last executing test programs: 3.60425651s ago: executing program 2 (id=2476): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) r1 = openat(r0, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x81, 0x2) timer_settime(0x0, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="300000001414d9"], 0x30}, 0x1, 0x0, 0x0, 0x200084c0}, 0x4004080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) close(0x3) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x15) statx(r1, &(0x7f0000000200)='./file0\x00', 0x2000, 0x800, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0xee00, r5, r4) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x1000, 0x78001e8b, &(0x7f0000008000/0x1000)=nil) 3.490445381s ago: executing program 2 (id=2478): socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2040800) 3.489107057s ago: executing program 2 (id=2480): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x7, 0xbf68, @vifc_lcl_ifindex=r2, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r2, @ANYBLOB="0800020096"], 0x20}}, 0x40000c0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xf) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) setns(0xc9, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x1000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) write$tun(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000010a00000204d2162e0008"], 0x1c) write$binfmt_format(r4, &(0x7f00000001c0)='1\x00', 0x2) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.602882223s ago: executing program 2 (id=2497): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x23}, {0x0, 0x0, 0x300, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x84}}, 0x0) 2.531548447s ago: executing program 2 (id=2498): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setns(0xc9, 0x0) io_uring_setup(0x36c2, &(0x7f0000000100)={0x0, 0xb2d1, 0x1, 0x1, 0x383}) socket$inet6(0xa, 0x2, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x2c, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8014) 2.481339161s ago: executing program 2 (id=2499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000000)=0x80000000, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, 0x0) close(r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x440b0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}]}, 0x38}}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000084000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.611484446s ago: executing program 0 (id=2523): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xf5}, 0x8) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd700500dbdf2515000000150014002f6465762f7669727475616c5f6e63690000000008280100", @ANYRES32=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x40000040) bind(r0, &(0x7f0000000400)=@nfc={0x27, r4, 0x1, 0x7}, 0x80) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r6 = socket$nl_route(0x10, 0x3, 0x0) dup(r5) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000000)={0x8, 0x0, 0x2, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000001c0)={0x6, 0x0, 0x1, 0xe}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) 1.491178265s ago: executing program 0 (id=2526): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x2c, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8014) 1.389442526s ago: executing program 0 (id=2530): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x200, 0xfff, 0x1, 0x4}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001a00010029bd70000000000002202000000000000020000006001c004e23000008000300", @ANYRES32, @ANYBLOB="08000b00bd470000080001006401010008000700e000000108000200ffffffff080001000a0101020800060005000000080019"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x10) io_setup(0x1, &(0x7f00000001c0)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x56, 0x0, 0x0, &(0x7f0000000300), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x2342, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000000000000000040000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r2, &(0x7f0000000040)="c292", 0x2, 0x7, 0x0, 0x2}]) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) write$P9_RGETLOCK(r2, &(0x7f0000000040)={0x1f, 0x37, 0x2, {0x1, 0x0, 0x8, r3, 0x1, '\''}}, 0x1f) 1.318746847s ago: executing program 0 (id=2532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xd}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x3, 0x6, 0x5, 0xa8e, 0x5, 0x407c, 0x80, 0x9, 0x3, 0x8000, 0x8, 0x3, 0x8, 0x5, 0xbc0, 0x7, 0x9c09, 0xffff, 0x3, 0x0, 0xc, 0xcfa, 0xfffffffb, 0xa, 0x6407, 0x80, 0x849, 0x8b, 0xffffffff, 0x4, 0x2, 0xa4c, 0x0, 0x9, 0x5, 0x200, 0x1ff, 0x4d76, 0x4, 0xb32, 0x3ff, 0x8, 0x0, 0x71, 0x5, 0x1, 0x8, 0x0, 0x7, 0xeb, 0x6, 0x87, 0x8, 0x0, 0x9, 0x3ff, 0xb, 0xfffffff8, 0xb6d, 0x81, 0x1, 0x8, 0xa, 0x0, 0x9, 0x81, 0x8, 0x26b, 0x8, 0x85b4, 0x9, 0x7, 0xfffffffe, 0x6, 0x8, 0xffffffc0, 0x3, 0x3, 0x4, 0x4, 0x80000001, 0xc8ee, 0xbacb161, 0x3ff, 0xffff12d0, 0x2, 0xffff8000, 0x10, 0x1ff, 0x2, 0x5, 0x2, 0x8, 0x7, 0x4, 0x2, 0x0, 0x1, 0x5, 0xfffffffd, 0x6, 0x0, 0x9, 0x4, 0x5, 0x6, 0xfffffffe, 0x2, 0x834f, 0x9, 0x1ff, 0x2, 0x62cd, 0xf98, 0xd8, 0x6, 0x6, 0x9, 0x3, 0xfffff000, 0x40000000, 0x7, 0x81, 0x0, 0x5, 0x10, 0x100, 0x40, 0xc, 0x400, 0x9151, 0x9, 0x7, 0x2, 0xb, 0x7, 0x4, 0x4, 0x64, 0x9, 0x400, 0x2, 0x6, 0x7, 0x971, 0x0, 0x6, 0x3, 0xa46a, 0x8, 0x23, 0x2, 0x8, 0x7fff, 0x8, 0x1, 0x557, 0x2, 0x3ff, 0x3ff, 0x2, 0x1, 0x1, 0x5c, 0x6, 0x1ff, 0x9, 0xb, 0x6, 0x0, 0x1007ff, 0x868f, 0x9, 0xffffffff, 0x0, 0xfffffffe, 0x100, 0x40, 0x6c8, 0x8, 0x4, 0x4, 0x4, 0x81, 0xdf, 0x8, 0x4, 0x6, 0x4, 0xc59e, 0x9, 0x891a, 0x4, 0x1, 0x67a, 0x5, 0xaa, 0x2, 0x8000, 0x4, 0x5, 0x2, 0xfff, 0x9, 0x4533afbb, 0xd, 0x0, 0x593c, 0x1, 0xd99b, 0x55aa77c9, 0x56a, 0x9, 0x8, 0x200, 0x10001, 0x5, 0x6, 0x1000, 0xa, 0x5, 0x6, 0x4, 0x1ff, 0x40, 0x2, 0x5dff, 0xfffffffe, 0x8, 0x1, 0x4, 0x4, 0x1ff, 0x101, 0xffff, 0x12, 0x5, 0xfffffffc, 0x7e94, 0x6, 0xca55, 0x6, 0x5, 0x401, 0x8, 0x4, 0x80000000, 0x3, 0x1, 0x7, 0x4, 0x2, 0x8, 0x16, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000a1", @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.121611517s ago: executing program 3 (id=2536): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @private=0xa010103}}, 0x1}, &(0x7f0000000300)=0x90) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000400)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000340), &(0x7f00000003c0)=0xc) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x1b, 0x5, 0x590, 0x2a0, 0x3b8, 0xffffffff, 0x0, 0x160, 0x4c0, 0x4c0, 0xffffffff, 0x4c0, 0x4c0, 0x5, &(0x7f00000002c0), {[{{@ipv6={@mcast1, @remote, [0xffffffff, 0xff, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffffff, 0xffffff00], 'syz_tun\x00', 'netdevsim0\x00', {}, {}, 0x5e, 0x8, 0x5, 0x36}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "e5f5"}}, @common=@dst={{0x48}, {0x7, 0x7, 0x1, [0x0, 0x7ff, 0x401, 0x6, 0x2, 0xa, 0x8, 0x2, 0x68e, 0x4, 0x1, 0x401, 0x8, 0x23f, 0xc, 0xfff8], 0x8}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv6=@remote, @gre_key=0xc92, @gre_key=0x6}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0x0, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff, 0xffffff00, 0xff], 'ipvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x80, 0x1}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x149c55288ceb46e5, 0x1, 0x1}}, @common=@ipv6header={{0x28}, {0x1, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@private=0xa010100, @gre_key=0x5, @gre_key=0x5}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x3, "ccec"}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv6=@mcast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id=0x66, @gre_key=0x807b}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote, [0xffffff00, 0x0, 0xff, 0xff000000], 0x4e24, 0x4e23, 0x4e21, 0x4e22, 0x8000, 0x884, 0x80000001, 0x10, 0x80000000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x2, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000040)={0x1, r6}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0xfffffffffffffffc}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd2}], 0x0, 0x0, 0x0}) 1.061648549s ago: executing program 3 (id=2537): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000800000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}}, 0x0) 1.061530723s ago: executing program 3 (id=2538): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x204, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x18}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x539, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1010, 0x5010}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}, 0x1, 0x0, 0xfeff}, 0x0) 981.490248ms ago: executing program 3 (id=2539): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x2c, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8014) 901.034931ms ago: executing program 3 (id=2540): pause() (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 628.417624ms ago: executing program 0 (id=2541): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_i,=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 627.898186ms ago: executing program 0 (id=2543): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x8, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000040), 0x4) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x18}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) (async, rerun: 64) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, 0x0) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x11) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x4008af04, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) (async) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) (async) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (async) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="f6", 0x1}], 0x1, &(0x7f00000011c0)=ANY=[@ANYBLOB="2000000000000000840000000200000004004900c004000002000000", @ANYRES32=0x0, @ANYBLOB='0\x00\x00'], 0x50, 0x40001}, 0x0) 511.616158ms ago: executing program 1 (id=2544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000040000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 450.145659ms ago: executing program 1 (id=2545): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x2, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0xe, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x2, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x8002, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x3fc, 0x7a5, 0x9, 0x9, 0xfffffffc, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x2, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0x5, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x1, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0x6, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x14, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x800f1ff, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) 289.452453ms ago: executing program 1 (id=2546): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0xd3e, 0x0, 0x4000000, 0x100, 0x19, "0062ba7d82000000000000000000f7ffffff00"}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, 0xfffffffffffffffe) 240.536956ms ago: executing program 1 (id=2547): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x2c, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8014) 591.956µs ago: executing program 3 (id=2548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="010000000000000000080f00000008000300", @ANYRES32=r2, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381", @ANYBLOB="04000100"], 0x460}}, 0x0) 187.856µs ago: executing program 1 (id=2549): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000003000000700004e6706362632874776f6669736829000000000000000000000004800000000000000000000000000000000a0000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) 0s ago: executing program 1 (id=2550): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r1, 0xf4240) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='file0', 0x5) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050007"], 0x7c}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r6, 0x802c550a, &(0x7f0000000400)=@urb_type_control={0x2, {0x0, 0x1}, 0x20006, 0x1, 0x0, 0x0, 0x8004, 0x1, 0x0, 0x1676ab37, 0x80, 0x0}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000000840)={0x0, 0x0, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000e00)={r8, 0x8, 0x0, [0x80, 0x2, 0x3ff, 0x0, 0x5], [0x32f9ca4d, 0x3, 0x654, 0x1, 0x1, 0x2, 0x9, 0x4, 0x3a, 0x8000000000000000, 0x7, 0xffffffffffffffff, 0x3, 0x800, 0x3, 0xfff, 0x9, 0x3, 0x3, 0x8, 0x77c, 0x1, 0xcf, 0x100, 0x8, 0xa3b, 0xba, 0x0, 0xa, 0x101, 0x80, 0xffff, 0x7, 0x1, 0x0, 0xfffffffffffffffd, 0x7, 0x6, 0x0, 0x9, 0x4, 0x9, 0x100000000, 0x37, 0x80000000, 0xdcec, 0x3, 0x100000000, 0x100000000, 0x5, 0x2, 0x8, 0x5, 0xf, 0x3, 0x7, 0x2462be0e, 0x10001, 0x61b7, 0x79, 0x5e4d, 0x8000000000000001, 0x8000, 0x2, 0x3, 0x4, 0x0, 0x80000001, 0xdd, 0xffffffffffffffff, 0x9, 0x1, 0x2, 0x7663efa8, 0x3, 0x5, 0x3, 0x0, 0x7, 0xd6, 0x0, 0x7, 0x40, 0x6, 0x7, 0x7fff, 0x1000, 0x10000, 0x3, 0x81ce, 0x3, 0x2, 0x9, 0x10000, 0x7d, 0x6, 0x4, 0x9, 0x0, 0x4, 0x8, 0x5, 0x3, 0xff5c, 0xfb62, 0x4, 0x8000, 0x97, 0x270f401f, 0x80000000, 0x2, 0x1, 0x7, 0x40, 0x8, 0x1, 0x1, 0x1, 0x8001, 0xe66, 0x1]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000040)={0x0, 0x7ff, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0x1, 'queue0\x00', 0x101}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d00), 0xffffffffffffffff) r10 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r10, 0x65, 0x4, 0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x42) fcntl$setlease(r11, 0x400, 0x0) getsockopt$IPT_SO_GET_INFO(r11, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0xfffffffe, 0x10001, 0x0, 0x7, 0x8]}, &(0x7f0000000180)=0x54) kernel console output (not intermixed with test programs): 1 [ 130.465281][ T43] audit: type=1400 audit(1790344757.972:1578): avc: denied { read } for pid=10880 comm="syz.2.1871" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.497823][ T43] audit: type=1800 audit(1790344758.012:1579): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 130.512357][ T43] audit: type=1800 audit(1790344758.022:1580): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 130.628372][ T43] audit: type=1800 audit(1790344758.142:1581): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 130.690632][ T43] audit: type=1800 audit(1790344758.202:1582): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 130.755172][ T43] audit: type=1800 audit(1790344758.262:1583): pid=10899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1878" name="local" dev="configfs" ino=35601 res=0 errno=0 [ 130.758338][T10900] overlayfs: failed to resolve './cgroup': -2 [ 130.955825][T10910] openvswitch: netlink: IP tunnel dst address not specified [ 130.976318][T10912] netlink: 'syz.3.1884': attribute type 1 has an invalid length. [ 131.036546][T10912] bond1: (slave veth0_to_bond): Releasing active interface [ 131.044128][T10912] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 131.049905][T10912] macvlan2: entered promiscuous mode [ 131.049919][T10912] macvlan2: entered allmulticast mode [ 131.050161][T10912] bond4: entered promiscuous mode [ 131.051637][T10912] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 131.107759][T10912] bond4: left promiscuous mode [ 131.899238][T10966] Line length is too long: Should be less than 4094 [ 132.103264][T10985] netlink: 'syz.3.1913': attribute type 1 has an invalid length. [ 132.117800][T10985] bond5: entered promiscuous mode [ 132.118086][T10985] 8021q: adding VLAN 0 to HW filter on device bond5 [ 132.131454][T10985] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 132.131476][T10985] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 132.131488][T10985] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 132.261220][T10993] __nla_validate_parse: 8 callbacks suppressed [ 132.261235][T10993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1916'. [ 132.459756][T10989] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 132.459781][T10989] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 132.586403][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.845352][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1920'. [ 132.923350][T11021] bridge0: port 1(ipvlan2) entered blocking state [ 132.923424][T11021] bridge0: port 1(ipvlan2) entered disabled state [ 132.923481][T11021] ipvlan2: entered allmulticast mode [ 132.923495][T11021] bridge0: entered allmulticast mode [ 132.924626][T11021] ipvlan2: left allmulticast mode [ 132.924639][T11021] bridge0: left allmulticast mode [ 133.072350][T11027] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1925'. [ 133.183993][T11042] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.252392][T11051] syzkaller0: entered promiscuous mode [ 133.252407][T11051] syzkaller0: entered allmulticast mode [ 133.277297][T11051] tipc: Enabled bearer , priority 0 [ 133.280946][T11050] tipc: Resetting bearer [ 133.310986][T11050] tipc: Disabling bearer [ 133.393014][T11066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=11066 comm=syz.0.1940 [ 133.433123][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 133.433140][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 133.595527][ T5846] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 133.749138][ T5846] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice= 0.03 [ 133.750133][ T5846] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 133.750154][ T5846] usb 7-1: config 0 has no interface number 0 [ 133.750185][ T5846] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 133.750205][ T5846] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 133.750588][T11086] input: syz0 as /devices/virtual/input/input10 [ 133.759614][ T5846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.759641][ T5846] usb 7-1: Product: syz [ 133.759653][ T5846] usb 7-1: Manufacturer: syz [ 133.759669][ T5846] usb 7-1: SerialNumber: syz [ 133.762395][ T5846] usb 7-1: config 0 descriptor?? [ 133.764712][T11060] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 133.789260][ T5846] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 133.833010][T11091] fuse: fd is not a fuse device [ 133.906901][T11096] SELinux: Context system_u:object_r:su_exec_t:s0 is not valid (left unmapped). [ 133.970646][ T5808] usb 7-1: USB disconnect, device number 7 [ 133.977817][ T5808] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 134.196223][T11060] bridge0: port 3(syz_tun) entered blocking state [ 134.196383][T11060] bridge0: port 3(syz_tun) entered disabled state [ 134.196650][T11060] syz_tun: entered allmulticast mode [ 134.198201][T11060] syz_tun: entered promiscuous mode [ 134.202165][T11060] netlink: 'syz.2.1939': attribute type 9 has an invalid length. [ 134.205078][T11060] 9pnet_virtio: no channels available for device syz [ 134.273793][T11120] netlink: 'syz.3.1964': attribute type 1 has an invalid length. [ 134.300840][T11125] netlink: 'syz.1.1965': attribute type 4 has an invalid length. [ 134.311982][T11120] bond4: (slave veth0_to_bond): Releasing active interface [ 134.321718][T11120] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 134.329868][T11120] macvlan2: entered promiscuous mode [ 134.329881][T11120] macvlan2: entered allmulticast mode [ 134.330127][T11120] bond6: entered promiscuous mode [ 134.330432][T11120] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.342785][T11120] bond6: left promiscuous mode [ 134.389028][T11131] netlink: 'syz.0.1968': attribute type 7 has an invalid length. [ 134.742868][T11154] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1979'. [ 134.807802][T11158] netlink: NAT attribute type 0 has unexpected length (1 != 0) [ 134.807822][T11158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.836209][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'. [ 134.836232][T11163] netlink: 'syz.2.1983': attribute type 10 has an invalid length. [ 134.836240][T11163] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1983'. [ 134.841416][T11163] geneve2: entered promiscuous mode [ 134.841430][T11163] geneve2: entered allmulticast mode [ 135.135372][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 135.263777][T11181] device-mapper: table: 248:1: multipath: invalid number of feature args (-EINVAL) [ 135.263800][T11181] device-mapper: ioctl: error adding target to table [ 135.423158][T11186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1993'. [ 135.544428][T11188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1994'. [ 135.748477][T11196] netlink: 'syz.3.1998': attribute type 1 has an invalid length. [ 135.770485][T11196] bond7: entered promiscuous mode [ 135.770845][T11196] 8021q: adding VLAN 0 to HW filter on device bond7 [ 135.878203][T11196] ipvlan2: entered allmulticast mode [ 135.878224][T11196] bond7: entered allmulticast mode [ 135.932853][T11196] bond7: (slave bridge2): making interface the new active one [ 135.932879][T11196] bridge2: entered promiscuous mode [ 135.933073][T11196] bridge2: entered allmulticast mode [ 135.943592][T11196] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 136.090689][T11177] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 136.550984][T11228] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 136.599922][T11232] xt_socket: unknown flags 0x58 [ 136.675612][T11242] fuse: fd is not a fuse device [ 136.676076][ T43] kauditd_printk_skb: 87 callbacks suppressed [ 136.676086][ T43] audit: type=1800 audit(1790344764.192:1671): pid=11242 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2016" name="file0" dev="tmpfs" ino=3127 res=0 errno=0 [ 136.974593][ T43] audit: type=1400 audit(1790344764.482:1672): avc: denied { watch_mount } for pid=11263 comm="syz.3.2023" path="/589" dev="tmpfs" ino=3128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 137.087563][T11274] netlink: 'syz.0.2027': attribute type 1 has an invalid length. [ 137.101951][ T5741] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 137.111641][T11274] bond5: (slave veth0_to_bond): Releasing active interface [ 137.114791][T11274] bond7: (slave veth0_to_bond): making interface the new active one [ 137.117694][T11274] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 137.125149][T11274] macvlan2: entered promiscuous mode [ 137.125163][T11274] macvlan2: entered allmulticast mode [ 137.270031][T11284] __nla_validate_parse: 1 callbacks suppressed [ 137.270045][T11284] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2030'. [ 137.364108][ T43] audit: type=1800 audit(1790344764.872:1673): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 137.419959][ T43] audit: type=1800 audit(1790344764.932:1674): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 137.443647][ T43] audit: type=1800 audit(1790344764.952:1675): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 137.457227][ T43] audit: type=1800 audit(1790344764.972:1676): pid=11297 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2036" name="local" dev="configfs" ino=36838 res=0 errno=0 [ 137.457959][ T43] audit: type=1800 audit(1790344764.972:1677): pid=11297 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2036" name="addr" dev="configfs" ino=36839 res=0 errno=0 [ 137.458519][ T43] audit: type=1800 audit(1790344764.972:1678): pid=11297 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2036" name="addr" dev="configfs" ino=36840 res=0 errno=0 [ 137.515133][ T43] audit: type=1800 audit(1790344765.022:1679): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 137.539255][ T43] audit: type=1800 audit(1790344765.052:1680): pid=11304 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2038" name="state" dev="sysfs" ino=232 res=0 errno=0 [ 137.551580][T11310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2040'. [ 137.651367][T11322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2045'. [ 137.796549][T11338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2047'. [ 137.870369][T11344] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2048'. [ 137.919778][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2049'. [ 137.919803][T11348] netlink: 'syz.3.2049': attribute type 30 has an invalid length. [ 137.928180][ T5780] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.928279][ T5780] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.928311][ T5780] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.928329][ T5780] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.932314][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2049'. [ 137.932337][T11348] netlink: 'syz.3.2049': attribute type 30 has an invalid length. [ 138.092124][T11356] netlink: 'syz.0.2054': attribute type 1 has an invalid length. [ 138.109857][T11356] bond9: entered promiscuous mode [ 138.110200][T11356] 8021q: adding VLAN 0 to HW filter on device bond9 [ 138.121954][T11356] ipvlan2: entered allmulticast mode [ 138.121973][T11356] bond9: entered allmulticast mode [ 138.135377][T11356] bond9: (slave bridge2): making interface the new active one [ 138.135398][T11356] bridge2: entered promiscuous mode [ 138.135549][T11356] bridge2: entered allmulticast mode [ 138.137308][T11356] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 138.241850][T11361] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 138.242132][T11361] qnx6: wrong signature (magic) in superblock #1. [ 138.242142][T11361] qnx6: unable to read the first superblock [ 138.373990][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2057'. [ 138.374013][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2057'. [ 138.522207][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2060'. [ 138.529348][T11369] tipc: Enabled bearer , priority 0 [ 138.595957][T11367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.595973][T11367] IPv6: NLM_F_CREATE should be set when creating new route [ 138.699012][ T8676] IPVS: starting estimator thread 0... [ 138.785421][T11382] IPVS: using max 25 ests per chain, 60000 per kthread [ 138.923101][T11390] device-mapper: table: 248:1: multipath: not enough path parameters (-EINVAL) [ 138.923123][T11390] device-mapper: ioctl: error adding target to table [ 139.165481][T11402] xt_socket: unknown flags 0x58 [ 139.238641][T11408] fuse: Unknown parameter 'u' [ 139.325857][T11411] fuse: Unknown parameter '' [ 139.404838][T11425] hfs: unable to load iocharset "io#harset" [ 139.657777][ T5846] tipc: Node number set to 2266614948 [ 139.728543][T11455] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 139.749943][T11455] bond5: (slave veth0_to_bond): Releasing active interface [ 139.767972][T11455] bond6: (slave veth0_to_bond): making interface the new active one [ 139.768923][T11455] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 139.774916][T11455] macvlan3: entered promiscuous mode [ 139.774935][T11455] macvlan3: entered allmulticast mode [ 139.991898][ T5741] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 139.992887][ T5741] Bluetooth: hci3: unexpected event for opcode 0x203e [ 140.207090][T11483] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.325358][T11493] nfs: Unknown parameter 'mountroto' [ 140.383735][T11496] sd 0:0:0:0: PR command failed: 1026 [ 140.383760][T11496] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 140.383779][T11496] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 140.386231][T11496] sd 0:0:0:0: PR command failed: 1026 [ 140.386251][T11496] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 140.386270][T11496] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 140.477608][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 140.496990][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 140.497795][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 140.498491][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 140.499084][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 140.500654][T11502] device-mapper: table: 248:1: multipath: invalid number of feature args (-EINVAL) [ 140.500667][T11502] device-mapper: ioctl: error adding target to table [ 140.888141][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.888151][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.888192][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.888196][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.888236][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.888240][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.888279][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.888283][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.888321][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.888325][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.888364][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.888368][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.888411][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.888415][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.888453][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.888457][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.888494][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.888498][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.888537][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.888541][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.888579][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.888583][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.888620][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.888624][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.888662][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.888666][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.888704][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.888732][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.888776][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.888780][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.888817][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.888821][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.888860][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.888863][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.888902][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.888906][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.888944][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.888948][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.888985][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.888989][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.889027][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.889031][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.889109][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.889114][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.889152][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.889156][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.889193][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.889197][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.889234][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.889238][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.889276][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.889280][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.889319][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.889323][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.889362][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.889366][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.889407][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.889411][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.889451][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.889455][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.889494][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.889498][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.889536][T11524] binder: BINDER_SET_CONTEXT_MGR already set [ 140.889540][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -16 [ 140.969661][T11529] futex_wake_op: syz.1.2114 tries to shift op by 144; fix this program [ 140.970908][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.970961][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.971009][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.971055][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.971101][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.971146][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.971193][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.971238][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.971283][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.971329][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.971375][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.971420][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.971466][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.971511][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.972471][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.972524][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.972570][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.972616][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.972664][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.972731][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.972784][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.972831][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.972883][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.972937][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.972983][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.973029][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.978447][T11529] futex_wake_op: syz.1.2114 tries to shift op by 144; fix this program [ 140.978464][T11529] futex_wake_op: syz.1.2114 tries to shift op by 144; fix this program [ 140.978472][T11529] futex_wake_op: syz.1.2114 tries to shift op by 144; fix this program [ 140.978480][T11529] futex_wake_op: syz.1.2114 tries to shift op by 144; fix this program [ 140.978487][T11529] futex_wake_op: syz.1.2114 tries to shift op by 144; fix this program [ 140.978495][T11529] futex_wake_op: syz.1.2114 tries to shift op by 144; fix this program [ 140.978503][T11529] futex_wake_op: syz.1.2114 tries to shift op by 144; fix this program [ 140.978511][T11529] futex_wake_op: syz.1.2114 tries to shift op by 144; fix this program [ 140.978519][T11529] futex_wake_op: syz.1.2114 tries to shift op by 144; fix this program [ 140.980841][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.980914][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.980964][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.981013][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.981059][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.981107][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.981153][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.981201][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.981248][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.981294][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.981342][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.981393][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.981439][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.981488][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.981563][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.986151][T11529] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 