last executing test programs: 12.592750583s ago: executing program 1 (id=1193): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40}, 0x94) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000900000087"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/49}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x1, 0x8, 0x9, 0x9, 0x9, 0xf9, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x2, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25b1, 0x5, 0xfff, 0x0, 0xe, 0xffffffff, 0x3, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0xc, 0x4, 0xffffffff, 0xa80, 0x0, 0x7, 0x2, 0x0, 0xff, 0x8, 0x7, 0xc, 0xfdc1, 0x77f, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x1000, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x5, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0xd, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x0, 0x3, 0x5, 0x9, 0x5, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x4, 0x0, 0x7ff, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x400000, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0x4, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7ffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0xc745, 0x1, 0x4, 0x0, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000000)={0x2, 0xd, 0xffffff44, 0x80800}) io_setup(0x3fe, &(0x7f0000000100)=0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)}], 0x1}, 0x4000001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_submit(r8, 0x1, &(0x7f0000000000)=[0x0]) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r10 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r10, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000006700)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x14c0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000}, 0x1c, &(0x7f0000000240), 0x0, &(0x7f00000004c0)=[@rthdr={{0x18, 0x29, 0x39, {0x73, 0x0, 0x0, 0x3}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x1d, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}]}}}], 0x38}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24000805) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r9, 0x1, 0x1000, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 10.122161564s ago: executing program 1 (id=1202): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xd5b, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004420}, 0x40000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f00000000c0)=0x8b, 0x100000500) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 10.117785281s ago: executing program 1 (id=1206): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)='<', 0x1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x38, 0x32, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x10b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x84}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_open_dev$vbi(&(0x7f0000002080), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000002180)={0x5, @raw_data="c1a21ddfb318c2836cfd949038aa7bc75a2f9c13072c603a03b4841d8fe98ad10de911e9cbc86b7cb651f219c89725f226b63d564da1bc6f019b2dd0f38a570ef8d4dbff6c5b1a459a39bc672e08bd6c93c5b41fb7a10026422bf146785806e191787aa8254247b7272378b20f575fe93bf88ab80d88c5e2848aa38b11b936d9208e8cf5b431d6b29ef220e38f2324d80b54468ec244f85480ef5291b18ce48c5651e6cd8bbbbca2c748c4eb3cc5645c4ffe944e1465d85aeb8894bf15db71eb4d4eb61996670a84"}) close_range(r0, r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0xd}}) r3 = io_uring_setup(0x5440, &(0x7f0000000180)={0x0, 0xc53f, 0x1, 0x1, 0xd6}) io_uring_enter(r3, 0x1022, 0x9234, 0xe, &(0x7f0000000200)={[0x10000]}, 0x8) setuid(0xee00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r4, 0x12a, 0x14, 0x17, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.718651943s ago: executing program 1 (id=1218): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x80800, 0x141) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_pts(r0, 0x400) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) prctl$PR_MCE_KILL(0x41, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff0001}, 0x94) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000080)={0x30, r4, 0x1, 0x4000003, 0x1000000, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x840) (async) r5 = socket$kcm(0x10, 0x400000002, 0x0) (async) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGABS3F(r6, 0x8018457f, &(0x7f0000000300)=""/107) (async) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000240)=[0x80, 0xfffc, 0x115], &(0x7f0000000280)=[0x1, 0x2, 0x1, 0x1000, 0x200, 0x37ac, 0x403, 0x5, 0x6], &(0x7f0000000380)=[0xa], &(0x7f00000003c0)=[0x3, 0x2, 0xc5, 0xfff5, 0x7fff, 0x2]}) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x8000) 9.717677023s ago: executing program 1 (id=1220): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x40, 0x7800, 0x5, 0xe680, {{0x14, 0x4, 0x1, 0x22, 0x50, 0x65, 0xfffa, 0x5, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}, {[@cipso={0x86, 0x1d, 0x2, [{0x7, 0xf, "1b6fc14aab2ca76af667fb41b2"}, {0x7, 0x8, "1de2c0d1d264"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x38, 0x0, 0xb, [0x8]}, @noop, @generic={0x94, 0x6, "816ddcf9"}, @timestamp_addr={0x44, 0xc, 0x8c, 0x1, 0xc, [{@multicast1, 0x16d}]}]}}}}}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x1f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x3fff, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f17", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x20008080) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 9.362929473s ago: executing program 1 (id=1224): r0 = io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0x7b61, 0x80, 0x1, 0x60}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x39b3) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/237, 0xed}], 0x1}, 0x8}], 0x1, 0x23, 0x0) (async) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x800000, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xe8, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0x10001, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x100001e30fa4c, 0xa, 0x10000000000000, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x9, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000001c0), 0x4}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 9.289614635s ago: executing program 32 (id=1224): r0 = io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0x7b61, 0x80, 0x1, 0x60}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x39b3) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/237, 0xed}], 0x1}, 0x8}], 0x1, 0x23, 0x0) (async) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x800000, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xe8, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0x10001, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x100001e30fa4c, 0xa, 0x10000000000000, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x9, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000001c0), 0x4}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 4.191730682s ago: executing program 0 (id=1304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x480820}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8000}]}, 0x84}, 0x1, 0x0, 0x0, 0x45}, 0x20000044) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @none, 0x50}, 0xa) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @bcast}, [@rose, @bcast, @rose, @remote, @rose, @null, @netrom, @null]}, &(0x7f0000000280)=0x48) ioctl$SIOCNRDECOBS(r3, 0x89e2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x32}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40004) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0xd00d03f7984d56c2, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000400)={0x1f, @any, 0x6}, 0xa) r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs, &(0x7f00000004c0)=0x6e) bind$unix(r6, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000580)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0x128, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x184}, 0x1, 0x0, 0x0, 0x80c0}, 0x81) setsockopt(r0, 0x8, 0x4, &(0x7f0000000840)="1b532a1b0a1033ad3116a19099af3260d55003c27a03c479eeec262bdf27d4b5c502d7102a3af9a89295912e", 0x2c) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000900)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x11, 0x0, "ab84902c997904d5213af485967a4e57aa739ce143e4f99dbc574863af23febcabb2a23fe7b74178a95d47c6f350e07684955d1b94fd87d7886274cc7df82de059ff531394297c468494723b2c35f548"}, 0xd8) r9 = accept(r2, &(0x7f0000000a00)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000000a80)=0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ac0)) sendmsg$NFT_BATCH(r9, &(0x7f0000001100)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x3f0, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3a8, 0x3, 0x0, 0x1, [{0xf8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xf4, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}, {0x8c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x7c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7973}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x59b3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff00000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}, {0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000}, @NFTA_SET_ELEM_EXPRESSIONS={0x80, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}, {0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_SET_ELEM_KEY_END={0xcc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc2, 0x1, "4e4aa1cdf936d33159456c664db9e785970918841ebaca7065ddfe5982ef443e7020fde983e3f61e50d7911cc9e00bdb5f92b38ec291e30e0eabd6d5d175a1fa90e71f6d89f41f74d3bf49f19d5e0402786b28001d25f7203aae59b824151c30032afc5d7bbcda5b28206fbd08f63e4427a712acf3b32fd7258627e610d7494ce371f0ca7f1868f3d91882dc24519cf8d4a98bdbba7cd941261eb6b585663c5397d0377fcacf8d5fc2a86cea55f42d97da705f0336d8b2dc9a6f463b23f4"}, @NFTA_DATA_VERDICT={0x4}]}]}, {0x150, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_KEY_END={0x34, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2e, 0x1, "9849b496d0776a18596446bea3af018705a0096c0aeb65e3c7eea7f0f255a27b8c42e61021be093dba0c"}]}, @NFTA_SET_ELEM_DATA={0xfc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xe4, 0x1, "4eeff8a7a39397f9e5c0d04520158a70dc6836484923fe17debd9b343a4ff03373f7c9ef887e82e183aa67bd7e69d8faef11516b21d83e5ec9d6d2a9d3559e753f03e5b71b54e6227429c574944bc1089926ad80c20f3d521c2adf8a8361bd37c829c37d1af8ac121884da580350fdd1c9dfe3b87a0bb41450467896a74a84c3ee58d7f30eadf21da0f28e95b18af374e22febfe053cea20354fe3bfc194c92feb8155f87e4dd2fc53346720da4ab78ed32bcbb79350c1d9b6122dc53047321d4d54522fe1c4946089614671bdf7690bb810d4cfaadb100f088d0fa372e30ee4"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x62}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x13c, 0x16, 0xa, 0x604, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3b}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x6c141eb085884d8}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe39}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {0xa}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x88}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x574}, 0x1, 0x0, 0x0, 0x4}, 0x24000841) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x70, r1, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2}}}}, [@NL80211_ATTR_SSID={0x18, 0x34, @random="128ca171e9b4f2380075a98e196f252514c2c666"}, @NL80211_ATTR_PMKID={0x14, 0x55, "700ada4a8942c34995500da6522c4b4b"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="84581fd0ad88"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000001280)=0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f00000012c0)=@gcm_128={{0x303}, "66afbd3b41471d1b", "4f24fd031118c187a3717c737e4a47bc", "122e9371", "61f4bcc9965dbcfb"}, 0x28) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001300), 0x1, 0x0) copy_file_range(r10, &(0x7f0000001340)=0x9, r8, &(0x7f0000001380)=0xffffffffffffff51, 0x1, 0x0) getsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f00000013c0), &(0x7f0000001400)=0x10) connect$bt_rfcomm(r9, &(0x7f0000001440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, 