-1: config 179 has no interface number 0 [ 96.456757][ T1345] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 96.461744][ T1345] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 96.465955][ T1345] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 96.470986][ T1345] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 96.475668][ T1345] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 96.483666][ T1345] usb 7-1: config 179 interface 65 has no altsetting 0 [ 96.486579][ T1345] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 96.490424][ T1345] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.531997][ T1345] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input7 [ 96.582328][ T7804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=7804 comm=syz.0.541 [ 96.591992][ T7804] syzkaller0: entered promiscuous mode [ 96.593901][ T7804] syzkaller0: entered allmulticast mode [ 96.600021][ T5124] input input7: unable to receive magic message: -110 [ 96.620222][ T5124] input input7: unable to receive magic message: -32 [ 96.627716][ T5124] input input7: unable to receive magic message: -32 [ 96.633669][ T5124] input input7: unable to receive magic message: -32 [ 96.637020][ T5124] input input7: unable to receive magic message: -32 [ 96.641542][ T5124] input input7: unable to receive magic message: -32 [ 96.721219][ T7769] input input7: unable to receive magic message: -32 [ 96.723501][ T7806] sctp: [Deprecated]: syz.0.542 (pid 7806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.723501][ T7806] Use struct sctp_sack_info instead [ 96.732704][ T843] usb 7-1: USB disconnect, device number 5 [ 96.732875][ C2] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 96.776333][ T7814] evm: overlay not supported [ 96.785212][ T7814] netlink: 184 bytes leftover after parsing attributes in process `syz.0.544'. [ 96.788734][ T7814] xt_socket: unknown flags 0xd0 [ 96.868031][ T7815] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 96.872036][ T7815] block device autoloading is deprecated and will be removed. [ 96.881931][ T7813] befs: (nullb0): No write support. Marking filesystem read-only [ 96.888398][ T7813] befs: (nullb0): invalid magic header [ 97.446338][ T7834] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 97.607436][ T7844] SELinux: policydb magic number 0xf97cffff does not match expected magic number 0xf97cff8c [ 97.610627][ T7844] SELinux: failed to load policy [ 97.618702][ T41] kauditd_printk_skb: 9 callbacks suppressed [ 97.618715][ T41] audit: type=1400 audit(1777638342.744:494): avc: denied { remount } for pid=7847 comm="syz.3.554" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 97.673605][ T7853] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:32789 [ 97.715389][ T7857] IPv6: sit1: Disabled Multicast RS [ 97.730723][ T7857] sit1: entered allmulticast mode [ 97.744732][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 97.748201][ T7862] netlink: 20 bytes leftover after parsing attributes in process `syz.1.559'. [ 97.760198][ T7862] geneve2: entered promiscuous mode [ 97.766568][ T7862] geneve2: entered allmulticast mode [ 97.777154][ T41] audit: type=1400 audit(1777638342.894:495): avc: denied { read write } for pid=7868 comm="syz.3.561" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 97.789670][ T41] audit: type=1400 audit(1777638342.894:496): avc: denied { open } for pid=7868 comm="syz.3.561" path="/dev/uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 97.791601][ T7869] netlink: 28 bytes leftover after parsing attributes in process `syz.3.561'. [ 97.854518][ T843] hid-generic 99A1:E260D13B:624ADF33.0004: unknown main item tag 0x0 [ 97.858209][ T843] hid-generic 99A1:E260D13B:624ADF33.0004: unknown main item tag 0x0 [ 97.875122][ T843] hid-generic 99A1:E260D13B:624ADF33.0004: unknown main item tag 0x0 [ 97.880312][ T843] hid-generic 99A1:E260D13B:624ADF33.0004: unknown main item tag 0x0 [ 97.888326][ T843] hid-generic 99A1:E260D13B:624ADF33.0004: unknown main item tag 0x0 [ 97.898520][ T843] hid-generic 99A1:E260D13B:624ADF33.0004: unknown main item tag 0x0 [ 97.907460][ T843] hid-generic 99A1:E260D13B:624ADF33.0004: unknown main item tag 0x0 [ 97.917961][ T843] hid-generic 99A1:E260D13B:624ADF33.0004: unknown main item tag 0x0 [ 97.919917][ T7885] bond0: entered promiscuous mode [ 97.921513][ T843] hid-generic 99A1:E260D13B:624ADF33.0004: unknown main item tag 0x0 [ 97.927566][ T7885] bond_slave_0: entered promiscuous mode [ 97.927754][ T7885] bond_slave_1: entered promiscuous mode [ 97.931934][ T843] hid-generic 99A1:E260D13B:624ADF33.0004: unknown main item tag 0x0 [ 97.934511][ T7885] batadv0: entered promiscuous mode [ 97.942488][ T7885] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 97.948057][ T7885] bond0: left promiscuous mode [ 97.950861][ T7885] bond_slave_0: left promiscuous mode [ 97.953477][ T7885] bond_slave_1: left promiscuous mode [ 97.958851][ T7885] batadv0: left promiscuous mode [ 97.959226][ T843] hid-generic 99A1:E260D13B:624ADF33.0004: hidraw1: HID v306f9c.17 Device [] on 9OR) K8S2c93;mmf$[g~ [ 97.990056][ T7887] fido_id[7887]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 97.997291][ T47] net_ratelimit: 32 callbacks suppressed [ 97.997304][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 98.038155][ T7889] netlink: 232 bytes leftover after parsing attributes in process `syz.3.567'. [ 98.076877][ T7891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.125696][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 98.178991][ T54] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 98.206441][ T7899] 9pnet_fd: Insufficient options for proto=fd [ 98.206535][ T7898] 9pnet_fd: Insufficient options for proto=fd [ 98.213001][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 98.213060][ T7899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 98.255696][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 98.297717][ T41] audit: type=1400 audit(1777638343.390:497): avc: denied { write } for pid=7903 comm="syz.0.573" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 98.341339][ T54] usb 6-1: not running at top speed; connect to a high speed hub [ 98.345476][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 98.349033][ T54] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1136, setting to 64 [ 98.355023][ T54] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.358434][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.361274][ T54] usb 6-1: Product: 閡蹀ꭾ۰⺠뚁쵟᥅ [ 98.363262][ T54] usb 6-1: Manufacturer: 웚㦛鳅婭佥峬䋟ꥬ驩쪐嵑雭꯱꺫Ὁ혇␒踳邒ꥤ츜㼇밨຺曽컽櫖術퐵﵃䕓ᶹ봰煗扐伟뀀膎疒圡㦸蚑쫓˹棐뉜糺緄윪濩井ં絫襖괐硽喬큙㘮韘堧徺 [ 98.371544][ T54] usb 6-1: SerialNumber: ဇ [ 98.371953][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 98.378830][ T7886] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 98.475802][ T41] audit: type=1400 audit(1777638343.549:498): avc: denied { mount } for pid=7908 comm="syz.0.575" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 98.488730][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 98.554468][ T7914] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 98.602768][ T7886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.607612][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 98.612121][ T7886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.617099][ T7886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.621255][ T7886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.634508][ T41] audit: type=1400 audit(1777638343.699:499): avc: denied { setattr } for pid=7884 comm="syz.1.566" name="NETLINK" dev="sockfs" ino=20229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.637432][ T7886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.648684][ T7886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.653717][ T7886] netlink: 'syz.1.566': attribute type 2 has an invalid length. [ 98.658348][ T7886] netlink: 'syz.1.566': attribute type 1 has an invalid length. [ 98.667435][ T47] Bluetooth: (null): Invalid header checksum [ 98.668258][ T7918] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 98.723704][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 98.773746][ T41] audit: type=1400 audit(1777638343.830:500): avc: denied { write } for pid=7919 comm="syz.2.