last executing test programs: 4.718438019s ago: executing program 1 (id=198): r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = dup3(r1, r2, 0x80000) write$char_usb(r3, 0x0, 0x0) 4.388235915s ago: executing program 1 (id=206): ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000200)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000280), 0x20000328) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f00000002c0)="4c00000012001f15b9409b849ac00a00a5784002fffff0000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 2.258697414s ago: executing program 3 (id=228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000000)='bridge0\x00') ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syz_tun\x00', 0x1}) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}}, 0x0) fdatasync(r3) r5 = syz_open_dev$vim2m(&(0x7f0000000500), 0x7fff, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000600), 0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000640), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x40044160, 0x3) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000540)={0x20002005}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000580)=@mmap={0x5, 0x1, 0x4, 0x2000, 0x7, {}, {0x0, 0x1, 0x8, 0x40, 0x10, 0xbf, "c85b47fb"}, 0x6, 0x1, {}, 0x7}) syz_emit_ethernet(0x3c, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv4}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002300090425bd7000ffd3df250200000008000100ac1414bb"], 0x24}, 0x1, 0x0, 0x0, 0x40c0811}, 0x40000) 2.127547429s ago: executing program 3 (id=229): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10044000}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x41) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) r1 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000001b00)='bpf_lsm_inode_removexattr\x00') bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x8, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2}, [@generic={0x0, 0x2, 0x5, 0xd, 0x7fffffff}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000100)='GPL\x00', 0xbd, 0x1000, &(0x7f0000000a80)=""/4096, 0x41100, 0x6, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001ac0)={0x4, 0x10, 0x5, 0xe}, 0x10, r1, 0xffffffffffffffff, 0x2, &(0x7f0000001b40)=[r0, r0], &(0x7f0000001b80)=[{0x4, 0x3, 0x1}, {0x0, 0x2, 0x7, 0xa}], 0x10, 0x8}, 0x94) r2 = syz_open_dev$evdev(&(0x7f0000000780), 0x3, 0x822b01) write$char_usb(r2, &(0x7f00000007c0), 0xfffffee8) 1.896108144s ago: executing program 3 (id=232): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000001c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb781", 0x4f}, {&(0x7f00000006c0)="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", 0x3f1}, {&(0x7f0000000ac0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) 1.890889668s ago: executing program 3 (id=233): mkdir(&(0x7f0000000200)='./config\x00', 0x1ff) syz_usb_connect(0x3, 0x795, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0xa, 0xf8, 0xa9, 0x20, 0x403, 0x6040, 0x3b36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x783, 0x4, 0x6, 0x8, 0x0, 0x3, "", [{{0x9, 0x4, 0x5e, 0x5, 0x3, 0x2d, 0xd2, 0x2b, 0x8, [@generic={0xe1, 0x30, "4a8aa91972ab2bfd3e2f81507b497dac95c7aba5ed46e922649f7c68e1bf361dc65a262f8431d52cd8ea2d50e2bffc6849a11f0659b94ed8de0449eb5888fab9bf033028d55abdfd82a80a2335b397f90569b948047d6fc049bb3f7f1ebaccf64c18de6165578920d16aa971a8b266ed36cba6bcdfc794e63ccb1f812e81d851579e945e603133c457bd41beab5ad027684b971bf2d55eb3c6dbaf6cf62a8556b9c6645660ea7c4ffa929786d6693da319edf198db1a3959b0b9b6f60509e736cba88d53e52bf736c8892ac5f0532ad3850b1d0735062b35815f1767bc6348"}], [{{0x9, 0x5, 0x6, 0x3, 0x40, 0x6, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x9, 0x5, 0x9, [@generic={0xf8, 0xc, "36d589fe038505dfb612c3ec3cd334bf69ac5d59c054e9700991705b226819d1bf5620b524c51298e86012c234f9f72fd664885ff4cb88f5471daf4c5655e0d4b7e9eddb44fa0bef2412b198598b66f03b9dd1283d14d5b4bbcb6e10a9e59c66805ccd2ff4af0ba0eae76eba1370d4a12bf312eee75996651f44e1e17c1cd18707b9c147a8a58dceea88bdbb4627d0045db891268685f7167ad8fb370f3b39cbf7c89bc34761e61c78005eab259d78f31d673a2f9d9716b10381c87825556063d23eb1f244550716dc492a1b28b1ebf9fb565f63386c84656b8a6edaacfa4e65e53c8b8a9582e6c13a028bb727a16e3e85962ac29e27"}, @generic={0xf, 0xc, "2d32b10fcdc5fd976d87da5e47"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x5, 0x4c, 0x9}}]}}, {{0x9, 0x4, 0xb1, 0x6, 0x4, 0xa2, 0x3e, 0x96, 0x0, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "f50b2889dd"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xff, 0xb, 0x1, 0x6}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@acm={0x4, 0x24, 0x2, 0x6}, @obex={0x5, 0x24, 0x15, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x5}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x3800, 0x40, 0x3}, {0x6, 0x24, 0x1a, 0x2, 0x11}, [@obex={0x5}, @network_terminal={0x7, 0x24, 0xa, 0x40, 0x3, 0xe, 0x89}, @dmm={0x7, 0x24, 0x14, 0x680, 0x1}]}], [{{0x9, 0x5, 0xe, 0x10, 0x20, 0x81, 0x2f, 0x54, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x4}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x6, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x8001}, @generic={0x2f, 0x24, "da5878ec8924cdf6ceb1efdb2655859478634eedfd733dc425dbb687bd96dc31a7339a09a9cf570cf9f970e96d"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x7, 0x1, 0x3}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0xff, 0xf9, 0xf5, [@generic={0xe1, 0x23, "a2b23d1e2d3e4a8ca9819a8e08ad52c8f90b4be74a9b88e4a0ea649715bbc417c33c07ed1bc57fea0ebfccaa5b82a8f64318c7dc7b99b6a7339e21b43dbd4c1fe9a4a60f77ee6ae627065fa393c13a1e81d9ead2b5dc819c6a8d81dd7d3b74916d544b81725b37ce27a9d9307becb821bc7a6df5989a98915d27b4925565a7efa9d50c28249a042d6d4ecd33f41f9e4894c0df52759bd59df69fc10a46df2c30a4ca09580694623e60e65b844d9c0c47c0eb0f947b7baccdc96d944b3629eeb26b9e466d8207f162c7b485a30eb96f22077c24bd869a777f037ac4d44fe625"}]}}]}}, {{0x9, 0x4, 0x9d, 0x9, 0x2, 0xea, 0xe, 0xb2, 0x28, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "7a2c87"}, {0x5, 0x24, 0x0, 0xc3d}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0x6, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0x200, 0x5, 0x0, 0x10, 0x7f, 0x3}]}, @hid_hid={0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0xa47}}], [{{0x9, 0x5, 0x6, 0x4, 0x10, 0x8, 0x7f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0x80, 0x2, 0x8, 0x8, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x3}]}}]}}, {{0x9, 0x4, 0x8, 0x8, 0x9, 0x3, 0x24, 0x2, 0x90, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x2e}, [@selector_unit={0x8, 0x24, 0x5, 0x3, 0x95, "d5c9bc"}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x4, 0x2, "e0bd4a"}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x2, 0x1, [0x1], 0x7f}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x0, 0x6, 0x6, 0x4}]}], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x10, 0x77, 0x40}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x8, 0xff, [@generic={0xca, 0x31, "6f13e8d1c17b50ddae27552f5c28b503fdcc20612da2af0497fc504987fcb3a4450d2f1b7fd359890097b72af1967f6743db8214b09f5fe9ac00e9cb76ec4f36b221ee663bfd8eb188abd42c3bcf9e7d56013eea524e0b186c63c355e8bb4d726ce3c43dfeea8e2e96e572f74e3cdf766f5c89372183c4cef2005d451ad946f3f782b8a4ef2a8f4912ece1af3584e842058fed0994e87599e73340c97825baf7e0a679080cdf670015b9bae9e62d61557e4b589a4a662a7cc473760024c20543d221a188fd525568"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0xba, 0xf3, 0x30, [@generic={0x1e, 0xf, "762a67ee6ba18b8cb0ae6d914ddeea3d95059b3fbd36a42b207319f5"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x6}]}}, {{0x9, 0x5, 0xf, 0x15, 0x400, 0x6, 0xd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x4}, @generic={0xfd, 0x2, "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"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x58, 0xa7, 0x40, 0x4c}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x9, 0x0, 0x1}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x6, 0x70, 0xf1}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0xaf, 0x8f, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x41a}, @generic={0xd2, 0x9, "c2ed68950d549fe51d75172d82bcc8d803b7ae2539fece0f8b9f7c271afc766b4ad54c5a626639c35a75014e5a149da8727cd1991760887fe9af097654cdf12333ccd590ad1d9bc31e4ec2e76e3f74f990445730a1db87b1e9975b3003e5f58510dd6516a972488d5233ccf51a33ff7ef4b805fbb39e05a4c63e30760aabe66206f9264663954b1a111627f910f0e470fe907e016dbb502f703f11ce8b9b36f09b8991c51563c8ac43c6d87201874559fb519e152b6b435f4d14e7157aa0020b950dd3560fdd69ff5d479d0b143e245d"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x1, 0x40, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x3}]}}]}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000001000)={0xa, 0x6, 0x201, 0x5, 0x8, 0x6, 0x40, 0x6}, 0x5, &(0x7f0000001040)={0x5, 0xf, 0x5}, 0x2, [{0xcb, &(0x7f0000000540)=ANY=[@ANYBLOB="cb0350399f14632958302da8ef9193f6cc7dcbd5e6ac23602023b329ffafea3e8a6c11890988f6f339a4d410c4921695c91ae1d6296925bbb54b3cab699d3b5782ab2b87fe499f44521a76558055b0068eefc1b4e229dadd316403f4458b393445c90ffc7c907e79a966a8a6cd6c1626f21889e26e6f7ee35db8b67ce915b54615a21ac677c7f46e0707763f4295b5eaff66867cc8eb4c0cb4281eac34f3b487b1bfdcf5a650cea3058538acfc37b995d1687908a5c6ff3bd51812f29d716db3c869d09c62cf4b87654175c69ca8cf0c9dfba4c85f4762780f23"]}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x1809}}]}) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) r0 = socket(0x200000000000011, 0x2, 0x10) bind$packet(r0, &(0x7f0000000000)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000240005040200"/20, @ANYRES32=r2, @ANYBLOB="00000100ffffffff000000000c00010063616b655f6d71"], 0x3c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000480)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) write(0xffffffffffffffff, &(0x7f0000000800)='3', 0x1) 1.609828244s ago: executing program 0 (id=242): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)='8', 0x1}], 0x1) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08001a00", @ANYRES32=r3, @ANYBLOB="08001b"], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x8, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x5, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xbbb3}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}], &(0x7f0000000140)='GPL\x00', 0x9, 0x87, &(0x7f0000000180)=""/135, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, r2, 0x8, &(0x7f0000000280)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x4, 0x1592, 0x4}, 0x10, 0x0, r4, 0x5, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0x4, 0x1}, {0x0, 0x1, 0x4, 0x2}, {0x0, 0x2, 0xe}, {0x4, 0x2, 0xb, 0x8}, {0x4, 0x3, 0x3, 0x8}], 0x10, 0x1}, 0x94) r5 = syz_open_dev$usbmon(&(0x7f0000000700), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r5, 0xb0dd000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x11, "0f1c1c9309dce9cc4fdabfef4dd196"}]}}}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0x5c, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x29, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "020007651442eb"}, {0x1, 0x2}, {0x0, 0x6, "e706d30b"}, {0x6, 0x2}, {0x0, 0x2}]}]}}}}}}}, 0x0) 1.608028498s ago: executing program 0 (id=244): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00000006c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000700)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000240)={0x9, 0x3, 0x1eb2b0b5, 0x280, 0x5, 0x10001, 0x2}) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x404c896}, 0x840) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000300)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000280)=0x6bbb, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc9, &(0x7f0000000380)=0x81000a2c, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/141, 0x8d}, 0xdb31}], 0x1, 0x40002142, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='erspan0\x00', 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x1f, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={r6, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r6, 0x3}, &(0x7f0000000180)=0x8) bind$inet6(r3, &(0x7f0000000780)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f00000007c0)={0xa, 0x4e22, 0x4, @private1, 0x80005}, 0x1c) r7 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000005c0)='veth0_to_team\x00', 0x10) bind$inet(r7, &(0x7f0000000600)={0x2, 0x0, @broadcast}, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) r9 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000640)='veth1\x00', 0x10) bind$inet(r9, &(0x7f0000000680)={0x2, 0x4e25, @multicast1}, 0x10) r10 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000800)=[@nested_amd_set_intercept={0x181, 0x30, {0x1, 0x1, 0x2, 0x1}}, @nested_create_vm={0x12d, 0x18}, @in_dx={0x69, 0x20, {0xaf7c, 0x3}}, @nested_load_syzos={0x136, 0xb8, {0x0, 0x9, [@in_dx={0x69, 0x20, {0xf70c}}, @out_dx={0x6a, 0x28, {0xc743, 0x7, 0x5b}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xbb, 0x0, 0x8001, 0x1}}, @nested_vmlaunch={0x12f, 0x18, 0x3}]}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0x26000, 0xb59a}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0xd8, {0x3, 0x37, [@nested_load_syzos={0x136, 0x20, {0x1, 0x16}}, @nested_load_syzos={0x136, 0x20, {0x0, 0xb}}, @uexit={0x0, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x4, 0x3}}, @wrmsr={0x65, 0x20, {0xae9, 