140.986164][T11529] overlayfs: missing 'lowerdir' [ 140.986701][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.986711][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.986757][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.986764][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.986803][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.986811][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.986851][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.986858][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.986903][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.986911][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.986949][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.986956][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.986994][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.987001][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.987039][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.987046][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.987084][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.987091][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.987130][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.987137][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.987175][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.987182][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.987222][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.987229][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.987268][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.987275][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.987312][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.987319][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.987357][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.987364][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.987404][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.987411][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.987450][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.987458][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.987496][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.987503][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.987540][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.987547][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.987587][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.987594][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.987638][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.987645][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.987683][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.987690][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.987728][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.987735][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 140.987775][T11530] binder: 11523:11530 unknown command 1768304430 [ 140.987782][T11530] binder: 11523:11530 ioctl c0306201 200000000040 returned -22 [ 141.089790][ T5741] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 141.098057][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.098078][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.171501][T11499] lo speed is unknown, defaulting to 1000 [ 141.222129][T11547] netlink: 'syz.2.2120': attribute type 34 has an invalid length. [ 141.445495][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.445518][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.621221][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.621244][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.720147][ T43] kauditd_printk_skb: 77 callbacks suppressed [ 141.720159][ T43] audit: type=1800 audit(1790344769.232:1758): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 141.747699][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.747731][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.177847][ T43] audit: type=1800 audit(1790344769.692:1759): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 142.242589][ T5728] svc: failed to register nfsdv3 RPC service (errno 111). [ 142.253976][ T5728] svc: failed to register nfsaclv3 RPC service (errno 111). [ 142.253995][ T5728] failed to unregister udp with rpcbind [ 142.254444][ T5728] svc: failed to register nfsdv3 RPC service (errno 97). [ 142.254459][ T5728] svc: failed to register nfsaclv3 RPC service (errno 97). [ 142.254468][ T5728] failed to unregister udp with rpcbind [ 142.297295][ T43] audit: type=1800 audit(1790344769.812:1760): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 142.323161][T11573] __nla_validate_parse: 3 callbacks suppressed [ 142.323175][T11573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2127'. [ 142.663551][ T43] audit: type=1800 audit(1790344770.172:1761): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 142.751186][ T5741] Bluetooth: hci4: command tx timeout [ 143.081283][T11499] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.081557][T11499] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.081652][T11499] bridge_slave_0: entered allmulticast mode [ 143.082889][T11499] bridge_slave_0: entered promiscuous mode [ 143.084464][T11499] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.084533][T11499] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.084589][T11499] bridge_slave_1: entered allmulticast mode [ 143.086735][T11499] bridge_slave_1: entered promiscuous mode [ 143.120074][T11499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.127520][T11499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.252687][T11499] team0: Port device team_slave_0 added [ 143.263499][T11499] team0: Port device team_slave_1 added [ 143.298968][ T43] audit: type=1800 audit(1790344770.812:1762): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 143.387711][T11585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2134'. [ 143.415683][T11588] netlink: 'syz.1.2135': attribute type 1 has an invalid length. [ 143.426452][ T43] audit: type=1800 audit(1790344770.942:1763): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 143.434211][ T43] audit: type=1800 audit(1790344770.942:1764): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 143.518620][T11579] bridge0: port 4(ipvlan2) entered blocking state [ 143.518831][T11579] bridge0: port 4(ipvlan2) entered disabled state [ 143.518935][T11579] ipvlan2: entered allmulticast mode [ 143.518945][T11579] bridge0: entered allmulticast mode [ 143.520175][T11579] ipvlan2: left allmulticast mode [ 143.520190][T11579] bridge0: left allmulticast mode [ 143.542169][T11588] bond7: entered promiscuous mode [ 143.542389][T11588] 8021q: adding VLAN 0 to HW filter on device bond7 [ 143.546298][T11590] ipvlan2: entered allmulticast mode [ 143.546310][T11590] bond7: entered allmulticast mode [ 143.546693][T11499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.546701][T11499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.546714][T11499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.567942][ T43] audit: type=1800 audit(1790344771.082:1765): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=198281 res=0 errno=0 [ 143.570339][ T43] audit: type=1800 audit(1790344771.082:1766): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=198286 res=0 errno=0 [ 143.572640][ T43] audit: type=1800 audit(1790344771.082:1767): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=198290 res=0 errno=0 [ 143.601092][T11499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.601104][T11499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.601119][T11499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.616412][T11592] bond7: (slave bridge2): making interface the new active one [ 143.616435][T11592] bridge2: entered promiscuous mode [ 143.616535][T11592] bridge2: entered allmulticast mode [ 143.622483][T11592] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 143.715358][ T5801] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.781873][T11499] hsr_slave_0: entered promiscuous mode [ 143.782413][T11499] hsr_slave_1: entered promiscuous mode [ 143.782725][T11499] debugfs: 'hsr0' already exists in 'hsr' [ 143.782736][T11499] Cannot create hsr debugfs directory [ 144.011371][ T5741] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 144.011433][ T5741] Bluetooth: hci3: Injecting HCI hardware error event [ 144.013360][ T5741] Bluetooth: hci3: hardware error 0x00 [ 144.120734][ T12] bond7 (unregistering): (slave bridge2): Releasing backup interface [ 144.120787][ T12] bridge2 (unregistering): left promiscuous mode [ 144.120805][ T12] bridge2 (unregistering): left allmulticast mode [ 144.151366][ T12] bond0 (unregistering): Released all slaves [ 144.159646][ T12] bond1 (unregistering): Released all slaves [ 144.173072][ T12] bond2 (unregistering): Released all slaves [ 144.187844][ T12] bond3 (unregistering): Released all slaves [ 144.205273][ T12] bond4 (unregistering): Released all slaves [ 144.222720][ T12] bond5 (unregistering): Released all slaves [ 144.240671][ T12] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 144.250244][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2138'. [ 144.266001][ T12] bond6 (unregistering): Released all slaves [ 144.299984][ T12] bond7 (unregistering): Released all slaves [ 144.332842][T11597] syzkaller0: entered promiscuous mode [ 144.332872][T11597] syzkaller0: entered allmulticast mode [ 144.335469][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.335526][ T13] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.335556][ T13] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.504476][ T12] tipc: Disabling bearer [ 144.522213][ T12] tipc: Left network mode [ 144.778014][T11616] ip_tables: iptables: counters copy to user failed while replacing table [ 144.805775][ T5086] Bluetooth: hci4: command tx timeout [ 144.834048][T11499] netdevsim netdevsim3 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.882886][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2145'. [ 144.898976][T11620] scsi_dev_info_list_add_str: bad dev info string '00000000000000000000010 00000000000000000000004 00000000000000000174036' '' '' [ 144.914783][T11620] geneve3: entered promiscuous mode [ 144.958438][T11499] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.025278][ T854] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 145.035638][ T5441] 8021q: adding VLAN 0 to HW filter on device eth2 [ 145.082403][T11499] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.169459][ T854] usb 6-1: unable to get BOS descriptor or descriptor too short [ 145.169499][ T854] usb 6-1: New USB device found, idVendor=0bda, idProduct=b720, bcdDevice=f1.74 [ 145.170480][ T854] usb 6-1: config 12 has an invalid interface number: 29 but max is 0 [ 145.170500][ T854] usb 6-1: config 12 has no interface number 0 [ 145.170530][ T854] usb 6-1: config 12 interface 29 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 145.198680][ T854] usb 6-1: string descriptor 0 read error: -22 [ 145.198775][ T854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.243026][T11499] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.437698][ T5822] usb 6-1: USB disconnect, device number 12 [ 145.600712][T11499] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 145.603525][T11660] netlink: 'syz.2.2156': attribute type 1 has an invalid length. [ 145.604767][T11499] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 145.621291][T11499] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 145.630071][T11499] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 145.634235][T11660] bond9: (slave veth0_to_bond): Releasing active interface [ 145.642111][T11660] bond11: (slave veth0_to_bond): making interface the new active one [ 145.642789][T11660] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 145.651623][T11499] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 145.661302][T11499] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 145.688404][T11499] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 145.692399][T11499] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 145.697787][T11660] macvlan4: entered promiscuous mode [ 145.697806][T11660] macvlan4: entered allmulticast mode [ 145.698287][T11660] bond11: entered promiscuous mode [ 145.698302][T11660] veth0_to_bond: entered promiscuous mode [ 145.699116][T11660] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 145.702618][T11660] bond11: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 145.706748][T11660] bond11: left promiscuous mode [ 145.706765][T11660] veth0_to_bond: left promiscuous mode [ 145.991561][ T12] hsr_slave_0: left promiscuous mode [ 145.992395][ T12] hsr_slave_1: left promiscuous mode [ 146.008773][ T12] veth1_macvtap: left promiscuous mode [ 146.008809][ T12] veth0_macvtap: left promiscuous mode [ 146.008910][ T12] veth1_vlan: left promiscuous mode [ 146.008953][ T12] veth0_vlan: left promiscuous mode [ 146.067988][T11683] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 146.083050][T11683] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 146.088558][ T5741] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 146.396326][T11499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.404798][T11499] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.409269][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.409356][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.427318][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.427403][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.775435][ T1514] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 146.780742][ T12] IPVS: stop unused estimator thread 0... [ 146.799726][T11499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.847508][T11499] veth0_vlan: entered promiscuous mode [ 146.853816][T11499] veth1_vlan: entered promiscuous mode [ 146.878863][T11499] veth0_macvtap: entered promiscuous mode [ 146.880512][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2167'. [ 146.885695][ T5741] Bluetooth: hci4: command tx timeout [ 146.904677][T11499] veth1_macvtap: entered promiscuous mode [ 146.915297][ T43] kauditd_printk_skb: 64 callbacks suppressed [ 146.915313][ T43] audit: type=1800 audit(1790344774.422:1832): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 146.925444][T11720] ipt_ECN: cannot use operation on non-tcp rule [ 146.925453][ T1514] usb 7-1: Using ep0 maxpacket: 16 [ 146.926016][ T1514] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 146.926691][T11499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.931742][T11499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.932892][ T1514] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.932912][ T1514] usb 7-1: Product: syz [ 146.932924][ T1514] usb 7-1: Manufacturer: syz [ 146.932935][ T1514] usb 7-1: SerialNumber: syz [ 146.938562][ T43] audit: type=1800 audit(1790344774.452:1833): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=201982 res=0 errno=0 [ 146.939603][ T43] audit: type=1800 audit(1790344774.452:1834): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=202014 res=0 errno=0 [ 146.940113][ T43] audit: type=1800 audit(1790344774.452:1835): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=201989 res=0 errno=0 [ 146.951138][ T43] audit: type=1800 audit(1790344774.462:1836): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=201990 res=0 errno=0 [ 146.986433][ T43] audit: type=1800 audit(1790344774.492:1837): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 146.995716][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.995821][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.995853][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.996396][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.018506][ T43] audit: type=1800 audit(1790344774.532:1838): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=202034 res=0 errno=0 [ 147.050940][ T43] audit: type=1800 audit(1790344774.562:1839): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 147.069385][ T8696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.069405][ T8696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.073531][ T43] audit: type=1800 audit(1790344774.582:1840): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=202160 res=0 errno=0 [ 147.106339][ T43] audit: type=1800 audit(1790344774.622:1841): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 147.110001][ T8696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.110015][ T8696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.148254][ T1514] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 147.164595][ T1514] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 147.164945][ T1514] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 147.164981][ T1514] usb 7-1: media controller created [ 147.180785][ T1514] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.267211][T11739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2175'. [ 147.417772][ T1514] zl10353_read_register: readreg error (reg=127, ret==-110) [ 147.454653][ T1514] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 147.454663][T11749] udc dummy_udc.0: soft-connect without a gadget driver [ 147.464038][T11749] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2180'. [ 147.473604][ T1514] usb 7-1: USB disconnect, device number 8 [ 147.501392][T11751] warn_alloc: 2 callbacks suppressed [ 147.501410][T11751] syz.1.2181: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 147.501471][T11751] CPU: 1 UID: 0 PID: 11751 Comm: syz.1.2181 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.501500][T11751] Tainted: [L]=SOFTLOCKUP [ 