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 98.852540][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 98.884020][ T54] cdc_ncm 6-1:1.0: bind() failure [ 98.892803][ T54] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 98.895618][ T54] cdc_ncm 6-1:1.1: bind() failure [ 98.901051][ T54] usb 6-1: USB disconnect, device number 6 [ 98.909883][ T41] audit: type=1400 audit(1777638343.961:501): avc: denied { accept } for pid=7929 comm="syz.2.581" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.969366][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 99.043064][ T7938] netlink: 40 bytes leftover after parsing attributes in process `syz.2.583'. [ 99.193229][ T41] audit: type=1400 audit(1777638344.214:502): avc: denied { name_bind } for pid=7955 comm="syz.2.588" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 99.572310][ T41] audit: type=1400 audit(1777638344.579:503): avc: denied { write } for pid=7972 comm="syz.0.594" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.641332][ T7977] bond1 (unregistering): Released all slaves [ 99.673873][ T7976] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7976 comm=syz.3.595 [ 99.777260][ T7981] x_tables: duplicate underflow at hook 3 [ 99.803585][ T1345] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 99.974472][ T1345] usb 6-1: Using ep0 maxpacket: 32 [ 99.979023][ T1345] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 99.982434][ T1345] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 99.990824][ T1345] usb 6-1: string descriptor 0 read error: -22 [ 99.992988][ T1345] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 99.996015][ T1345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.001300][ T7968] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.009543][ T1345] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.012666][ T1345] usb 6-1: MIDIStreaming interface descriptor not found [ 100.048451][ T39] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 100.146629][ T6935] IPVS: starting estimator thread 0... [ 100.158704][ T7995] comedi comedi1: s526: I/O port conflict (0x100,64) [ 100.168657][ T5911] udevd[5911]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 100.189169][ T39] usb 8-1: device descriptor read/64, error -71 [ 100.227376][ T40] usb 6-1: USB disconnect, device number 7 [ 100.241265][ T8000] netlink: 'syz.0.602': attribute type 10 has an invalid length. [ 100.262061][ T7994] IPVS: using max 45 ests per chain, 108000 per kthread [ 100.465178][ T39] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 100.615068][ T39] usb 8-1: device descriptor read/64, error -71 [ 100.732381][ T39] usb usb8-port1: attempt power cycle [ 100.828167][ T1345] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 100.989888][ T1345] usb 5-1: config 10 has an invalid interface number: 40 but max is 3 [ 100.993313][ T1345] usb 5-1: config 10 has an invalid interface number: 127 but max is 3 [ 100.996657][ T1345] usb 5-1: config 10 has an invalid interface number: 224 but max is 3 [ 101.000269][ T1345] usb 5-1: config 10 has an invalid interface number: 164 but max is 3 [ 101.004184][ T1345] usb 5-1: config 10 has no interface number 0 [ 101.007008][ T1345] usb 5-1: config 10 has no interface number 1 [ 101.009715][ T1345] usb 5-1: config 10 has no interface number 2 [ 101.013022][ T1345] usb 5-1: config 10 has no interface number 3 [ 101.015714][ T1345] usb 5-1: config 10 interface 40 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 101.020121][ T1345] usb 5-1: config 10 interface 40 altsetting 6 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 101.024967][ T1345] usb 5-1: config 10 interface 40 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 101.029479][ T1345] usb 5-1: config 10 interface 40 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 101.034494][ T1345] usb 5-1: config 10 interface 40 altsetting 6 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 101.038948][ T1345] usb 5-1: config 10 interface 127 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 101.046450][ T1345] usb 5-1: config 10 interface 127 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 101.052508][ T1345] usb 5-1: config 10 interface 127 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 101.057472][ T1345] usb 5-1: config 10 interface 127 altsetting 6 bulk endpoint 0x2 has invalid maxpacket 32 [ 101.061938][ T1345] usb 5-1: config 10 interface 127 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 101.067125][ T1345] usb 5-1: config 10 interface 127 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 101.072007][ T1345] usb 5-1: config 10 interface 127 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 101.077023][ T1345] usb 5-1: config 10 interface 127 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 101.081854][ T1345] usb 5-1: config 10 interface 127 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 101.086638][ T1345] usb 5-1: config 10 interface 127 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 101.091447][ T1345] usb 5-1: config 10 interface 224 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 101.096461][ T39] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 101.099916][ T1345] usb 5-1: config 10 interface 224 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 101.104781][ T1345] usb 5-1: config 10 interface 224 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 101.109807][ T1345] usb 5-1: config 10 interface 224 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 101.114484][ T1345] usb 5-1: config 10 interface 224 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 101.119634][ T1345] usb 5-1: config 10 interface 224 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 101.124829][ T1345] usb 5-1: config 10 interface 224 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 101.129880][ T1345] usb 5-1: config 10 interface 224 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 101.135748][ T39] usb 8-1: device descriptor read/8, error -71 [ 101.138639][ T1345] usb 5-1: config 10 interface 224 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 101.143601][ T1345] usb 5-1: config 10 interface 224 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 101.148436][ T1345] usb 5-1: config 10 interface 224 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1023 [ 101.152899][ T1345] usb 5-1: config 10 interface 224 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 101.157580][ T1345] usb 5-1: config 10 interface 224 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 101.162448][ T1345] usb 5-1: config 10 interface 224 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 101.167475][ T1345] usb 5-1: config 10 interface 164 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 101.172190][ T1345] usb 5-1: config 10 interface 164 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 101.176900][ T1345] usb 5-1: config 10 interface 164 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 101.181882][ T1345] usb 5-1: config 10 interface 164 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 101.186764][ T1345] usb 5-1: config 10 interface 164 altsetting 6 has an endpoint descriptor with address 0x2C, changing to 0xC [ 101.192219][ T1345] usb 5-1: config 10 interface 164 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 101.196931][ T1345] usb 5-1: config 10 interface 164 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 101.201641][ T1345] usb 5-1: config 10 interface 164 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 101.206418][ T1345] usb 5-1: config 10 interface 164 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 101.211174][ T1345] usb 5-1: config 10 interface 164 altsetting 6 has 10 endpoint descriptors, different from the interface descriptor's value: 8 [ 101.216831][ T1345] usb 5-1: config 10 interface 40 has no altsetting 0 [ 101.219787][ T1345] usb 5-1: config 10 interface 127 has no altsetting 0 [ 101.222737][ T1345] usb 5-1: config 10 interface 224 has no altsetting 0 [ 101.225787][ T1345] usb 5-1: config 10 interface 164 has no altsetting 0 [ 101.231573][ T1345] usb 5-1: New USB device found, idVendor=0424, idProduct=4915, bcdDevice=31.a5 [ 101.236035][ T1345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.239501][ T1345] usb 5-1: Product: ఄ [ 101.241341][ T1345] usb 5-1: SerialNumber: ѕ [ 101.405157][ T39] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 101.427756][ T39] usb 8-1: device descriptor read/8, error -71 [ 101.489213][ T1345] hub 5-1:10.40: Invalid hub with more than one config or interface [ 101.491731][ T1345] hub 5-1:10.40: probe with driver hub failed with error -22 [ 101.498349][ T1345] hub 5-1:10.127: Invalid hub with more than one config or interface [ 101.500694][ T1345] hub 5-1:10.127: probe with driver hub failed with error -22 [ 101.503610][ T1345] cdc_ether 5-1:10.127: bad CDC descriptors [ 101.510336][ T1345] hub 5-1:10.224: Invalid hub with more than one config or interface [ 101.513305][ T1345] hub 5-1:10.224: probe with driver hub failed with error -22 [ 101.518314][ T1345] hub 5-1:10.164: Invalid hub with more than one config or interface [ 101.520841][ T1345] hub 5-1:10.164: probe with driver hub failed with error -22 [ 101.529943][ T1345] usb 5-1: USB disconnect, device number 9 [ 101.544716][ T39] usb usb8-port1: unable to enumerate USB device [ 101.565852][ T8037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.677040][ T8056] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 101.904807][ T8061] netlink: 'syz.1.621': attribute type 2 has an invalid length. [ 101.908099][ T8061] __nla_validate_parse: 5 callbacks suppressed [ 101.908115][ T8061] netlink: 132 bytes leftover after parsing attributes in process `syz.1.621'. [ 102.042429][ T8067] random: crng reseeded on system resumption [ 102.793505][ T8097] netlink: 'syz.1.633': attribute type 2 has an invalid length. [ 102.824960][ T8099] afs: Unknown parameter 'flock' [ 102.855041][ T8099] netlink: 48 bytes leftover after parsing attributes in process `syz.2.634'. [ 102.860326][ T8099] netlink: 48 bytes leftover after parsing attributes in process `syz.2.634'. [ 102.959925][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 102.962701][ T8103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.635'. [ 102.965962][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 102.968802][ T8103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.635'. [ 103.051851][ T8107] netlink: 'syz.2.637': attribute type 1 has an invalid length. [ 103.058961][ T8109] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 103.104126][ T41] kauditd_printk_skb: 8 callbacks suppressed [ 103.104138][ T41] audit: type=1400 audit(1777638347.883:512): avc: denied { create } for pid=8111 comm="syz.2.