0x3}}, @wr_crn={0x67, 0x20, {0x8, 0x2}}]}}, @nested_amd_invlpga={0x17d, 0x20, {0x3000, 0x6330}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xd9, 0x206, 0x0, 0x1}}], 0x2b0}) ioctl$KVM_NMI(r10, 0xae9a) 919.008538ms ago: executing program 1 (id=206): ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000200)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000280), 0x20000328) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f00000002c0)="4c00000012001f15b9409b849ac00a00a5784002fffff0000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 918.955897ms ago: executing program 2 (id=249): mkdir(0x0, 0x0) mkdir(&(0x7f00000016c0)='./bus\x00', 0xa5) mkdir(&(0x7f00000017c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001800)='./bus\x00', &(0x7f0000001840), 0x0, &(0x7f0000001880)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f00000018c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001900)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000001940)='./bus\x00') linkat(r0, &(0x7f00000019c0)='./file1\x00', r0, &(0x7f0000001a00)='./file0\x00', 0x0) unlink(&(0x7f0000001a40)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x402, 0x0) 917.844838ms ago: executing program 2 (id=250): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8}]}]}}, 0x0, 0x2e}, 0x28) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd2c, 0x4, {0x0, 0x0, 0x0, 0x0, {0xb, 0xffe3}, {0xa, 0xd}, {0xd, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x94}, 0x20004055) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f00000007c0)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000880)='./file0\x00', 0x2) accept4$tipc(r0, &(0x7f00000008c0)=@name, &(0x7f0000000900)=0x10, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000740), 0x40000000000009f, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@ipmr_newroute={0x1c, 0x18, 0x400, 0x70bd28, 0x25dfdbff, {0x80, 0x14, 0x80, 0x0, 0xff, 0x2, 0xfd}}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x24008044) 809.832407ms ago: executing program 2 (id=251): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000001c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb781", 0x4f}, {&(0x7f00000006c0)="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", 0x3f1}, {&(0x7f0000000ac0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) 809.551012ms ago: executing program 2 (id=252): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) 719.499448ms ago: executing program 2 (id=253): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x10083, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180)) mount(&(0x7f00000003c0)=@filename='./dev/sda1\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000440)='ext4\x00', 0x8410, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="d40000001000010400000000000000000001fefbb7506829ade3662300000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b400128009000100766c616e00000000a40002800600050088a800000c0002000000000004000000640003800c00010009000000840000000c000100ea060000050000000c00010001000080090000000c00010000000000020000000c000100ce960000ff0f00000c00010005000000010000000c000100000000e0070000000c000100fbffffffffff00000600010001000000100004800c000100ffff0000000000000600050088a800000600010003000000"], 0xd4}}, 0x4000) chdir(&(0x7f0000000480)='./mnt\x00') mkdirat(r0, &(0x7f0000000500)='./file1\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f0000000540), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) mkdir(&(0x7f0000000600)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000880), 0x0, &(0x7f00000006c0)={[{@default_permissions}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000700)='./bus\x00') mkdir(&(0x7f0000000740)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x50}}, 0x0) mkdir(&(0x7f0000000780)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000007c0)='./bus\x00', &(0x7f0000000800), 0x0, &(0x7f0000000840)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x0, 0x21) 719.116994ms ago: executing program 0 (id=254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x88a8, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 685.933825ms ago: executing program 2 (id=255): mkdir(&(0x7f0000000480)='./file0\x00', 0x0) mkdir(&(0x7f00000016c0)='./bus\x00', 0xa5) mkdir(&(0x7f00000017c0)='./file1\x00', 0x0) r0 = open(&(0x7f00000018c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001900)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000001940)='./bus\x00') linkat(r0, &(0x7f00000019c0)='./file1\x00', r0, &(0x7f0000001a00)='./file0\x00', 0x0) unlink(&(0x7f0000001a40)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x402, 0x0) 609.173567ms ago: executing program 3 (id=256): syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x8f5, @icmp={{0x5, 0x4, 0x0, 0x1b, 0x5c, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x29, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "020007651442eb"}, {0x1, 0x2}, {0x0, 0x6, "e706d30b"}, {0x6, 0x2}, {0x0, 0x2}]}]}}}}}}}, 0x0) 608.85838ms ago: executing program 3 (id=257): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0], &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffff5a, 0x0, 0x1}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./tracing\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000580)="723a732f70202e2f66696c65303a300c5c22b9", 0x13) syz_usb_disconnect(r2) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) r6 = socket$inet6(0xa, 0xa, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x6, 0x4) bind$inet6(r6, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/comedi5\x00', 0x4200, 0x0) ioctl$COMEDI_POLL(r7, 0x640f) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000380)=0x80000004, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000600), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f0000000640)=0x0) io_submit(r10, 0x1, &(0x7f0000000680)=[&(0x7f00000006c0)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r9, 0x0, 0x3000, 0x1000000, 0x0, 0x10}]) bind$inet6(r8, &(0x7f00000003c0)={0xa, 0x4e20, 0x1, @mcast2, 0x8}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f00000001c0)={&(0x7f0000000200)={0xa, 0x4e21, 0x7fffc, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000029000000040000005e00000000000000180000000000000029000000360000002f0000000000000095c586d7b60cd366c05f7b0977f4af8d7bb50422d335cec9bb52280447bcca83be6d855764446dbd83e0509f9e8003970a0d2e6e4d6ad3cc829f3b03ea5bb7a93f77bd6d00000085f3ddb27d72046983d0c00000000096cefd145d65d4b2c5363a860c5ddbc042f563c6e1b6"], 0x30}, 0xc4) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r11, 0x3b83, &(0x7f0000000700)={0x28, 0x0, r12, 0x0, 0x48, 0x8000000000000000, 0x7}) dup3(r3, r11, 0x80000) 137.918751ms ago: executing program 0 (id=258): mkdir(0x0, 0x0) mkdir(&(0x7f00000016c0)='./bus\x00', 0xa5) mkdir(&(0x7f00000017c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001800)='./bus\x00', &(0x7f0000001840), 0x0, &(0x7f0000001880)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f00000018c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001900)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000001940)='./bus\x00') linkat(r0, &(0x7f00000019c0)='./file1\x00', r0, &(0x7f0000001a00)='./file0\x00', 0x0) unlink(&(0x7f0000001a40)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x402, 0x0) 137.52684ms ago: executing program 0 (id=259): r0 = inotify_init() openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0xffffffffffffffbf) 78.849794ms ago: executing program 0 (id=260): r0 = inotify_init() r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xfffe, 0x1}, 0x6) write(r1, &(0x7f0000000100)="0d000000010001", 0x7) r2 = socket(0x2, 0x80805, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getpeername$netlink(r3, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340), 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000400)="a7", 0x1}], 0x1e}}], 0x2, 0x0) r4 = syz_open_dev$video(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000002c0)={0x1, 0x2, 0x2}) r5 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x40}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) readv(r0, &(0x7f0000001940)=[{&(0x7f0000000140)=""/37, 0x25}, {&(0x7f0000000780)=""/96, 0x60}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)}, {&(0x7f0000001840)=""/142, 0x8e}, {&(0x7f0000001900)=""/4, 0x4}], 0x6) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000340)=0x2) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000440)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 78.715547ms ago: executing program 1 (id=261): r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r0, 0x1) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./bus\x00', 0x109240, 0x0) 78.267286ms ago: executing program 1 (id=262): r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r0, 0x1) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./bus\x00', 0x109240, 0x0) (fail_nth: 1) 0s ago: executing program 1 (id=263): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getnexthop={0x17, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000008c}, 0x80) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000040)="001122334477a92ae5ddeeff8100df350806", 0x12, 0x20008010, &(0x7f0000000080)={0x11, 0x300, r1, 0x0}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x40000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/bonding_masters\x00', 0x1, 0x20) write(r4, &(0x7f0000000280)='+b', 0x2) 0s ago: executing program 1 (id=264): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000004c0)={'syz_tun\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000500), 0x12) listen(r2, 0x5) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="000008050010010b"], 0xa) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000805021001", @ANYRESHEX=r2, @ANYRESOCT=r1], 0xa) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:57376' (ED25519) to the list of known hosts. [ 40.327756][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 40.327775][ T42] audit: type=1400 audit(1793268732.189:138): avc: denied { name_bind } for pid=5764 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.361708][ T42] audit: type=1400 audit(1793268732.219:139): avc: denied { execute } for pid=5765 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.362226][ T42] audit: type=1400 audit(1793268732.219:140): avc: denied { execute_no_trans } for pid=5765 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.992931][ T42] audit: type=1400 audit(1793268734.849:141): avc: denied { mounton } for pid=5765 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 43.004570][ T42] audit: type=1400 audit(1793268734.869:142): avc: denied { mount } for pid=5765 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.008226][ T5765] cgroup: Unknown subsys name 'net' [ 43.017074][ T42] audit: type=1400 audit(1793268734.879:143): avc: denied { unmount } for pid=5765 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.240509][ T5765] cgroup: Unknown subsys name 'cpuset' [ 43.245855][ T5765] cgroup: Unknown subsys name 'rlimit' [ 43.382831][ T42] audit: type=1400 audit(1793268735.239:144): avc: denied { setattr } for pid=5765 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.383436][ T42] audit: type=1400 audit(1793268735.239:145): avc: denied { create } for pid=5765 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.383773][ T42] audit: type=1400 audit(1793268735.239:146): avc: denied { write } for pid=5765 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.384175][ T42] audit: type=1400 audit(1793268735.239:147): avc: denied { read } for pid=5765 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.439781][ T5770] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.252487][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.863714][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 47.863726][ T42] audit: type=1400 audit(1793268739.719:154): avc: denied { execmem } for pid=5773 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.088000][ T42] audit: type=1400 audit(1793268739.949:155): avc: denied { create } for pid=5777 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.088509][ T42] audit: type=1400 audit(1793268739.949:156): avc: denied { read write } for pid=5777 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.088927][ T42] audit: type=1400 audit(1793268739.949:157): avc: denied { open } for pid=5777 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.097250][ T42] audit: type=1400 audit(1793268739.959:158): avc: denied { ioctl } for pid=5777 comm="syz-executor" path="socket:[5907]" dev="sockfs" ino=5907 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.112177][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.114662][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.115348][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.117465][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.126745][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.127588][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.128243][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.129370][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.130073][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.130286][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.130855][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.132236][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.133113][ T42] audit: type=1400 audit(1793268739.989:159): avc: denied { read } for pid=5777 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.133467][ T42] audit: type=1400 audit(1793268739.989:160): avc: denied { open } for pid=5777 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.143627][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.144858][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.144965][ T42] audit: type=1400 audit(1793268739.999:161): avc: denied { mounton } for pid=5777 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.146383][ T42] audit: type=1400 audit(1793268740.009:162): avc: denied { module_request } for pid=5777 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.146490][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.147093][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.147813][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.147842][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.149679][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.150550][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.156361][ T42] audit: type=1400 audit(1793268740.019:163): avc: denied { mounton } for pid=5781 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.368738][ T5781] rdma_rxe: Failed to create IPv4 UDP tunnel [ 48.372019][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.372587][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.373280][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.380187][ T5777] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 48.410026][ T5789] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 48.477618][ T5782] infiniband rxe0: set active [ 48.479032][ T5782] infiniband rxe0: added rxe_eth0 [ 48.488168][ T5782] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 48.488189][ T5782] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 48.488211][ T5782] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 48.490230][ T64] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.512002][ T5782] RDS/IB: rxe0: added [ 48.512133][ T5782] smc: adding ib device rxe0 with port count 1 [ 48.512170][ T5782] smc: ib device rxe0 port 1 has no pnetid [ 48.531791][ T64] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.546316][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.647287][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.710656][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.711211][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.711278][ T5781] bridge_slave_0: entered allmulticast mode [ 48.712114][ T5781] bridge_slave_0: entered promiscuous mode [ 48.724261][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.724404][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.724465][ T5781] bridge_slave_1: entered allmulticast mode [ 48.725281][ T5781] bridge_slave_1: entered promiscuous mode [ 48.771078][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.773500][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.786211][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.813535][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.813611][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.813898][ T5777] bridge_slave_0: entered allmulticast mode [ 48.815199][ T5777] bridge_slave_0: entered promiscuous mode [ 48.840034][ T5781] team0: Port device team_slave_0 added [ 48.840212][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.840411][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.840715][ T5777] bridge_slave_1: entered allmulticast mode [ 48.841973][ T5777] bridge_slave_1: entered promiscuous mode [ 48.858172][ T5781] team0: Port device team_slave_1 added [ 48.907270][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.907414][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.907486][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.907570][ T5789] bridge_slave_0: entered allmulticast mode [ 48.908849][ T5789] bridge_slave_0: entered promiscuous mode [ 48.911354][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.911363][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.911377][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.912756][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.912764][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.912778][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.919041][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.919244][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.919359][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.919590][ T5789] bridge_slave_1: entered allmulticast mode [ 48.920425][ T5789] bridge_slave_1: entered promiscuous mode [ 48.954824][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.957217][ T5777] team0: Port device team_slave_0 added [ 48.958381][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.969327][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.972775][ T5781] hsr_slave_0: entered promiscuous mode [ 48.973806][ T5781] hsr_slave_1: entered promiscuous mode [ 48.977167][ T5777] team0: Port device team_slave_1 added [ 49.010326][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.010337][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.010351][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.012063][ T5789] team0: Port device team_slave_0 added [ 49.013770][ T5789] team0: Port device team_slave_1 added [ 49.018154][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.018164][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.018178][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.060937][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.060949][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.060963][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.061928][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.061936][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.061950][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.102461][ T5777] hsr_slave_0: entered promiscuous mode [ 49.103138][ T5777] hsr_slave_1: entered promiscuous mode [ 49.103658][ T5777] debugfs: 'hsr0' already exists in 'hsr' [ 49.103715][ T5777] Cannot create hsr debugfs directory [ 49.150253][ T5789] hsr_slave_0: entered promiscuous mode [ 49.150708][ T5789] hsr_slave_1: entered promiscuous mode [ 49.151061][ T5789] debugfs: 'hsr0' already exists in 'hsr' [ 49.151073][ T5789] Cannot create hsr debugfs directory [ 49.333533][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.339283][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.349468][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.353557][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.366727][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.369958][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.370661][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.373083][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.457287][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.461501][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.472591][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.475734][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.476189][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.478280][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.493548][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.495516][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.496577][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.496620][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.496764][ T5782] bridge_slave_0: entered allmulticast mode [ 49.497944][ T5782] bridge_slave_0: entered promiscuous mode [ 49.499476][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.499518][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.499576][ T5782] bridge_slave_1: entered allmulticast mode [ 49.500281][ T5782] bridge_slave_1: entered promiscuous mode [ 49.509401][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.509484][ T5781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.509825][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.509905][ T5781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.532813][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.543924][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.569292][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.571990][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.572572][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.574431][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.580439][ T5782] team0: Port device team_slave_0 added [ 49.581722][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.584177][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.584962][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.587786][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.589345][ T5782] team0: Port device team_slave_1 added [ 49.596568][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.596704][ T5777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.596921][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.596991][ T5777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.625733][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.625744][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.625759][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.629865][ T241] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.630770][ T241] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.632214][ T241] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.632696][ T241] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.670584][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.670596][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.670611][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.730596][ T5782] hsr_slave_0: entered promiscuous mode [ 49.731002][ T5782] hsr_slave_1: entered promiscuous mode [ 49.731290][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 49.731302][ T5782] Cannot create hsr debugfs directory [ 49.846689][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.895815][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.898296][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.940034][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.940130][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.944210][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.949646][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.949732][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.958519][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.958605][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.979257][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.979340][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.984747][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.990685][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.991448][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.997899][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.002915][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.009865][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.012589][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.013667][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.016274][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.061326][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.080865][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.080913][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.097648][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.097741][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.170353][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.175895][ T5779] Bluetooth: hci1: command tx timeout [ 50.175899][ T5139] Bluetooth: hci3: command tx timeout [ 50.176253][ T5779] Bluetooth: hci2: command tx timeout [ 50.176260][ T5139] Bluetooth: hci0: command tx timeout [ 50.200571][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.223414][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.237091][ T202] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.237189][ T202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.242377][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.242424][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.396598][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.436248][ T5781] veth0_vlan: entered promiscuous mode [ 50.440659][ T5781] veth1_vlan: entered promiscuous mode [ 50.460768][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.461709][ T5781] veth0_macvtap: entered promiscuous mode [ 50.469727][ T5781] veth1_macvtap: entered promiscuous mode [ 50.486052][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.495635][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.510804][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.511883][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.527977][ T5777] veth0_vlan: entered promiscuous mode [ 50.540457][ T5777] veth1_vlan: entered promiscuous mode [ 50.594101][ T5789] veth0_vlan: entered promiscuous mode [ 50.604192][ T202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.604206][ T202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.605254][ T5777] veth0_macvtap: entered promiscuous mode [ 50.609129][ T5777] veth1_macvtap: entered promiscuous mode [ 50.614887][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.615177][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.622365][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.622669][ T5789] veth1_vlan: entered promiscuous mode [ 50.643964][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.646577][ T202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.646595][ T202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.659075][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.696159][ T5789] veth0_macvtap: entered promiscuous mode [ 50.703003][ T5789] veth1_macvtap: entered promiscuous mode [ 50.717734][ T5782] veth0_vlan: entered promiscuous mode [ 50.746938][ T5781] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.749314][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.749331][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.749935][ T5782] veth1_vlan: entered promiscuous mode [ 50.751968][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.769205][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.781751][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.781770][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.808245][ T5782] veth0_macvtap: entered promiscuous mode [ 50.812144][ T5782] veth1_macvtap: entered promiscuous mode [ 50.814827][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.815028][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.815241][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.835688][ T202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.835703][ T202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.860176][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.862012][ T202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.862030][ T202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.870488][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.876378][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.876499][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.876554][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.970237][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.970258][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.985442][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.993150][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.993170][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.016593][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.016786][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.016899][ T5852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.017044][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.017064][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.017084][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.324451][ T5932] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 51.464535][ T5932] usb 5-1: device descriptor read/64, error -71 [ 51.664841][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.727134][ T5932] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 51.844838][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 51.849187][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 51.849226][ T10] usb 6-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 51.853710][ T10] usb 6-1: string descriptor 0 read error: -22 [ 51.853806][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.871602][ T10] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 51.871663][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 51.871840][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 51.874600][ T5932] usb 5-1: device descriptor read/64, error -71 [ 51.890518][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 51.893959][ T10] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 51.893999][ T10] usb 6-1: media controller created [ 51.894198][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 51.894206][ T10] dw2102: i2c transfer failed. [ 51.894220][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 51.894227][ T10] dw2102: i2c transfer failed. [ 51.894234][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 51.894242][ T10] dw2102: i2c transfer failed. [ 51.894248][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 51.894254][ T10] dw2102: i2c transfer failed. [ 51.894260][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 51.894266][ T10] dw2102: i2c transfer failed. [ 51.894272][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 51.894278][ T10] dw2102: i2c transfer failed. [ 51.894282][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 51.902779][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 51.923184][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 51.923196][ T10] dw2102: command 0x0e transfer failed. [ 51.923200][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 51.923206][ T10] dw2102: command 0x0e transfer failed. [ 51.975024][ T5932] usb usb5-port1: attempt power cycle [ 52.110939][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 52.145891][ T6007] FAULT_INJECTION: forcing a failure. [ 52.145891][ T6007] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.145920][ T6007] CPU: 0 UID: 0 PID: 6007 Comm: syz.2.15 Not tainted syzkaller #0 PREEMPT(full) [ 52.145944][ T6007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.145954][ T6007] Call Trace: [ 52.145962][ T6007] [ 52.145970][ T6007] dump_stack_lvl+0x100/0x190 [ 52.146007][ T6007] should_fail_ex.cold+0x5/0xa [ 52.146036][ T6007] _copy_from_user+0x2e/0xd0 [ 52.146060][ T6007] input_event_from_user+0x123/0x310 [ 52.146087][ T6007] ? __pfx_input_event_from_user+0x10/0x10 [ 52.146114][ T6007] ? __pfx___might_resched+0x10/0x10 [ 52.146139][ T6007] ? input_inject_event+0x1a8/0x390 [ 52.146167][ T6007] evdev_write+0x342/0x610 [ 52.146199][ T6007] ? __pfx_evdev_write+0x10/0x10 [ 52.146226][ T6007] ? bpf_lsm_file_permission+0x9/0x10 [ 52.146253][ T6007] ? security_file_permission+0x76/0x210 [ 52.146284][ T6007] ? rw_verify_area+0xce/0x6d0 [ 52.146312][ T6007] vfs_write+0x2aa/0x1050 [ 52.146331][ T6007] ? __pfx_evdev_write+0x10/0x10 [ 52.146354][ T6007] ? lock_acquire+0x1d1/0x380 [ 52.146379][ T6007] ? __fget_files+0x34/0x3d0 [ 52.146401][ T6007] ? __pfx_vfs_write+0x10/0x10 [ 52.146427][ T6007] ? find_held_lock+0x2b/0x80 [ 52.146447][ T6007] ? __fget_files+0x215/0x3d0 [ 52.146466][ T6007] ? __fget_files+0x215/0x3d0 [ 52.146492][ T6007] ? __fget_files+0x21f/0x3d0 [ 52.146521][ T6007] ksys_write+0x1f8/0x250 [ 52.146539][ T6007] ? __pfx_ksys_write+0x10/0x10 [ 52.146563][ T6007] do_syscall_64+0x123/0x790 [ 52.146591][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.146610][ T6007] RIP: 0033:0x7f2eaab9f559 [ 52.146626][ T6007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.146642][ T6007] RSP: 002b:00007f2eaba98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.146661][ T6007] RAX: ffffffffffffffda RBX: 00007f2eaae25fa0 RCX: 00007f2eaab9f559 [ 52.146672][ T6007] RDX: 00000000fffffee8 RSI: 00002000000007c0 RDI: 0000000000000004 [ 52.146685][ T6007] RBP: 00007f2eaba98090 R08: 0000000000000000 R09: 0000000000000000 [ 52.146695][ T6007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.146706][ T6007] R13: 00007f2eaae26038 R14: 00007f2eaae25fa0 R15: 00007fffa026fec8 [ 52.146730][ T6007] [ 52.225491][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 52.225510][ T10] dw2102: command 0x0e transfer failed. [ 52.225516][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 52.225525][ T10] dw2102: command 0x0e transfer failed. [ 52.225531][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 52.225541][ T10] dw2102: command 0x51 transfer failed. [ 52.226995][ T5977] dvb-usb: bulk message failed: -22 (3/0) [ 52.227011][ T5977] dw2102: i2c transfer failed. [ 52.254791][ T5139] Bluetooth: hci0: command tx timeout [ 52.254820][ T5139] Bluetooth: hci3: command tx timeout [ 52.255552][ T5792] Bluetooth: hci2: command tx timeout [ 52.255580][ T5792] Bluetooth: hci1: command tx timeout [ 52.262810][ T10] DVB: Unable to find symbol ds3000_attach() [ 52.262821][ T10] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 52.314391][ T10] rc_core: IR keymap rc-su3000 not found [ 52.314407][ T10] Registered IR keymap rc-empty [ 52.314427][ T5932] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 52.319526][ T10] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 52.321507][ T10] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input5 [ 52.327471][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 52.327489][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 52.327501][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 52.339345][ T10] usb 6-1: USB disconnect, device number 2 [ 52.351126][ T5932] usb 5-1: device descriptor read/8, error -71 [ 52.391856][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 52.604520][ T5932] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 52.635921][ T5932] usb 5-1: device descriptor read/8, error -71 [ 52.745871][ T5932] usb usb5-port1: unable to enumerate USB device [ 52.866889][ T42] kauditd_printk_skb: 90 callbacks suppressed [ 52.867017][ T42] audit: type=1400 audit(1793268744.719:254): avc: denied { open } for pid=6027 comm="syz.1.21" path="/dev/ptp1" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.869054][ T42] audit: type=1400 audit(1793268744.729:255): avc: denied { ioctl } for pid=6027 comm="syz.1.21" path="/dev/ptp1" dev="devtmpfs" ino=1287 ioctlcmd=0xc0603d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 53.031855][ T6032] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 53.032220][ T6032] batman_adv: batadv0: Adding interface: gretap1 [ 53.032228][ T6032] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.032245][ T6032] batman_adv: batadv0: Interface activated: gretap1 [ 53.035413][ T42] audit: type=1400 audit(1793268744.899:256): avc: denied { ioctl } for pid=6031 comm="syz.1.23" path="socket:[8104]" dev="sockfs" ino=8104 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 53.096766][ T42] audit: type=1400 audit(1793268744.959:257): avc: denied { map_create } for pid=6036 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.097354][ T42] audit: type=1400 audit(1793268744.959:258): avc: denied { map_read map_write } for pid=6036 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.120682][ T42] audit: type=1400 audit(1793268744.979:259): avc: denied { read write } for pid=6038 comm="syz.1.27" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 53.120715][ T42] audit: type=1400 audit(1793268744.979:260): avc: denied { open } for pid=6038 comm="syz.1.27" path="/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 53.141114][ T42] audit: type=1400 audit(1793268745.009:261): avc: denied { ioctl } for pid=6038 comm="syz.1.27" path="/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xc138fd09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 53.248129][ T42] audit: type=1400 audit(1793268745.109:262): avc: denied { read write } for pid=6046 comm="syz.1.31" name="video1" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 53.248531][ T42] audit: type=1400 audit(1793268745.109:263): avc: denied { open } for pid=6046 comm="syz.1.31" path="/dev/video1" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 53.292957][ T6051] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.294913][ T6051] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 53.294974][ T6051] overlayfs: overlapping lowerdir path [ 53.302902][ T6054] jffs2: notice: (6054) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 53.452114][ T6065] smc: net device lo applied user defined pnetid SYZ2 [ 53.668649][ T6097] EXT4-fs warning (device sda1): ext4_group_extend:1864: can't shrink FS - resize aborted [ 53.946112][ T6131] ./mnt: Can't lookup blockdev [ 54.042480][ T6139] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 54.100739][ T6143] ip_tables: iptables: counters copy to user failed while replacing table [ 54.110543][ T6147] capability: warning: `syz.0.69' uses 32-bit capabilities (legacy support in use) [ 54.119182][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.68'. [ 54.205664][ T6161] bridge0: port 3(syz_tun) entered blocking state [ 54.206840][ T6161] bridge0: port 3(syz_tun) entered disabled state [ 54.207039][ T6161] syz_tun: entered allmulticast mode [ 54.208675][ T6161] syz_tun: entered promiscuous mode [ 54.209437][ T6161] bridge0: port 3(syz_tun) entered blocking state [ 54.209533][ T6161] bridge0: port 3(syz_tun) entered forwarding state [ 54.213404][ T6161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6161 comm=syz.3.74 [ 54.248196][ T6155] Zero length message leads to an empty skb [ 54.289469][ T6168] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 54.290572][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'. [ 54.305154][ T6168] team0: Port device team_slave_0 removed [ 54.334493][ T5139] Bluetooth: hci3: command tx timeout [ 54.344453][ T5792] Bluetooth: hci2: command tx timeout [ 54.344475][ T5792] Bluetooth: hci0: command tx timeout [ 54.344559][ T5139] Bluetooth: hci1: command tx timeout [ 54.717169][ T6189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.84'. [ 54.734734][ T5856] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 54.791324][ T6196] netlink: 'syz.3.87': attribute type 1 has an invalid length. [ 54.791339][ T6196] netlink: 96 bytes leftover after parsing attributes in process `syz.3.87'. [ 54.860251][ T6200] x_tables: duplicate underflow at hook 2 [ 54.861466][ T6200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.87'. [ 54.885681][ T5856] usb 5-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 54.887466][ T5856] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 54.887507][ T5856] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 54.887529][ T5856] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 54.887557][ T5856] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 54.887578][ T5856] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 54.889421][ T5856] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 54.889457][ T5856] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 54.889479][ T5856] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 54.889501][ T5856] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 54.889522][ T5856] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 54.890485][ T5856] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 54.890520][ T5856] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 54.890542][ T5856] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 54.890568][ T5856] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 54.890589][ T5856] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 54.893301][ T5856] usb 5-1: string descriptor 0 read error: -22 [ 54.893409][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.907644][ T5856] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 55.110143][ T5856] usb 5-1: USB disconnect, device number 6 [ 55.269415][ T6213] netlink: 'syz.2.93': attribute type 1 has an invalid length. [ 55.866052][ T6233] FAULT_INJECTION: forcing a failure. [ 55.866052][ T6233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.866078][ T6233] CPU: 2 UID: 0 PID: 6233 Comm: syz.1.100 Not tainted syzkaller #0 PREEMPT(full) [ 55.866099][ T6233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.866110][ T6233] Call Trace: [ 55.866116][ T6233] [ 55.866124][ T6233] dump_stack_lvl+0x100/0x190 [ 55.866165][ T6233] should_fail_ex.cold+0x5/0xa [ 55.866195][ T6233] _copy_from_user+0x2e/0xd0 [ 55.866218][ T6233] input_event_from_user+0x123/0x310 [ 55.866246][ T6233] ? __pfx_input_event_from_user+0x10/0x10 [ 55.866273][ T6233] ? __pfx___might_resched+0x10/0x10 [ 55.866297][ T6233] ? input_inject_event+0x1a8/0x390 [ 55.866325][ T6233] evdev_write+0x342/0x610 [ 55.866356][ T6233] ? __pfx_evdev_write+0x10/0x10 [ 55.866384][ T6233] ? bpf_lsm_file_permission+0x9/0x10 [ 55.866410][ T6233] ? security_file_permission+0x76/0x210 [ 55.866441][ T6233] ? rw_verify_area+0xce/0x6d0 [ 55.866470][ T6233] vfs_write+0x2aa/0x1050 [ 55.866488][ T6233] ? __pfx_evdev_write+0x10/0x10 [ 55.866513][ T6233] ? lock_acquire+0x1d1/0x380 [ 55.866537][ T6233] ? __fget_files+0x34/0x3d0 [ 55.866559][ T6233] ? __pfx_vfs_write+0x10/0x10 [ 55.866586][ T6233] ? find_held_lock+0x2b/0x80 [ 55.866627][ T6233] ? __fget_files+0x215/0x3d0 [ 55.866648][ T6233] ? __fget_files+0x215/0x3d0 [ 55.866671][ T6233] ? __fget_files+0x21f/0x3d0 [ 55.866697][ T6233] ksys_write+0x1f8/0x250 [ 55.866713][ T6233] ? __pfx_ksys_write+0x10/0x10 [ 55.866738][ T6233] do_syscall_64+0x123/0x790 [ 55.866759][ T6233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.866778][ T6233] RIP: 0033:0x7f1bdef9f559 [ 55.866794][ T6233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.866810][ T6233] RSP: 002b:00007f1bdfe7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.866829][ T6233] RAX: ffffffffffffffda RBX: 00007f1bdf225fa0 RCX: 00007f1bdef9f559 [ 55.866842][ T6233] RDX: 00000000fffffee8 RSI: 00002000000007c0 RDI: 0000000000000004 [ 55.866853][ T6233] RBP: 00007f1bdfe7c090 R08: 0000000000000000 R09: 0000000000000000 [ 55.866865][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.866876][ T6233] R13: 00007f1bdf226038 R14: 00007f1bdf225fa0 R15: 00007ffe561b1498 [ 55.866916][ T6233] [ 56.008842][ T6246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.106'. [ 56.011565][ T6246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.018757][ T6246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.136158][ T6254] FAULT_INJECTION: forcing a failure. [ 56.136158][ T6254] name failslab, interval 1, probability 0, space 0, times 0 [ 56.136184][ T6254] CPU: 0 UID: 0 PID: 6254 Comm: syz.2.109 Not tainted syzkaller #0 PREEMPT(full) [ 56.136205][ T6254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.136222][ T6254] Call Trace: [ 56.136228][ T6254] [ 56.136236][ T6254] dump_stack_lvl+0x100/0x190 [ 56.136269][ T6254] should_fail_ex.cold+0x5/0xa [ 56.136296][ T6254] should_failslab+0xc2/0x120 [ 56.136316][ T6254] __kmalloc_noprof+0xfc/0x840 [ 56.136342][ T6254] ? tomoyo_encode2+0xfb/0x3c0 [ 56.136364][ T6254] tomoyo_encode2+0xfb/0x3c0 [ 56.136385][ T6254] tomoyo_encode+0x29/0x50 [ 56.136401][ T6254] tomoyo_realpath_from_path+0x18c/0x690 [ 56.136424][ T6254] tomoyo_path_number_perm+0x23c/0x580 [ 56.136448][ T6254] ? tomoyo_path_number_perm+0x22e/0x580 [ 56.136475][ T6254] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 56.136539][ T6254] ? __lock_acquire+0x5c0/0x1f40 [ 56.136573][ T6254] ? __fget_files+0x34/0x3d0 [ 56.136594][ T6254] ? find_held_lock+0x2b/0x80 [ 56.136612][ T6254] ? hook_file_ioctl_common+0x140/0x440 [ 56.136638][ T6254] ? __fget_files+0x21f/0x3d0 [ 56.136662][ T6254] security_file_ioctl+0xd3/0x230 [ 56.136690][ T6254] __x64_sys_ioctl+0xb7/0x210 [ 56.136720][ T6254] do_syscall_64+0x123/0x790 [ 56.136739][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.136757][ T6254] RIP: 0033:0x7f2eaab9f559 [ 56.136773][ T6254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.136807][ T6254] RSP: 002b:00007f2eaba98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.136824][ T6254] RAX: ffffffffffffffda RBX: 00007f2eaae25fa0 RCX: 00007f2eaab9f559 [ 56.136836][ T6254] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 56.136846][ T6254] RBP: 00007f2eaba98090 R08: 0000000000000000 R09: 0000000000000000 [ 56.136856][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.136866][ T6254] R13: 00007f2eaae26038 R14: 00007f2eaae25fa0 R15: 00007fffa026fec8 [ 56.136891][ T6254] [ 56.136948][ T6254] ERROR: Out of memory at tomoyo_realpath_from_path. [ 56.351147][ T6267] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 56.351171][ T6267] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 56.351182][ T6267] PKCS7: Unsupported data type 106 [ 56.414424][ T5783] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 56.414474][ T5139] Bluetooth: hci1: command tx timeout [ 56.414503][ T5139] Bluetooth: hci0: command tx timeout [ 56.414523][ T5139] Bluetooth: hci2: command tx timeout [ 56.414541][ T5139] Bluetooth: hci3: command tx timeout [ 56.587570][ T5783] usb 7-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 56.588445][ T5783] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 56.588500][ T5783] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 56.588522][ T5783] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 56.588541][ T5783] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 56.588562][ T5783] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 56.590751][ T5783] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 56.590786][ T5783] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 56.590808][ T5783] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 56.590827][ T5783] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 56.590846][ T5783] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 56.591545][ T6277] FAULT_INJECTION: forcing a failure. [ 56.591545][ T6277] name failslab, interval 1, probability 0, space 0, times 0 [ 56.591568][ T6277] CPU: 3 UID: 0 PID: 6277 Comm: syz.1.119 Not tainted syzkaller #0 PREEMPT(full) [ 56.591587][ T6277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.591597][ T6277] Call Trace: [ 56.591604][ T6277] [ 56.591611][ T6277] dump_stack_lvl+0x100/0x190 [ 56.591644][ T6277] should_fail_ex.cold+0x5/0xa [ 56.591669][ T6277] should_failslab+0xc2/0x120 [ 56.591696][ T6277] kmem_cache_alloc_noprof+0x92/0x6a0 [ 56.591713][ T5783] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 56.591724][ T6277] ? dst_alloc+0x99/0x1a0 [ 56.591744][ T5783] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 56.591748][ T6277] dst_alloc+0x99/0x1a0 [ 56.591764][ T5783] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 56.591768][ T6277] rt_dst_alloc+0x35/0x3a0 [ 56.591783][ T5783] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 56.591788][ T6277] ip_route_input_slow+0x15b8/0x3f80 [ 56.591802][ T5783] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 56.591815][ T6277] ? __pfx_ip_route_input_slow+0x10/0x10 [ 56.591840][ T6277] ? __lock_acquire+0x5c0/0x1f40 [ 56.591889][ T6277] ip_route_input_noref+0x122/0x2e0 [ 56.591914][ T6277] ? __pfx_ip_route_input_noref+0x10/0x10 [ 56.591942][ T6277] ? __pfx_ip_rcv_finish+0x10/0x10 [ 56.591969][ T6277] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 56.592011][ T6277] ip_rcv_finish_core+0x462/0x2c50 [ 56.592044][ T6277] ip_rcv+0x1c0/0x3c0 [ 56.592070][ T6277] ? __pfx_ip_rcv+0x10/0x10 [ 56.592093][ T6277] __netif_receive_skb_one_core+0x197/0x1e0 [ 56.592124][ T6277] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 56.592156][ T6277] ? lock_acquire+0x1d1/0x380 [ 56.592188][ T6277] __netif_receive_skb+0x1f/0x120 [ 56.592209][ T6277] netif_receive_skb+0x139/0x7d0 [ 56.592226][ T6277] ? __pfx_netif_receive_skb+0x10/0x10 [ 56.592255][ T6277] tun_rx_batched.isra.0+0x3f6/0x750 [ 56.592284][ T6277] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 56.592315][ T6277] ? tun_get_user+0x1dcd/0x3ee0 [ 56.592346][ T6277] tun_get_user+0x1f62/0x3ee0 [ 56.592381][ T6277] ? __lock_acquire+0x5c0/0x1f40 [ 56.592406][ T6277] ? __pfx_tun_get_user+0x10/0x10 [ 56.592433][ T6277] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 56.592472][ T6277] ? find_held_lock+0x2b/0x80 [ 56.592519][ T6277] ? tun_get+0x191/0x370 [ 56.592541][ T6277] ? tun_get+0x191/0x370 [ 56.592571][ T6277] tun_chr_write_iter+0xdc/0x200 [ 56.592600][ T6277] vfs_write+0x6af/0x1050 [ 56.592619][ T6277] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 56.592647][ T6277] ? __pfx_vfs_write+0x10/0x10 [ 56.592673][ T6277] ? find_held_lock+0x2b/0x80 [ 56.592715][ T6277] ksys_write+0x12a/0x250 [ 56.592732][ T6277] ? __pfx_ksys_write+0x10/0x10 [ 56.592758][ T6277] do_syscall_64+0x123/0x790 [ 56.592780][ T6277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.592799][ T6277] RIP: 0033:0x7f1bdef5fd8e [ 56.592816][ T6277] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 56.592833][ T6277] RSP: 002b:00007f1bdfe7bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.592852][ T6277] RAX: ffffffffffffffda RBX: 00007f1bdfe7c6c0 RCX: 00007f1bdef5fd8e [ 56.592864][ T6277] RDX: 000000000000006a RSI: 00002000000000c0 RDI: 00000000000000c8 [ 56.592875][ T6277] RBP: 00007f1bdfe7c090 R08: 0000000000000000 R09: 0000000000000000 [ 56.592886][ T6277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.592897][ T6277] R13: 00007f1bdf226038 R14: 00007f1bdf225fa0 R15: 00007ffe561b1498 [ 56.592923][ T6277] [ 56.595014][ T5783] usb 7-1: string descriptor 0 read error: -22 [ 56.595105][ T5783] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.603037][ T5783] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 56.806064][ T5783] usb 7-1: USB disconnect, device number 2 [ 57.014756][ T6256] adutux: No device or device unplugged -19 [ 57.233495][ T6292] mmap: syz.0.125 (6292) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.741139][ T5139] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 57.891272][ T42] kauditd_printk_skb: 82 callbacks suppressed [ 57.891286][ T42] audit: type=1400 audit(1793268749.749:346): avc: denied { bind } for pid=6360 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.891668][ T42] audit: type=1400 audit(1793268749.749:347): avc: denied { setopt } for pid=6360 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.892073][ T42] audit: type=1400 audit(1793268749.749:348): avc: denied { accept } for pid=6360 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.892543][ T42] audit: type=1400 audit(1793268749.749:349): avc: denied { write } for pid=6360 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.893564][ T42] audit: type=1400 audit(1793268749.749:350): avc: denied { read } for pid=6360 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.921889][ T6367] netlink: 'syz.1.144': attribute type 30 has an invalid length. [ 58.017328][ T42] audit: type=1400 audit(1793268749.879:351): avc: denied { read } for pid=6377 comm="syz.1.147" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.017360][ T42] audit: type=1400 audit(1793268749.879:352): avc: denied { open } for pid=6377 comm="syz.1.147" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.017745][ T42] audit: type=1400 audit(1793268749.879:353): avc: denied { map } for pid=6377 comm="syz.1.147" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.034287][ T42] audit: type=1400 audit(1793268749.889:354): avc: denied { write } for pid=6376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.085051][ T42] audit: type=1400 audit(1793268749.939:355): avc: denied { write } for pid=6381 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.124119][ T5492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.184422][ T2271] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 58.330160][ T6394] Bluetooth: (null): Too short H5 packet [ 58.334618][ T2271] usb 5-1: Using ep0 maxpacket: 32 [ 58.335848][ T2271] usb 5-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 58.337193][ T2271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 58.337211][ T2271] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.337224][ T2271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 58.337237][ T2271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 58.339253][ T2271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.339267][ T2271] usb 5-1: Product: syz [ 58.339274][ T2271] usb 5-1: Manufacturer: syz [ 58.339282][ T2271] usb 5-1: SerialNumber: syz [ 58.340965][ T2271] usb 5-1: config 0 descriptor?? [ 58.341519][ T6371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 58.343743][ T2271] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input6 [ 58.411731][ C0] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 58.435003][ T6402] warning: `syz.2.153' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.495794][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 58.551034][ T5856] usb 5-1: USB disconnect, device number 7 [ 58.551164][ C0] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 58.655601][ T6425] loop0: detected capacity change from 0 to 4096 [ 58.692218][ T6425] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 58.692238][ T6425] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 58.692245][ T6425] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 58.692272][ T6425] loop0: [ 58.884544][ T62] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.970886][ T6435] capability: warning: `syz.2.164' uses deprecated v2 capabilities in a way that may be insecure [ 58.980166][ T6437] FAULT_INJECTION: forcing a failure. [ 58.980166][ T6437] name failslab, interval 1, probability 0, space 0, times 0 [ 58.980185][ T6437] CPU: 1 UID: 0 PID: 6437 Comm: syz.1.165 Not tainted syzkaller #0 PREEMPT(full) [ 58.980198][ T6437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.980205][ T6437] Call Trace: [ 58.980209][ T6437] [ 58.980214][ T6437] dump_stack_lvl+0x100/0x190 [ 58.980238][ T6437] should_fail_ex.cold+0x5/0xa [ 58.980256][ T6437] should_failslab+0xc2/0x120 [ 58.980269][ T6437] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 58.980288][ T6437] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 58.980306][ T6437] ? ovl_mount_dir+0x26/0x1c0 [ 58.980323][ T6437] kstrdup+0x51/0xe0 [ 58.980336][ T6437] ovl_mount_dir+0x26/0x1c0 [ 58.980352][ T6437] ovl_parse_param+0x1136/0x1580 [ 58.980367][ T6437] ? selinux_fs_context_parse_param+0xd8/0x130 [ 58.980382][ T6437] ? __pfx_ovl_parse_param+0x10/0x10 [ 58.980399][ T6437] ? static_key_count+0x5a/0x70 [ 58.980413][ T6437] ? __pfx_ovl_parse_param+0x10/0x10 [ 58.980426][ T6437] vfs_parse_fs_param+0x200/0x3b0 [ 58.980445][ T6437] vfs_parse_fs_qstr+0x138/0x1c0 [ 58.980462][ T6437] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 58.980506][ T6437] ? ovl_next_opt+0x143/0x1c0 [ 58.980520][ T6437] ? __pfx_ovl_next_opt+0x10/0x10 [ 58.980534][ T6437] vfs_parse_monolithic_sep+0x195/0x210 [ 58.980552][ T6437] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 58.980571][ T6437] ? alloc_fs_context+0x655/0xf40 [ 58.980590][ T6437] path_mount+0x77f/0x2850 [ 58.980608][ T6437] ? __pfx_path_mount+0x10/0x10 [ 58.980623][ T6437] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.980644][ T6437] ? putname+0xb1/0x110 [ 58.980659][ T6437] ? kmem_cache_free+0x127/0x6c0 [ 58.980678][ T6437] ? __x64_sys_mount+0x293/0x310 [ 58.980694][ T6437] __x64_sys_mount+0x293/0x310 [ 58.980711][ T6437] ? __pfx___x64_sys_mount+0x10/0x10 [ 58.980731][ T6437] do_syscall_64+0x123/0x790 [ 58.980743][ T6437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.980755][ T6437] RIP: 0033:0x7f1bdef9f559 [ 58.980765][ T6437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.980776][ T6437] RSP: 002b:00007f1bdfe7c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 58.980788][ T6437] RAX: ffffffffffffffda RBX: 00007f1bdf225fa0 RCX: 00007f1bdef9f559 [ 58.980795][ T6437] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000000000 [ 58.980802][ T6437] RBP: 00007f1bdfe7c090 R08: 00002000000003c0 R09: 0000000000000000 [ 58.980809][ T6437] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 58.980815][ T6437] R13: 00007f1bdf226038 R14: 00007f1bdf225fa0 R15: 00007ffe561b1498 [ 58.980829][ T6437] [ 59.057299][ T62] usb 8-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 59.058186][ T62] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 59.058919][ T62] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 59.060641][ T62] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.060658][ T62] usb 8-1: Product: syz [ 59.060670][ T62] usb 8-1: Manufacturer: syz [ 59.060682][ T62] usb 8-1: SerialNumber: syz [ 59.074169][ T62] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 59.083515][ T62] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 59.099683][ T62] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 59.378531][ T62] usb 8-1: USB disconnect, device number 2 [ 59.387836][ T62] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 59.392343][ T62] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 59.393011][ T62] ti_usb_3410_5052 8-1:2.0: device disconnected [ 59.443896][ T5932] rxe_eth0 speed is unknown, defaulting to 1000 [ 59.974003][ T6474] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 59.974027][ T6474] overlayfs: failed to set xattr on upper [ 59.974095][ T6474] overlayfs: ...falling back to redirect_dir=nofollow. [ 59.974103][ T6474] overlayfs: ...falling back to index=off. [ 59.974110][ T6474] overlayfs: ...falling back to uuid=null. [ 59.974125][ T6474] overlayfs: maximum fs stacking depth exceeded [ 60.163865][ T6484] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 60.198851][ T6486] FAULT_INJECTION: forcing a failure. [ 60.198851][ T6486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.198871][ T6486] CPU: 2 UID: 0 PID: 6486 Comm: syz.1.181 Not tainted syzkaller #0 PREEMPT(full) [ 60.198891][ T6486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.198901][ T6486] Call Trace: [ 60.198907][ T6486] [ 60.198913][ T6486] dump_stack_lvl+0x100/0x190 [ 60.198944][ T6486] should_fail_ex.cold+0x5/0xa [ 60.198972][ T6486] _copy_from_user+0x2e/0xd0 [ 60.198993][ T6486] ctl_ioctl+0xf3/0xcc0 [ 60.199014][ T6486] ? __pfx_ctl_ioctl+0x10/0x10 [ 60.199043][ T6486] ? selinux_file_ioctl+0x1e0/0x290 [ 60.199084][ T6486] dm_ctl_ioctl+0x22/0x30 [ 60.199099][ T6486] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 60.199114][ T6486] __x64_sys_ioctl+0x18e/0x210 [ 60.199134][ T6486] do_syscall_64+0x123/0x790 [ 60.199147][ T6486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.199159][ T6486] RIP: 0033:0x7f1bdef9f559 [ 60.199169][ T6486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.199184][ T6486] RSP: 002b:00007f1bdfe7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.199196][ T6486] RAX: ffffffffffffffda RBX: 00007f1bdf225fa0 RCX: 00007f1bdef9f559 [ 60.199204][ T6486] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 60.199211][ T6486] RBP: 00007f1bdfe7c090 R08: 0000000000000000 R09: 0000000000000000 [ 60.199217][ T6486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.199224][ T6486] R13: 00007f1bdf226038 R14: 00007f1bdf225fa0 R15: 00007ffe561b1498 [ 60.199239][ T6486] [ 60.338534][ T6492] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 60.743509][ T6506] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 60.773851][ T6499] cgroup: fork rejected by pids controller in /syz1 [ 60.813296][ T6593] ip_tables: iptables: counters copy to user failed while replacing table [ 60.815117][ T6593] ip_tables: iptables: counters copy to user failed while replacing table [ 60.950888][ T6618] netlink: 'syz.3.196': attribute type 1 has an invalid length. [ 60.980929][ T6618] bond1: (slave bridge1): making interface the new active one [ 60.981633][ T6618] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 61.290414][ T5826] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.295039][ T5883] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 61.380023][ T5826] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.438262][ T5779] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 61.454911][ T5883] usb 7-1: Using ep0 maxpacket: 8 [ 61.455497][ T5883] usb 7-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 61.461117][ T5883] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 61.461155][ T5883] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 61.461177][ T5883] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 61.462082][ T5883] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 61.462116][ T5883] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 61.462138][ T5883] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 61.463134][ T5883] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 61.463167][ T5883] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 61.463189][ T5883] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 61.469224][ T5883] usb 7-1: string descriptor 0 read error: -22 [ 61.469320][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.476654][ T5883] adutux 7-1:168.0: interrupt endpoints not found [ 61.503287][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.507016][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.507593][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.508275][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.508338][ T5826] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.508755][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.586286][ T5826] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.685686][ T62] usb 7-1: USB disconnect, device number 3 [ 61.719309][ T5826] bridge_slave_1: left allmulticast mode [ 61.719342][ T5826] bridge_slave_1: left promiscuous mode [ 61.720759][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.735724][ T5826] bridge_slave_0: left allmulticast mode [ 61.735746][ T5826] bridge_slave_0: left promiscuous mode [ 61.735904][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.111470][ T5826] batman_adv: batadv0: Interface deactivated: gretap1 [ 62.200106][ T5826] batman_adv: batadv0: Removing interface: gretap1 [ 62.303825][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.319371][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.321900][ T5826] bond0 (unregistering): Released all slaves [ 62.348811][ T6649] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.418603][ T6679] overlayfs: failed to resolve './file0': -2 [ 62.549731][ T5492] 8021q: adding VLAN 0 to HW filter on device eth2 [ 62.562139][ T6692] Console: switching to colour dummy device 80x25 [ 62.676020][ T6705] overlay: Unknown parameter 'dont_measure' [ 62.679197][ T6705] Bluetooth: MGMT ver 1.23 [ 62.681977][ T6705] overlay: Unknown parameter 'dont_measure' [ 62.798396][ T6721] process 'syz.2.225' launched './file0' with NULL argv: empty string added [ 62.826604][ T5826] hsr_slave_0: left promiscuous mode [ 62.828293][ T5826] hsr_slave_1: left promiscuous mode [ 62.829093][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.829110][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.830025][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.830041][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.837751][ T5826] veth1_macvtap: left promiscuous mode [ 62.837790][ T5826] veth0_macvtap: left promiscuous mode [ 62.837900][ T5826] veth1_vlan: left promiscuous mode [ 62.837955][ T5826] veth0_vlan: left promiscuous mode [ 62.987595][ T5868] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 63.056548][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 63.082152][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 63.147023][ T5492] 8021q: adding VLAN 0 to HW filter on device eth3 [ 63.154390][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 63.154941][ T5868] usb 5-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 63.155757][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 63.155773][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.155786][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 63.155799][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 63.157656][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.157669][ T5868] usb 5-1: Product: syz [ 63.157676][ T5868] usb 5-1: Manufacturer: syz [ 63.157684][ T5868] usb 5-1: SerialNumber: syz [ 63.162448][ T5868] usb 5-1: config 0 descriptor?? [ 63.164619][ T6719] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.172268][ T5868] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input7 [ 63.191842][ T6649] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.191920][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.192070][ T6649] bridge_slave_0: entered allmulticast mode [ 63.195240][ T6649] bridge_slave_0: entered promiscuous mode [ 63.198192][ T6649] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.198931][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.199000][ T6649] bridge_slave_1: entered allmulticast mode [ 63.199995][ T6649] bridge_slave_1: entered promiscuous mode [ 63.257549][ T6649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.266397][ T6649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.296040][ T42] kauditd_printk_skb: 46 callbacks suppressed [ 63.296060][ T42] audit: type=1400 audit(1793268755.159:402): avc: denied { cmd } for pid=6727 comm="syz.3.227" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 63.326316][ T6649] team0: Port device team_slave_0 added [ 63.330104][ T6649] team0: Port device team_slave_1 added [ 63.379839][ T5868] usb 5-1: USB disconnect, device number 8 [ 63.380319][ C3] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 63.382888][ T6649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.382902][ T6649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.382922][ T6649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.385711][ T6649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.385724][ T6649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.385743][ T6649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.399226][ T42] audit: type=1400 audit(1793268755.259:403): avc: denied { write } for pid=6733 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.448240][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 63.469878][ T6649] hsr_slave_0: entered promiscuous mode [ 63.470322][ T6649] hsr_slave_1: entered promiscuous mode [ 63.470623][ T6649] debugfs: 'hsr0' already exists in 'hsr' [ 63.470635][ T6649] Cannot create hsr debugfs directory [ 63.498244][ T42] audit: type=1400 audit(1793268755.359:404): avc: denied { write } for pid=6739 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.536178][ T5139] Bluetooth: hci2: command tx timeout [ 63.551258][ T5492] 8021q: adding VLAN 0 to HW filter on device eth4 [ 63.602345][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.230'. [ 63.602345][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.230'. [ 63.611693][ T6748] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 63.728653][ T42] audit: type=1400 audit(1793268755.589:405): avc: denied { write } for pid=6752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.786933][ T42] audit: type=1400 audit(1793268755.649:406): avc: denied { write } for pid=6759 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.843712][ T6766] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 63.868574][ T6769] netlink: 276 bytes leftover after parsing attributes in process `syz.2.236'. [ 63.883905][ T42] audit: type=1400 audit(1793268755.739:407): avc: denied { write } for pid=6767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.944872][ T6777] FAULT_INJECTION: forcing a failure. [ 63.944872][ T6777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.944893][ T6777] CPU: 2 UID: 0 PID: 6777 Comm: syz.0.238 Not tainted syzkaller #0 PREEMPT(full) [ 63.944912][ T6777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.944923][ T6777] Call Trace: [ 63.944929][ T6777] [ 63.944936][ T6777] dump_stack_lvl+0x100/0x190 [ 63.944975][ T6777] should_fail_ex.cold+0x5/0xa [ 63.945006][ T6777] _copy_to_user+0x32/0xd0 [ 63.945032][ T6777] simple_read_from_buffer+0xcb/0x170 [ 63.945058][ T6777] proc_fail_nth_read+0x1af/0x230 [ 63.945081][ T6777] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 63.945105][ T6777] ? rw_verify_area+0xce/0x6d0 [ 63.945126][ T6777] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 63.945140][ T6777] vfs_read+0x1e4/0xb40 [ 63.945158][ T6777] ? lock_acquire+0x1d1/0x380 [ 63.945174][ T6777] ? __fget_files+0x34/0x3d0 [ 63.945187][ T6777] ? __pfx_vfs_read+0x10/0x10 [ 63.945203][ T6777] ? find_held_lock+0x2b/0x80 [ 63.945216][ T6777] ? __fget_files+0x215/0x3d0 [ 63.945232][ T6777] ? __fget_files+0x21f/0x3d0 [ 63.945249][ T6777] ksys_read+0x12a/0x250 [ 63.945259][ T6777] ? __pfx_ksys_read+0x10/0x10 [ 63.945273][ T6777] do_syscall_64+0x123/0x790 [ 63.945287][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.945299][ T6777] RIP: 0033:0x7f49b255fd8e [ 63.945308][ T6777] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 63.945319][ T6777] RSP: 002b:00007f49b3473fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.945331][ T6777] RAX: ffffffffffffffda RBX: 00007f49b34746c0 RCX: 00007f49b255fd8e [ 63.945339][ T6777] RDX: 000000000000000f RSI: 00007f49b34740a0 RDI: 0000000000000003 [ 63.945345][ T6777] RBP: 00007f49b3474090 R08: 0000000000000000 R09: 0000000000000000 [ 63.945352][ T6777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.945359][ T6777] R13: 00007f49b2826038 R14: 00007f49b2825fa0 R15: 00007ffc3bd8d298 [ 63.945374][ T6777] [ 63.945524][ T42] audit: type=1400 audit(1793268755.809:408): avc: denied { write } for pid=6774 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.969194][ T6779] overlayfs: failed to resolve './file0': -2 [ 63.986731][ T6649] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.997373][ T6649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.998301][ T6649] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.004203][ T6649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.005811][ T6649] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.020410][ T6649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.021423][ T6649] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.037100][ T6649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.042056][ T6786] SELinux: syz.0.242 (6786) wrote to checkreqprot. This is no longer supported. [ 64.042596][ T6786] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.242'. [ 64.043334][ T42] audit: type=1400 audit(1793268755.899:409): avc: denied { read } for pid=6784 comm="syz.0.242" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 64.043660][ T42] audit: type=1400 audit(1793268755.899:410): avc: denied { open } for pid=6784 comm="syz.0.242" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 64.044982][ T42] audit: type=1400 audit(1793268755.909:411): avc: denied { map } for pid=6784 comm="syz.0.242" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 64.107557][ T5783] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 64.121235][ T6798] No source specified [ 64.134469][ T6649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.153414][ T6649] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.161270][ T6344] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.161358][ T6344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.163169][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.163296][ T6344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.226200][ T6803] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 64.284400][ T5783] usb 8-1: Using ep0 maxpacket: 32 [ 64.286176][ T5783] usb 8-1: New USB device found: idVendor=0403, idProduct=6040, bcdDevice=3b.36 [ 64.288466][ T5783] usb 8-1: config 6 has an invalid interface number: 94 but max is 3 [ 64.288482][ T5783] usb 8-1: config 6 has an invalid interface number: 177 but max is 3 [ 64.288493][ T5783] usb 8-1: config 6 has an invalid interface number: 157 but max is 3 [ 64.288503][ T5783] usb 8-1: config 6 has an invalid interface number: 8 but max is 3 [ 64.288514][ T5783] usb 8-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 64.288523][ T5783] usb 8-1: config 6 has no interface number 0 [ 64.288532][ T5783] usb 8-1: config 6 has no interface number 1 [ 64.288540][ T5783] usb 8-1: config 6 has no interface number 2 [ 64.288548][ T5783] usb 8-1: config 6 has no interface number 3 [ 64.288577][ T5783] usb 8-1: config 6 interface 94 altsetting 5 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 64.288596][ T5783] usb 8-1: config 6 interface 177 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 64.288609][ T5783] usb 8-1: config 6 interface 177 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 64.288620][ T5783] usb 8-1: config 6 interface 177 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 64.288640][ T5783] usb 8-1: config 6 interface 157 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 64.288651][ T5783] usb 8-1: config 6 interface 157 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 64.288668][ T5783] usb 8-1: config 6 interface 8 altsetting 8 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 64.288682][ T5783] usb 8-1: config 6 interface 8 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 64.288692][ T5783] usb 8-1: config 6 interface 8 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 64.288702][ T5783] usb 8-1: config 6 interface 8 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 64.288714][ T5783] usb 8-1: config 6 interface 8 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 64.288725][ T5783] usb 8-1: config 6 interface 8 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 64.288735][ T5783] usb 8-1: config 6 interface 94 has no altsetting 0 [ 64.288745][ T5783] usb 8-1: config 6 interface 177 has no altsetting 0 [ 64.288754][ T5783] usb 8-1: config 6 interface 157 has no altsetting 0 [ 64.288763][ T5783] usb 8-1: config 6 interface 8 has no altsetting 0 [ 64.290505][ T5783] usb 8-1: Dual-Role OTG device on HNP port [ 64.290742][ T5783] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.290754][ T5783] usb 8-1: Product: syz [ 64.290762][ T5783] usb 8-1: Manufacturer: ᠉ [ 64.290769][ T5783] usb 8-1: SerialNumber: syz [ 64.449197][ T6649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.485979][ T6649] veth0_vlan: entered promiscuous mode [ 64.493757][ T6649] veth1_vlan: entered promiscuous mode [ 64.500077][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.233'. [ 64.509541][ T5783] ftdi_sio 8-1:6.94: FTDI USB Serial Device converter detected [ 64.510269][ T5783] ftdi_sio ttyUSB0: unknown device type: 0x3b36 [ 64.513100][ T5783] ftdi_sio 8-1:6.177: FTDI USB Serial Device converter detected [ 64.513640][ T5783] ftdi_sio ttyUSB1: unknown device type: 0x3b36 [ 64.516846][ T6649] veth0_macvtap: entered promiscuous mode [ 64.520697][ T6649] veth1_macvtap: entered promiscuous mode [ 64.528706][ T6649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.530946][ T5783] ftdi_sio 8-1:6.157: FTDI USB Serial Device converter detected [ 64.531603][ T5783] ftdi_sio ttyUSB2: unknown device type: 0x3b36 [ 64.533437][ T5783] ftdi_sio 8-1:6.8: FTDI USB Serial Device converter detected [ 64.534128][ T5783] ftdi_sio ttyUSB3: unknown device type: 0x3b36 [ 64.534921][ T6817] ceph: Path missing in source [ 64.538418][ T6649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.544098][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.558385][ T5783] usb 8-1: USB disconnect, device number 3 [ 64.571552][ T5783] ftdi_sio 8-1:6.94: device disconnected [ 64.574695][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.574932][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.575077][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.597285][ T5783] ftdi_sio 8-1:6.177: device disconnected [ 64.600759][ T5783] ftdi_sio 8-1:6.157: device disconnected [ 64.609252][ T5783] ftdi_sio 8-1:6.8: device disconnected [ 64.623968][ T6345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.623986][ T6345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.647041][ T6345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.647055][ T6345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.742949][ T6824] overlayfs: failed to resolve './file0': -2 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 64.928621][ T6835] netlink: 180 bytes leftover after parsing attributes in process `syz.2.253'. [ 64.937003][ T6835] overlayfs: missing 'lowerdir' [ 64.942168][ T6835] overlayfs: missing 'lowerdir' [ 64.967450][ T6837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.254'. [ 64.969673][ T6837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.980746][ T6837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.324408][ T10] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 65.455567][ T10] usb 8-1: device descriptor read/64, error -71 [ 65.510546][ T6843] overlayfs: failed to resolve './file0': -2 [ 65.611188][ T6851] FAULT_INJECTION: forcing a failure. [ 65.611188][ T6851] name failslab, interval 1, probability 0, space 0, times 0 [ 65.611208][ T6851] CPU: 0 UID: 0 PID: 6851 Comm: syz.1.262 Not tainted syzkaller #0 PREEMPT(full) [ 65.611222][ T6851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.611228][ T6851] Call Trace: [ 65.611232][ T6851] [ 65.611237][ T6851] dump_stack_lvl+0x100/0x190 [ 65.611259][ T6851] should_fail_ex.cold+0x5/0xa [ 65.611278][ T6851] should_failslab+0xc2/0x120 [ 65.611290][ T6851] kmem_cache_alloc_noprof+0x92/0x6a0 [ 65.611309][ T6851] ? do_getname+0x35/0x390 [ 65.611327][ T6851] do_getname+0x35/0x390 [ 65.611344][ T6851] do_sys_openat2+0xc3/0x1d0 [ 65.611359][ T6851] ? __pfx_do_sys_openat2+0x10/0x10 [ 65.611374][ T6851] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 65.611387][ T6851] ? __fget_files+0x21f/0x3d0 [ 65.611403][ T6851] __x64_sys_openat+0x12d/0x210 [ 65.611422][ T6851] ? __pfx___x64_sys_openat+0x10/0x10 [ 65.611443][ T6851] ? ksys_write+0x1ac/0x250 [ 65.611466][ T6851] do_syscall_64+0x123/0x790 [ 65.611487][ T6851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.611506][ T6851] RIP: 0033:0x7f9f62f9f559 [ 65.611523][ T6851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.611541][ T6851] RSP: 002b:00007f9f63ebd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 65.611561][ T6851] RAX: ffffffffffffffda RBX: 00007f9f63225fa0 RCX: 00007f9f62f9f559 [ 65.611572][ T6851] RDX: 0000000000109240 RSI: 0000200000000140 RDI: 0000000000000004 [ 65.611583][ T6851] RBP: 00007f9f63ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 65.611594][ T6851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.611604][ T6851] R13: 00007f9f63226038 R14: 00007f9f63225fa0 R15: 00007fffd50fb9d8 [ 65.611622][ T6851] [ 65.614461][ T5139] Bluetooth: hci2: command tx timeout [ 65.647452][ T6854] bonding: b is being created... [ 65.704664][ T10] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 65.751622][ T6857] BUG: sleeping function called from invalid context at net/core/sock.c:3910 [ 65.751640][ T6857] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6857, name: syz.1.264 [ 65.751655][ T6857] preempt_count: 200, expected: 0 [ 65.751664][ T6857] RCU nest depth: 2, expected: 0 [ 65.751673][ T6857] locks held by syz.1.264/6857: 3, last CPU#1: [ 65.751688][ T6857] #0: ffffffff8ffeb4e0 (rcu_read_lock){....