0xa) 3.893343642s ago: executing program 0 (id=1307): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'veth1_to_bond\x00', {'vcan0\x00'}, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x58}}, 0x40080) 3.892904505s ago: executing program 3 (id=1308): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x6, 0x0) recvmmsg(r0, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x2}, 0xfffe}], 0x1, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000700), 0x80, 0x0) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000740)) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r7, 0x0, r6, 0x0, 0x5, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000100)=0x9) fcntl$setstatus(r6, 0x4, 0x7c00) dup3(r7, r6, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000380)={0x0, 0x42, &(0x7f0000000400)={&(0x7f0000001540)=ANY=[@ANYRES8=r7, @ANYRESOCT=r3, @ANYRES16=r0, @ANYRESDEC=r6], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x4080) clock_nanosleep(0x0, 0x1, &(0x7f00000000c0)={r4, r5+10000000}, &(0x7f0000000280)) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x1022104) keyctl$get_security(0x11, r8, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) keyctl$instantiate(0xc, r8, &(0x7f0000000240)=ANY=[@ANYBLOB="6e654c9bc053e8621d397420747275737465643a2a2e2520303030303030303030303030303030303030303200"], 0x2d, r8) 3.802242697s ago: executing program 0 (id=1309): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8971, &(0x7f0000000080)={'dummy0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100ffffffff030000002f0000a53208696d0000000f0002007464657673696d3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000081c) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.61310017s ago: executing program 0 (id=1313): ioctl$BLKCRYPTOIMPORTKEY(0xffffffffffffffff, 0xc0401289, &(0x7f0000000140)={&(0x7f0000000080)="8625107ed2328dc73659bff97858d8264f8f156ffff0ecbade66a02e816d6cd95986e97668a537823a5db1bad217", 0x2e, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x2000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85513, &(0x7f0000002600)={{0x2, 0x3, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0x5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x80000000, 0x0, 0x5, 0x2, 0xfffffffffffffffc, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x7b, 0x1, 0x0, 0xca, 0x5, 0x0, 0xfffffffffffffffc, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4, 0x0, 0x6f74, 0x0, 0xffffffffffffffff, 0x800000000000000, 0x0, 0x8, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x9]}) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000140)="450f09b9220a00000f32673e26460f01cb66baf80cb8e8328081ef66bafc0ced36660f62480bc744240021000000c744240200000000ff2c240f7838b8010000000f01c1f264470f957e7cc744240000a0b143c744240200000000c7442406000000000f011424", 0x67}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES64=r3], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYRESHEX=r6], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x1b, &(0x7f00000001c0)=r7, 0xa1) 1.280718808s ago: executing program 2 (id=1350): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0x1, 0x4, [@local, @remote, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x34}]}, 0x20) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000800, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x20008000) 1.011100773s ago: executing program 4 (id=1353): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getqdisc={0x30, 0x26, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffff}, {0xfff2, 0x8}, {0x4, 0x7}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2008085}, 0x20000041) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={[0x4]}, 0x8}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0xbe, 0x99, 0xe, 0x5, 0x0, 0x1, 0xfb, 0x5, 0x5d, 0x5, 0x81, 0x84, 0xcc, 0x5}, 0xe) sendto$inet6(r0, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/252, 0xfc}], 0x1}, 0x1000}, {{&(0x7f0000000a40)=@ax25={{0x3, @rose}, [@default, @bcast, @netrom, @bcast, @bcast, @rose, @bcast, @default]}, 0x80, &(0x7f0000000240)=[{0x0}], 0x1}, 0x3}], 0x2, 0x40000000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='5', 0x1, 0x8080, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x2, 0x0, 0x0, 0xd7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getqdisc={0x30, 0x26, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffff}, {0xfff2, 0x8}, {0x4, 0x7}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2008085}, 0x20000041) (async) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={[0x4]}, 0x8}) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0xbe, 0x99, 0xe, 0x5, 0x0, 0x1, 0xfb, 0x5, 0x5d, 0x5, 0x81, 0x84, 0xcc, 0x5}, 0xe) (async) sendto$inet6(r0, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) (async) shutdown(r0, 0x1) (async) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/252, 0xfc}], 0x1}, 0x1000}, {{&(0x7f0000000a40)=@ax25={{0x3, @rose}, [@default, @bcast, @netrom, @bcast, @bcast, @rose, @bcast, @default]}, 0x80, &(0x7f0000000240)=[{0x0}], 0x1}, 0x3}], 0x2, 0x40000000, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='5', 0x1, 0x8080, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x2, 0x0, 0x0, 0xd7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) (async) 1.010154248s ago: executing program 2 (id=1354): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r0, 0x407, 0x9) fcntl$setpipe(r1, 0x407, 0x100004) (async) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 938.411584ms ago: executing program 4 (id=1355): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000180)='v\x05%Jg1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o*\x00\x00\x00\x00\x00\x00\x00\xaa\x7f4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2\xe1\x00\x00\x00\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00c8"], 0x24}}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000280)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0xff, '\x00', @p_u8=&(0x7f0000000200)=0x3}}) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb1f44de76b716e08, 0x4010, 0xffffffffffffffff, 0x180000000) 938.011023ms ago: executing program 4 (id=1356): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000480)={0x1d, r1}, 0x10) 883.132739ms ago: executing program 4 (id=1357): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000200)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xfffffffd}, 0x1c) shutdown(r0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, &(0x7f0000000840)=[{&(0x7f0000000500)=""/213, 0xd5}], 0x1, 0x3a, 0x5) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) 792.97676ms ago: executing program 4 (id=1358): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) close(r1) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x401, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d85b0fe, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_VLAN_TUNNEL={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22700, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000001c0)={0x800, 0x8, 0x8f, 0x6, 0x10, 0xa06}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x3c, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x15, 0x2, 0x0, 0x1, [@generic="725eb862cec9a478ce2057c5241935e678"]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1b) ioctl$KVM_TDX_INIT_MEM_REGION(r7, 0xc008aeba, &(0x7f0000000280)={0x3, 0x1, &(0x7f0000000240)={&(0x7f00002e6000/0x3000)=nil, 0xeeee0000, 0x2}}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={r6, 0x8, 0x6, 0x9, 0x4, 0x3}, &(0x7f0000000100)=0x14) 792.48014ms ago: executing program 3 (id=1359): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 791.30069ms ago: executing program 3 (id=1360): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x140, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000800)={0x556, 0x360, 0x556, 0x1000, 0x4, 0x7, 0x0, 0x1, {0x2b}, {0x8, 0x1000}, {0x3ddd, 0x59783bc0, 0x1}, {0x4, 0x72d3, 0x1}, 0x1, 0x10, 0x8, 0x6, 0x1, 0x4, 0x80000000, 0x4, 0x1ea, 0xa4, 0x5, 0x5, 0x2, 0x200, 0x0, 0x7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'vlan0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x1000fe, 0x80000500}, {0xfffffff9}]}}) 703.217615ms ago: executing program 3 (id=1361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="1700000078000100000000000000000007"], 0x18}, 0x1, 0x5502000000000000}, 0x0) (async) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x3, 0x1a3c81) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000006c0)={0x0, 0x0}) (async) syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd606b88ef00403a00fc0100000039b9980000000000000000000000fe8000000000000000000000000000aa020090780000000060bdd7c300000000000000000000000000000000000000010000000000000000000000000000000006df9dbbc56ad62fc72da44d6c0a380000000000df7d270b77aa81ed000000"], 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) 702.640358ms ago: executing program 3 (id=1362): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$kcm(0x2d, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000940)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$inet6(0xa, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f00000012c0)=ANY=[], 0x0) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r6, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) 492.589856ms ago: executing program 0 (id=1363): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x0, 0x0, 0xfffffffd}}) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x5, 0x4) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x1a9, 0x4a2440) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @rand_addr=0x64010102}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r7}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x5, 0x0}, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, r8, 0xb, 0x0, @val=@tracing={r9, 0x2}}, 0x20) 441.86228ms ago: executing program 4 (id=1364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4f9613e2fd750f56594bb4ef0d5511eff78bcfb938ee0da62385257add7141f95ba30c1eaa10e5d9ea2f93e06107dec9d25b1efdb58212471df833a69d55b30ef34cd64e83bc70bf805bb984398d7c79e24bbf086a0d6cbe9d52fe327a0c66d3a33bf85272b0c6ea33d9e740b7dc91ff6b041a317f311a0dd2fe3f0f900c8c398a0beb08d29ef0adbca02214c727b7a103b8967ec4cad6a669e34c5f06ba3633366fa910501ab8842a76358257a1a4c93c48e85d2c67a16cf5a35ebb4d0d7f", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf250100000008001900e000000106001a004e23000008001900e000000108001800ac1414bb06001d0006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002000010026bd7000fbdbdf2502101000090000060600010008000200ac14142a0800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r1, @ANYRES8, @ANYRES64=r2, @ANYRESHEX=r2, @ANYRESHEX=r0, @ANYRES16=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x80) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = accept$inet(0xffffffffffffffff, 0x0, 0x0) readv(r5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) unshare(0x42061200) syz_usb_connect(0x2, 0x56, &(0x7f00000002c0)=ANY=[], 0x0) r6 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000300)={'mangle\x00', 0x0, [0x8, 0x5, 0xa, 0x4, 0x8b37]}, &(0x7f0000000180)=0x54) ioctl$KVM_RUN(r4, 0xae80, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6577666133d01d94519ca98dddea3782db84e3756c7d20757365720cff0d25f6ead873303030303030303030303030303430393300000000"], 0x2a, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default trusted:'], 0x34, 0xfffffffffffffffa) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x20000004}, 0x140000c4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x4000090) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000500)={{}, 0x4, &(0x7f0000000280)=[0x7, 0x1, 0x40, 0xba], 0x8, 0xe}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c48f3", 0x3) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="010001008fff48f348412ba900000000", 0x10}, {&(0x7f0000000700)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d95b33dff3941e5c626aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048b4edb1720f01b56a264b6380d7a5eae5fd03607447cfe3a1d0df63bbc0b4a0717392116e9fef5bbc56abce68f3e752afac140c9149d7f1b8d6a2a0b89d81e0776aaeef89b11dc3dac4fe3fa8347ab1b5d30bab124905b30cc6e32d91c9a4f9773bb8", 