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 103.137142][ T41] audit: type=1326 audit(1777638347.921:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.3.636" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f241719cdd9 code=0x0 [ 103.193195][ T8120] misc userio: Invalid payload size [ 103.329878][ T8133] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 103.710678][ T8145] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 103.713194][ T115] net_ratelimit: 37 callbacks suppressed [ 103.713212][ T115] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 103.757926][ T41] audit: type=1400 audit(1777638348.492:514): avc: denied { write } for pid=8149 comm="syz.2.648" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 103.768808][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'. [ 103.772700][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.647'. [ 103.791543][ T8152] vlan2: entered promiscuous mode [ 103.793385][ T8152] hsr0: entered promiscuous mode [ 103.797583][ T41] audit: type=1400 audit(1777638348.529:515): avc: denied { listen } for pid=8153 comm="syz.3.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.799536][ T8152] vlan2: entered allmulticast mode [ 103.807647][ T8152] hsr0: entered allmulticast mode [ 103.812530][ T8152] hsr_slave_0: entered allmulticast mode [ 103.817069][ T8152] hsr_slave_1: entered allmulticast mode [ 103.882083][ T8148] kvm: kvm [8147]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 103.885238][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 103.891093][ T8148] kvm: kvm [8147]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 103.955330][ T8174] usb usb9: usbfs: process 8174 (syz.3.653) did not claim interface 48 before use [ 103.975890][ T8175] hfsplus: unable to find HFS+ superblock [ 104.001262][ T115] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 104.012115][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 104.027706][ T8172] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 104.118506][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 104.188544][ T41] audit: type=1400 audit(1777638348.894:516): avc: denied { relabelfrom } for pid=8201 comm="syz.0.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 104.190619][ T8202] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 104.196816][ T41] audit: type=1400 audit(1777638348.894:517): avc: denied { relabelto } for pid=8201 comm="syz.0.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 104.236330][ T115] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 104.353767][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 104.493989][ T8220] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 104.575602][ T8230] virt_wifi0: entered allmulticast mode [ 104.610392][ T8226] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 104.702934][ T8244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17920 sclass=netlink_route_socket pid=8244 comm=syz.2.669 [ 104.727494][ T8226] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 104.762296][ T8248] geneve1: Caught tx_queue_len zero misconfig [ 104.844854][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 105.439690][ T8252] Cannot find del_set index 4 as target [ 105.448459][ T41] audit: type=1400 audit(1777638350.074:518): avc: denied { mount } for pid=8251 comm="syz.1.671" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 105.463318][ T41] audit: type=1400 audit(1777638350.083:519): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 105.607189][ T41] audit: type=1400 audit(1777638350.223:520): avc: denied { connect } for pid=8253 comm="syz.1.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 105.676617][ T41] audit: type=1400 audit(1777638350.289:521): avc: denied { getopt } for pid=8255 comm="syz.2.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.892513][ T8288] tmpfs: Bad value for 'mpol' [ 105.895418][ T8288] tmpfs: Bad value for 'mpol' [ 105.897487][ T8288] tmpfs: Bad value for 'mpol' [ 105.899568][ T8288] tmpfs: Bad value for 'mpol' [ 105.901618][ T8288] tmpfs: Bad value for 'mpol' [ 105.905069][ T8288] tmpfs: Bad value for 'mpol' [ 105.996198][ T8295] netlink: 'syz.3.683': attribute type 30 has an invalid length. [ 106.071504][ T59] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.076793][ T59] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.083131][ T59] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.087808][ T59] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.360459][ T8312] netlink: 'syz.2.690': attribute type 1 has an invalid length. [ 106.422842][ T8314] SET target dimension over the limit! [ 106.491643][ T8318] JFS: charset not found [ 106.530802][ T8322] Cannot find add_set index 65532 as target [ 106.534418][ T8323] binder: 8321:8323 ioctl c0306201 200000000000 returned -22 [ 106.744293][ T8330] ip6gretap0: entered promiscuous mode [ 106.746766][ T8330] ip6gretap0: entered allmulticast mode [ 106.775012][ T8329] gretap0: entered promiscuous mode [ 106.778584][ T8329] gretap0: entered allmulticast mode [ 106.875667][ T8342] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 106.879760][ T8342] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 106.883775][ T8342] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 106.889995][ T8342] UDF-fs: Scanning with blocksize 512 failed [ 106.892817][ T8342] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 106.897102][ T8342] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 106.901108][ T8342] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 106.903584][ T8342] UDF-fs: Scanning with blocksize 1024 failed [ 106.905877][ T8342] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 106.909697][ T8342] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 106.912795][ T8342] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 106.915138][ T8342] UDF-fs: Scanning with blocksize 2048 failed [ 106.919649][ T8342] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 106.922877][ T8342] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 106.925953][ T8342] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 106.928922][ T8342] UDF-fs: Scanning with blocksize 4096 failed [ 106.930954][ T8342] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 107.008234][ T8351] program syz.3.701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.088170][ T40] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 107.271124][ T40] usb 7-1: unable to get BOS descriptor set [ 107.274277][ T40] usb 7-1: not running at top speed; connect to a high speed hub [ 107.278446][ T40] usb 7-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.284379][ T40] usb 7-1: config 1 interface 0 has no altsetting 0 [ 107.289010][ T40] usb 7-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.40 [ 107.293416][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.296913][ T40] usb 7-1: Product: ࠠ [ 107.298832][ T40] usb 7-1: Manufacturer: 㩀⽩뤳〣ೠ䆣ࢪ≞ᴉ㫅３砠뮥舉䃙⤥퐦쫂糏љ᭜죜⠨⊌흞츺 [ 107.304909][ T40] usb 7-1: SerialNumber: щ [ 107.408731][ T1041] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 107.553939][ T40] usbhid 7-1:1.0: can't add hid device: -71 [ 107.555904][ T40] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 107.565638][ T40] usb 7-1: USB disconnect, device number 6 [ 107.569207][ T1041] usb 8-1: Using ep0 maxpacket: 16 [ 107.577230][ T1041] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.588172][ T1041] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.592663][ T1041] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 107.598183][ T1041] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 107.602186][ T1041] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.607691][ T1041] usb 8-1: config 0 descriptor?? [ 107.749310][ T8365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.755398][ T8365] batadv_slave_0: entered promiscuous mode [ 107.757290][ T8365] batadv_slave_0: entered allmulticast mode [ 107.769850][ T8365] netlink: 'syz.0.705': attribute type 1 has an invalid length. [ 107.773279][ T8365] __nla_validate_parse: 15 callbacks suppressed [ 107.773290][ T8365] netlink: 224 bytes leftover after parsing