147.501508][T11751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.501521][T11751] Call Trace: [ 147.501528][T11751] [ 147.501536][T11751] dump_stack_lvl+0x100/0x190 [ 147.501585][T11751] warn_alloc.cold+0x9e/0xb2 [ 147.501609][T11751] ? __pfx_warn_alloc+0x10/0x10 [ 147.501634][T11751] ? __kasan_kmalloc+0xaa/0xb0 [ 147.501655][T11751] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 147.501680][T11751] ? xskq_create+0x52/0x290 [ 147.501714][T11751] ? do_sock_setsockopt+0xf3/0x1d0 [ 147.501767][T11751] ? do_syscall_64+0x123/0x790 [ 147.501785][T11751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.501818][T11751] ? xsk_setsockopt+0x56f/0xab0 [ 147.501844][T11751] __vmalloc_node_range_noprof+0x123b/0x1420 [ 147.501883][T11751] ? xsk_setsockopt+0x56f/0xab0 [ 147.501922][T11751] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.501950][T11751] ? kasan_save_track+0x14/0x30 [ 147.501973][T11751] ? __kasan_kmalloc+0xaa/0xb0 [ 147.501998][T11751] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 147.502028][T11751] ? xskq_create+0x52/0x290 [ 147.502055][T11751] ? xsk_setsockopt+0x56f/0xab0 [ 147.502080][T11751] xskq_create+0x18f/0x290 [ 147.502107][T11751] ? xsk_setsockopt+0x56f/0xab0 [ 147.502135][T11751] xsk_setsockopt+0x56f/0xab0 [ 147.502161][T11751] ? __pfx_xsk_setsockopt+0x10/0x10 [ 147.502186][T11751] ? find_held_lock+0x2b/0x80 [ 147.502214][T11751] ? __fget_files+0x215/0x3d0 [ 147.502243][T11751] ? selinux_socket_setsockopt+0x6a/0x80 [ 147.502265][T11751] ? __pfx_xsk_setsockopt+0x10/0x10 [ 147.502291][T11751] do_sock_setsockopt+0xf3/0x1d0 [ 147.502323][T11751] __sys_setsockopt+0x195/0x220 [ 147.502353][T11751] __x64_sys_setsockopt+0xbd/0x160 [ 147.502377][T11751] ? do_syscall_64+0xae/0x790 [ 147.502394][T11751] ? lockdep_hardirqs_on+0x7d/0x110 [ 147.502423][T11751] do_syscall_64+0x123/0x790 [ 147.502444][T11751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.502464][T11751] RIP: 0033:0x7fb45299e159 [ 147.502481][T11751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.502499][T11751] RSP: 002b:00007fb4537a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 147.502518][T11751] RAX: ffffffffffffffda RBX: 00007fb452c25fa0 RCX: 00007fb45299e159 [ 147.502532][T11751] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 147.502544][T11751] RBP: 00007fb452a3506b R08: 0000000000000004 R09: 0000000000000000 [ 147.502555][T11751] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.502567][T11751] R13: 00007fb452c26038 R14: 00007fb452c25fa0 R15: 00007ffe86f02d48 [ 147.502594][T11751] [ 147.502700][T11751] Mem-Info: [ 147.502711][T11751] active_anon:29407 inactive_anon:28994 isolated_anon:0 [ 147.502711][T11751] active_file:16656 inactive_file:25284 isolated_file:0 [ 147.502711][T11751] unevictable:1000 dirty:119 writeback:0 [ 147.502711][T11751] slab_reclaimable:9350 slab_unreclaimable:82059 [ 147.502711][T11751] mapped:25578 shmem:49480 pagetables:3783 [ 147.502711][T11751] sec_pagetables:295 bounce:0 [ 147.502711][T11751] kernel_misc_reclaimable:0 [ 147.502711][T11751] free:399029 free_pcp:14933 free_cma:0 [ 147.502762][T11751] Node 0 active_anon:116284kB inactive_anon:62048kB active_file:66600kB inactive_file:100052kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:85928kB dirty:460kB writeback:0kB shmem:141980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15360kB pagetables:11940kB sec_pagetables:1168kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 147.502819][T11751] Node 1 active_anon:1344kB inactive_anon:53928kB active_file:24kB inactive_file:1084kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:16384kB dirty:16kB writeback:0kB shmem:55940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:3192kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 147.502868][T11751] Node 0 DMA free:7928kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:1456kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:68kB local_pcp:64kB free_cma:0kB [ 147.502928][T11751] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 147.502965][T11751] Node 0 DMA32 free:95608kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:116284kB inactive_anon:60592kB active_file:66596kB inactive_file:100052kB unevictable:2000kB writepending:460kB zspages:0kB present:2080628kB managed:1253172kB mlocked:0kB bounce:0kB free_pcp:37800kB local_pcp:8964kB free_cma:0kB [ 147.503022][T11751] lowmem_reserve[]: 0 0 0 0 0 [ 147.503054][T11751] Node 1 Normal free:1492580kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1344kB inactive_anon:53928kB active_file:24kB inactive_file:1084kB unevictable:2000kB writepending:16kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:21864kB local_pcp:112kB free_cma:0kB [ 147.503110][T11751] lowmem_reserve[]: 0 0 0 0 0 [ 147.503143][T11751] Node 0 DMA: 60*4kB (UME) 56*8kB (UME) 42*16kB (UME) 40*32kB (UME) 23*64kB (UME) 6*128kB (UME) 4*256kB (ME) 4*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 7952kB [ 147.503281][T11751] Node 0 DMA32: 368*4kB (UM) 471*8kB (UME) 408*16kB (UME) 50*32kB (M) 44*64kB (UME) 30*128kB (UME) 53*256kB (UM) 37*512kB (UM) 12*1024kB (UM) 5*2048kB (UM) 5*4096kB (UM) = 95544kB [ 147.503431][T11751] Node 1 Normal: 317*4kB (UME) 583*8kB (UME) 764*16kB (UME) 465*32kB (UME) 306*64kB (UME) 164*128kB (UME) 249*256kB (UME) 221*512kB (UME) 177*1024kB (UME) 24*2048kB (UM) 247*4096kB (UM) = 1492620kB [ 147.503586][T11751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.503601][T11751] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 147.503616][T11751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.503631][T11751] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 147.503646][T11751] 91410 total pagecache pages [ 147.503653][T11751] 0 pages in swap cache [ 147.503659][T11751] Free swap = 124996kB [ 147.503666][T11751] Total swap = 124996kB [ 147.503674][T11751] 1048443 pages RAM [ 147.503680][T11751] 0 pages HighMem/MovableOnly [ 147.503687][T11751] 285840 pages reserved [ 147.503693][T11751] 0 pages cma reserved [ 147.511095][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2181'. [ 147.511169][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2181'. [ 147.538356][T11753] netlink: 'syz.3.2182': attribute type 1 has an invalid length. [ 147.551777][T11753] ipvlan2: entered allmulticast mode [ 147.551795][T11753] dummy0: entered allmulticast mode [ 147.726912][T11758] bridge0: port 3(ipvlan3) entered blocking state [ 147.727042][T11758] bridge0: port 3(ipvlan3) entered disabled state [ 147.727135][T11758] ipvlan3: entered allmulticast mode [ 147.727150][T11758] bridge0: entered allmulticast mode [ 147.730669][T11758] ipvlan3: left allmulticast mode [ 147.730686][T11758] bridge0: left allmulticast mode [ 147.909947][T11774] netlink: 772 bytes leftover after parsing attributes in process `syz.3.2193'. [ 147.911683][T11774] netlink: 'syz.3.2193': attribute type 4 has an invalid length. [ 147.911696][T11774] netlink: 'syz.3.2193': attribute type 8 has an invalid length. [ 147.911704][T11774] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2193'. [ 147.991725][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2195'. [ 148.086331][T11798] syzkaller0: entered promiscuous mode [ 148.086345][T11798] syzkaller0: entered allmulticast mode [ 148.135154][T11801] comedi comedi2: comedi_config --init_data is deprecated [ 148.135978][T11786] tipc: Enabling of bearer rejected, failed to enable media [ 148.197905][T11810] ip_tables: iptables: counters copy to user failed while replacing table [ 148.253183][T11816] xt_socket: unknown flags 0x58 [ 148.253285][T11816] FAULT_INJECTION: forcing a failure. [ 148.253285][T11816] name fail_futex, interval 1, probability 0, space 0, times 0 [ 148.253312][T11816] CPU: 0 UID: 0 PID: 11816 Comm: syz.2.2208 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.253343][T11816] Tainted: [L]=SOFTLOCKUP [ 148.253351][T11816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.253364][T11816] Call Trace: [ 148.253372][T11816] [ 148.253381][T11816] dump_stack_lvl+0x100/0x190 [ 148.253416][T11816] should_fail_ex.cold+0x5/0xa [ 148.253454][T11816] get_futex_key+0x1d0/0x14f0 [ 148.253487][T11816] ? __pfx_get_futex_key+0x10/0x10 [ 148.253525][T11816] futex_wake+0xf4/0x5e0 [ 148.253549][T11816] ? __pfx_futex_wake+0x10/0x10 [ 148.253570][T11816] ? sctp_setsockopt+0x168/0xb370 [ 148.253601][T11816] do_futex+0x2b2/0x440 [ 148.253630][T11816] ? __pfx_do_futex+0x10/0x10 [ 148.253659][T11816] ? rcu_is_watching+0x13/0xc0 [ 148.253686][T11816] ? do_sock_setsockopt+0x101/0x1d0 [ 148.253712][T11816] ? kfree+0x1e5/0x6d0 [ 148.253740][T11816] ? selinux_socket_setsockopt+0x6a/0x80 [ 148.253767][T11816] __x64_sys_futex+0x34f/0x4d0 [ 148.253799][T11816] ? __pfx___x64_sys_futex+0x10/0x10 [ 148.253826][T11816] ? __sys_setsockopt+0x1b5/0x220 [ 148.253858][T11816] do_syscall_64+0x123/0x790 [ 148.253880][T11816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.253901][T11816] RIP: 0033:0x7f855639e159 [ 148.253919][T11816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.253938][T11816] RSP: 002b:00007f855734e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.253960][T11816] RAX: ffffffffffffffda RBX: 00007f8556625fa8 RCX: 00007f855639e159 [ 148.253973][T11816] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8556625fac [ 148.253986][T11816] RBP: 00007f8556625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 148.253999][T11816] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 148.254013][T11816] R13: 00007f8556626038 R14: 00007ffd7226eb50 R15: 00007ffd7226ec38 [ 148.254041][T11816] [ 148.418571][T11833] x_tables: duplicate underflow at hook 2 [ 148.508451][T11837] fuse: Unknown parameter 'us' [ 148.757220][ T5808] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 148.936602][ T5808] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 148.940338][ T5808] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 148.940379][ T5808] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.940400][ T5808] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.940425][ T5808] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 148.940444][ T5808] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 148.943870][ T5808] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 148.943907][ T5808] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.943924][ T5808] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.943943][ T5808] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 148.943964][ T5808] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 148.947737][ T5808] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 148.947816][ T5808] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.947839][ T5808] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.947859][ T5808] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 148.947880][ T5808] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 148.951473][ T5808] usb 6-1: string descriptor 0 read error: -22 [ 148.951570][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.965392][ T5741] Bluetooth: hci4: command tx timeout [ 148.966079][ T5808] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 149.964235][T11885] FAULT_INJECTION: forcing a failure. [ 149.964235][T11885] name failslab, interval 1, probability 0, space 0, times 0 [ 149.964268][T11885] CPU: 0 UID: 0 PID: 11885 Comm: syz.3.2228 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.964296][T11885] Tainted: [L]=SOFTLOCKUP [ 149.964304][T11885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.964316][T11885] Call Trace: [ 149.964323][T11885] [ 149.964331][T11885] dump_stack_lvl+0x100/0x190 [ 149.964363][T11885] should_fail_ex.cold+0x5/0xa [ 149.964391][T11885] should_failslab+0xc2/0x120 [ 149.964425][T11885] __kmalloc_cache_noprof+0x91/0x6d0 [ 149.964459][T11885] ? percpu_ref_init+0xec/0x3f0 [ 149.964489][T11885] ? __pfx_blk_queue_usage_counter_release+0x10/0x10 [ 149.964520][T11885] percpu_ref_init+0xec/0x3f0 [ 149.964551][T11885] blk_alloc_queue+0x574/0x790 [ 149.964571][T11885] ? alloc_pages_node_noprof+0x11d/0x200 [ 149.964595][T11885] blk_mq_alloc_queue+0x174/0x290 [ 149.964639][T11885] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 149.964708][T11885] ? blk_mq_alloc_tag_set+0xe2c/0x1330 [ 149.964744][T11885] __blk_mq_alloc_disk+0x29/0x120 [ 149.964770][T11885] loop_add+0x498/0xb60 [ 149.964791][T11885] ? __pfx_loop_add+0x10/0x10 [ 149.964826][T11885] ? __fget_files+0x34/0x3d0 [ 149.964856][T11885] loop_control_ioctl+0xae/0x620 [ 149.964878][T11885] ? __pfx_loop_control_ioctl+0x10/0x10 [ 149.964897][T11885] ? selinux_file_ioctl+0x13b/0x290 [ 149.964919][T11885] ? selinux_file_ioctl+0xb6/0x290 [ 149.964943][T11885] ? __pfx_loop_control_ioctl+0x10/0x10 [ 149.964967][T11885] __x64_sys_ioctl+0x18e/0x210 [ 149.964991][T11885] do_syscall_64+0x123/0x790 [ 149.965012][T11885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.965031][T11885] RIP: 0033:0x7fb18419e159 [ 149.965048][T11885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.965067][T11885] RSP: 002b:00007fb185083028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.965087][T11885] RAX: ffffffffffffffda RBX: 00007fb184425fa0 RCX: 00007fb18419e159 [ 149.965101][T11885] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 149.965114][T11885] RBP: 00007fb18423506b R08: 0000000000000000 R09: 0000000000000000 [ 149.965127][T11885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.965138][T11885] R13: 00007fb184426038 R14: 00007fb184425fa0 R15: 00007fff5f7e3968 [ 149.965163][T11885] [ 150.070608][T11889] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 150.157631][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2231'. [ 150.419736][T11916] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2239'. [ 150.440080][T11919] sctp: [Deprecated]: syz.0.2240 (pid 11919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.440080][T11919] Use struct sctp_sack_info instead [ 150.440124][T11919] sctp: [Deprecated]: syz.0.2240 (pid 11919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.440124][T11919] Use struct sctp_sack_info instead [ 150.440155][T11919] sctp: [Deprecated]: syz.0.2240 (pid 11919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.440155][T11919] Use struct sctp_sack_info instead [ 150.440186][T11919] sctp: [Deprecated]: syz.0.2240 (pid 11919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.440186][T11919] Use struct sctp_sack_info instead [ 150.440217][T11919] sctp: [Deprecated]: syz.0.2240 (pid 11919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.440217][T11919] Use struct sctp_sack_info instead [ 150.440249][T11919] sctp: [Deprecated]: syz.0.2240 (pid 11919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.440249][T11919] Use struct sctp_sack_info instead [ 150.440280][T11919] sctp: [Deprecated]: syz.0.2240 (pid 11919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.440280][T11919] Use struct sctp_sack_info instead [ 150.440310][T11919] sctp: [Deprecated]: syz.0.2240 (pid 11919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.440310][T11919] Use struct sctp_sack_info instead [ 150.440345][T11919] sctp: [Deprecated]: syz.0.2240 (pid 11919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.440345][T11919] Use struct sctp_sack_info instead [ 150.440377][T11919] sctp: [Deprecated]: syz.0.2240 (pid 11919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.440377][T11919] Use struct sctp_sack_info instead [ 150.449555][T11923] netlink: 'syz.0.2240': attribute type 10 has an invalid length. [ 150.514418][T11923] macvlan1: entered promiscuous mode [ 150.514443][T11923] macvlan1: entered allmulticast mode [ 150.525836][T11923] veth1_vlan: entered allmulticast mode [ 150.529125][T11923] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 150.538147][T11925] netlink: 'syz.3.2241': attribute type 1 has an invalid length. [ 150.596439][T11927] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11927 comm=syz.3.2242 [ 150.598255][T11927] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11927 comm=syz.3.2242 [ 150.678415][T11931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2244'. [ 151.494280][T11949] netlink: 'syz.0.2251': attribute type 4 has an invalid length. [ 151.495166][T11950] netlink: 'syz.0.2251': attribute type 4 has an invalid length. [ 152.020455][ T43] kauditd_printk_skb: 697 callbacks suppressed [ 152.020476][ T43] audit: type=1800 audit(1790344779.532:2539): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 152.035610][T11967] netlink: 'syz.2.2257': attribute type 10 has an invalid length. [ 152.040819][T11967] bridge0: port 3(syz_tun) entered blocking state [ 152.040916][T11967] bridge0: port 3(syz_tun) entered forwarding state [ 152.043284][T11967] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.043401][T11967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.051053][T11967] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 152.090208][ T43] audit: type=1800 audit(1790344779.592:2540): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 152.121533][ T43] audit: type=1800 audit(1790344779.632:2541): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 152.153569][T11972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2259'. [ 152.175410][ T5826] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.175436][ T5826] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.175454][ T5826] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.175471][ T5826] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.187666][ T43] audit: type=1800 audit(1790344779.702:2542): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 152.223008][ T43] audit: type=1800 audit(1790344779.732:2543): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=203317 res=0 errno=0 [ 152.268489][ T43] audit: type=1800 audit(1790344779.782:2544): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 152.312500][ T43] audit: type=1800 audit(1790344779.822:2545): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 152.344086][T11979] FAULT_INJECTION: forcing a failure. [ 152.344086][T11979] name failslab, interval 1, probability 0, space 0, times 0 [ 152.344108][T11979] CPU: 1 UID: 0 PID: 11979 Comm: syz.2.2262 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.344124][T11979] Tainted: [L]=SOFTLOCKUP [ 152.344128][T11979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.344134][T11979] Call Trace: [ 152.344138][T11979] [ 152.344142][T11979] dump_stack_lvl+0x100/0x190 [ 152.344163][T11979] should_fail_ex.cold+0x5/0xa [ 152.344179][T11979] should_failslab+0xc2/0x120 [ 152.344194][T11979] __kmalloc_noprof+0xfc/0x840 [ 152.344206][T11979] ? rcu_is_watching+0x13/0xc0 [ 152.344221][T11979] ? tomoyo_realpath_from_path+0xb6/0x690 [ 152.344239][T11979] tomoyo_realpath_from_path+0xb6/0x690 [ 152.344257][T11979] tomoyo_path_number_perm+0x23c/0x580 [ 152.344269][T11979] ? tomoyo_path_number_perm+0x22e/0x580 [ 152.344282][T11979] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 152.344295][T11979] ? __pfx_futex_wait+0x10/0x10 [ 152.344314][T11979] ? __lock_acquire+0x5c0/0x1f40 [ 152.344333][T11979] ? __fget_files+0x34/0x3d0 [ 152.344347][T11979] ? find_held_lock+0x2b/0x80 [ 152.344363][T11979] ? hook_file_ioctl_common+0x140/0x440 [ 152.344382][T11979] ? __fget_files+0x21f/0x3d0 [ 152.344398][T11979] security_file_ioctl+0xd3/0x230 [ 152.344412][T11979] __x64_sys_ioctl+0xb7/0x210 [ 152.344426][T11979] do_syscall_64+0x123/0x790 [ 152.344438][T11979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.344449][T11979] RIP: 0033:0x7f855639e159 [ 152.344459][T11979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.344470][T11979] RSP: 002b:00007f855734e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.344481][T11979] RAX: ffffffffffffffda RBX: 00007f8556625fa0 RCX: 00007f855639e159 [ 152.344488][T11979] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 152.344494][T11979] RBP: 00007f855643506b R08: 0000000000000000 R09: 0000000000000000 [ 152.344501][T11979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.344507][T11979] R13: 00007f8556626038 R14: 00007f8556625fa0 R15: 00007ffd7226ec38 [ 152.344521][T11979] [ 152.344526][T11979] ERROR: Out of memory at tomoyo_realpath_from_path. [ 152.350121][ T43] audit: type=1400 audit(1790344779.862:2546): avc: denied { setopt } for pid=11978 comm="syz.2.