0xaf}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d103200d9988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b69cbbfda2696c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f1100"/211, 0xd3}], 0x3, &(0x7f0000000040)}], 0x1, 0x40800) 329.703468ms ago: executing program 0 (id=1365): getrandom(&(0x7f0000000540)=""/196, 0xc4, 0x2) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 92.885589ms ago: executing program 2 (id=1366): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x286c02, 0x0) ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f0000000080)={0x22, 0x1, 0xde, 0x1}) 92.623629ms ago: executing program 2 (id=1367): r0 = openat$ttyprintk(0xffffff9c, &(0x7f0000001b40), 0x101000, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000001b80)) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000400)={0x2, 0x0, 0x12, 0xe, 0xbd, &(0x7f0000000000)="587a5dc14779dd85751259a067a3221dae2b48ecf4df9c1dc53734c5cbe4d15b11554dcf747ef3449b898cd72a8c8952f79f18d10fb1d385af4c72f20513c0ad4d16d4d3d1c032a346afb0bf78283605c34f402f018da8f5d4e722a3a2436824fc85be52c40fd4697ada09f9a6868f04e691246dc08eccc6cf19b4387e2a8eeae3ba5d3ee482deee6901688f812813abad112ffbce70c974863d4e027b32850ed565cd32f4d6ce85a0396b6d51640cb9a61bb3a4377c1cd37407608e2779f68afecaacbd42ea2d25e3ee91def971f78933e322ec3c8058d89767c2d03a001c5a952af87739f6548b1815bc303f77463b452e04d67edc015ff1381816a1a20ef2f7b85bfe060a33513c48cfe9a35bc86d2899c700566465f99bfaf79ac2f6adb788054a3ca2e08bc11d0251e9be7838266bf0babb425adff0538b44daccbe82621363791c83aa2142ae65fb9097e369fa90ee288e570a52db33a20eddf9c1f9518ba27df281afc63483c96052b8cc2b1f4029b8650ed043616f8d6929004d5e6a463721683fe2e6fe419c417544c9ebbf05ac9a7083e0e212a89495fcf4e729ec2b1f3f2b1c7da4b77679bfdc1613a72bfcceb42cad7f049c523b4713e36df0afa0fbc8720e68e157f9aaa27a354c3c2c9f612228c52b177ccc836164c1c6541a24dac72ea5131209b0a831d141a10cc42487c4190a83db2e13beb5aab8efa9dd4a484eee3d64f6337a529badaa0381c33a91090927059d7cd879798f2f3c945fff72cf529eb3344ace292114b618097fa9d979ff18cea82bb09a2499554475e6f2daa22a77506ea9cb3cb1e06fb588ee8120195605117f36d988df15e2a60ec274eeaf70073490c8ed8d4375801cdfa87dd38e71d11ecd8b6bb88f2c3689273c758df92ce30215deeafb6494b68a9f550a5e09301a1267964ab38e4789047738d5da7f6c30b58428c259540e242aeced3b6c4e40b8c472789e991c62207f37a4b1ba21793c82e97f775b34ee997271d740c4688901da2fb170aee221a5c4361fe7fca007aaa41a807e3412e38dd571012c53d6959f6e879946ffaaac03c6afe12af1b9b9f0d8087b677f2b060fc4a84ff9fded856b59376b3adbe0c226a08d808ee74e4bf3542b806a6958720126c5c842225e0bd3f68bccb191f95c15d2729fa9a251b2f56c59c0406dca64119b80ba15f6b1210779af5fe2e45253827ea87fa7dd1e20613863bb7fa8718270ab13365b3cee06d46d2d2bc2e528066c2ed367adc71031525ddfea8ebca14da46faf932d2f483b87c3f269692fd6315339ecb2b9837b8cda3c5416fb4543252af2ff0826fe68d7778391b8cbd0364dcf1e7c788fb95ed0f07ef8f642ffebd42e4b9f78ce692030497fe3580ce184353bf8ddb80f612da86be8d9704db22327ea90833ccc826c23e88db6c315143007cbb6c19d"}) 3.003667ms ago: executing program 2 (id=1368): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r2, 0x401070cd, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [""]}, 0x14}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES8=r0, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 2.286702ms ago: executing program 3 (id=1369): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63716368653d667363656368652c76657273696f6e3d3970323030302e75"]) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0/file1\x00', 0x104) lstat(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) read$snddsp(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}}, 0xb8}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r4, &(0x7f0000000280)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="f710a428605579946b54909ceaa57dc949f0590acfbe394ff251a2583687f2a2b868f091802b226eed1ffa62d97597d1103cdf7c29e774745eca37a0a96b2c40f71d5104f6608b3319012c3b6be1af3156a3a7f9b05bd9dbae7afabdb8c397359650240292ab1d11cb015d195a1799a23424d96f44b1df8c6345ad203f35", 0x7e}, {&(0x7f00000000c0)="6a300c9496185569a2dce5c1234e8366296d1b30e3eea49eddf0704465581d858329d4d7b4b6af6e720cdebaf894d17695591cf664ba8343538fe0555a17510eb0892c4fc00445614f3fa3b2a328059ee51f0b411fea5530619149c7cf8726079991c9e24e", 0x65}], 0x2, &(0x7f00000001c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x10000}}, @rthdr={{0x78, 0x29, 0x39, {0x8c25991772b5e604, 0xc, 0x2, 0x81, 0x0, [@mcast2, @remote, @remote, @dev={0xfe, 0x80, '\x00', 0x27}, @local, @mcast2]}}}], 0x90}}], 0x1, 0x4000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r1) 0s ago: executing program 2 (id=1370): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x18) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0xfffffffc, 0x13580}, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x2c, 0x3, 0x2) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f0000000000)=ANY=[@ANYBLOB="67727071756f74615f626c6f636b5f686172646c696d69743d382c004163d6b1edfb1769387692996a3b0cd3c8bcbcce8cc1222b63e0fda5782550dbe6564de00e682b2843007fa7c16bdd21ec1305fd5b3afb2fbccc76c47ad4e6f64784b7df98a3d2ad32c4bbd75eb2"]) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x18) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (async) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0xfffffffc, 0x13580}, 0x0, 0x0, &(0x7f0000000000)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) socket(0x2c, 0x3, 0x2) (async) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f0000000000)=ANY=[@ANYBLOB="67727071756f74615f626c6f636b5f686172646c696d69743d382c004163d6b1edfb1769387692996a3b0cd3c8bcbcce8cc1222b63e0fda5782550dbe6564de00e682b2843007fa7c16bdd21ec1305fd5b3afb2fbccc76c47ad4e6f64784b7df98a3d2ad32c4bbd75eb2"]) (async) 0s ago: executing program 2 (id=1371): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002880)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) (async) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) recvmmsg(r5, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1, 0x0, 0x1a}, 0x40b7}], 0x1, 0x40002021, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) fchmod(0xffffffffffffffff, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100004008000100000000000400048b94aadd27bc1df3000800088004000780"], 0x30}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100004008000100000000000400048b94aadd27bc1df3000800088004000780"], 0x30}}, 0x0) kernel console output (not intermixed with test programs): 62196][ T9] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 85.692814][ T7985] QAT: failed to copy from user cfg_data. [ 85.701661][ T7985] 9pnet_fd: p9_fd_create_tcp (7985): problem connecting socket to 127.0.0.1 [ 85.746936][ T7987] geneve2: entered promiscuous mode [ 85.748689][ T7987] geneve2: entered allmulticast mode [ 85.751435][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.754579][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.757393][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.760475][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.848868][ T8000] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 85.853565][ T8000] qnx6: wrong signature (magic) in superblock #1. [ 85.856344][ T8000] qnx6: unable to read the first superblock [ 85.961715][ T8021] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.582'. [ 85.966100][ T8021] netlink: ct family unspecified [ 86.046320][ T8039] openvswitch: netlink: IP tunnel dst address not specified [ 86.081473][ T8046] syzkaller0: entered promiscuous mode [ 86.083578][ T8046] syzkaller0: entered allmulticast mode [ 86.136601][ T8050] netlink: 'syz.0.590': attribute type 1 has an invalid length. [ 86.151186][ T8050] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.202033][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 86.215718][ T8053] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.231001][ T8053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.237433][ T8053] bond1: (slave bond0): Enslaving as an active interface with a down link [ 86.243115][ T8053] netlink: 'syz.2.592': attribute type 4 has an invalid length. [ 86.247525][ T8053] .`: renamed from bond0 (while UP) [ 86.285579][ T8070] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 86.524709][ T5931] udevd[5931]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 86.545380][ T8083] bond0: Unable to set up delay as MII monitoring is disabled [ 86.552142][ T8083] bond0 (unregistering): Released all slaves [ 86.959875][ T8124] mkiss: ax0: crc mode is auto. [ 86.964482][ T8124] trusted_key: syz.0.611 sent an empty control message without MSG_MORE. [ 87.072390][ T840] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 87.244418][ T840] usb 8-1: config index 0 descriptor too short (expected 28277, got 36) [ 87.247107][ T840] usb 8-1: config 186 has an invalid descriptor of length 46, skipping remainder of the config [ 87.250353][ T840] usb 8-1: config 186 has no interfaces? [ 87.252564][ T840] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 87.257198][ T840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.489531][ T8140] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 87.491967][ T8140] overlayfs: failed to set xattr on upper [ 87.494103][ T8140] overlayfs: ...falling back to redirect_dir=nofollow. [ 87.496339][ T8140] overlayfs: ...falling back to metacopy=off. [ 87.498330][ T8140] overlayfs: ...falling back to index=off. [ 87.500265][ T8140] overlayfs: ...falling back to uuid=null. [ 87.676861][ T8144] __nla_validate_parse: 8 callbacks suppressed [ 87.676875][ T8144] netlink: 9 bytes leftover after parsing attributes in process `syz.0.617'. [ 87.682917][ T8144] netlink: 9 bytes leftover after parsing attributes in process `syz.0.617'. [ 87.719666][ T8146] netlink: 'syz.0.618': attribute type 6 has an invalid length. [ 87.732554][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.870652][ T8152] netlink: 104 bytes leftover after parsing attributes in process `syz.0.620'. [ 88.141417][ T8170] dlm: non-version read from control device 0 [ 88.548574][ T40] kauditd_printk_skb: 204 callbacks suppressed [ 88.548589][ T40] audit: type=1400 audit(2000000016.989:727): avc: denied { setopt } for pid=8184 comm="syz.0.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.557615][ T40] audit: type=1400 audit(2000000016.989:728): avc: denied { accept } for pid=8184 comm="syz.0.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.564525][ T40] audit: type=1400 audit(2000000016.989:729): avc: denied { read } for pid=8184 comm="syz.0.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.571811][ T40] audit: type=1400 audit(2000000016.989:730): avc: denied { create } for pid=8184 comm="syz.0.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.578622][ T40] audit: type=1400 audit(2000000016.989:731): avc: denied { write } for pid=8184 comm="syz.0.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.579092][ T8185] IPVS: set_ctl: invalid protocol: 8 10.1.1.2:20000 [ 88.585140][ T40] audit: type=1400 audit(2000000016.989:732): avc: denied { write } for pid=8184 comm="syz.0.