attributes in process `syz.0.705'. [ 108.048599][ T1041] hid_parser_main: 3456 callbacks suppressed [ 108.048613][ T1041] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 108.053177][ T1041] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 108.055526][ T1041] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 108.057755][ T1041] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 108.060040][ T1041] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 108.064158][ T1041] input: HID 0955:7214 Haptics as /devices/virtual/input/input14 [ 108.096379][ T1041] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 108.099108][ T1041] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 108.227735][ T8392] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 108.240988][ T8393] bond3: Removing last ns target with arp_interval on [ 108.261623][ T8357] netlink: 504 bytes leftover after parsing attributes in process `syz.3.702'. [ 108.269964][ T29] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 108.276835][ T54] usb 8-1: USB disconnect, device number 13 [ 108.277309][ T8396] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 108.293080][ T29] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 108.304889][ T29] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 108.316177][ T29] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 108.878863][ T41] kauditd_printk_skb: 12 callbacks suppressed [ 108.878875][ T41] audit: type=1400 audit(1777638353.284:534): avc: denied { ioctl } for pid=8409 comm="syz.0.718" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1293 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 108.893602][ T41] audit: type=1400 audit(1777638353.294:535): avc: denied { ioctl } for pid=8409 comm="syz.0.718" path="socket:[24126]" dev="sockfs" ino=24126 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.938096][ T8421] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 108.939044][ T8419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.720'. [ 108.954930][ T8419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.965991][ T8419] macvlan2: entered promiscuous mode [ 108.968198][ T8419] macvlan2: entered allmulticast mode [ 108.972343][ T8419] bond1: entered promiscuous mode [ 108.976508][ T8419] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 108.983827][ T8419] bond1: left promiscuous mode [ 108.999985][ T41] audit: type=1326 audit(1777638353.397:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.3.721" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f241719cdd9 code=0x0 [ 109.016476][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 109.182365][ T1219] net_ratelimit: 34 callbacks suppressed [ 109.182377][ T1219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 109.862414][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 109.871952][ T8447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.728'. [ 110.839085][ T1219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 110.856985][ T8459] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 110.976998][ T1219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 111.000517][ T8469] "syz.2.732" (8469) uses obsolete ecb(arc4) skcipher [ 111.094209][ T1219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 111.100014][ T41] audit: type=1400 audit(1777638355.363:537): avc: denied { read } for pid=8484 comm="syz.0.734" dev="nsfs" ino=4026532938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 111.108512][ T41] audit: type=1400 audit(1777638355.363:538): avc: denied { open } for pid=8484 comm="syz.0.734" path="net:[4026532938]" dev="nsfs" ino=4026532938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 111.211735][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 111.329455][ T1219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 111.447606][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 111.564305][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 111.681845][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 111.810221][ T1219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 111.833319][ T41] audit: type=1400 audit(1777638356.055:539): avc: denied { getopt } for pid=8488 comm="syz.2.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.102625][ T8453] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 113.102650][ T5740] Bluetooth: hci0: command 0x080f tx timeout [ 113.126181][ T8453] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.128322][ T8453] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.130418][ T8453] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.133108][ T8453] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.166682][ T8453] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.336358][ T8510] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 113.339727][ T8510] ALSA: mixer_oss: invalid index 1374389 [ 113.342981][ T8510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.740'. [ 113.352647][ T8517] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 113.423859][ T41] audit: type=1326 audit(1777638357.544:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.3.741" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f241719cdd9 code=0x0 [ 113.486176][ T41] audit: type=1400 audit(1777638357.600:541): avc: denied { append } for pid=8534 comm="syz.1.745" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 113.730590][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 113.734727][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 113.738632][ T8553] netlink: 'syz.0.748': attribute type 7 has an invalid length. [ 113.742023][ T8553] netlink: 'syz.0.748': attribute type 13 has an invalid length. [ 113.793446][ T41] audit: type=1400 audit(1777638357.890:542): avc: denied { append } for pid=8554 comm="syz.0.749" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 114.063975][ T40] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 114.227208][ T40] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 114.230944][ T40] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.235186][ T40] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 114.238193][ T40] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.243026][ T40] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.246176][ T40] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 114.248848][ T40] usb 5-1: Product: syz [ 114.250281][ T40] usb 5-1: Manufacturer: syz [ 114.263437][ T40] cdc_wdm 5-1:1.0: skipping garbage [ 114.267412][ T40] cdc_wdm 5-1:1.0: skipping garbage [ 114.273832][ T40] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 114.275742][ T40] cdc_wdm 5-1:1.0: Unknown control protocol [ 114.379442][ T8563] xt_hashlimit: invalid interval [ 114.415660][ T41] audit: type=1400 audit(1777638358.470:543): avc: denied { name_bind } for pid=8567 comm="syz.2.754" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 114.485905][ T1478] usb 5-1: USB disconnect, device number 10 [ 114.491214][ T8573] geneve2: entered promiscuous mode [ 114.494968][ T8573] geneve2: entered allmulticast mode [ 114.506669][ T8580] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 114.513740][ T41] audit: type=1400 audit(1777638358.564:544): avc: denied { ioctl } for pid=8571 comm="syz.1.756" path="socket:[25809]" dev="sockfs" ino=25809 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 114.524664][ T41] audit: type=1326 audit(1777638358.564:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8579 comm="syz.3.758" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f241719cdd9 code=0x0 [ 114.532841][ T41] audit: type=1400 audit(1777638358.573:546): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 114.545710][ T61] net_ratelimit: 22 callbacks suppressed [ 114.545729][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 114.591218][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 114.620311][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 114.662915][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 114.675076][ T41] audit: type=1400 audit(1777638358.714:547): avc: denied { write } for pid=8586 comm="syz.1.761" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 114.779710][ T1219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 114.797096][ T41] audit: type=1400 audit(1777638358.826:548): avc: denied { ioctl } for pid=8586 comm="syz.1.761" path="/168/file0/file0" dev="fuse" ino=64 ioctlcmd=0x933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 114.803425][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 114.897436][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 115.025415][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 115.047316][ T1478] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 115.165097][ T1169] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 115.252242][ T1478] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 115.257132][ T1478] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.261602][ T1478] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 115.265370][ T1478] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.271983][ T1478] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.276201][ T1478] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.279673][ T1478] usb 5-1: Product: syz [ 115.281585][ T1478] usb 5-1: Manufacturer: syz [ 115.285214][ T1169] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 115.290561][ T1478] cdc_wdm 5-1:1.0: skipping garbage [ 115.292488][ T1478] cdc_wdm 5-1:1.0: skipping garbage [ 115.299729][ T1478] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 115.302741][ T1478] cdc_wdm 5-1:1.0: Unknown control protocol [ 115.314872][ T5740] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.317661][ T5728] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.320345][ T5733] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.410427][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 115.462196][ T5733] Bluetooth: hci2: unexpected event for opcode 0x0c14 [ 115.466181][ T41] audit: type=1400 audit(1777638359.435:549): avc: denied { ioctl } for pid=8597 comm="syz.3.764" path="socket:[25204]" dev="sockfs" ino=25204 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 115.466352][ T8598] all: renamed from bridge_slave_1 (while UP) [ 115.511551][ T41] audit: type=1400 audit(1777638359.500:550): avc: denied { read write } for pid=8554 comm="syz.0.749" name="cdc-wdm0" dev="devtmpfs" ino=3185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 115.528106][ T41] audit: type=1400 audit(1777638359.509:551): avc: denied { open } for pid=8554 comm="syz.0.749" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 115.537529][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.765'. [ 115.548042][ T1478] usb 5-1: USB disconnect, device number 11 [ 115.552101][ T1169] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 115.615612][ T8606] tipc: Enabling of bearer rejected, failed to enable media [ 115.688412][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 115.940528][ T41] audit: type=1400 audit(1777638359.893:552): avc: denied { getopt } for pid=8611 comm="syz.1.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.029912][ T8622] SELinux: policydb magic number 0xf000878 does not match expected magic number 0xf97cff8c [ 116.033682][ T8622] SELinux: failed to load policy [ 116.238031][ T8644] : renamed from bond_slave_0 (while UP) [ 116.360852][ T39] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 116.430778][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'. [ 116.464576][ T8660] 9pnet_virtio: no channels available for device syz [ 116.521189][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 116.525569][ T39] usb 6-1: config 0 has no interfaces? [ 116.530842][ T39] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 116.535315][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.542728][ T39] usb 6-1: config 0 descriptor?? [ 116.777617][ T8633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.782357][ T8633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.873606][ T5820] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 116.892147][ T8677] netlink: 168 bytes leftover after parsing attributes in process `syz.3.784'. [ 116.895968][ T8677] netlink: 168 bytes leftover after parsing attributes in process `syz.3.784'. [ 116.900942][ T8677] program syz.3.784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.001003][ T8633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.007954][ T8633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.012646][ T54] usb 6-1: USB disconnect, device number 8 [ 117.033771][ T5820] usb 7-1: Using ep0 maxpacket: 16 [ 117.038910][ T5820] usb 7-1: config 3 has an invalid interface number: 238 but max is 3 [ 117.042631][ T5820] usb 7-1: config 3 has an invalid interface number: 65 but max is 3 [ 117.046627][ T5820] usb 7-1: config 3 has an invalid interface number: 180 but max is 3 [ 117.050265][ T5820] usb 7-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 117.054283][ T5820] usb 7-1: config 3 has an invalid interface number: 117 but max is 3 [ 117.058957][ T5820] usb 7-1: config 3 has no interface number 0 [ 117.061761][ T5820] usb 7-1: config 3 has no interface number 1 [ 117.064239][ T5820] usb 7-1: config 3 has no interface number 2 [ 117.067187][ T5820] usb 7-1: config 3 has no interface number 3 [ 117.069899][ T5820] usb 7-1: config 3 interface 238 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 117.074583][ T5820] usb 7-1: config 3 interface 238 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 117.079656][ T5820] usb 7-1: config 3 interface 238 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 117.084422][ T5820] usb 7-1: config 3 interface 65 altsetting 2 bulk endpoint 0x9 has invalid maxpacket 8 [ 117.088864][ T5820] usb 7-1: config 3 interface 65 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 117.093534][ T5820] usb 7-1: config 3 interface 180 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 117.098517][ T5820] usb 7-1: config 3 interface 180 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 117.103275][ T5820] usb 7-1: config 3 interface 180 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 117.108022][ T5820] usb 7-1: config 3 interface 180 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 117.113027][ T5820] usb 7-1: config 3 interface 180 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 117.117681][ T5820] usb 7-1: config 3 interface 180 altsetting 1 endpoint 0xD has an invalid bInterval 129, changing to 7 [ 117.122779][ T5820] usb 7-1: config 3 interface 180 altsetting 1 has an endpoint descriptor with address 0x17, changing to 0x7 [ 117.127842][ T5820] usb 7-1: config 3 interface 180 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 117.132159][ T5820] usb 7-1: config 3 interface 117 altsetting 201 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 117.137154][ T5820] usb 7-1: config 3 interface 117 altsetting 201 endpoint 0xF has invalid wMaxPacketSize 0 [ 117.141903][ T5820] usb 7-1: config 3 interface 117 altsetting 201 has a duplicate endpoint with address 0x9, skipping [ 117.147314][ T5820] usb 7-1: config 3 interface 117 altsetting 201 has a duplicate endpoint with address 0x8, skipping [ 117.152172][ T5820] usb 7-1: config 3 interface 117 altsetting 201 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 117.157014][ T5820] usb 7-1: config 3 interface 238 has no altsetting 0 [ 117.159978][ T5820] usb 7-1: config 3 interface 65 has no altsetting 0 [ 117.163148][ T5820] usb 7-1: config 3 interface 180 has no altsetting 0 [ 117.166169][ T5820] usb 7-1: config 3 interface 117 has no altsetting 0 [ 117.173415][ T5820] usb 7-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 7.81 [ 117.177619][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.181231][ T5820] usb 7-1: Product: 㰁 [ 117.183353][ T5820] usb 7-1: Manufacturer: ▜識툋嚃暛⎐ᆣܴ␑陝䎎봨粦㑈䥎ˑƱㅫx鴿荊㲒ଥ䃄կ쎣裾ᬮ꒦훜。峷镂毴劲ळ亲㏟渠楊㜄못܃짓窝鞐ꑪ䡱 [ 117.190857][ T5820] usb 7-1: SerialNumber: ĝᕩ귒쟌䉺꓏甙枆㕵鱩帻뻆킆둋敺懪쓤衐苠㽤ꆼ灵籽ꎼ퇙펬 [ 117.535869][ T5733] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.705504][ T8688] netlink: 'syz.3.788': attribute type 1 has an invalid length. [ 117.711335][ T8688] netlink: 'syz.3.788': attribute type 4 has an invalid length. [ 117.724873][ T8688] binder: BINDER_SET_CONTEXT_MGR already set [ 117.727490][ T8688] binder: 8687:8688 ioctl 4018620d 200000004a80 returned -16 [ 117.728840][ T843] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 117.888333][ T843] usb 5-1: Using ep0 maxpacket: 32 [ 117.891482][ T843] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 117.895056][ T843] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 117.898825][ T843] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.902786][ T843] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 117.909292][ T843] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 117.912474][ T843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.915103][ T843] usb 5-1: Product: syz [ 117.916507][ T843] usb 5-1: Manufacturer: syz [ 117.918131][ T843] usb 5-1: SerialNumber: syz [ 117.926435][ C3] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 117.937942][ T843] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input15 [ 118.155401][ T843] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 118.159172][ T843] (id 0x00) [ 118.208860][ T843] rc_core: IR keymap rc-imon-pad not found [ 118.210850][ T843] Registered IR keymap rc-empty [ 118.212595][ T843] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 118.216102][ T843] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 118.370065][ T843] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 118.375999][ T843] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input16 [ 118.384795][ T843] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:12> initialized [ 118.726750][ T8710] netlink: 'syz.3.793': attribute type 29 has an invalid length. [ 118.881881][ T8712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.886279][ T8712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.160113][ T8713] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8713 comm=syz.0.786 [ 119.174670][ T39] usb 5-1: USB disconnect, device number 12 [ 119.175730][ T8713] imon:send_packet: packet tx failed (-71) [ 119.217446][ T8713] imon:vfd_write: send packet #0 failed [ 119.244163][ T8736] Can't find a SQUASHFS superblock on nullb0 [ 119.290870][ T8736] Can't find a SQUASHFS superblock on nullb0 [ 119.516336][ T8748] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 119.770888][ T5733] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.830109][ T8781] __nla_validate_parse: 3 callbacks suppressed [ 119.830128][ T8781] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.810'. [ 119.907885][ T159] net_ratelimit: 34 callbacks suppressed [ 119.907913][ T159] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 119.993152][ T29] usb 7-1: USB disconnect, device number 7 [ 120.035120][ T8787] netlink: 80 bytes leftover after parsing attributes in process `syz.2.812'. [ 120.048721][ T159] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 120.050380][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.812'. [ 120.105471][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'. [ 120.110761][ T8787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.812'. [ 120.125893][ T8796] binder: Bad value for 'max' [ 120.137605][ T8787] veth3: entered allmulticast mode [ 120.155372][ T8787] bond2: (slave veth3): Enslaving as an active interface with an up link [ 120.161211][ T41] kauditd_printk_skb: 10 callbacks suppressed [ 120.161233][ T41] audit: type=1400 audit(1777638363.844:563): avc: denied { map } for pid=8791 comm="syz.1.813" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.175470][ T41] audit: type=1400 audit(1777638363.844:564): avc: denied { execute } for pid=8791 comm="syz.1.813" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.188654][ T1169] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 120.306057][ T1169] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 120.343064][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 120.419469][ T8812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.819'. [ 120.432367][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 120.437007][ T8823] cgroup: Setting release_agent not allowed [ 120.439133][ T8823] cgroup: Setting release_agent not allowed [ 120.452684][ T6935] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 120.498180][ T8830] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 120.500747][ T8830] netlink: 88 bytes leftover after parsing attributes in process `syz.3.822'. [ 120.503605][ T8830] netlink: 1 bytes leftover after parsing attributes in process `syz.3.822'. [ 120.506462][ T8830] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 120.509791][ T8830] netlink: 634 bytes leftover after parsing attributes in process `syz.3.822'. [ 120.559111][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 120.623663][ T6935] usb 5-1: Using ep0 maxpacket: 8 [ 120.631592][ T41] audit: type=1400 audit(1777638364.284:565): avc: denied { mount } for pid=8835 comm="syz.2.827" name="/" dev="rpc_pipefs" ino=27115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 120.641242][ T41] audit: type=1400 audit(1777638364.284:566): avc: denied { mounton } for pid=8835 comm="syz.2.827" path="/148/file0" dev="rpc_pipefs" ino=27115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 120.646455][ T6935] usb 5-1: unable to get BOS descriptor or descriptor too short [ 120.653622][ T6935] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 120.656786][ T6935] usb 5-1: can't read configurations, error -71 [ 120.661943][ T41] audit: type=1400 audit(1777638364.293:567): avc: denied { unmount } for pid=6720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 120.673884][ T41] audit: type=1400 audit(1777638364.330:568): avc: denied { read } for pid=8837 comm="syz.2.828" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 120.677332][ T1169] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 120.682684][ T41] audit: type=1400 audit(1777638364.330:569): avc: denied { open } for pid=8837 comm="syz.2.828" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 120.694236][ T41] audit: type=1400 audit(1777638364.330:570): avc: denied { ioctl } for pid=8837 comm="syz.2.828" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 120.703924][ T41] audit: type=1400 audit(1777638364.340:571): avc: denied { create } for pid=8837 comm="syz.2.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 120.728234][ T41] audit: type=1400 audit(1777638364.377:572): avc: denied { create } for pid=8846 comm="syz.1.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 120.795394][ T1219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 120.922373][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 120.975873][ T10] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 121.009822][ T5728] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 121.021483][ T5728] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 121.025619][ T5728] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 121.034177][ T5728] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 121.037831][ T5728] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 121.061088][ T1219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 121.136830][ T10] usb 7-1: not running at top speed; connect to a high speed hub [ 121.143045][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.148998][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.151939][ T10] usb 7-1: Product: 㻏઻ᱺ꒢旂뻝쯿ຆ䱻ꆹ苛䇬禸钢遬藅球㠔␴㹿侐栬猴鸼멯瓇낓砋鷻㞒꟡ᜉ굡줤䧼뱵๖琧ङ縭覡䏼鱜최毅འ꽝糥凹୐ற䥄胮筝踝嶈韾紈朅虣⿳鴍٧䅡켑煰鶴 [ 121.161823][ T10] usb 7-1: Manufacturer: 깄녈쪟윃⑶鲷뚌ᆃ昫撥 [ 121.385002][ T10] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 121.403395][ T8860] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.406275][ T8860] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.408169][ T10] usb 7-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 121.408945][ T8860] bridge_slave_0: entered allmulticast mode [ 121.412996][ T10] usb 7-1: found format II with max.bitrate = 9, frame size=36179 [ 121.415834][ T8860] bridge_slave_0: entered promiscuous mode [ 121.422988][ T8860] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.425160][ T10] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 121.430798][ T8860] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.433884][ T8860] bridge_slave_1: entered allmulticast mode [ 121.437368][ T8860] bridge_slave_1: entered promiscuous mode [ 121.458433][ T8860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.464981][ T8860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.484865][ T8860] team0: Port device team_slave_0 added [ 121.488641][ T8860] team0: Port device team_slave_1 added [ 121.489214][ T10] usb 7-1: USB disconnect, device number 8 [ 121.526382][ T8860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.528961][ T8860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.532294][ T5911] udevd[5911]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.537666][ T8860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.548818][ T8860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.552275][ T8860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.561940][ T8860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.586843][ T8860] hsr_slave_0: entered promiscuous mode [ 121.589243][ T8860] hsr_slave_1: entered promiscuous mode [ 121.591386][ T8860] debugfs: 'hsr0' already exists in 'hsr' [ 121.593797][ T8860] Cannot create hsr debugfs directory [ 121.690202][ T8890] team0: Device ipvlan1 failed to register rx_handler [ 121.724372][ T8860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 121.731438][ T8860] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.734252][ T8860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 121.739341][ T8860] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.742241][ T8860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 121.746452][ T8860] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.749468][ T8860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.754311][ T8860] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.769559][ T8860] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.773441][ T8860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.776610][ T8860] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.779352][ T8860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.813791][ T8860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.823469][ T8860] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.824548][ T54] IPVS: starting estimator thread 0... [ 121.831563][ T1219] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.846515][ T1219] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.874250][ T8903] ip6gretap0: entered promiscuous mode [ 121.876071][ T8903] ip6gretap0: entered allmulticast mode [ 121.880610][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.883232][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.890625][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.893550][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.909227][ T8913] batadv_slave_1: entered promiscuous mode [ 121.927777][ T8904] IPVS: using max 47 ests per chain, 112800 per kthread [ 121.940200][ T8914] batadv_slave_1: left promiscuous mode [ 121.977738][ T8922] 8021q: VLANs not supported on ip_vti0 [ 122.100648][ T5733] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 122.157305][ T8860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.305534][ T8860] veth0_vlan: entered promiscuous mode [ 122.310423][ T8860] veth1_vlan: entered promiscuous mode [ 122.335184][ T8860] veth0_macvtap: entered promiscuous mode [ 122.339951][ T8860] veth1_macvtap: entered promiscuous mode [ 122.350097][ T8860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.356217][ T8860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.362101][ T47] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.367299][ T47] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.373254][ T47] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.378109][ T47] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.437099][ T8980] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=14453 sclass=netlink_xfrm_socket pid=8980 comm=syz.0.862 [ 122.447021][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.453568][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.468057][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.473658][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.560001][ T8993] : renamed from vlan0 (while UP) [ 122.611894][ T8999] netlink: 'syz.2.867': attribute type 1 has an invalid length. [ 122.715421][ T8992] kvm: kvm [8991]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 122.719726][ T8992] kvm: kvm [8991]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 122.742651][ T9006] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 123.163496][ T9021] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 123.261977][ T5733] Bluetooth: hci2: command tx timeout [ 123.443080][ T9029] syzkaller1: entered promiscuous mode [ 123.446952][ T9029] syzkaller1: entered allmulticast mode [ 123.550556][ T9031] pim6reg: entered allmulticast mode [ 123.629832][ T9037] dlm: no locking on control device [ 123.757387][ T9040] netlink: 'syz.1.879': attribute type 10 has an invalid length. [ 123.943739][ T9055] lo: Caught tx_queue_len zero misconfig [ 124.018162][ T9066] syzkaller0: entered promiscuous mode [ 124.020437][ T9066] syzkaller0: entered allmulticast mode [ 124.121737][ T9077] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9077 comm=syz.0.889 [ 124.426124][ T5741] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 124.609157][ T5741] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 124.614765][ T5741] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 124.619248][ T5741] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 124.622134][ T5741] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 124.625686][ T5741] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 124.634827][ T5741] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 124.637799][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 124.640827][ T5741] usb 5-1: Product: syz [ 124.642174][ T5741] usb 5-1: Manufacturer: syz [ 124.651164][ T5741] cdc_wdm 5-1:1.0: skipping garbage [ 124.653140][ T5741] cdc_wdm 5-1:1.0: skipping garbage [ 124.654856][ T5741] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 124.664664][ T9099] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 124.668378][ T9099] block device autoloading is deprecated and will be removed. [ 124.866031][ T1478] usb 5-1: USB disconnect, device number 15 [ 124.969035][ T9112] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.102372][ T9122] bridge: RTM_NEWNEIGH with invalid ether address [ 125.235633][ T9127] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 125.245400][ T9127] romfs: unable to set blocksize [ 125.245400][ T9127] [ 125.334750][ T47] net_ratelimit: 33 callbacks suppressed [ 125.334764][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 125.453850][ T1219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 125.497060][ T5733] Bluetooth: hci2: command tx timeout [ 125.538132][ T5741] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 125.581450][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 125.708058][ T1219] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 125.712245][ T5741] usb 7-1: config 0 has no interfaces? [ 125.714445][ T5741] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 125.717484][ T5741] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.723469][ T5741] usb 7-1: config 0 descriptor?? [ 125.825987][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 125.841935][ T9150] x_tables: duplicate underflow at hook 3 [ 125.889183][ T41] kauditd_printk_skb: 20 callbacks suppressed [ 125.889201][ T41] audit: type=1400 audit(1777638369.207:593): avc: denied { bind } for pid=9152 comm="syz.1.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 125.921830][ T41] audit: type=1400 audit(1777638369.236:594): avc: denied { rename } for pid=9152 comm="syz.1.913" name="file0" dev="tmpfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 125.949680][ T5741] usb 7-1: USB disconnect, device number 9 [ 125.953834][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 126.071810][ T159] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 126.189231][ T159] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 126.307524][ T9161] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 126.308725][ T9167] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.324164][ T9167] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.327331][ T9167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.347629][ T9170] __nla_validate_parse: 9 callbacks suppressed [ 126.347646][ T9170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.918'. [ 126.352387][ T9169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.918'. [ 126.355687][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 126.394351][ T9169] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9169 comm=syz.1.918 [ 126.471795][ T9176] netlink: 36 bytes leftover after parsing attributes in process `syz.0.920'. [ 126.473822][ T9172] option changes via remount are deprecated (pid=9171 comm=syz.4.919) [ 126.477682][ T159] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 126.538768][ T9172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59681 sclass=netlink_route_socket pid=9172 comm=syz.4.919 [ 126.543048][ T41] audit: type=1400 audit(1777638369.825:595): avc: denied { setopt } for pid=9183 comm="syz.1.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.554343][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.922'. [ 126.653290][ T9189] netlink: 108 bytes leftover after parsing attributes in process `syz.2.924'. [ 126.656515][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 126.740579][ T41] audit: type=1400 audit(1777638370.003:596): avc: denied { ioctl } for pid=9193 comm="syz.1.927" path="socket:[28510]" dev="sockfs" ino=28510 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 126.748789][ T41] audit: type=1400 audit(1777638370.012:597): avc: denied { append } for pid=9196 comm="syz.4.928" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 126.805571][ T41] audit: type=1400 audit(1777638370.069:598): avc: denied { create } for pid=9198 comm="syz.1.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 126.836481][ T41] audit: type=1400 audit(1777638370.097:599): avc: denied { ioctl } for pid=9198 comm="syz.1.929" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 126.950762][ T5911] udevd[5911]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 126.956136][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.930'. [ 126.961239][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'. [ 126.964053][ T9206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.930'. [ 127.308827][ T9208] ------------[ cut here ]------------ [ 127.310823][ T9208] !chanctx_conf [ 127.310832][ T9208] WARNING: net/mac80211/rate.c:53 at rate_control_rate_init+0x5c5/0x730, CPU#2: syz.1.931/9208 [ 127.317753][ T9208] Modules linked in: [ 127.320276][ T9208] CPU: 2 UID: 0 PID: 9208 Comm: syz.1.931 Not tainted syzkaller #0 PREEMPT(full) [ 127.323592][ T9208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.327060][ T9208] RIP: 0010:rate_control_rate_init+0x5c5/0x730 [ 127.328982][ T9208] Code: 48 8d 35 00 00 00 00 e8 09 4d e3 f6 e8 04 a5 ec f6 e9 20 fe ff ff e8 2a 61 07 f7 90 0f 0b 90 e9 12 fe ff ff e8 1c 61 07 f7 90 <0f> 0b 90 eb b1 e8 11 61 07 f7 e8 5c ad eb f6 31 ff 89 c3 89 c6 e8 [ 127.335821][ T9208] RSP: 0018:ffffc9000d63f200 EFLAGS: 00010287 [ 127.337830][ T9208] RAX: 00000000000007b1 RBX: ffff888038e38000 RCX: ffffc900077a2000 [ 127.340281][ T9208] RDX: 0000000000080000 RSI: ffffffff8b012a84 RDI: ffff888031ad4a00 [ 127.342877][ T9208] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 127.345389][ T9208] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880229ce700 [ 127.348031][ T9208] R13: ffff888059da0f20 R14: ffff8880363d0000 R15: 0000000000000000 [ 127.351032][ T9208] FS: 00007fca617ac6c0(0000) GS:ffff8880d6576000(0000) knlGS:0000000000000000 [ 127.355225][ T9208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.357806][ T9208] CR2: 0000200000001080 CR3: 000000003b509000 CR4: 0000000000352ef0 [ 127.361150][ T9208] Call Trace: [ 127.362635][ T9208] [ 127.364061][ T9208] rate_control_rate_init_all_links+0x76/0x1f0 [ 127.366578][ T9208] sta_apply_auth_flags.isra.0+0x4aa/0x500 [ 127.368903][ T9208] sta_apply_parameters+0x1234/0x2090 [ 127.371044][ T9208] ? __sta_info_alloc+0x1146/0x1cd0 [ 127.373131][ T9208] ieee80211_add_station+0x3ff/0x760 [ 127.375686][ T9208] nl80211_new_station+0x14a9/0x20f0 [ 127.377946][ T9208] ? __pfx_nl80211_new_station+0x10/0x10 [ 127.379908][ T9208] ? nl80211_pre_doit+0x19a/0xae0 [ 127.381607][ T9208] genl_family_rcv_msg_doit+0x214/0x300 [ 127.383427][ T9208] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 127.385516][ T9208] ? bpf_lsm_capable+0x9/0x10 [ 127.387092][ T9208] ? security_capable+0x80/0x260 [ 127.387256][ T9209] befs: (nbd1): unable to read superblock [ 127.388766][ T9208] ? ns_capable+0xd2/0xf0 [ 127.392459][ T9208] genl_rcv_msg+0x560/0x800 [ 127.394028][ T9208] ? __pfx_genl_rcv_msg+0x10/0x10 [ 127.395667][ T9208] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 127.397531][ T9208] ? __pfx_nl80211_new_station+0x10/0x10 [ 127.399348][ T9208] ? __pfx_nl80211_post_doit+0x10/0x10 [ 127.401094][ T9208] netlink_rcv_skb+0x159/0x420 [ 127.402670][ T9208] ? __pfx_genl_rcv_msg+0x10/0x10 [ 127.404358][ T9208] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 127.406071][ T9208] ? netlink_deliver_tap+0x1ae/0xcc0 [ 127.407854][ T9208] genl_rcv+0x28/0x40 [ 127.409152][ T9208] netlink_unicast+0x585/0x850 [ 127.410717][ T9208] ? __pfx_netlink_unicast+0x10/0x10 [ 127.412430][ T9208] netlink_sendmsg+0x8b0/0xda0 [ 127.414056][ T9208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.415833][ T9208] ? __might_fault+0x90/0x140 [ 127.417510][ T9208] ____sys_sendmsg+0x9e1/0xb70 [ 127.419123][ T9208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.420831][ T9208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.422551][ T9208] ? __pfx_futex_wake_mark+0x10/0x10 [ 127.424254][ T9208] ___sys_sendmsg+0x190/0x1e0 [ 127.425766][ T9208] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.427452][ T9208] __sys_sendmsg+0x170/0x220 [ 127.429015][ T9208] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.430662][ T9208] ? __x64_sys_futex+0x34f/0x4d0 [ 127.432265][ T9208] ? rcu_is_watching+0x12/0xc0 [ 127.433867][ T9208] do_syscall_64+0x10b/0xf80 [ 127.435360][ T9208] ? clear_bhb_loop+0x40/0x90 [ 127.436872][ T9208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.438860][ T9208] RIP: 0033:0x7fca6099cdd9 [ 127.440296][ T9208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.446400][ T9208] RSP: 002b:00007fca617ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.449079][ T9208] RAX: ffffffffffffffda RBX: 00007fca60c15fa0 RCX: 00007fca6099cdd9 [ 127.451747][ T9208] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000a [ 127.454263][ T9208] RBP: 00007fca60a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 127.456762][ T9208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.459260][ T9208] R13: 00007fca60c16038 R14: 00007fca60c15fa0 R15: 00007fff33fa54b8 [ 127.461831][ T9208] [ 127.462870][ T9208] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 127.465172][ T9208] CPU: 2 UID: 0 PID: 9208 Comm: syz.1.931 Not tainted syzkaller #0 PREEMPT(full) [ 127.468053][ T9208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.471238][ T9208] Call Trace: [ 127.472332][ T9208] [ 127.473314][ T9208] dump_stack_lvl+0x100/0x190 [ 127.474837][ T9208] vpanic+0x552/0x970 [ 127.476127][ T9208] ? __pfx_vpanic+0x10/0x10 [ 127.477584][ T9208] panic+0xd1/0xe0 [ 127.478869][ T9208] ? __pfx_panic+0x10/0x10 [ 127.480302][ T9208] check_panic_on_warn.cold+0x19/0x34 [ 127.482007][ T9208] ? rate_control_rate_init+0x5c5/0x730 [ 127.483816][ T9208] __warn.cold+0x191/0x328 [ 127.485247][ T9208] __report_bug+0x296/0x3d0 [ 127.486729][ T9208] ? rate_control_rate_init+0x5c5/0x730 [ 127.488485][ T9208] ? __pfx___report_bug+0x10/0x10 [ 127.490086][ T9208] ? kasan_save_track+0x14/0x30 [ 127.491653][ T9208] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 127.493661][ T9208] ? ieee80211_add_station+0x5f1/0x760 [ 127.495416][ T9208] ? nl80211_new_station+0x14a9/0x20f0 [ 127.497164][ T9208] ? genl_family_rcv_msg_doit+0x214/0x300 [ 127.498988][ T9208] ? netlink_rcv_skb+0x159/0x420 [ 127.500565][ T9208] ? netlink_unicast+0x585/0x850 [ 127.502153][ T9208] ? netlink_sendmsg+0x8b0/0xda0 [ 127.503778][ T9208] ? ____sys_sendmsg+0x9e1/0xb70 [ 127.505366][ T9208] ? rate_control_rate_init+0x5c5/0x730 [ 127.507136][ T9208] report_bug+0xb2/0x220 [ 127.508498][ T9208] ? rate_control_rate_init+0x5c5/0x730 [ 127.510260][ T9208] handle_bug+0x16a/0x2a0 [ 127.511657][ T9208] exc_invalid_op+0x17/0x50 [ 127.513122][ T9208] asm_exc_invalid_op+0x1a/0x20 [ 127.514690][ T9208] RIP: 0010:rate_control_rate_init+0x5c5/0x730 [ 127.516651][ T9208] Code: 48 8d 35 00 00 00 00 e8 09 4d e3 f6 e8 04 a5 ec f6 e9 20 fe ff ff e8 2a 61 07 f7 90 0f 0b 90 e9 12 fe ff ff e8 1c 61 07 f7 90 <0f> 0b 90 eb b1 e8 11 61 07 f7 e8 5c ad eb f6 31 ff 89 c3 89 c6 e8 [ 127.522700][ T9208] RSP: 0018:ffffc9000d63f200 EFLAGS: 00010287 [ 127.524624][ T9208] RAX: 00000000000007b1 RBX: ffff888038e38000 RCX: ffffc900077a2000 [ 127.527127][ T9208] RDX: 0000000000080000 RSI: ffffffff8b012a84 RDI: ffff888031ad4a00 [ 127.529603][ T9208] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 127.532098][ T9208] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880229ce700 [ 127.534581][ T9208] R13: ffff888059da0f20 R14: ffff8880363d0000 R15: 0000000000000000 [ 127.537083][ T9208] ? rate_control_rate_init+0x5c4/0x730 [ 127.538867][ T9208] rate_control_rate_init_all_links+0x76/0x1f0 [ 127.540820][ T9208] sta_apply_auth_flags.isra.0+0x4aa/0x500 [ 127.542705][ T9208] sta_apply_parameters+0x1234/0x2090 [ 127.544427][ T9208] ? __sta_info_alloc+0x1146/0x1cd0 [ 127.546153][ T9208] ieee80211_add_station+0x3ff/0x760 [ 127.547965][ T9208] nl80211_new_station+0x14a9/0x20f0 [ 127.549753][ T9208] ? __pfx_nl80211_new_station+0x10/0x10 [ 127.551646][ T9208] ? nl80211_pre_doit+0x19a/0xae0 [ 127.553284][ T9208] genl_family_rcv_msg_doit+0x214/0x300 [ 127.555056][ T9208] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 127.556984][ T9208] ? bpf_lsm_capable+0x9/0x10 [ 127.558477][ T9208] ? security_capable+0x80/0x260 [ 127.560052][ T9208] ? ns_capable+0xd2/0xf0 [ 127.561440][ T9208] genl_rcv_msg+0x560/0x800 [ 127.562948][ T9208] ? __pfx_genl_rcv_msg+0x10/0x10 [ 127.564513][ T9208] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 127.566206][ T9208] ? __pfx_nl80211_new_station+0x10/0x10 [ 127.568008][ T9208] ? __pfx_nl80211_post_doit+0x10/0x10 [ 127.569733][ T9208] netlink_rcv_skb+0x159/0x420 [ 127.571256][ T9208] ? __pfx_genl_rcv_msg+0x10/0x10 [ 127.572900][ T9208] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 127.574596][ T9208] ? netlink_deliver_tap+0x1ae/0xcc0 [ 127.576270][ T9208] genl_rcv+0x28/0x40 [ 127.577547][ T9208] netlink_unicast+0x585/0x850 [ 127.579080][ T9208] ? __pfx_netlink_unicast+0x10/0x10 [ 127.580752][ T9208] netlink_sendmsg+0x8b0/0xda0 [ 127.582271][ T9208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.583972][ T9208] ? __might_fault+0x90/0x140 [ 127.585472][ T9208] ____sys_sendmsg+0x9e1/0xb70 [ 127.587007][ T9208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.588679][ T9208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.590349][ T9208] ? __pfx_futex_wake_mark+0x10/0x10 [ 127.592037][ T9208] ___sys_sendmsg+0x190/0x1e0 [ 127.593567][ T9208] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.595249][ T9208] __sys_sendmsg+0x170/0x220 [ 127.596739][ T9208] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.598366][ T9208] ? __x64_sys_futex+0x34f/0x4d0 [ 127.599965][ T9208] ? rcu_is_watching+0x12/0xc0 [ 127.601492][ T9208] do_syscall_64+0x10b/0xf80 [ 127.602999][ T9208] ? clear_bhb_loop+0x40/0x90 [ 127.604508][ T9208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.606379][ T9208] RIP: 0033:0x7fca6099cdd9 [ 127.607817][ T9208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.613803][ T9208] RSP: 002b:00007fca617ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.616435][ T9208] RAX: ffffffffffffffda RBX: 00007fca60c15fa0 RCX: 00007fca6099cdd9 [ 127.618935][ T9208] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000a [ 127.621408][ T9208] RBP: 00007fca60a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 127.623952][ T9208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.626430][ T9208] R13: 00007fca60c16038 R14: 00007fca60c15fa0 R15: 00007fff33fa54b8 [ 127.628936][ T9208] [ 127.630759][ T9208] Kernel Offset: disabled [ 127.632164][ T9208] Rebooting in 86400 seconds..