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 152.401349][ T43] audit: type=1400 audit(1790344779.912:2547): avc: denied { read } for pid=11978 comm="syz.2.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 152.627264][T11993] __nla_validate_parse: 2 callbacks suppressed [ 152.627278][T11993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2267'. [ 152.685011][ T43] audit: type=1400 audit(1790344780.192:2548): avc: denied { create } for pid=11996 comm="syz.0.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.687013][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2269'. [ 152.687025][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2269'. [ 152.826824][T12009] netlink: 'syz.0.2271': attribute type 1 has an invalid length. [ 152.837015][T12009] bond10: entered promiscuous mode [ 152.837179][T12009] 8021q: adding VLAN 0 to HW filter on device bond10 [ 152.849577][T12009] ipvlan3: entered allmulticast mode [ 152.849590][T12009] bond10: entered allmulticast mode [ 152.861112][T12009] bond10: (slave bridge3): making interface the new active one [ 152.861127][T12009] bridge3: entered promiscuous mode [ 152.861213][T12009] bridge3: entered allmulticast mode [ 152.862017][T12009] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 153.219418][T12022] bridge0: Device is already in use. [ 153.353917][T12031] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2280'. [ 153.362327][T12031] bonding: b is being created... [ 153.510448][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2286'. [ 153.730004][ T6338] usb 6-1: USB disconnect, device number 13 [ 153.845529][ T1514] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 153.995438][ T1514] usb 8-1: Using ep0 maxpacket: 32 [ 153.995933][ T1514] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 153.996731][ T1514] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 153.998295][ T1514] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 153.998308][ T1514] usb 8-1: Product: syz [ 153.998315][ T1514] usb 8-1: Manufacturer: syz [ 153.998322][ T1514] usb 8-1: SerialNumber: syz [ 153.999722][ T1514] usb 8-1: config 0 descriptor?? [ 154.000153][T12049] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 154.000943][ T1514] hub 8-1:0.0: bad descriptor, ignoring hub [ 154.000954][ T1514] hub 8-1:0.0: probe with driver hub failed with error -5 [ 154.964212][ T5837] usb 8-1: USB disconnect, device number 3 [ 155.225346][T12065] syzkaller0: entered promiscuous mode [ 155.225362][T12065] syzkaller0: entered allmulticast mode [ 155.557087][T12074] ip_tables: iptables: counters copy to user failed while replacing table [ 155.725565][T12087] xt_socket: unknown flags 0x58 [ 155.775425][ T5837] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 155.924444][T12098] fuse: fd is not a fuse device [ 155.935900][ T5837] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 155.936787][ T5837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 155.938413][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 155.938427][ T5837] usb 8-1: Product: syz [ 155.938434][ T5837] usb 8-1: Manufacturer: syz [ 155.938442][ T5837] usb 8-1: SerialNumber: syz [ 155.941713][ T5837] usb 8-1: config 0 descriptor?? [ 155.944401][T12049] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.952727][ T5837] hub 8-1:0.0: bad descriptor, ignoring hub [ 155.952749][ T5837] hub 8-1:0.0: probe with driver hub failed with error -5 [ 156.150555][T12049] program syz.3.2287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.153663][T12049] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 156.445592][ T25] usb 8-1: USB disconnect, device number 4 [ 156.729841][T12114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2310'. [ 156.764867][T12114] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12114 comm=syz.3.2310 [ 156.769612][T12114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2840 sclass=netlink_route_socket pid=12114 comm=syz.3.2310 [ 156.793532][ T42] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 157.041924][ T42] usb 7-1: not running at top speed; connect to a high speed hub [ 157.041944][ T42] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 157.057764][ T42] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.057792][ T42] usb 7-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 157.080895][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.080911][ T42] usb 7-1: Product: syz [ 157.080919][ T42] usb 7-1: Manufacturer: syz [ 157.080926][ T42] usb 7-1: SerialNumber: syz [ 157.090720][ T43] kauditd_printk_skb: 42 callbacks suppressed [ 157.090737][ T43] audit: type=1800 audit(1790344784.602:2591): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204736 res=0 errno=0 [ 157.094183][ T42] keyspan 7-1:1.0: Keyspan 4 port adapter converter detected [ 157.094497][ T42] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 157.094524][ T42] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 157.102187][ T42] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 157.109711][ T42] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 157.114466][ T42] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 157.120807][ T42] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 157.140535][ T43] audit: type=1800 audit(1790344784.652:2592): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=204768 res=0 errno=0 [ 157.141444][ T43] audit: type=1800 audit(1790344784.652:2593): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=204743 res=0 errno=0 [ 157.142244][ T43] audit: type=1800 audit(1790344784.652:2594): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=204744 res=0 errno=0 [ 157.144923][ T43] audit: type=1800 audit(1790344784.652:2595): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=204765 res=0 errno=0 [ 157.154163][ T43] audit: type=1800 audit(1790344784.662:2596): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=204766 res=0 errno=0 [ 157.154208][ T43] audit: type=1800 audit(1790344784.662:2597): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=204745 res=0 errno=0 [ 157.154244][ T43] audit: type=1800 audit(1790344784.662:2598): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=204767 res=0 errno=0 [ 157.172769][ T43] audit: type=1800 audit(1790344784.682:2599): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204797 res=0 errno=0 [ 157.206357][ T43] audit: type=1800 audit(1790344784.692:2600): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204813 res=0 errno=0 [ 157.262113][T12138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2320'. [ 157.298207][ T5741] Bluetooth: hci1: connection err: -111 [ 157.418022][ T5086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.421138][ T5086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.430070][ T5086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.432967][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.433769][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.758757][T12158] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 157.967050][T12146] lo speed is unknown, defaulting to 1000 [ 158.238923][T12146] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.239052][T12146] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.239347][T12146] bridge_slave_0: entered allmulticast mode [ 158.240863][T12146] bridge_slave_0: entered promiscuous mode [ 158.255491][T12146] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.255625][T12146] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.255729][T12146] bridge_slave_1: entered allmulticast mode [ 158.257220][T12146] bridge_slave_1: entered promiscuous mode [ 158.296666][T12146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.299196][T12146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.329660][T12146] team0: Port device team_slave_0 added [ 158.332218][T12146] team0: Port device team_slave_1 added [ 158.363905][T12146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.363922][T12146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.363944][T12146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.383773][T12146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.383787][T12146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.383807][T12146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.439609][T12146] hsr_slave_0: entered promiscuous mode [ 158.440470][T12146] hsr_slave_1: entered promiscuous mode [ 158.623550][T12146] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.623586][T12146] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.735814][ T5365] usb 7-1: USB disconnect, device number 9 [ 158.771244][ T5365] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 158.797035][ T5365] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 158.823137][ T5365] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 158.838937][ T5365] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 158.843746][ T5365] keyspan 7-1:1.0: device disconnected [ 158.887734][T12184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2328'. [ 158.890446][T12185] binder: 12182:12185 ioctl c0306201 200000000080 returned -14 [ 158.891049][T12186] binder: 12182:12186 ioctl c0286405 200000000040 returned -22 [ 158.917618][T12146] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.917651][T12146] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.971368][T12184] team0: Port device team_slave_0 removed [ 158.997249][T12146] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.997284][T12146] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.078838][T12146] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.078871][T12146] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.195969][T12209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.203425][T12209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.216581][T11697] bridge_slave_1: left allmulticast mode [ 159.216597][T11697] bridge_slave_1: left promiscuous mode [ 159.222763][T11697] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.236835][T11697] bridge_slave_0: left allmulticast mode [ 159.236856][T11697] bridge_slave_0: left promiscuous mode [ 159.236961][T11697] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.443486][T11697] bond2 (unregistering): (slave gretap1): Releasing active interface [ 159.445829][ T5365] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 159.471441][T11697] bond7 (unregistering): (slave bridge2): Releasing backup interface [ 159.471458][T11697] bridge2 (unregistering): left promiscuous mode [ 159.471468][T11697] bridge2 (unregistering): left allmulticast mode [ 159.492713][T11697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.494879][T11697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.497695][T11697] bond0 (unregistering): Released all slaves [ 159.501938][T11697] bond1 (unregistering): Released all slaves [ 159.508051][T11697] bond2 (unregistering): Released all slaves [ 159.514011][T11697] bond3 (unregistering): Released all slaves [ 159.521155][T11697] bond4 (unregistering): Released all slaves [ 159.525421][ T5086] Bluetooth: hci2: command tx timeout [ 159.529373][T11697] bond5 (unregistering): Released all slaves [ 159.544122][T11697] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 159.559758][T11697] bond6 (unregistering): Released all slaves [ 159.570326][T11697] bond7 (unregistering): Released all slaves [ 159.595371][ T5365] usb 7-1: Using ep0 maxpacket: 16 [ 159.599251][ T5365] usb 7-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=c9.1e [ 159.602791][ T5365] usb 7-1: config 8 has an invalid interface number: 25 but max is 0 [ 159.602812][ T5365] usb 7-1: config 8 has no interface number 0 [ 159.602835][ T5365] usb 7-1: config 8 interface 25 has no altsetting 0 [ 159.606000][ T5365] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.606019][ T5365] usb 7-1: Product: syz [ 159.606031][ T5365] usb 7-1: Manufacturer: syz [ 159.606043][ T5365] usb 7-1: SerialNumber: syz [ 159.641410][T12146] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 159.649041][T12146] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.650541][T12146] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 159.667899][T12146] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.674022][T12222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2342'. [ 159.676516][T12146] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 159.697274][T12146] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 159.698002][T12146] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 159.711261][T12146] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 159.754858][T12230] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2343'. [ 159.773389][T11697] tipc: Left network mode [ 159.833185][ T5365] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:8.25/input/input11 [ 159.849470][ T5123] bcm5974 7-1:8.25: could not read from device [ 159.854398][ T5123] bcm5974 7-1:8.25: could not read from device [ 159.858255][T12146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.859849][ T5365] usb 7-1: USB disconnect, device number 10 [ 159.867077][ T5123] bcm5974 7-1:8.25: could not read from device [ 159.868984][T12146] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.880523][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.880568][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.890963][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.891008][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.995980][T12240] netlink: 'syz.3.2347': attribute type 1 has an invalid length. [ 160.018000][T12240] bond3: (slave veth0_to_bond): making interface the new active one [ 160.018892][T12240] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 160.027409][T12240] macvlan2: entered promiscuous mode [ 160.027428][T12240] macvlan2: entered allmulticast mode [ 160.028382][T12240] bond3: entered promiscuous mode [ 160.028398][T12240] veth0_to_bond: entered promiscuous mode [ 160.029114][T12240] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 160.031786][T12240] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 160.032335][T12240] bond3: left promiscuous mode [ 160.032349][T12240] veth0_to_bond: left promiscuous mode [ 160.267717][T12254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2350'. [ 160.414202][T12146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.493693][T12146] veth0_vlan: entered promiscuous mode [ 160.504313][T12146] veth1_vlan: entered promiscuous mode [ 160.538591][T12146] veth0_macvtap: entered promiscuous mode [ 160.546692][T12146] veth1_macvtap: entered promiscuous mode [ 160.576935][T12146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.591381][T12146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.674808][T11697] hsr_slave_0: left promiscuous mode [ 160.677862][T11697] hsr_slave_1: left promiscuous mode [ 160.678253][T11697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.678288][T11697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.678895][T11697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.678904][T11697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.684304][T11697] veth1_macvtap: left promiscuous mode [ 160.684324][T11697] veth0_macvtap: left promiscuous mode [ 160.684368][T11697] veth1_vlan: left promiscuous mode [ 160.684383][T11697] veth0_vlan: left promiscuous mode [ 160.910363][T12288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2364'. [ 161.098909][T12296] netlink: 'syz.0.2366': attribute type 10 has an invalid length. [ 161.137260][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.139124][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.139148][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.165730][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.217020][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.217038][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.259545][T12307] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2370'. [ 161.269320][ T8696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.269339][ T8696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.269905][T12307] netlink: 42 bytes leftover after parsing attributes in process `syz.3.2370'. [ 161.381443][T12312] lo speed is unknown, defaulting to 1000 [ 161.398533][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2373'. [ 161.606054][ T5086] Bluetooth: hci2: command tx timeout [ 161.709910][T12310] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 161.758370][T12349] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2381'. [ 161.899042][T12364] warn_alloc: 1 callbacks suppressed [ 161.899055][T12364] syz.3.2384: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 161.899094][T12364] CPU: 3 UID: 0 PID: 12364 Comm: syz.3.2384 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.899110][T12364] Tainted: [L]=SOFTLOCKUP [ 161.899114][T12364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.899121][T12364] Call Trace: [ 161.899125][T12364] [ 161.899130][T12364] dump_stack_lvl+0x100/0x190 [ 161.899149][T12364] warn_alloc.cold+0x9e/0xb2 [ 161.899165][T12364] ? __pfx_warn_alloc+0x10/0x10 [ 161.899181][T12364] ? __kasan_kmalloc+0xaa/0xb0 [ 161.899203][T12364] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 161.899229][T12364] ? xskq_create+0x52/0x290 [ 161.899255][T12364] ? do_sock_setsockopt+0xf3/0x1d0 [ 161.899281][T12364] ? do_syscall_64+0x123/0x790 [ 161.899294][T12364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.899323][T12364] ? xsk_setsockopt+0x56f/0xab0 [ 161.899348][T12364] __vmalloc_node_range_noprof+0x123b/0x1420 [ 161.899379][T12364] ? xsk_setsockopt+0x56f/0xab0 [ 161.899397][T12364] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 161.899413][T12364] ? kasan_save_track+0x14/0x30 [ 161.899426][T12364] ? __kasan_kmalloc+0xaa/0xb0 [ 161.899439][T12364] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 161.899458][T12364] ? xskq_create+0x52/0x290 [ 161.899473][T12364] ? xsk_setsockopt+0x56f/0xab0 [ 161.899491][T12364] xskq_create+0x18f/0x290 [ 161.899513][T12364] ? xsk_setsockopt+0x56f/0xab0 [ 161.899540][T12364] xsk_setsockopt+0x56f/0xab0 [ 161.899565][T12364] ? __pfx_xsk_setsockopt+0x10/0x10 [ 161.899586][T12364] ? find_held_lock+0x2b/0x80 [ 161.899602][T12364] ? __fget_files+0x215/0x3d0 [ 161.899618][T12364] ? selinux_socket_setsockopt+0x6a/0x80 [ 161.899632][T12364] ? __pfx_xsk_setsockopt+0x10/0x10 [ 161.899647][T12364] do_sock_setsockopt+0xf3/0x1d0 [ 161.899665][T12364] __sys_setsockopt+0x195/0x220 [ 161.899684][T12364] __x64_sys_setsockopt+0xbd/0x160 [ 161.899698][T12364] ? do_syscall_64+0xae/0x790 [ 161.899708][T12364] ? lockdep_hardirqs_on+0x7d/0x110 [ 161.899726][T12364] do_syscall_64+0x123/0x790 [ 161.899737][T12364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.899749][T12364] RIP: 0033:0x7fb18419e159 [ 161.899759][T12364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.899770][T12364] RSP: 002b:00007fb185083028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 161.899782][T12364] RAX: ffffffffffffffda RBX: 00007fb184425fa0 RCX: 00007fb18419e159 [ 161.899789][T12364] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 161.899795][T12364] RBP: 00007fb18423506b R08: 0000000000000004 R09: 0000000000000000 [ 161.899802][T12364] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.899809][T12364] R13: 00007fb184426038 R14: 00007fb184425fa0 R15: 00007fff5f7e3968 [ 161.899829][T12364] [ 161.899834][T12364] Mem-Info: [ 161.899841][T12364] active_anon:29142 inactive_anon:29315 isolated_anon:0 [ 161.899841][T12364] active_file:16665 inactive_file:25283 isolated_file:0 [ 161.899841][T12364] unevictable:1000 dirty:45 writeback:0 [ 161.899841][T12364] slab_reclaimable:9384 slab_unreclaimable:81734 [ 161.899841][T12364] mapped:25625 shmem:49498 pagetables:3869 [ 161.899841][T12364] sec_pagetables:295 bounce:0 [ 161.899841][T12364] kernel_misc_reclaimable:0 [ 161.899841][T12364] free:383687 free_pcp:20837 free_cma:0 [ 161.899887][T12364] Node 0 active_anon:115224kB inactive_anon:63412kB active_file:66636kB inactive_file:100048kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:73828kB dirty:180kB writeback:0kB shmem:142052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15616kB pagetables:12284kB sec_pagetables:1168kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 161.899927][T12364] Node 1 active_anon:1344kB inactive_anon:53848kB active_file:24kB inactive_file:1084kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28672kB dirty:0kB writeback:0kB shmem:55940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:3192kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 161.899995][T12364] Node 0 DMA free:10064kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:1456kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:16kB free_cma:0kB [ 161.900029][T12364] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 161.900049][T12364] Node 0 DMA32 free:52076kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:115224kB inactive_anon:61956kB active_file:66632kB inactive_file:100048kB unevictable:2000kB writepending:180kB zspages:0kB present:2080628kB managed:1253172kB mlocked:0kB bounce:0kB free_pcp:72668kB local_pcp:19636kB free_cma:0kB [ 161.900083][T12364] lowmem_reserve[]: 0 0 0 0 0 [ 161.900103][T12364] Node 1 Normal free:1472608kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1344kB inactive_anon:53848kB active_file:24kB inactive_file:1084kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:10576kB local_pcp:216kB free_cma:0kB [ 161.900137][T12364] lowmem_reserve[]: 0 0 0 0 0 [ 161.900156][T12364] Node 0 DMA: 58*4kB (UME) 51*8kB (UME) 39*16kB (UME) 41*32kB (UME) 25*64kB (UME) 6*128kB (UME) 4*256kB (ME) 4*512kB (ME) 0*1024kB 1*2048kB (M) 0*4096kB = 10064kB [ 161.900240][T12364] Node 0 DMA32: 61*4kB (UME) 86*8kB (UME) 179*16kB (UM) 14*32kB (UME) 45*64kB (UME) 28*128kB (UM) 19*256kB (ME) 21*512kB (UME) 1*1024kB (E) 6*2048kB (UM) 3*4096kB (U) = 51924kB [ 161.900355][T12364] Node 1 Normal: 548*4kB (UME) 636*8kB (UME) 639*16kB (UME) 460*32kB (UME) 338*64kB (UME) 168*128kB (UME) 228*256kB (UME) 207*512kB (UME) 186*1024kB (UME) 27*2048kB (UM) 241*4096kB (UM) = 1472608kB [ 161.900443][T12364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.900452][T12364] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 161.900461][T12364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.900469][T12364] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.900479][T12364] 91437 total pagecache pages [ 161.900485][T12364] 0 pages in swap cache [ 161.900490][T12364] Free swap = 124996kB [ 161.900497][T12364] Total swap = 124996kB [ 161.900503][T12364] 1048443 pages RAM [ 161.900508][T12364] 0 pages HighMem/MovableOnly [ 161.900512][T12364] 285840 pages reserved [ 161.900518][T12364] 0 pages cma reserved [ 161.928227][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2384'. [ 162.018386][T12368] netlink: 'syz.3.2385': attribute type 1 has an invalid length. [ 162.060359][T12368] bond4: entered promiscuous mode [ 162.060671][T12368] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.082122][T12368] ipvlan3: entered allmulticast mode [ 162.082144][T12368] bond4: entered allmulticast mode [ 162.103274][T12368] bond4: (slave bridge1): making interface the new active one [ 162.103298][T12368] bridge1: entered promiscuous mode [ 162.103464][T12368] bridge1: entered allmulticast mode [ 162.108514][T12368] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 162.328280][T12379] netlink: 'syz.3.2387': attribute type 2 has an invalid length. [ 162.328297][T12379] netlink: 'syz.3.2387': attribute type 2 has an invalid length. [ 162.443223][T12399] bridge0: Device is already in use. [ 162.532888][ T43] kauditd_printk_skb: 60 callbacks suppressed [ 162.532907][ T43] audit: type=1800 audit(1790344790.042:2661): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 162.560273][ T43] audit: type=1800 audit(1790344790.072:2662): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 162.642648][ T43] audit: type=1800 audit(1790344790.152:2663): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 162.671295][ T43] audit: type=1800 audit(1790344790.182:2664): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 162.698590][ T43] audit: type=1800 audit(1790344790.212:2665): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 162.712187][T12420] nfs: Unknown parameter 'noft' [ 162.742601][ T43] audit: type=1800 audit(1790344790.252:2666): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 162.752961][ T43] audit: type=1800 audit(1790344790.262:2667): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 162.787814][ T43] audit: type=1800 audit(1790344790.302:2668): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 162.789634][T12422] Process accounting resumed [ 162.794447][ T43] audit: type=1800 audit(1790344790.302:2669): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 162.950619][T12435] tipc: Started in network mode [ 162.950637][T12435] tipc: Node identity 761957dcc40e, cluster identity 4711 [ 162.950749][T12435] tipc: Enabled bearer , priority 0 [ 163.105677][ T43] audit: type=1800 audit(1790344790.552:2670): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 163.182401][T12445] ip_tables: iptables: counters copy to user failed while replacing table [ 163.428086][T12436] syzkaller0: entered promiscuous mode [ 163.428150][T12436] syzkaller0: entered allmulticast mode [ 163.441282][T12434] tipc: Resetting bearer [ 163.460945][T12434] tipc: Disabling bearer [ 163.507003][T12467] FAULT_INJECTION: forcing a failure. [ 163.507003][T12467] name failslab, interval 1, probability 0, space 0, times 0 [ 163.507026][T12467] CPU: 2 UID: 0 PID: 12467 Comm: syz.3.2417 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.507043][T12467] Tainted: [L]=SOFTLOCKUP [ 163.507047][T12467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.507054][T12467] Call Trace: [ 163.507058][T12467] [ 163.507063][T12467] dump_stack_lvl+0x100/0x190 [ 163.507085][T12467] should_fail_ex.cold+0x5/0xa [ 163.507102][T12467] should_failslab+0xc2/0x120 [ 163.507118][T12467] kmem_cache_alloc_noprof+0x92/0x6a0 [ 163.507132][T12467] ? __proc_create+0xc1/0x8f0 [ 163.507142][T12467] ? __proc_create+0x247/0x8f0 [ 163.507156][T12467] __proc_create+0x247/0x8f0 [ 163.507168][T12467] ? __pfx___proc_create+0x10/0x10 [ 163.507185][T12467] proc_create_reg+0x75/0x170 [ 163.507198][T12467] proc_create_seq_private+0x8e/0x180 [ 163.507210][T12467] ? __pfx_proc_create_seq_private+0x10/0x10 [ 163.507224][T12467] ? lockdep_init_map_type+0x5c/0x250 [ 163.507240][T12467] hashlimit_mt_check_common+0xaa6/0x1420 [ 163.507262][T12467] hashlimit_mt_check+0x71/0x90 [ 163.507279][T12467] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 163.507295][T12467] xt_check_match+0x117/0x1c0 [ 163.507313][T12467] find_check_entry.isra.0+0x356/0xa00 [ 163.507331][T12467] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 163.507350][T12467] ? kasan_quarantine_put+0x104/0x240 [ 163.507363][T12467] ? lockdep_hardirqs_on+0x7d/0x110 [ 163.507381][T12467] ? translate_table+0xb80/0x1770 [ 163.507395][T12467] ? translate_table+0xbd8/0x1770 [ 163.507408][T12467] ? kfree+0x22b/0x6d0 [ 163.507424][T12467] ? xt_check_table_hooks+0x206/0x330 [ 163.507441][T12467] translate_table+0xcb9/0x1770 [ 163.507462][T12467] ? __pfx_translate_table+0x10/0x10 [ 163.507480][T12467] do_ip6t_set_ctl+0x689/0xd00 [ 163.507495][T12467] ? nf_sockopt_find.isra.0+0x222/0x290 [ 163.507511][T12467] ? nf_sockopt_find.isra.0+0x222/0x290 [ 163.507528][T12467] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 163.507543][T12467] ? __mutex_unlock_slowpath+0x35d/0x930 [ 163.507556][T12467] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 163.507572][T12467] ? nf_sockopt_find.isra.0+0x222/0x290 [ 163.507590][T12467] nf_setsockopt+0x8d/0xf0 [ 163.507607][T12467] ipv6_setsockopt+0x135/0x170 [ 163.507623][T12467] sctp_setsockopt+0x161/0xb370 [ 163.507643][T12467] ? __pfx_sctp_setsockopt+0x10/0x10 [ 163.507657][T12467] ? __fget_files+0x215/0x3d0 [ 163.507674][T12467] ? selinux_socket_setsockopt+0x6a/0x80 [ 163.507686][T12467] ? sock_common_setsockopt+0x2e/0xf0 [ 163.507704][T12467] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 163.507723][T12467] do_sock_setsockopt+0xf3/0x1d0 [ 163.507742][T12467] __sys_setsockopt+0x195/0x220 [ 163.507766][T12467] __x64_sys_setsockopt+0xbd/0x160 [ 163.507781][T12467] ? do_syscall_64+0xae/0x790 [ 163.507791][T12467] ? lockdep_hardirqs_on+0x7d/0x110 [ 163.507810][T12467] do_syscall_64+0x123/0x790 [ 163.507823][T12467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.507835][T12467] RIP: 0033:0x7fb18419e159 [ 163.507847][T12467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.507858][T12467] RSP: 002b:00007fb185083028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 163.507870][T12467] RAX: ffffffffffffffda RBX: 00007fb184425fa0 RCX: 00007fb18419e159 [ 163.507877][T12467] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 163.507884][T12467] RBP: 00007fb18423506b R08: 0000000000000490 R09: 0000000000000000 [ 163.507891][T12467] R10: 0000200000004040 R11: 0000000000000246 R12: 0000000000000000 [ 163.507897][T12467] R13: 00007fb184426038 R14: 00007fb184425fa0 R15: 00007fff5f7e3968 [ 163.507911][T12467] [ 163.643292][T12482] fuse: Unknown parameter 'user_i"' [ 163.685423][ T5086] Bluetooth: hci2: command tx timeout [ 164.115256][T12518] __nla_validate_parse: 2 callbacks suppressed [ 164.115274][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2438'. [ 164.117139][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2438'. [ 164.154958][T12520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2439'. [ 164.377909][T12528] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 164.408199][T12532] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2443'. [ 164.499684][T12530] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 165.205346][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 165.504503][T12561] netlink: Unknown conntrack attr (0) [ 165.507128][T12563] FAULT_INJECTION: forcing a failure. [ 165.507128][T12563] name failslab, interval 1, probability 0, space 0, times 0 [ 165.507181][T12563] CPU: 2 UID: 0 PID: 12563 Comm: syz.3.2457 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.507206][T12563] Tainted: [L]=SOFTLOCKUP [ 165.507212][T12563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.507222][T12563] Call Trace: [ 165.507228][T12563] [ 165.507234][T12563] dump_stack_lvl+0x100/0x190 [ 165.507270][T12563] should_fail_ex.cold+0x5/0xa [ 165.507295][T12563] should_failslab+0xc2/0x120 [ 165.507319][T12563] kmem_cache_alloc_noprof+0x92/0x6a0 [ 165.507338][T12563] ? __pfx_map_id_range_down+0x10/0x10 [ 165.507358][T12563] ? security_inode_alloc+0x3b/0x2c0 [ 165.507381][T12563] security_inode_alloc+0x3b/0x2c0 [ 165.507400][T12563] inode_init_always_gfp+0xc6f/0xfb0 [ 165.507429][T12563] alloc_inode+0x8e/0x250 [ 165.507446][T12563] iget_locked+0x1d9/0x6d0 [ 165.507463][T12563] ? ext4_search_dir+0x2a9/0x330 [ 165.507489][T12563] ? __pfx_iget_locked+0x10/0x10 [ 165.507515][T12563] __ext4_iget+0x3fd/0x4900 [ 165.507537][T12563] ? __ext4_find_entry+0xba7/0x11d0 [ 165.507575][T12563] ? __pfx___ext4_iget+0x10/0x10 [ 165.507597][T12563] ? __pfx_ext4_fname_prepare_lookup+0x10/0x10 [ 165.507616][T12563] ? d_alloc_parallel+0x46e/0x14c0 [ 165.507637][T12563] ? ext4_fname_free_filename+0xc2/0x130 [ 165.507655][T12563] ? kfree+0x1e5/0x6d0 [ 165.507686][T12563] ext4_lookup+0x37c/0x730 [ 165.507703][T12563] ? __pfx_ext4_lookup+0x10/0x10 [ 165.507718][T12563] ? lookup_slow+0x42/0x70 [ 165.507743][T12563] ? down_read+0x13b/0x4c0 [ 165.507763][T12563] ? __pfx_down_read+0x10/0x10 [ 165.507785][T12563] __lookup_slow+0x155/0x320 [ 165.507804][T12563] lookup_slow+0x50/0x70 [ 165.507820][T12563] path_lookupat+0x5e8/0xc40 [ 165.507845][T12563] filename_lookup+0x202/0x590 [ 165.507869][T12563] ? __pfx_filename_lookup+0x10/0x10 [ 165.507909][T12563] ? strncpy_from_user+0x19d/0x2d0 [ 165.507938][T12563] __x64_sys_chdir+0xc8/0x280 [ 165.507961][T12563] ? __pfx___x64_sys_chdir+0x10/0x10 [ 165.507990][T12563] do_syscall_64+0x123/0x790 [ 165.508009][T12563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.508026][T12563] RIP: 0033:0x7fb18419e159 [ 165.508042][T12563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.508058][T12563] RSP: 002b:00007fb185062028 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 165.508076][T12563] RAX: ffffffffffffffda RBX: 00007fb184426090 RCX: 00007fb18419e159 [ 165.508089][T12563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 165.508100][T12563] RBP: 00007fb18423506b R08: 0000000000000000 R09: 0000000000000000 [ 165.508110][T12563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.508121][T12563] R13: 00007fb184426128 R14: 00007fb184426090 R15: 00007fff5f7e3968 [ 165.508145][T12563] [ 165.571283][T12566] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2459'. [ 