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.596212][ T40] audit: type=1400 audit(2000000017.009:733): avc: denied { ioctl } for pid=8189 comm="syz.1.633" path="socket:[22029]" dev="sockfs" ino=22029 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 88.605615][ T40] audit: type=1400 audit(2000000017.019:734): avc: denied { read } for pid=8184 comm="syz.0.632" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.614494][ T40] audit: type=1400 audit(2000000017.019:735): avc: denied { open } for pid=8184 comm="syz.0.632" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.622583][ T40] audit: type=1400 audit(2000000017.019:736): avc: denied { ioctl } for pid=8184 comm="syz.0.632" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.797507][ T8196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8196 comm=syz.0.635 [ 88.813015][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 88.962481][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 88.966570][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 88.970366][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 88.973815][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.977212][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.977435][ T8204] netlink: 95 bytes leftover after parsing attributes in process `syz.0.637'. [ 88.981263][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.989246][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.034201][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.037604][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.040859][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.043565][ T8209] binder: 8207:8209 ioctl 400c620e 200000001540 returned -22 [ 89.044026][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.049973][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.056019][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.059321][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.062646][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.065677][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.068751][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.071797][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.075286][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.078457][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.081518][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.084469][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.087716][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.090821][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.094904][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.098278][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.101468][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.104886][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.108472][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.112424][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.115706][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.118939][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.122406][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.125445][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.128594][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.131708][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.134945][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.138092][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.141242][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.144533][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.147752][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.150880][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.153909][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.156939][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.160144][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.163380][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.166549][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.169705][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.172918][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.175998][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.179218][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.182465][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.185628][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.188779][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.192059][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.195398][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.198911][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.202197][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.204575][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 89.207153][ T24] usbtmc 6-1:16.0: can't read capabilities [ 89.208676][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.212200][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.216295][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.219174][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.222336][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.225380][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.228213][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.233076][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.235984][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.238426][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.240850][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.243429][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.246266][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.249497][ T8208] binder: 8207:8208 ioctl c0385868 200000000180 returned -22 [ 89.408422][ T24] usb 6-1: USB disconnect, device number 4 [ 89.470915][ T8232] uprobe: syz.0.641:8232 failed to unregister, leaking uprobe [ 89.670921][ T840] usb 8-1: string descriptor 0 read error: -71 [ 89.681591][ T840] usb 8-1: USB disconnect, device number 4 [ 89.970638][ T8273] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 89.978347][ T8272] tipc: Started in network mode [ 89.980451][ T8272] tipc: Node identity ac14140f, cluster identity 4711 [ 89.984083][ T8272] tipc: Enabled bearer , priority 10 [ 89.992591][ T1027] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 90.012461][ T29] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 90.028122][ T8276] blkio.reset_stats is deprecated [ 90.082150][ T8285] 9p: Could not find request transport: fu$d [ 90.154341][ T1027] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.158530][ T1027] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 90.163546][ T1027] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 90.168417][ T1027] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 90.172157][ T1027] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.177435][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 90.182623][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 90.189476][ T8248] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 90.203159][ T29] usb 7-1: config 8 has an invalid interface number: 188 but max is 0 [ 90.205916][ T29] usb 7-1: config 8 has no interface number 0 [ 90.209586][ T1027] hub 5-1:1.0: bad descriptor, ignoring hub [ 90.211643][ T1027] hub 5-1:1.0: probe with driver hub failed with error -5 [ 90.214828][ T29] usb 7-1: config 8 interface 188 has no altsetting 0 [ 90.218128][ T1027] cdc_wdm 5-1:1.0: skipping garbage [ 90.220024][ T1027] cdc_wdm 5-1:1.0: skipping garbage [ 90.224314][ T1027] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 90.226344][ T1027] cdc_wdm 5-1:1.0: Unknown control protocol [ 90.230090][ T29] usb 7-1: string descriptor 0 read error: -22 [ 90.233590][ T29] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 90.236588][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.253430][ T29] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 90.257248][ T29] dw2102: su3000_power_ctrl: 1, initialized 0 [ 90.259574][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 90.271411][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 90.276215][ T29] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 90.279008][ T29] usb 7-1: media controller created [ 90.281244][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 90.285755][ T29] dw2102: i2c transfer failed. [ 90.287578][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 90.289562][ T29] dw2102: i2c transfer failed. [ 90.291178][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 90.294080][ T29] dw2102: i2c transfer failed. [ 90.295728][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 90.297709][ T29] dw2102: i2c transfer failed. [ 90.299293][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 90.301266][ T29] dw2102: i2c transfer failed. [ 90.304369][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 90.306405][ T29] dw2102: i2c transfer failed. [ 90.308007][ T29] dvb-usb: MAC address: 02:02:02:02:02:02 [ 90.315435][ T8302] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.658'. [ 90.318029][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.333670][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 90.335720][ T29] dw2102: command 0x0e transfer failed. [ 90.337749][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 90.339639][ T29] dw2102: command 0x0e transfer failed. [ 90.431228][ T8308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8308 comm=syz.3.661 [ 90.435621][ T8308] netlink: 'syz.3.661': attribute type 1 has an invalid length. [ 90.461146][ T8308] bond5: (slave bridge5): making interface the new active one [ 90.467348][ T8308] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 90.470472][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 90.495520][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 90.497984][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 90.500371][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 90.502362][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 90.504393][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 90.506425][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 90.508685][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 90.511056][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 90.513201][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 90.652397][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 90.654980][ T29] dw2102: command 0x0e transfer failed. [ 90.657514][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 90.662961][ T29] dw2102: command 0x0e transfer failed. [ 90.665490][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 90.668051][ T29] dw2102: command 0x51 transfer failed. [ 90.710454][ T29] DVB: Unable to find symbol ds3000_attach() [ 90.714072][ T29] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 90.782458][ T29] rc_core: IR keymap rc-su3000 not found [ 90.784706][ T29] Registered IR keymap rc-empty [ 90.787615][ T29] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 90.796204][ T29] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input7 [ 90.815881][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 90.818209][ T29] dw2102: su3000_power_ctrl: 0, initialized 1 [ 90.820407][ T29] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 90.829895][ T29] usb 7-1: USB disconnect, device number 6 [ 90.859009][ T29] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 90.960425][ T8319] Invalid source name [ 90.961865][ T8319] UBIFS error (pid: 8319): cannot open "./file0", error -22 [ 91.000103][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 91.007864][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.664'. [ 91.011037][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 91.014675][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.664'. [ 91.026121][ T8248] usb 5-1: reset low-speed USB device number 17 using dummy_hcd [ 91.098856][ T8328] CIFS mount error: No usable UNC path provided in device string! [ 91.098856][ T8328] [ 91.104688][ T840] tipc: Node number set to 2886997007 [ 91.107346][ T8328] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 91.274983][ T8334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=8334 comm=syz.2.669 [ 91.280334][ T8335] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 91.281466][ T8334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=8334 comm=syz.2.669 [ 91.291064][ T8334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=8334 comm=syz.2.669 [ 91.292803][ T8335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.296787][ T8334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=8334 comm=syz.2.669 [ 91.299010][ T8335] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 91.303959][ T8334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=8334 comm=syz.2.669 [ 91.306215][ T8335] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 91.311472][ T8334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=8334 comm=syz.2.669 [ 91.313954][ T8335] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 91.314048][ T8335] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 91.319922][ T8334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=8334 