}-{1:3}, at: tun_get_user+0xf8b/0x3ee0 [ 65.751748][ T6857] #1: ffffffff8ffeb4e0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb+0xf8/0x7d0 [ 65.751794][ T6857] #2: ffff88805cbb6260 (sk_lock-AF_X25){+.+.}-{0:0}, at: x25_kill_by_neigh+0x168/0x280 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 65.751842][ T6857] Preemption disabled at: [ 65.751847][ T6857] [] tun_rx_batched.isra.0+0x46b/0x750 [ 65.751877][ T6857] CPU: 1 UID: 0 PID: 6857 Comm: syz.1.264 Not tainted syzkaller #0 PREEMPT(full) [ 65.751900][ T6857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.751912][ T6857] Call Trace: [ 65.751919][ T6857] [ 65.751927][ T6857] dump_stack_lvl+0x100/0x190 [ 65.751977][ T6857] __might_resched.cold+0x1dc/0x222 [ 65.752006][ T6857] ? __pfx___might_resched+0x10/0x10 [ 65.752036][ T6857] ? find_held_lock+0x2b/0x80 [ 65.752059][ T6857] ? x25_kill_by_neigh+0x15e/0x280 [ 65.752084][ T6857] lock_sock_nested+0x52/0xf0 [ 65.752112][ T6857] ? x25_kill_by_neigh+0x168/0x280 [ 65.752135][ T6857] x25_kill_by_neigh+0x168/0x280 [ 65.752158][ T6857] x25_lapb_receive_frame+0x4b1/0x1000 [ 65.752181][ T6857] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 65.752203][ T6857] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 65.752233][ T6857] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 65.752266][ T6857] ? lock_acquire+0x1d1/0x380 [ 65.752294][ T6857] ? find_held_lock+0x2b/0x80 [ 65.752316][ T6857] __netif_receive_skb+0x1f/0x120 [ 65.752335][ T6857] netif_receive_skb+0x139/0x7d0 [ 65.752352][ T6857] ? __pfx_netif_receive_skb+0x10/0x10 [ 65.752371][ T6857] ? _copy_from_iter+0x270/0x16c0 [ 65.752399][ T6857] tun_rx_batched.isra.0+0x3f6/0x750 [ 65.752426][ T6857] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 65.752482][ T6857] ? tun_get_user+0x1dcd/0x3ee0 [ 65.752513][ T6857] tun_get_user+0x1f62/0x3ee0 [ 65.752548][ T6857] ? __lock_acquire+0x5c0/0x1f40 [ 65.752574][ T6857] ? __pfx_tun_get_user+0x10/0x10 [ 65.752599][ T6857] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 65.752637][ T6857] ? find_held_lock+0x2b/0x80 [ 65.752657][ T6857] ? tun_get+0x191/0x370 [ 65.752697][ T6857] ? tun_get+0x191/0x370 [ 65.752729][ T6857] tun_chr_write_iter+0xdc/0x200 [ 65.752761][ T6857] vfs_write+0x6af/0x1050 [ 65.752783][ T6857] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 65.752815][ T6857] ? __pfx_vfs_write+0x10/0x10 [ 65.752845][ T6857] ? find_held_lock+0x2b/0x80 [ 65.752888][ T6857] ksys_write+0x12a/0x250 [ 65.752908][ T6857] ? __pfx_ksys_write+0x10/0x10 [ 65.752935][ T6857] do_syscall_64+0x123/0x790 [ 65.752958][ T6857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.752980][ T6857] RIP: 0033:0x7f9f62f9f559 [ 65.752997][ T6857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.753022][ T6857] RSP: 002b:00007f9f63ebd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 65.753042][ T6857] RAX: ffffffffffffffda RBX: 00007f9f63225fa0 RCX: 00007f9f62f9f559 [ 65.753055][ T6857] RDX: 000000000000000a RSI: 0000200000000040 RDI: 0000000000000003 [ 65.753068][ T6857] RBP: 00007f9f63036b20 R08: 0000000000000000 R09: 0000000000000000 [ 65.753080][ T6857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.753092][ T6857] R13: 00007f9f63226038 R14: 00007f9f63225fa0 R15: 00007fffd50fb9d8 [ 65.753121][ T6857] [ 65.789660][ T5189] udevd[5189]: could not touch /run/udev/queue: No such file or directory [ 65.791944][ T5189] udevd[5189]: could not touch /run/udev/queue: No such file or directory [ 65.793422][ T5189] udevd[5189]: could not touch /run/udev/queue: No such file or directory [ 65.793721][ T5189] udevd[5189]: could not touch /run/udev/queue: No such file or directory [ 65.794021][ T5189] udevd[5189]: could not touch /run/udev/queue: No such file or directory [ 65.834683][ T10] usb 8-1: device descriptor read/64, error -71 [ 65.946390][ T10] usb usb8-port1: attempt power cycle [ 66.063196][ T6201] bridge0: port 3(syz_tun) entered disabled state [ 66.073054][ T6201] syz_tun (unregistering): left allmulticast mode [ 66.073077][ T6201] syz_tun (unregistering): left promiscuous mode [ 66.073170][ T6201] bridge0: port 3(syz_tun) entered disabled state [ 66.191588][ T5826] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.302790][ T5826] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.424106][ T5826] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.527142][ T5826] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.633392][ T5826] bridge_slave_1: left allmulticast mode [ 66.633417][ T5826] bridge_slave_1: left promiscuous mode [ 66.633688][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.640123][ T5826] bridge_slave_0: left allmulticast mode [ 66.640176][ T5826] bridge_slave_0: left promiscuous mode [ 66.640388][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.125917][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.138957][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.143352][ T5826] bond0 (unregistering): Released all slaves [ 67.158258][ T5492] 8021q: adding VLAN 0 to HW filter on device eth2 [ 67.173631][ T5492] 8021q: adding VLAN 0 to HW filter on device eth3 [ 67.190858][ T5492] 8021q: adding VLAN 0 to HW filter on device eth4 [ 67.213650][ T5492] 8021q: adding VLAN 0 to HW filter on device eth5 [ 67.494886][ T5826] hsr_slave_0: left promiscuous mode [ 67.495713][ T5826] hsr_slave_1: left promiscuous mode [ 67.496405][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.496422][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.497190][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.497204][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.501729][ T5826] veth1_macvtap: left promiscuous mode [ 67.501762][ T5826] veth0_macvtap: left promiscuous mode [ 67.501838][ T5826] veth1_vlan: left promiscuous mode [ 67.501945][ T5826] veth0_vlan: left promiscuous mode [ 67.651569][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 67.668358][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 68.148621][ T5826] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.258437][ T5826] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.325205][ T5826] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.388668][ T5826] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.522587][ T5826] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.534438][ T5492] 8021q: adding VLAN 0 to HW filter on device eth6 [ 68.551163][ T5492] 8021q: adding VLAN 0 to HW filter on device eth7 [ 68.576775][ T5492] 8021q: adding VLAN 0 to HW filter on device eth8 [ 68.589697][ T5826] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.621812][ T5492] 8021q: adding VLAN 0 to HW filter on device eth9 [ 68.669679][ T5826] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.731989][ T5826] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.874026][ T5826] bridge_slave_1: left allmulticast mode [ 68.874042][ T5826] bridge_slave_1: left promiscuous mode [ 68.874152][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.878961][ T5826] bridge_slave_0: left allmulticast mode [ 68.878985][ T5826] bridge_slave_0: left promiscuous mode [ 68.879535][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.893131][ T5826] bridge_slave_1: left allmulticast mode [ 68.893156][ T5826] bridge_slave_1: left promiscuous mode [ 68.893305][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.901335][ T5826] bridge_slave_0: left allmulticast mode [ 68.901356][ T5826] bridge_slave_0: left promiscuous mode [ 68.901503][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.051772][ T5826] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 69.059083][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.061095][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.062243][ T5826] bond0 (unregistering): Released all slaves [ 69.067153][ T5826] bond1 (unregistering): Released all slaves [ 69.151499][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.158484][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.159322][ T5826] bond0 (unregistering): Released all slaves [ 69.171381][ T5492] 8021q: adding VLAN 0 to HW filter on device eth10 [ 69.183879][ T5492] 8021q: adding VLAN 0 to HW filter on device eth11 [ 69.197381][ T5492] 8021q: adding VLAN 0 to HW filter on device eth12 [ 69.213472][ T5492] 8021q: adding VLAN 0 to HW filter on device eth13 [ 69.782899][ T5826] hsr_slave_0: left promiscuous mode [ 69.783855][ T5826] hsr_slave_1: left promiscuous mode [ 69.786530][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.787873][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.790369][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.790384][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.802958][ T5826] hsr_slave_0: left promiscuous mode [ 69.803395][ T5826] hsr_slave_1: left promiscuous mode [ 69.804128][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.804145][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.805008][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.805025][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.815926][ T5826] veth1_macvtap: left promiscuous mode [ 69.815968][ T5826] veth0_macvtap: left promiscuous mode [ 69.816098][ T5826] veth1_vlan: left promiscuous mode [ 69.816182][ T5826] veth0_vlan: left promiscuous mode [ 69.825754][ T5826] veth1_macvtap: left promiscuous mode [ 69.825786][ T5826] veth0_macvtap: left promiscuous mode [ 69.825870][ T5826] veth1_vlan: left promiscuous mode [ 69.825927][ T5826] veth0_vlan: left promiscuous mode [ 70.069174][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 70.141246][ T5826] smc: removing net device lo with user defined pnetid SYZ2 [ 70.223501][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 70.230616][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 70.804951][ T5826] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.861938][ T5826] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.930499][ T5826] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.983149][ T5826] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.106699][ T5826] bridge_slave_1: left allmulticast mode [ 71.106718][ T5826] bridge_slave_1: left promiscuous mode [ 71.106836][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.108263][ T5826] bridge_slave_0: left allmulticast mode [ 71.108276][ T5826] bridge_slave_0: left promiscuous mode [ 71.108365][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.220136][ T1448] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.220202][ T1448] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.235592][ T34] cfg80211: failed to load regulatory.db [ 71.244007][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.250593][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.251537][ T5826] bond0 (unregistering): Released all slaves [ 71.254563][ T5826] b (unregistering): Released all slaves [ 71.277457][ T5492] 8021q: adding VLAN 0 to HW filter on device eth14 [ 71.288309][ T5492] 8021q: adding VLAN 0 to HW filter on device eth15 [ 71.301116][ T5492] 8021q: adding VLAN 0 to HW filter on device eth16 [ 71.320692][ T5492] 8021q: adding VLAN 0 to HW filter on device eth17 [ 71.628042][ T5826] hsr_slave_0: left promiscuous mode [ 71.629991][ T5826] hsr_slave_1: left promiscuous mode [ 71.630835][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.630854][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.631602][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.631618][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.644891][ T5826] veth1_macvtap: left promiscuous mode [ 71.644925][ T5826] veth0_macvtap: left promiscuous mode [ 71.644970][ T5826] veth1_vlan: left promiscuous mode [ 71.645000][ T5826] veth0_vlan: left promiscuous mode [ 71.817000][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 71.821999][ T5826] team0 (unregistering): Port device team_slave_0 removed