165.585939][T12567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2458'. [ 165.629514][T12569] affs: No valid root block on device sr0 [ 165.675017][T12575] netlink: 'syz.1.2463': attribute type 1 has an invalid length. [ 165.687926][T12569] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 165.757173][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2468'. [ 165.875852][T12597] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 165.878994][T12597] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 165.880979][T12599] jffs2: notice: (12599) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 165.937900][T12614] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2476'. [ 166.001642][T12619] netlink: 'syz.1.2479': attribute type 10 has an invalid length. [ 166.001882][T12619] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.002413][T12619] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.039468][T12623] netlink: 'syz.2.2480': attribute type 1 has an invalid length. [ 166.060246][T12623] bond12: entered promiscuous mode [ 166.060578][T12623] 8021q: adding VLAN 0 to HW filter on device bond12 [ 166.147659][T12629] netlink: zone id is out of range [ 166.162736][T12629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2483'. [ 166.162756][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2483'. [ 166.162779][T12629] netlink: 'syz.0.2483': attribute type 15 has an invalid length. [ 166.162790][T12629] netlink: 'syz.0.2483': attribute type 18 has an invalid length. [ 166.577125][T12659] ip_tables: iptables: counters copy to user failed while replacing table [ 166.577162][T12660] ip_tables: iptables: counters copy to user failed while replacing table [ 167.146317][T12683] netlink: 'syz.0.2501': attribute type 1 has an invalid length. [ 167.152748][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.159564][ T5741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.165104][ T5741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.168934][T12683] bond11: entered promiscuous mode [ 167.169371][T12683] 8021q: adding VLAN 0 to HW filter on device bond11 [ 167.180167][ T5741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.180846][ T5741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.184133][T12683] ipvlan4: entered allmulticast mode [ 167.184151][T12683] bond11: entered allmulticast mode [ 167.226685][T12683] bond11: (slave bridge4): making interface the new active one [ 167.226709][T12683] bridge4: entered promiscuous mode [ 167.227011][T12683] bridge4: entered allmulticast mode [ 167.229210][T12683] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 167.303853][ T9039] bridge0: port 3(syz_tun) entered disabled state [ 167.306923][T12690] overlayfs: failed to clone upperpath [ 167.320540][ T9039] syz_tun (unregistering): left allmulticast mode [ 167.320564][ T9039] syz_tun (unregistering): left promiscuous mode [ 167.320670][ T9039] bridge0: port 3(syz_tun) entered disabled state [ 167.467425][ T9039] tipc: Resetting bearer [ 167.484657][ T9039] tipc: Disabling bearer [ 167.513380][T12681] lo speed is unknown, defaulting to 1000 [ 167.544987][T12707] bridge0: port 3(ipvlan4) entered blocking state [ 167.545069][T12707] bridge0: port 3(ipvlan4) entered disabled state [ 167.545126][T12707] ipvlan4: entered allmulticast mode [ 167.545135][T12707] bridge0: entered allmulticast mode [ 167.547690][T12707] ipvlan4: left allmulticast mode [ 167.547701][T12707] bridge0: left allmulticast mode [ 167.639127][ T5801] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.639151][ T5801] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.681503][ T43] kauditd_printk_skb: 59 callbacks suppressed [ 167.681522][ T43] audit: type=1800 audit(1790344795.192:2730): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 167.743895][ T43] audit: type=1800 audit(1790344795.252:2731): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 167.780557][ T5801] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.780613][ T5801] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.807476][ T43] audit: type=1800 audit(1790344795.322:2732): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 167.823787][T12736] nfs: Unknown parameter 'ti/eo' [ 167.848008][ T43] audit: type=1800 audit(1790344795.362:2733): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 167.902220][ T43] audit: type=1800 audit(1790344795.412:2734): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 167.922564][ T5801] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.922586][ T5801] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.972473][ T43] audit: type=1800 audit(1790344795.482:2735): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 167.990360][T12764] ip_tables: iptables: counters copy to user failed while replacing table [ 168.004628][ T5801] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.004660][ T5801] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.020536][ T43] audit: type=1800 audit(1790344795.532:2736): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 168.128149][ T43] audit: type=1800 audit(1790344795.642:2737): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 168.174674][T12681] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.174744][T12681] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.174835][T12681] bridge_slave_0: entered allmulticast mode [ 168.176039][T12681] bridge_slave_0: entered promiscuous mode [ 168.182769][T12681] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.182845][T12681] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.182912][T12681] bridge_slave_1: entered allmulticast mode [ 168.183822][T12681] bridge_slave_1: entered promiscuous mode [ 168.202408][ T43] audit: type=1800 audit(1790344795.712:2738): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 168.205076][T12786] device-mapper: ioctl: only supply one of name or uuid, cmd(6) [ 168.231151][ T43] audit: type=1800 audit(1790344795.742:2739): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227613 res=0 errno=0 [ 168.236440][T12681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.241493][T12681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.287206][ T5826] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.287247][ T5826] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.292976][T12792] FAULT_INJECTION: forcing a failure. [ 168.292976][T12792] name failslab, interval 1, probability 0, space 0, times 0 [ 168.292999][T12792] CPU: 0 UID: 0 PID: 12792 Comm: syz.3.2535 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.293015][T12792] Tainted: [L]=SOFTLOCKUP [ 168.293020][T12792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.293027][T12792] Call Trace: [ 168.293031][T12792] [ 168.293036][T12792] dump_stack_lvl+0x100/0x190 [ 168.293056][T12792] should_fail_ex.cold+0x5/0xa [ 168.293074][T12792] should_failslab+0xc2/0x120 [ 168.293108][T12792] kmem_cache_alloc_noprof+0x92/0x6a0 [ 168.293123][T12792] ? __proc_create+0xc1/0x8f0 [ 168.293134][T12792] ? __proc_create+0x247/0x8f0 [ 168.293149][T12792] __proc_create+0x247/0x8f0 [ 168.293161][T12792] ? __pfx___proc_create+0x10/0x10 [ 168.293179][T12792] proc_create_reg+0x75/0x170 [ 168.293193][T12792] proc_create_seq_private+0x8e/0x180 [ 168.293206][T12792] ? __pfx_proc_create_seq_private+0x10/0x10 [ 168.293219][T12792] ? lockdep_init_map_type+0x5c/0x250 [ 168.293235][T12792] hashlimit_mt_check_common+0xaa6/0x1420 [ 168.293258][T12792] hashlimit_mt_check+0x71/0x90 [ 168.293274][T12792] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 168.293290][T12792] xt_check_match+0x117/0x1c0 [ 168.293308][T12792] find_check_entry.isra.0+0x356/0xa00 [ 168.293328][T12792] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 168.293348][T12792] ? kasan_quarantine_put+0x104/0x240 [ 168.293361][T12792] ? lockdep_hardirqs_on+0x7d/0x110 [ 168.293379][T12792] ? translate_table+0xb80/0x1770 [ 168.293393][T12792] ? translate_table+0xbd8/0x1770 [ 168.293407][T12792] ? kfree+0x22b/0x6d0 [ 168.293423][T12792] ? xt_check_table_hooks+0x206/0x330 [ 168.293440][T12792] translate_table+0xcb9/0x1770 [ 168.293461][T12792] ? __pfx_translate_table+0x10/0x10 [ 168.293479][T12792] do_ip6t_set_ctl+0x689/0xd00 [ 168.293493][T12792] ? nf_sockopt_find.isra.0+0x222/0x290 [ 168.293510][T12792] ? nf_sockopt_find.isra.0+0x222/0x290 [ 168.293527][T12792] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 168.293542][T12792] ? __mutex_unlock_slowpath+0x35d/0x930 [ 168.293555][T12792] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.293572][T12792] ? nf_sockopt_find.isra.0+0x222/0x290 [ 168.293590][T12792] nf_setsockopt+0x8d/0xf0 [ 168.293607][T12792] ipv6_setsockopt+0x135/0x170 [ 168.293624][T12792] sctp_setsockopt+0x161/0xb370 [ 168.293642][T12792] ? __pfx_sctp_setsockopt+0x10/0x10 [ 168.293657][T12792] ? __fget_files+0x215/0x3d0 [ 168.293680][T12792] ? selinux_socket_setsockopt+0x6a/0x80 [ 168.293693][T12792] ? sock_common_setsockopt+0x2e/0xf0 [ 168.293711][T12792] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 168.293731][T12792] do_sock_setsockopt+0xf3/0x1d0 [ 168.293767][T12792] __sys_setsockopt+0x195/0x220 [ 168.293786][T12792] __x64_sys_setsockopt+0xbd/0x160 [ 168.293801][T12792] ? do_syscall_64+0xae/0x790 [ 168.293812][T12792] ? lockdep_hardirqs_on+0x7d/0x110 [ 168.293830][T12792] do_syscall_64+0x123/0x790 [ 168.293843][T12792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.293855][T12792] RIP: 0033:0x7fb18419e159 [ 168.293865][T12792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.293876][T12792] RSP: 002b:00007fb185083028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 168.293887][T12792] RAX: ffffffffffffffda RBX: 00007fb184425fa0 RCX: 00007fb18419e159 [ 168.293895][T12792] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 168.293901][T12792] RBP: 00007fb18423506b R08: 0000000000000490 R09: 0000000000000000 [ 168.293908][T12792] R10: 0000200000004040 R11: 0000000000000246 R12: 0000000000000000 [ 168.293914][T12792] R13: 00007fb184426038 R14: 00007fb184425fa0 R15: 00007fff5f7e3968 [ 168.293929][T12792] [ 168.311238][T12681] team0: Port device team_slave_0 added [ 168.312722][T12681] team0: Port device team_slave_1 added [ 168.318849][T12789] syzkaller0: entered promiscuous mode [ 168.318861][T12789] syzkaller0: entered allmulticast mode [ 168.334455][T12681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.334466][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.334479][T12681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.344997][T12681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.345012][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.345032][T12681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.351386][ T5801] bridge_slave_1: left promiscuous mode [ 168.351489][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.366025][ T5801] bridge_slave_0: left allmulticast mode [ 168.366040][ T5801] bridge_slave_0: left promiscuous mode [ 168.366144][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.374524][T12795] overlayfs: failed to resolve '/ A~[Uhl7ut;C(Vc!a9b5@hˈ95a': -2 [ 168.620511][ T5801] bond3 (unregistering): (slave gre2): Releasing backup interface [ 168.620535][ T5801] gre2 (unregistering): left promiscuous mode [ 168.651935][ T5801] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 168.666749][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.669662][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.673032][ T5801] bond0 (unregistering): Released all slaves [ 168.675923][ T5801] bond1 (unregistering): Released all slaves [ 168.681466][ T5801] bond2 (unregistering): Released all slaves [ 168.687700][ T5801] bond3 (unregistering): Released all slaves [ 168.706950][ T5801] bond4 (unregistering): Released all slaves [ 168.714493][ T5801] bond5 (unregistering): Released all slaves [ 168.721243][ T5801] bond6 (unregistering): (slave bond7): Releasing backup interface [ 168.721739][ T5801] bond6 (unregistering): Released all slaves [ 168.731669][ T5801] bond7 (unregistering): Released all slaves [ 168.739283][ T5801] bond8 (unregistering): Released all slaves [ 168.749036][ T5801] bond9 (unregistering): Released all slaves [ 168.759174][ T5801] bond10 (unregistering): Released all slaves [ 168.779147][ T5801] bond11 (unregistering): (slave veth0_to_bond): Releasing active interface [ 168.780448][ T5801] bond11 (unregistering): Released all slaves [ 168.792259][ T5801] bond12 (unregistering): Released all slaves [ 168.845769][T12807] fuse: fd is not a fuse device [ 168.881204][ T5801] tipc: Left network mode [ 168.923896][T12681] hsr_slave_0: entered promiscuous mode [ 168.924530][T12681] hsr_slave_1: entered promiscuous mode [ 168.924855][T12681] debugfs: 'hsr0' already exists in 'hsr' [ 168.924867][T12681] Cannot create hsr debugfs directory [ 168.965697][ T5780] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.966163][ T5780] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.181887][T12681] netdevsim netdevsim2 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.202261][ T5441] 8021q: adding VLAN 0 to HW filter on device eth2 [ 169.216867][ T5086] Bluetooth: hci0: command tx timeout [ 169.269891][T12681] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.350423][ T5801] hsr_slave_0: left promiscuous mode [ 169.351112][ T5801] hsr_slave_1: left promiscuous mode [ 169.351572][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.351584][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.356502][ T5801] veth1_macvtap: left promiscuous mode [ 169.356528][ T5801] veth0_macvtap: left promiscuous mode [ 169.356616][ T5801] veth1_vlan: left promiscuous mode [ 169.356670][ T5801] veth0_vlan: left promiscuous mode [ 169.512396][T12841] LUN: removable file: (no medium) [ 169.518425][T12841] [ 169.519235][T12841] ====================================================== [ 169.521409][T12841] WARNING: possible circular locking dependency detected [ 169.524126][T12841] syzkaller #0 Tainted: G L [ 169.526644][T12841] ------------------------------------------------------ [ 169.528812][T12841] syz.1.2550/12841 is trying to acquire lock: [ 169.530705][T12841] ffff888036530dc8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 169.534655][T12841] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 169.534655][T12841] but task is already holding lock: [ 169.537494][T12841] ffff888039727920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 169.540335][T12841] [ 169.540335][T12841] which lock already depends on the new lock. [ 169.540335][T12841] [ 169.544077][T12841] [ 169.544077][T12841] the existing dependency chain (in reverse order) is: [ 169.547416][T12841] [ 169.547416][T12841] -> #2 (&common->filesem){++++}-{4:4}: [ 169.549803][T12841] lock_acquire+0x1d1/0x380 [ 169.551384][T12841] down_read+0x99/0x4c0 [ 169.553166][T12841] fsg_show_file+0x20/0x180 [ 169.555303][T12841] configfs_read_iter+0x426/0x6f0 [ 169.557372][T12841] __kernel_read+0x397/0xad0 [ 169.558968][T12841] integrity_kernel_read+0x7e/0xb0 [ 169.560723][T12841] ima_calc_file_hash_tfm+0x25e/0x350 [ 169.562759][T12841] ima_calc_file_hash+0x1e3/0x380 [ 169.565122][T12841] ima_collect_measurement+0x94f/0xb30 [ 169.567350][T12841] process_measurement+0xdfe/0x2350 [ 169.569123][T12841] ima_file_check+0xc3/0x110 [ 169.570719][T12841] security_file_post_open+0xc4/0x210 [ 169.572751][T12841] path_openat+0x5cd/0x2440 [ 169.574895][T12841] do_file_open+0x20e/0x430 [ 169.576852][T12841] do_sys_openat2+0x10f/0x1e0 [ 169.578475][T12841] __x64_sys_openat+0x12d/0x210 [ 169.580150][T12841] do_syscall_64+0x123/0x790 [ 169.581759][T12841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.584266][T12841] [ 169.584266][T12841] -> #1 (&p->frag_sem){++++}-{4:4}: [ 169.586602][T12841] lock_acquire+0x1d1/0x380 [ 169.588173][T12841] down_read+0x99/0x4c0 [ 169.589641][T12841] __configfs_open_file+0xe8/0x9c0 [ 169.591390][T12841] do_dentry_open+0x6ab/0x14d0 [ 169.593404][T12841] vfs_open+0x82/0x3f0 [ 169.595378][T12841] dentry_open+0x71/0xd0 [ 169.597417][T12841] ima_calc_file_hash+0xe1/0x380 [ 169.599380][T12841] ima_collect_measurement+0x94f/0xb30 [ 169.601644][T12841] process_measurement+0xdfe/0x2350 [ 169.603914][T12841] ima_file_check+0xc3/0x110 [ 169.605869][T12841] security_file_post_open+0xc4/0x210 [ 169.607708][T12841] path_openat+0x5cd/0x2440 [ 169.609290][T12841] do_file_open+0x20e/0x430 [ 169.610862][T12841] do_sys_openat2+0x10f/0x1e0 [ 169.612671][T12841] __x64_sys_openat+0x12d/0x210 [ 169.614965][T12841] do_syscall_64+0x123/0x790 [ 169.616945][T12841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.618926][T12841] [ 169.618926][T12841] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 169.621596][T12841] check_prev_add+0xeb/0xe60 [ 169.623626][T12841] __lock_acquire+0x1528/0x1f40 [ 169.625838][T12841] lock_acquire+0x1d1/0x380 [ 169.627408][T12841] __mutex_lock+0x1a4/0x1bd0 [ 169.629025][T12841] process_measurement+0x5ab/0x2350 [ 169.631017][T12841] ima_file_check+0xc3/0x110 [ 169.632739][T12841] security_file_post_open+0xc4/0x210 [ 169.635201][T12841] path_openat+0x5cd/0x2440 [ 169.636899][T12841] do_file_open+0x20e/0x430 [ 169.638478][T12841] file_open_name+0x1c3/0x3e0 [ 169.640105][T12841] filp_open+0x2e/0x50 [ 169.641598][T12841] fsg_lun_open+0x6b/0x7b0 [ 169.643553][T12841] fsg_store_file+0x1e7/0x450 [ 169.645775][T12841] configfs_write_iter+0x302/0x4e0 [ 169.648051][T12841] vfs_write+0x6af/0x1050 [ 169.649581][T12841] ksys_write+0x12a/0x250 [ 169.651103][T12841] do_syscall_64+0x123/0x790 [ 169.652951][T12841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.655655][T12841] [ 169.655655][T12841] other info that might help us debug this: [ 169.655655][T12841] [ 169.659573][T12841] Chain exists of: [ 169.659573][T12841] &ima_iint_mutex_key[depth] --> &p->frag_sem --> &common->filesem [ 169.659573][T12841] [ 169.664415][T12841] Possible unsafe locking scenario: [ 169.664415][T12841] [ 169.667548][T12841] CPU0 CPU1 [ 169.669829][T12841] ---- ---- [ 169.672048][T12841] lock(&common->filesem); [ 169.673896][T12841] lock(&p->frag_sem); [ 169.676507][T12841] lock(&common->filesem); [ 169.679158][T12841] lock(&ima_iint_mutex_key[depth]); [ 169.680830][T12841] [ 169.680830][T12841] *** DEADLOCK *** [ 169.680830][T12841] [ 169.683785][T12841] locks held by syz.1.2550/12841: 5, last CPU#2: [ 169.686448][T12841] #0: ffff8880282ce470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 169.690240][T12841] #1: ffff888023da0460 (sb_writers#15){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 169.694035][T12841] #2: ffff88802d86c280 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 169.697247][T12841] #3: ffff88811a163270 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 169.700230][T12841] #4: ffff888039727920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 169.703646][T12841] [ 169.703646][T12841] stack backtrace: [ 169.706151][T12841] CPU: 2 UID: 0 PID: 12841 Comm: syz.1.2550 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.709715][T12841] Tainted: [L]=SOFTLOCKUP [ 169.711064][T12841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.714849][T12841] Call Trace: [ 169.715903][T12841] [ 169.716862][T12841] dump_stack_lvl+0x100/0x190 [ 169.718348][T12841] print_circular_bug.cold+0x178/0x1be [ 169.720050][T12841] check_noncircular+0x146/0x160 [ 169.721581][T12841] ? arch_stack_walk+0xa6/0xf0 [ 169.723407][T12841] check_prev_add+0xeb/0xe60 [ 169.725404][T12841] ? stack_trace_save+0x8e/0xc0 [ 169.727402][T12841] __lock_acquire+0x1528/0x1f40 [ 169.728947][T12841] lock_acquire+0x1d1/0x380 [ 169.730373][T12841] ? process_measurement+0x5ab/0x2350 [ 169.732064][T12841] ? __pfx___might_resched+0x10/0x10 [ 169.734367][T12841] __mutex_lock+0x1a4/0x1bd0 [ 169.736146][T12841] ? process_measurement+0x5ab/0x2350 [ 169.737827][T12841] ? process_measurement+0x5ab/0x2350 [ 169.739509][T12841] ? __pfx___mutex_lock+0x10/0x10 [ 169.741093][T12841] ? __pfx___might_resched+0x10/0x10 [ 169.743021][T12841] ? down_write+0x146/0x1f0 [ 169.744975][T12841] ? process_measurement+0x5ab/0x2350 [ 169.747100][T12841] process_measurement+0x5ab/0x2350 [ 169.748764][T12841] ? avc_has_perm_noaudit+0x56/0x470 [ 169.750413][T12841] ? find_held_lock+0x2b/0x80 [ 169.752005][T12841] ? avc_has_perm_noaudit+0x11e/0x470 [ 169.754145][T12841] ? __pfx_process_measurement+0x10/0x10 [ 169.755892][T12841] ? avc_has_perm+0x135/0x1e0 [ 169.757408][T12841] ? __pfx_avc_has_perm+0x10/0x10 [ 169.758985][T12841] ? hook_file_open+0x248/0x8e0 [ 169.760518][T12841] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 169.762731][T12841] ima_file_check+0xc3/0x110 [ 169.764559][T12841] ? __pfx_ima_file_check+0x10/0x10 [ 169.766199][T12841] security_file_post_open+0xc4/0x210 [ 169.767862][T12841] path_openat+0x5cd/0x2440 [ 169.769293][T12841] ? __pfx_path_openat+0x10/0x10 [ 169.770835][T12841] ? kasan_save_stack+0x3f/0x50 [ 169.772486][T12841] ? kasan_save_stack+0x30/0x50 [ 169.774567][T12841] ? kasan_save_track+0x14/0x30 [ 169.776351][T12841] ? __kasan_slab_alloc+0x89/0x90 [ 169.777925][T12841] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 169.779663][T12841] ? do_getname_kernel+0x5d/0x250 [ 169.781239][T12841] ? filp_open+0x1d/0x50 [ 169.782766][T12841] do_file_open+0x20e/0x430 [ 169.784744][T12841] ? __pfx_do_file_open+0x10/0x10 [ 169.786650][T12841] file_open_name+0x1c3/0x3e0 [ 169.788132][T12841] ? __pfx_file_open_name+0x10/0x10 [ 169.789758][T12841] ? do_getname_kernel+0x5d/0x250 [ 169.791337][T12841] ? __asan_memcpy+0x3c/0x60 [ 169.793071][T12841] ? do_getname_kernel+0x1be/0x250 [ 169.795055][T12841] filp_open+0x2e/0x50 [ 169.796361][T12841] fsg_lun_open+0x6b/0x7b0 [ 169.797773][T12841] ? __pfx_down_read+0x10/0x10 [ 169.799282][T12841] fsg_store_file+0x1e7/0x450 [ 169.800774][T12841] configfs_write_iter+0x302/0x4e0 [ 169.802762][T12841] vfs_write+0x6af/0x1050 [ 169.804436][T12841] ? __pfx_configfs_write_iter+0x10/0x10 [ 169.806192][T12841] ? __pfx_vfs_write+0x10/0x10 [ 169.807681][T12841] ? find_held_lock+0x2b/0x80 [ 169.809167][T12841] ksys_write+0x12a/0x250 [ 169.810515][T12841] ? __pfx_ksys_write+0x10/0x10 [ 169.812036][T12841] do_syscall_64+0x123/0x790 [ 169.814022][T12841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.815998][T12841] RIP: 0033:0x7fbdc2d9e159 [ 169.817413][T12841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.823742][T12841] RSP: 002b:00007fbdc3c09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 169.826543][T12841] RAX: ffffffffffffffda RBX: 00007fbdc3025fa0 RCX: 00007fbdc2d9e159 [ 169.828983][T12841] RDX: 0000000000000005 RSI: 00002000000003c0 RDI: 0000000000000005 [ 169.831421][T12841] RBP: 00007fbdc2e3506b R08: 0000000000000000 R09: 0000000000000000 [ 169.834524][T12841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.836992][T12841] R13: 00007fbdc3026038 R14: 00007fbdc3025fa0 R15: 00007fffb930cd28 [ 169.839425][T12841] [ 169.874554][ T5801] team0 (unregistering): Port device team_slave_1 removed [ 169.921522][ T1170] smc: removing ib device syz0 [ 169.930091][ T1348] infiniband syz0: ib_query_port failed (-19) [ 169.932687][ T5441] 8021q: adding VLAN 0 to HW filter on device eth3 [ 169.943708][T12681] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.961295][T12843] __nla_validate_parse: 7 callbacks suppressed [ 169.961309][T12843] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2550'. [ 169.979426][ T1170] smbdirect: ib_dev[syz0] removed [ 170.024782][T12681] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.052494][T11468] syz_tun (unregistering): left allmulticast mode [ 170.052510][T11468] syz_tun (unregistering): left promiscuous mode [ 170.052554][T11468] bridge0: port 3(syz_tun) entered disabled state [ 170.309408][ T5801] IPVS: stop unused estimator thread 0... [ 170.430021][ T5801] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.488999][ T5801] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.559198][ T5801] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.598113][ T5801] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.665389][ T5801] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.665422][ T5801] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.675418][ T5826] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.675453][ T5826] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.675479][ T5826] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.675506][ T5826] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.734212][ T5801] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.734234][ T5801] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.788619][ T5801] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.788641][ T5801] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.801281][ T5441] 8021q: adding VLAN 0 to HW filter on device eth2 [ 170.859453][ T5801] netdevsim netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.859489][ T5801] netdevsim netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.934303][ T12] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.942322][ T5441] 8021q: adding VLAN 0 to HW filter on device eth3 [ 170.949407][ T5801] bridge_slave_1: left allmulticast mode [ 170.949428][ T5801] bridge_slave_1: left promiscuous mode [ 170.949543][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.950464][ T5801] bridge_slave_0: left allmulticast mode [ 170.950480][ T5801] bridge_slave_0: left promiscuous mode [ 170.950580][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.964273][ T5801] bridge_slave_1: left allmulticast mode [ 170.964289][ T5801] bridge_slave_1: left promiscuous mode [ 170.964363][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.971127][ T5801] bridge_slave_0: left allmulticast mode [ 170.971141][ T5801] bridge_slave_0: left promiscuous mode [ 170.971209][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.989272][ T5801] bridge_slave_1: left allmulticast mode [ 170.989288][ T5801] bridge_slave_1: left promiscuous mode [ 170.989356][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.992361][ T5801] bridge_slave_0: left allmulticast mode [ 170.992373][ T5801] bridge_slave_0: left promiscuous mode [ 170.992430][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.040657][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.041553][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.042133][ T5801] bond0 (unregistering): Released all slaves [ 171.062414][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.063415][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.063959][ T5801] bond0 (unregistering): Released all slaves [ 171.108836][ T5801] bond6 (unregistering): (slave gretap1): Releasing active interface [ 171.134895][ T5801] bond9 (unregistering): (slave bridge2): Releasing backup interface [ 171.134918][ T5801] bridge2 (unregistering): left promiscuous mode [ 171.134933][ T5801] bridge2 (unregistering): left allmulticast mode [ 171.144933][ T5801] bond10 (unregistering): (slave bridge3): Releasing backup interface [ 171.144957][ T5801] bridge3 (unregistering): left promiscuous mode [ 171.144971][ T5801] bridge3 (unregistering): left allmulticast mode [ 171.156879][ T5801] bond11 (unregistering): (slave bridge4): Releasing backup interface [ 171.156902][ T5801] bridge4 (unregistering): left promiscuous mode [ 171.156917][ T5801] bridge4 (unregistering): left allmulticast mode [ 171.168256][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.169830][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.171331][ T5801] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 171.171756][ T5801] veth1_vlan: left allmulticast mode [ 171.172480][ T5801] bond0 (unregistering): Released all slaves [ 171.175141][ T5801] bond1 (unregistering): (slave veth3): Removing an active aggregator [ 171.176721][ T5801] bond1 (unregistering): (slave veth3): Releasing backup interface [ 171.179498][ T5801] bond1 (unregistering): Released all slaves [ 171.183465][ T5801] bond2 (unregistering): Released all slaves [ 171.189106][ T5801] bond3 (unregistering): Released all slaves [ 171.192858][ T5801] bond4 (unregistering): Released all slaves [ 171.196513][ T5801] bond5 (unregistering): Released all slaves [ 171.202798][ T5801] bond6 (unregistering): Released all slaves [ 171.210083][ T5801] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 171.210875][ T5801] bond7 (unregistering): Released all slaves [ 171.212803][ T5801] bond8 (unregistering): Released all slaves [ 171.220408][ T5801] bond9 (unregistering): Released all slaves [ 171.228088][ T5801] bond10 (unregistering): Released all slaves [ 171.231285][ T5801] bond11 (unregistering): Released all slaves [ 171.235543][ T5780] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.235580][ T5780] netdevsim netdevsim0 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.235609][ T5780] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.349273][ T5801] tipc: Left network mode [ 171.397708][ T5441] 8021q: adding VLAN 0 to HW filter on device eth4 [ 171.548918][ T5441] 8021q: adding VLAN 0 to HW filter on device eth5 [ 171.670492][ T5441] 8021q: adding VLAN 0 to HW filter on device eth6 [ 171.790744][ T5441] 8021q: adding VLAN 0 to HW filter on device eth7 [ 171.887612][ T5441] 8021q: adding VLAN 0 to HW filter on device eth8 [ 171.924721][ T5801] hsr_slave_0: left promiscuous mode [ 171.925175][ T5801] hsr_slave_1: left promiscuous mode [ 171.928755][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.930299][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.938915][ T5801] hsr_slave_0: left promiscuous mode [ 171.939391][ T5801] hsr_slave_1: left promiscuous mode [ 171.939774][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.939788][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.940268][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.940280][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.942963][ T5801] hsr_slave_0: left promiscuous mode [ 171.943344][ T5801] hsr_slave_1: left promiscuous mode [ 171.943731][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.943751][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.944134][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.944147][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.950130][ T5801] veth1_macvtap: left promiscuous mode [ 171.950157][ T5801] veth0_macvtap: left promiscuous mode [ 171.950210][ T5801] veth1_vlan: left promiscuous mode [ 171.950246][ T5801] veth0_vlan: left promiscuous mode [ 171.959847][ T5801] veth1_macvtap: left promiscuous mode [ 171.959882][ T5801] veth0_macvtap: left promiscuous mode [ 171.959939][ T5801] veth1_vlan: left promiscuous mode [ 171.959958][ T5801] veth0_vlan: left promiscuous mode [ 172.054333][ T5801] team0 (unregistering): Port device team_slave_1 removed [ 172.061141][ T5801] team0 (unregistering): Port device team_slave_0 removed [ 172.122455][ T5801] team0 (unregistering): Port device team_slave_1 removed [ 172.134209][ T5801] team0 (unregistering): Port device team_slave_0 removed [ 172.293754][ T5441] 8021q: adding VLAN 0 to HW filter on device eth9 [ 172.893978][ T5801] IPVS: stop unused estimator thread 0... [ 172.971575][ T5801] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.010755][ T5801] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.050941][ T5801] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.100099][ T5801] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.166995][ T5826] netdevsim netdevsim3 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.168647][ T43] kauditd_printk_skb: 98 callbacks suppressed [ 173.168663][ T43] audit: type=1800 audit(1790344800.682:2838): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=231470 res=0 errno=0 [ 173.172074][ T43] audit: type=1800 audit(1790344800.682:2839): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=231475 res=0 errno=0 [ 173.172111][ T43] audit: type=1800 audit(1790344800.682:2840): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=231479 res=0 errno=0 [ 173.172135][ T43] audit: type=1800 audit(1790344800.682:2841): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=231478 res=0 errno=0 [ 173.172157][ T43] audit: type=1800 audit(1790344800.682:2842): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=231556 res=0 errno=0 [ 173.172463][ T43] audit: type=1800 audit(1790344800.682:2843): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=231481 res=0 errno=0 [ 173.172777][ T43] audit: type=1800 audit(1790344800.682:2844): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=231561 res=0 errno=0 [ 173.173266][ T43] audit: type=1800 audit(1790344800.682:2845): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=231565 res=0 errno=0 [ 173.173815][ T43] audit: type=1800 audit(1790344800.682:2846): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=231564 res=0 errno=0 [ 173.174675][ T43] audit: type=1800 audit(1790344800.682:2847): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=231567 res=0 errno=0 [ 173.222450][ T5801] bridge_slave_1: left allmulticast mode [ 173.222468][ T5801] bridge_slave_1: left promiscuous mode [ 173.222577][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.235834][ T5801] bridge_slave_0: left allmulticast mode [ 173.235858][ T5801] bridge_slave_0: left promiscuous mode [ 173.236017][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.291178][ T5801] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 173.291200][ T5801] bridge1 (unregistering): left promiscuous mode [ 173.291210][ T5801] bridge1 (unregistering): left allmulticast mode [ 173.299465][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.300440][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.301019][ T5801] bond0 (unregistering): Released all slaves [ 173.302085][ T5801] bond1 (unregistering): Released all slaves [ 173.304016][ T5801] b (unregistering): Released all slaves [ 173.307266][ T5801] bond2 (unregistering): Released all slaves [ 173.316751][ T5801] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 173.323369][ T5801] bond3 (unregistering): Released all slaves [ 173.328693][ T5801] bond4 (unregistering): Released all slaves [ 173.330572][ T5801] bond5 (unregistering): Released all slaves [ 173.335460][ T5826] netdevsim netdevsim3 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.335494][ T5826] netdevsim netdevsim3 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.335522][ T5826] netdevsim netdevsim3 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.386404][ T5801] tipc: Left network mode [ 173.458477][ T5441] 8021q: adding VLAN 0 to HW filter on device eth10 [ 173.563583][ T5801] hsr_slave_0: left promiscuous mode [ 173.564070][ T5801] hsr_slave_1: left promiscuous mode [ 173.564419][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.564433][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.564885][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.564894][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.569875][ T5801] veth1_macvtap: left promiscuous mode [ 173.569893][ T5801] veth0_macvtap: left promiscuous mode [ 173.569922][ T5801] veth1_vlan: left promiscuous mode [ 173.569944][ T5801] veth0_vlan: left promiscuous mode [ 173.662425][ T5801] team0 (unregistering): Port device team_slave_1 removed [ 173.668418][ T5801] team0 (unregistering): Port device team_slave_0 removed [ 173.712517][ T5441] 8021q: adding VLAN 0 to HW filter on device eth11 [ 173.854183][ T5441] 8021q: adding VLAN 0 to HW filter on device eth12 [ 174.019343][ T5441] 8021q: adding VLAN 0 to HW filter on device eth13