comm=syz.2.669 [ 91.321552][ T8335] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 91.325225][ T8334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=8334 comm=syz.2.669 [ 91.346710][ T8310] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 91.358144][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 91.360285][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 91.362451][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 91.365174][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 91.367758][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 91.370203][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 91.372804][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 91.374876][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 91.377016][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 91.379085][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 91.381527][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 91.383814][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 91.616273][ T8310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.619996][ T8310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.624026][ T8352] netlink: 'syz.3.673': attribute type 2 has an invalid length. [ 91.757178][ T8363] macvlan2: entered promiscuous mode [ 91.758903][ T8363] bridge0: entered promiscuous mode [ 91.832502][ T1027] usb 5-1: USB disconnect, device number 17 [ 91.960069][ T8376] io-wq is not configured for unbound workers [ 92.333262][ T8383] netem: invalid attributes len -22 [ 92.337317][ T8383] netem: change failed [ 92.763493][ T8387] program syz.3.682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.838297][ T8390] __nla_validate_parse: 6 callbacks suppressed [ 92.838311][ T8390] netlink: 40 bytes leftover after parsing attributes in process `syz.3.683'. [ 92.973494][ T8401] IPv4: Oversized IP packet from 127.202.26.0 [ 93.039739][ T8406] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 93.128015][ T8413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.688'. [ 93.131796][ T8413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.688'. [ 93.168548][ T8413] SELinux: ebitmap start bit (17175552) is beyond the end of the bitmap (1088) [ 93.182431][ T8413] SELinux: failed to load policy [ 93.292676][ T8418] netlink: 'syz.3.692': attribute type 10 has an invalid length. [ 93.296021][ T8418] netlink: 40 bytes leftover after parsing attributes in process `syz.3.692'. [ 93.386693][ T8431] netlink: 92 bytes leftover after parsing attributes in process `syz.3.695'. [ 93.545422][ T8429] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 93.550217][ T8429] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 93.569514][ T40] kauditd_printk_skb: 288 callbacks suppressed [ 93.569534][ T40] audit: type=1400 audit(2000000022.009:1025): avc: denied { read append } for pid=8432 comm="syz.3.696" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 93.582345][ T40] audit: type=1400 audit(2000000022.009:1026): avc: denied { open } for pid=8432 comm="syz.3.696" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 93.590831][ T40] audit: type=1400 audit(2000000022.019:1027): avc: denied { ioctl } for pid=8432 comm="syz.3.696" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 93.656255][ T8433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.696'. [ 93.660488][ T40] audit: type=1400 audit(2000000022.099:1028): avc: denied { mount } for pid=8432 comm="syz.3.696" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 93.667696][ T40] audit: type=1400 audit(2000000022.099:1029): avc: denied { mounton } for pid=8432 comm="syz.3.696" path="/196/file1" dev="tmpfs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 93.676693][ T40] audit: type=1400 audit(2000000022.099:1030): avc: denied { mount } for pid=8432 comm="syz.3.696" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 93.701046][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 93.706167][ T40] audit: type=1400 audit(2000000022.149:1031): avc: denied { create } for pid=8432 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.756345][ T40] audit: type=1400 audit(2000000022.199:1032): avc: denied { write } for pid=8439 comm="syz.1.697" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.823566][ T5942] Bluetooth: hci2: command tx timeout [ 93.827801][ T40] audit: type=1400 audit(2000000022.269:1033): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 93.837667][ T40] audit: type=1400 audit(2000000022.279:1034): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 93.860765][ T8445] netlink: 'syz.3.699': attribute type 1 has an invalid length. [ 93.881574][ T8445] 8021q: adding VLAN 0 to HW filter on device bond6 [ 93.953675][ T5942] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 94.031243][ T8457] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 94.050252][ T8457] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 94.055759][ T8457] overlayfs: failed to look up (tracing) for ino (-66) [ 94.101696][ T8464] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.703'. [ 94.334442][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 94.702224][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.705364][ T8495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.709805][ T8495] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.712844][ T8495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.869857][ T8499] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 94.872675][ T8499] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.877034][ T8499] vhci_hcd vhci_hcd.0: Device attached [ 94.898015][ T8501] vhci_hcd: connection closed [ 94.900263][ T1148] vhci_hcd vhci_hcd.3: stop threads [ 94.904690][ T1148] vhci_hcd vhci_hcd.3: release socket [ 94.907010][ T1148] vhci_hcd vhci_hcd.3: disconnect device [ 94.992854][ T24] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 95.145132][ T24] usb 7-1: not running at top speed; connect to a high speed hub [ 95.149990][ T24] usb 7-1: config 2 has an invalid interface number: 176 but max is 3 [ 95.154656][ T24] usb 7-1: config 2 has an invalid interface number: 156 but max is 3 [ 95.158085][ T24] usb 7-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 95.161689][ T24] usb 7-1: config 2 has an invalid interface number: 199 but max is 3 [ 95.165411][ T24] usb 7-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 95.166201][ T8516] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.168880][ T24] usb 7-1: config 2 has an invalid interface number: 142 but max is 3 [ 95.177336][ T24] usb 7-1: config 2 has no interface number 0 [ 95.179688][ T24] usb 7-1: config 2 has no interface number 1 [ 95.182180][ T24] usb 7-1: config 2 has no interface number 2 [ 95.182389][ T8516] block device autoloading is deprecated and will be removed. [ 95.185131][ T24] usb 7-1: config 2 has no interface number 3 [ 95.192411][ T24] usb 7-1: config 2 interface 176 altsetting 247 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 95.197102][ T24] usb 7-1: config 2 interface 176 altsetting 247 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 95.201642][ T24] usb 7-1: config 2 interface 176 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 95.207312][ T24] usb 7-1: config 2 interface 176 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 95.208550][ T8515] selinux_netlink_send: 12 callbacks suppressed [ 95.208566][ T8515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8515 comm=syz.3.717 [ 95.210804][ T24] usb 7-1: config 2 interface 176 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 95.210819][ T24] usb 7-1: config 2 interface 176 altsetting 247 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 95.210832][ T24] usb 7-1: config 2 interface 176 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 95.228471][ T24] usb 7-1: config 2 interface 176 altsetting 247 has a duplicate endpoint with address 0x1, skipping [ 95.231963][ T24] usb 7-1: config 2 interface 176 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 95.235471][ T24] usb 7-1: config 2 interface 176 altsetting 247 has a duplicate endpoint with address 0x9, skipping [ 95.239382][ T24] usb 7-1: config 2 interface 156 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 95.243048][ T24] usb 7-1: config 2 interface 156 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 95.247587][ T24] usb 7-1: config 2 interface 156 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 95.250177][ C1] blk_print_req_error: 156 callbacks suppressed [ 95.250189][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.251947][ T24] usb 7-1: config 2 interface 156 altsetting 8 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 95.254724][ C1] buffer_io_error: 155 callbacks suppressed [ 95.254734][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.255352][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.259157][ T24] usb 7-1: config 2 interface 156 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 95.263264][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 95.263598][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.265859][ T24] usb 7-1: config 2 interface 156 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 95.268753][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 95.271707][ T24] usb 7-1: config 2 interface 156 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 95.275092][ C1] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.275108][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 95.278704][ T24] usb 7-1: config 2 interface 156 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 95.281295][ C1] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.284973][ T24] usb 7-1: config 2 interface 156 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 95.287049][ C1] Buffer I/O error on dev loop6, logical block 4, async page read [ 95.287089][ C1] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.290425][ T24] usb 7-1: config 2 interface 156 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 95.294315][ C1] Buffer I/O error on dev loop6, logical block 5, async page read [ 95.297577][ T24] usb 7-1: config 2 interface 156 altsetting 8 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 95.302054][ C1] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.306172][ T24] usb 7-1: config 2 interface 156 altsetting 8 has a duplicate endpoint with address 0x8F, skipping [ 95.310493][ C1] Buffer I/O error on dev loop6, logical block 6, async page read [ 95.314134][ T24] usb 7-1: config 2 interface 156 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 95.318883][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.322088][ T24] usb 7-1: config 2 interface 156 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 95.325468][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.326308][ C3] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.330123][ T24] usb 7-1: config 2 interface 156 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 95.334148][ C3] Buffer I/O error on dev loop6, logical block 1, async page read [ 95.334230][ C3] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.338322][ T24] usb 7-1: config 2 interface 156 altsetting 8 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 95.341488][ C3] Buffer I/O error on dev loop6, logical block 2, async page read [ 95.346384][ T5338] ldm_validate_partition_table(): Disk read failed. [ 95.348773][ T24] usb 7-1: config 2 interface 199 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 95.358366][ T5338] Dev loop6: unable to read RDB block 0 [ 95.359115][ T24] usb 7-1: config 2 interface 199 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 95.359841][ T8523] netlink: 104 bytes leftover after parsing attributes in process `syz.1.719'. [ 95.365138][ T5338] loop6: unable to read partition table [ 95.365503][ T24] usb 7-1: config 2 interface 199 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 95.369505][ T5338] loop6: partition table beyond EOD, [ 95.373976][ T24] usb 7-1: config 2 interface 199 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 95.373993][ T24] usb 7-1: config 2 interface 199 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 95.374004][ T24] usb 7-1: config 2 interface 199 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 95.374015][ T24] usb 7-1: config 2 interface 199 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 95.374027][ T24] usb 7-1: config 2 interface 199 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 95.374038][ T24] usb 7-1: config 2 interface 199 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 95.374049][ T24] usb 7-1: config 2 interface 199 altsetting 6 has an endpoint descriptor with address 0x38, changing to 0x8 [ 95.374062][ T24] usb 7-1: config 2 interface 199 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 95.374073][ T24] usb 7-1: config 2 interface 199 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 95.374085][ T24] usb 7-1: config 2 interface 199 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 95.379097][ T5338] truncated [ 95.379710][ T24] usb 7-1: config 2 interface 199 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 95.442598][ T24] usb 7-1: config 2 interface 199 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 95.442628][ T24] usb 7-1: config 2 interface 142 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 95.442641][ T24] usb 7-1: config 2 interface 142 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 95.442654][ T24] usb 7-1: config 2 interface 142 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 95.442665][ T24] usb 7-1: config 2 interface 142 altsetting 7 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 95.442678][ T24] usb 7-1: config 2 interface 142 altsetting 7 endpoint 0x8B has invalid maxpacket 3791, setting to 64 [ 95.442692][ T24] usb 7-1: config 2 interface 142 altsetting 7 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 95.442704][ T24] usb 7-1: config 2 interface 142 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 95.442715][ T24] usb 7-1: config 2 interface 142 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 95.442726][ T24] usb 7-1: config 2 interface 142 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 95.442737][ T24] usb 7-1: config 2 interface 142 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 95.442749][ T24] usb 7-1: config 2 interface 142 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 95.485533][ T24] usb 7-1: config 2 interface 142 altsetting 7 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 95.489603][ T24] usb 7-1: config 2 interface 176 has no altsetting 0 [ 95.491699][ T24] usb 7-1: config 2 interface 156 has no altsetting 0 [ 95.493998][ T24] usb 7-1: config 2 interface 199 has no altsetting 0 [ 95.496054][ T24] usb 7-1: config 2 interface 142 has no altsetting 0 [ 95.500282][ T24] usb 7-1: New USB device found, idVendor=3731, idProduct=0112, bcdDevice=33.b0 [ 95.503149][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.505654][ T24] usb 7-1: Product: syz [ 95.507021][ T24] usb 7-1: Manufacturer: syz [ 95.508472][ T24] usb 7-1: SerialNumber: syz [ 95.512128][ T24] usb 7-1: Interface #199 referenced by multiple IADs [ 95.515650][ T8496] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.709646][ T8550] bridge_slave_1: default FDB implementation only supports local addresses [ 95.729372][ T24] option 7-1:2.176: GSM modem (1-port) converter detected [ 95.764507][ T24] usb 7-1: USB disconnect, device number 7 [ 95.774093][ T24] option 7-1:2.176: device disconnected [ 95.865643][ T8565] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 96.026387][ T8569] netlink: 'syz.0.731': attribute type 1 has an invalid length. [ 96.037852][ T8569] bond3: entered promiscuous mode [ 96.039815][ T8569] 8021q: adding VLAN 0 to HW filter on device bond3 [ 96.051950][ T8569] bond3: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 96.059797][ T8569] bond3: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 96.063717][ T8569] bond3: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 96.331446][ T8588] netlink: 'syz.3.737': attribute type 21 has an invalid length. [ 96.339320][ T8588] netlink: 'syz.3.737': attribute type 21 has an invalid length. [ 96.339357][ T104] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.346631][ T104] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.353104][ T104] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.356866][ T104] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.382223][ T8588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=8588 comm=syz.3.737 [ 96.401435][ T8588] netlink: 'syz.3.737': attribute type 8 has an invalid length. [ 96.632903][ T8606] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.636171][ T8606] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.639680][ T8606] IPv6: NLM_F_CREATE should be set when creating new route [ 96.671200][ T8606] netlink: 'syz.0.742': attribute type 21 has an invalid length. [ 96.814272][ T8627] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4115 sclass=netlink_xfrm_socket pid=8627 comm=syz.1.750 [ 96.884087][ T8638] kAFS: unparsable volume name [ 96.954766][ T8642] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 96.962416][ T8644] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 97.034829][ T8658] SELinux: security_context_str_to_sid () failed with errno=-22 [ 97.084557][ T8665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.113986][ T8667] netlink: 'syz.0.763': attribute type 1 has an invalid length. [ 97.117601][ T8667] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 97.146991][ T8673] netlink: 'syz.2.764': attribute type 5 has an invalid length. [ 97.158365][ T8675] netlink: 'syz.0.765': attribute type 16 has an invalid length. [ 97.253462][ T8683] kvm: pic: level sensitive irq not supported [ 97.255642][ T8683] kvm: pic: non byte write [ 97.266475][ T8682] delete_channel: no stack [ 97.287190][ T1148] Bluetooth: hci4: Frame reassembly failed (-84) [ 97.328307][ T8692] exFAT-fs (nullb0): invalid boot record signature [ 97.330553][ T8692] exFAT-fs (nullb0): failed to read boot sector [ 97.333411][ T8692] exFAT-fs (nullb0): failed to recognize exfat type [ 97.336929][ T8690] exFAT-fs (nullb0): invalid boot record signature [ 97.339054][ T8690] exFAT-fs (nullb0): failed to read boot sector [ 97.341561][ T8690] exFAT-fs (nullb0): failed to recognize exfat type [ 97.663317][ T8722] netlink: 'syz.1.779': attribute type 7 has an invalid length. [ 97.682430][ T10] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 97.710443][ T8726] ptrace attach of "/syz-executor exec"[8730] was attempted by "/syz-executor exec"[8726] [ 97.844878][ T10] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 97.846996][ T8746] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 97.847596][ T10] usb 7-1: config 186 has an invalid descriptor of length 46, skipping remainder of the config [ 97.854262][ T10] usb 7-1: config 186 has no interfaces? [ 97.861570][ T10] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 97.873105][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.880951][ T8746] block nbd0: not configured, cannot reconfigure [ 98.026395][ T8759] __nla_validate_parse: 11 callbacks suppressed [ 98.026442][ T8759] netlink: 44 bytes leftover after parsing attributes in process `syz.1.790'. [ 98.451488][ T8774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=8774 comm=syz.3.794 [ 98.620973][ T40] kauditd_printk_skb: 371 callbacks suppressed [ 98.621072][ T40] audit: type=1400 audit(2000000027.059:1406): avc: denied { mounton } for pid=8788 comm="syz.3.797" path="/236/file0" dev="tmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 98.631649][ T40] audit: type=1400 audit(2000000027.059:1407): avc: denied { mount } for pid=8788 comm="syz.3.797" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 98.632071][ T8789] devpts: Bad value for 'max' [ 98.639602][ T40] audit: type=1400 audit(2000000027.069:1408): avc: denied { remount } for pid=8788 comm="syz.3.797" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 98.654384][ T40] audit: type=1400 audit(2000000027.099:1409): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 98.687430][ T8791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.798'. [ 98.833862][ T40] audit: type=1400 audit(2000000027.279:1410): avc: denied { create } for pid=8795 comm="syz.1.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.888646][ T40] audit: type=1400 audit(2000000027.329:1411): avc: denied { append } for pid=8800 comm="syz.3.801" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.936814][ T40] audit: type=1400 audit(2000000027.379:1412): avc: denied { read write } for pid=8804 comm="syz.3.802" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 98.952896][ T40] audit: type=1400 audit(2000000027.379:1413): avc: denied { open } for pid=8804 comm="syz.3.802" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 98.972471][ T40] audit: type=1400 audit(2000000027.379:1414): avc: denied { mount } for pid=8804 comm="syz.3.802" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 99.057725][ T40] audit: type=1400 audit(2000000027.499:1415): avc: denied { read } for pid=8804 comm="syz.3.802" name="comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.342573][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 99.342876][ T5929] Bluetooth: hci4: command 0x1003 tx timeout [ 99.445885][ T50] IPVS: starting estimator thread 0... [ 99.532760][ T8816] IPVS: using max 44 ests per chain, 105600 per kthread [ 99.864598][ T8838] netlink: 'syz.3.807': attribute type 1 has an invalid length. [ 99.869980][ T8838] Cannot find add_set index 128 as target [ 100.052097][ T8853] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 100.096647][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 100.286621][ T10] usb 7-1: string descriptor 0 read error: -71 [ 100.297923][ T10] usb 7-1: USB disconnect, device number 8 [ 100.822608][ T8915] 8021q: adding VLAN 0 to HW filter on device bond4 [ 100.838892][ T8915] bond4: (slave geneve2): making interface the new active one [ 100.841948][ T8915] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 100.848366][ T104] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 100.854385][ T104] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 100.857715][ T104] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 100.861358][ T104] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 101.008343][ C0] blk_print_req_error: 131 callbacks suppressed [ 101.008364][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.015118][ C0] buffer_io_error: 130 callbacks suppressed [ 101.015135][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.022874][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.027120][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 101.030387][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.034304][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 101.037593][ C1] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.041486][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 101.044749][ C1] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.048645][ C1] Buffer I/O error on dev loop6, logical block 4, async page read [ 101.051919][ C1] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.055861][ C1] Buffer I/O error on dev loop6, logical block 5, async page read [ 101.059063][ C1] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.063008][ C1] Buffer I/O error on dev loop6, logical block 6, async page read [ 101.068083][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.072218][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.077134][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.081236][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 101.084589][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.088737][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 101.096517][ T5338] ldm_validate_partition_table(): Disk read failed. [ 101.102030][ T5338] Dev loop6: unable to read RDB block 0 [ 101.106829][ T5338] loop6: unable to read partition table [ 101.109325][ T5338] loop6: partition table beyond EOD, truncated [ 101.288697][ T8950] CIFS mount error: No usable UNC path provided in device string! [ 101.288697][ T8950] [ 101.292022][ T8950] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 101.357182][ T8952] syz.2.833 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 101.485025][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 101.585382][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 101.655072][ T24] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 101.658524][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.662943][ T24] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.668455][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 101.674166][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 101.677978][ T24] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 101.681363][ T24] usb 8-1: Product: syz [ 101.683928][ T24] usb 8-1: Manufacturer: syz [ 101.686042][ T24] usb 8-1: SerialNumber: syz [ 101.692068][ T24] usb 8-1: config 0 descriptor?? [ 101.703462][ T24] hub 8-1:0.0: bad descriptor, ignoring hub [ 101.706124][ T24] hub 8-1:0.0: probe with driver hub failed with error -5 [ 101.751404][ T24] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 101.775928][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.820892][ T8975] loop4: detected capacity change from 0 to 7 [ 101.824250][ T5931] ldm_validate_partition_table(): Disk read failed. [ 101.826471][ T5931] Dev loop4: unable to read RDB block 0 [ 101.828250][ T5931] loop4: unable to read partition table [ 101.830077][ T5931] loop4: partition table beyond EOD, truncated [ 101.832979][ T8975] ldm_validate_partition_table(): Disk read failed. [ 101.835751][ T8975] Dev loop4: unable to read RDB block 0 [ 101.837564][ T8975] loop4: unable to read partition table [ 101.839442][ T8975] loop4: partition table beyond EOD, truncated [ 101.841425][ T8975] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 102.013433][ T24] usb 8-1: USB disconnect, device number 5 [ 102.148540][ T8998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.372488][ T6172] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 102.534271][ T6172] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 102.537727][ T6172] usb 8-1: config 1 has no interface number 0 [ 102.540319][ T6172] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x4A, changing to 0xA [ 102.545248][ T6172] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 102.549562][ T6172] usb 8-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 102.557875][ T6172] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 102.561563][ T6172] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.565211][ T6172] usb 8-1: Product: syz [ 102.566992][ T6172] usb 8-1: Manufacturer: syz [ 102.568971][ T6172] usb 8-1: SerialNumber: syz [ 102.576833][ T8948] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.580839][ T6172] usb 8-1: Expected 3 endpoints, found: 2 [ 102.602859][ T9008] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 102.803620][ T9019] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 103.057068][ T9030] nbd: socks must be embedded in a SOCK_ITEM attr [ 103.529599][ T9051] tipc: Started in network mode [ 103.531187][ T9051] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 103.534556][ T9051] tipc: Enabling of bearer rejected, failed to enable media [ 103.573314][ T9053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8323 sclass=netlink_route_socket pid=9053 comm=syz.2.861 [ 103.619584][ T9057] FAULT_INJECTION: forcing a failure. [ 103.619584][ T9057] name failslab, interval 1, probability 0, space 0, times 1 [ 103.624347][ T9057] CPU: 2 UID: 0 PID: 9057 Comm: syz.2.863 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.624366][ T9057] Tainted: [L]=SOFTLOCKUP [ 103.624370][ T9057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.624432][ T9057] Call Trace: [ 103.624436][ T9057] [ 103.624441][ T9057] dump_stack_lvl+0x100/0x190 [ 103.624474][ T9057] should_fail_ex.cold+0x5/0xa [ 103.624489][ T9057] ? tomoyo_realpath_from_path+0xb6/0x690 [ 103.624566][ T9057] should_failslab+0xc2/0x120 [ 103.624578][ T9057] __kmalloc_noprof+0xe0/0x850 [ 103.624597][ T9057] tomoyo_realpath_from_path+0xb6/0x690 [ 103.624618][ T9057] tomoyo_path_number_perm+0x23c/0x580 [ 103.624633][ T9057] ? tomoyo_path_number_perm+0x22e/0x580 [ 103.624649][ T9057] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 103.624677][ T9057] ? find_held_lock+0x2b/0x80 [ 103.624692][ T9057] ? __fget_files+0x215/0x3d0 [ 103.624703][ T9057] ? hook_file_ioctl_common+0x146/0x410 [ 103.624718][ T9057] ? __fget_files+0x21f/0x3d0 [ 103.624733][ T9057] security_file_ioctl+0xd3/0x230 [ 103.624791][ T9057] __x64_sys_ioctl+0xb7/0x210 [ 103.624812][ T9057] do_syscall_64+0x106/0xf80 [ 103.624907][ T9057] ? clear_bhb_loop+0x40/0x90 [ 103.624921][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.624932][ T9057] RIP: 0033:0x7fe0c299c819 [ 103.624942][ T9057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.624952][ T9057] RSP: 002b:00007fe0c37f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.624964][ T9057] RAX: ffffffffffffffda RBX: 00007fe0c2c15fa0 RCX: 00007fe0c299c819 [ 103.624971][ T9057] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 103.624977][ T9057] RBP: 00007fe0c37f8090 R08: 0000000000000000 R09: 0000000000000000 [ 103.624983][ T9057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.624989][ T9057] R13: 00007fe0c2c16038 R14: 00007fe0c2c15fa0 R15: 00007ffd33bb32f8 [ 103.625003][ T9057] [ 103.625007][ T9057] ERROR: Out of memory at tomoyo_realpath_from_path. [ 103.648652][ T40] kauditd_printk_skb: 296 callbacks suppressed [ 103.648703][ T40] audit: type=1400 audit(2000000032.089:1712): avc: denied { create } for pid=9054 comm="syz.0.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.681896][ T9060] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 103.682464][ T40] audit: type=1400 audit(2000000032.089:1713): avc: denied { ioctl } for pid=9056 comm="syz.2.863" path="socket:[26347]" dev="sockfs" ino=26347 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 103.685677][ T9060] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 103.688220][ T40] audit: type=1400 audit(2000000032.099:1714): avc: denied { setopt } for pid=9054 comm="syz.0.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.692480][ T9060] vhci_hcd vhci_hcd.0: Device attached [ 103.694726][ T40] audit: type=1400 audit(2000000032.099:1715): avc: denied { create } for pid=9054 comm="syz.0.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.731774][ T9063] netlink: 880 bytes leftover after parsing attributes in process `syz.0.862'. [ 103.735311][ T40] audit: type=1400 audit(2000000032.169:1716): avc: denied { write } for pid=9054 comm="syz.0.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.743007][ T40] audit: type=1400 audit(2000000032.169:1717): avc: denied { nlmsg_write } for pid=9054 comm="syz.0.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.758541][ T40] audit: type=1400 audit(2000000032.199:1718): avc: denied { create } for pid=9059 comm="syz.2.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.765362][ T40] audit: type=1400 audit(2000000032.199:1719): avc: denied { write } for pid=9059 comm="syz.2.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.962472][ T50] usb 42-1: SetAddress Request (2) to port 0 [ 103.965534][ T50] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 104.005908][ T40] audit: type=1400 audit(2000000032.449:1720): avc: denied { write } for pid=9065 comm="syz.0.865" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.013412][ T40] audit: type=1400 audit(2000000032.459:1721): avc: denied { create } for pid=9065 comm="syz.0.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 104.256363][ T10] usb 8-1: USB disconnect, device number 6 [ 104.496881][ T9078] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9078 comm=syz.3.868 [ 104.521316][ T9061] vhci_hcd: connection reset by peer [ 104.531199][ T12] vhci_hcd vhci_hcd.2: stop threads [ 104.533350][ T12] vhci_hcd vhci_hcd.2: release socket [ 104.535197][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 104.584521][ T9086] FAULT_INJECTION: forcing a failure. [ 104.584521][ T9086] name failslab, interval 1, probability 0, space 0, times 0 [ 104.590669][ T9086] CPU: 0 UID: 0 PID: 9086 Comm: syz.1.872 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.590701][ T9086] Tainted: [L]=SOFTLOCKUP [ 104.590707][ T9086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.590717][ T9086] Call Trace: [ 104.590725][ T9086] [ 104.590732][ T9086] dump_stack_lvl+0x100/0x190 [ 104.590776][ T9086] should_fail_ex.cold+0x5/0xa [ 104.590801][ T9086] ? tomoyo_encode2+0xfb/0x3c0 [ 104.590829][ T9086] should_failslab+0xc2/0x120 [ 104.590849][ T9086] __kmalloc_noprof+0xe0/0x850 [ 104.590882][ T9086] tomoyo_encode2+0xfb/0x3c0 [ 104.590913][ T9086] tomoyo_encode+0x29/0x50 [ 104.590940][ T9086] tomoyo_realpath_from_path+0x18c/0x690 [ 104.590974][ T9086] tomoyo_path_number_perm+0x23c/0x580 [ 104.590998][ T9086] ? tomoyo_path_number_perm+0x22e/0x580 [ 104.591026][ T9086] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 104.591080][ T9086] ? find_held_lock+0x2b/0x80 [ 104.591105][ T9086] ? __fget_files+0x215/0x3d0 [ 104.591124][ T9086] ? hook_file_ioctl_common+0x146/0x410 [ 104.591152][ T9086] ? __fget_files+0x21f/0x3d0 [ 104.591177][ T9086] security_file_ioctl+0xd3/0x230 [ 104.591206][ T9086] __x64_sys_ioctl+0xb7/0x210 [ 104.591237][ T9086] do_syscall_64+0x106/0xf80 [ 104.591255][ T9086] ? clear_bhb_loop+0x40/0x90 [ 104.591279][ T9086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.591297][ T9086] RIP: 0033:0x7fb68dd9c819 [ 104.591312][ T9086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.591330][ T9086] RSP: 002b:00007fb68ebcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.591351][ T9086] RAX: ffffffffffffffda RBX: 00007fb68e015fa0 RCX: 00007fb68dd9c819 [ 104.591363][ T9086] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 104.591374][ T9086] RBP: 00007fb68ebcb090 R08: 0000000000000000 R09: 0000000000000000 [ 104.591384][ T9086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.591395][ T9086] R13: 00007fb68e016038 R14: 00007fb68e015fa0 R15: 00007ffd8e855948 [ 104.591419][ T9086] [ 104.591437][ T9086] ERROR: Out of memory at tomoyo_realpath_from_path. [ 104.704497][ T9095] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 104.718501][ T9095] CUSE: unknown device info "&b%ZW)3\my " [ 104.720831][ T9095] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 104.726035][ T9095] CUSE: DEVNAME unspecified [ 104.790504][ T9101] delete_channel: no stack [ 104.942508][ T9109] validate_nla: 3 callbacks suppressed [ 104.942530][ T9109] netlink: 'syz.1.880': attribute type 10 has an invalid length. [ 104.957446][ T9109] team0: Cannot enslave team device to itself [ 105.126926][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9117 comm=syz.0.883 [ 105.132693][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9117 comm=syz.0.883 [ 105.247478][ T9124] FAULT_INJECTION: forcing a failure. [ 105.247478][ T9124] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.251946][ T9124] CPU: 1 UID: 0 PID: 9124 Comm: syz.0.886 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.251965][ T9124] Tainted: [L]=SOFTLOCKUP [ 105.251969][ T9124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.251976][ T9124] Call Trace: [ 105.251980][ T9124] [ 105.251985][ T9124] dump_stack_lvl+0x100/0x190 [ 105.252008][ T9124] should_fail_ex.cold+0x5/0xa [ 105.252023][ T9124] _copy_to_user+0x32/0xd0 [ 105.252039][ T9124] simple_read_from_buffer+0xcb/0x170 [ 105.252052][ T9124] proc_fail_nth_read+0x1af/0x230 [ 105.252068][ T9124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.252085][ T9124] ? rw_verify_area+0xce/0x6d0 [ 105.252101][ T9124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.252116][ T9124] vfs_read+0x1e4/0xb30 [ 105.252128][ T9124] ? __pfx_vfs_read+0x10/0x10 [ 105.252137][ T9124] ? __fget_files+0x215/0x3d0 [ 105.252152][ T9124] ? __fget_files+0x21f/0x3d0 [ 105.252185][ T9124] ksys_read+0x12a/0x250 [ 105.252196][ T9124] ? __pfx_ksys_read+0x10/0x10 [ 105.252210][ T9124] do_syscall_64+0x106/0xf80 [ 105.252221][ T9124] ? clear_bhb_loop+0x40/0x90 [ 105.252234][ T9124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.252256][ T9124] RIP: 0033:0x7f0073f5d04e [ 105.252268][ T9124] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 105.252278][ T9124] RSP: 002b:00007f0074dccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.252289][ T9124] RAX: ffffffffffffffda RBX: 00007f0074dcd6c0 RCX: 00007f0073f5d04e [ 105.252296][ T9124] RDX: 000000000000000f RSI: 00007f0074dcd0a0 RDI: 0000000000000003 [ 105.252302][ T9124] RBP: 00007f0074dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 105.252310][ T9124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.252319][ T9124] R13: 00007f0074216038 R14: 00007f0074215fa0 R15: 00007ffc3b52e9b8 [ 105.252334][ T9124] [ 105.425757][ T9129] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.888'. [ 105.428968][ T9129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.888'. [ 105.676839][ T9143] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.680269][ T9143] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.685234][ T9143] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 105.756235][ T9109] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 105.759564][ T9109] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 105.769887][ T9109] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 105.784823][ T9109] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.788145][ T9109] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 105.793448][ T9109] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 105.820419][ T9143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.824894][ T9143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.828593][ T9143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 105.918282][ T9151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.897'. [ 105.919685][ T9143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.922214][ T9151] netlink: 'syz.1.897': attribute type 13 has an invalid length. [ 105.925651][ T9143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.925684][ T9143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 106.044482][ T9143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.048785][ T9143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.056934][ T9143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 106.117700][ T9172] tmpfs: Unknown parameter 'n>˷ۗ' [ 106.160755][ T168] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.163955][ T168] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 106.168772][ T168] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 106.179261][ T168] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.182109][ T168] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 106.189226][ T168] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 106.199624][ T168] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.202592][ T168] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 106.205311][ T168] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 106.215551][ T168] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.218255][ T168] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 106.223130][ T168] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 106.269541][ T9190] erspan1: entered promiscuous mode [ 106.351095][ T9200] netlink: 'syz.1.910': attribute type 1 has an invalid length. [ 106.385600][ T9200] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 106.388936][ T9200] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 106.406372][ T9200] bond4: (slave ip6gre1): making interface the new active one [ 106.409665][ T9200] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 106.664775][ T9229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.919'. [ 106.668250][ T9229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.919'. [ 106.692188][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.919'. [ 106.736016][ T9233] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.920'. [ 106.744632][ T9234] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.920'. [ 106.827831][ T9240] Bluetooth: MGMT ver 1.23 [ 106.863863][ T9244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.925'. [ 106.876818][ T9244] team0 (unregistering): Port device team_slave_0 removed [ 106.881831][ T9244] team0 (unregistering): Port device team_slave_1 removed [ 107.092627][ T5942] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.303520][ T9257] netlink: 'syz.1.927': attribute type 1 has an invalid length. [ 107.354855][ T9265] ubi31: attaching mtd0 [ 107.359843][ T9265] ubi31: scanning is finished [ 107.361901][ T9265] ubi31: empty MTD device detected [ 107.461647][ T9274] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 107.464455][ T9274] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 107.469220][ T9274] vhci_hcd vhci_hcd.0: Device attached [ 107.472093][ T9275] usbip_core: unknown command [ 107.475329][ T9275] vhci_hcd: unknown pdu 0 [ 107.477560][ T9275] usbip_core: unknown command [ 107.480534][ T9274] program syz.1.930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.483905][ T168] vhci_hcd vhci_hcd.1: stop threads [ 107.483926][ T168] vhci_hcd vhci_hcd.1: release socket [ 107.483938][ T168] vhci_hcd vhci_hcd.1: disconnect device [ 107.590870][ T9283] SELinux: truncated policydb string identifier [ 107.593022][ T9283] SELinux: failed to load policy [ 107.597351][ T9265] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 107.713882][ T9294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.717334][ T9294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.815617][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.131082][ T9308] ipvlan2: left allmulticast mode [ 108.135385][ T9308] ipvlan3: left allmulticast mode [ 108.137611][ T9308] batadv_slave_1: left allmulticast mode [ 108.201814][ T9318] NILFS (nbd1): device size too small [ 108.213175][ T9321] tmpfs: Bad value for 'mpol' [ 108.214859][ T9318] NILFS (nbd1): device size too small [ 108.221573][ T9318] NILFS (nbd1): device size too small [ 108.224918][ T9321] omfs: Invalid superblock (0) [ 108.231277][ T9318] NILFS (nbd1): device size too small [ 108.243093][ T9318] NILFS (nbd1): device size too small [ 108.409808][ T9352] xt_bpf: check failed: parse error [ 108.458569][ T9357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9357 comm=syz.0.954 [ 108.543128][ T9372] vlan2: entered promiscuous mode [ 108.546375][ T9372] vlan2: entered allmulticast mode [ 108.549063][ T9372] hsr_slave_1: entered allmulticast mode [ 108.558135][ T9374] exFAT-fs (nullb0): invalid boot record signature [ 108.560398][ T9374] exFAT-fs (nullb0): failed to read boot sector [ 108.562777][ T9374] exFAT-fs (nullb0): failed to recognize exfat type [ 108.578719][ T9374] Cannot find add_set index 65532 as target [ 108.737032][ T40] kauditd_printk_skb: 318 callbacks suppressed [ 108.737101][ T40] audit: type=1400 audit(2000000037.179:2040): avc: denied { execute } for pid=9377 comm="syz.3.958" name="file2" dev="tmpfs" ino=1427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.752013][ T40] audit: type=1400 audit(2000000037.189:2041): avc: denied { execute_no_trans } for pid=9377 comm="syz.3.958" path="/267/file2" dev="tmpfs" ino=1427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.762627][ T40] audit: type=1400 audit(2000000037.189:2042): avc: denied { mount } for pid=9377 comm="syz.3.958" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 108.882655][ T40] audit: type=1400 audit(2000000037.329:2043): avc: denied { create } for pid=9382 comm="syz.2.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.891470][ T40] audit: type=1400 audit(2000000037.329:2044): avc: denied { prog_load } for pid=9382 comm="syz.2.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.901086][ T40] audit: type=1400 audit(2000000037.329:2045): avc: denied { write } for pid=9382 comm="syz.2.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.965218][ T40] audit: type=1400 audit(2000000037.409:2046): avc: denied { read } for pid=9387 comm="syz.0.960" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 108.974393][ T40] audit: type=1400 audit(2000000037.409:2047): avc: denied { open } for pid=9387 comm="syz.0.960" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 109.002162][ T9390] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 109.006489][ T40] audit: type=1400 audit(2000000037.449:2048): avc: denied { read write } for pid=9389 comm="syz.2.961" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 109.016222][ T50] usb 42-1: device descriptor read/8, error -110 [ 109.021725][ T40] audit: type=1400 audit(2000000037.449:2049): avc: denied { open } for pid=9389 comm="syz.2.961" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 109.338741][ T9402] fuse: Bad value for 'fd' [ 109.423518][ T50] usb usb42-port1: attempt power cycle [ 109.741420][ T9418] fuse: Bad value for 'fd' [ 109.799784][ T9388] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.804023][ T9388] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.928355][ T9423] bond5: (slave vlan0): Enslaving as a backup interface with an up link [ 109.978683][ T9439] usb usb9: check_ctrlrecip: process 9439 (syz.1.974) requesting ep 01 but needs 81 [ 109.985233][ T9439] usb usb9: usbfs: process 9439 (syz.1.974) did not claim interface 0 before use [ 109.993815][ T50] usb usb42-port1: unable to enumerate USB device [ 110.044907][ T9441] bond0: (slave caif0): Error: Device type is different from other slaves [ 110.051894][ T9443] __nla_validate_parse: 3 callbacks suppressed [ 110.051958][ T9443] netlink: 32 bytes leftover after parsing attributes in process `syz.0.975'. [ 110.057333][ T9441] netlink: 'syz.3.976': attribute type 3 has an invalid length. [ 110.061596][ T9443] netlink: 32 bytes leftover after parsing attributes in process `syz.0.975'. [ 110.076868][ T9443] netlink: 'syz.0.975': attribute type 5 has an invalid length. [ 110.146907][ T9448] netlink: 'syz.0.978': attribute type 21 has an invalid length. [ 110.210596][ T9452] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.396019][ T9466] netlink: 'syz.1.987': attribute type 12 has an invalid length. [ 110.489008][ T9469] netlink: 750 bytes leftover after parsing attributes in process `syz.1.988'. [ 110.629920][ T9483] netlink: 'syz.1.991': attribute type 178 has an invalid length. [ 110.720260][ T9485] bond6: option downdelay: invalid value (18446744073709551615) [ 110.722874][ T9485] bond6: option downdelay: allowed values 0 - 2147483647 [ 110.753920][ T9485] bond6 (unregistering): Released all slaves [ 110.762537][ T39] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 110.918580][ T39] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 110.921712][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.925654][ T39] usb 5-1: Product: syz [ 110.927179][ T39] usb 5-1: Manufacturer: syz [ 110.928743][ T39] usb 5-1: SerialNumber: syz [ 110.939862][ T39] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 110.983606][ T840] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 111.092965][ T5942] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.195429][ T5995] usb 5-1: USB disconnect, device number 18 [ 111.232121][ T9495] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.355405][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 111.388952][ T9508] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 111.638402][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1002'. [ 111.644617][ T9521] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.653122][ T9521] bridge_slave_1 (unregistering): left allmulticast mode [ 111.655647][ T9521] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.788267][ T9539] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1007'. [ 111.812836][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.901357][ C0] blk_print_req_error: 131 callbacks suppressed [ 111.901371][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.907707][ C0] buffer_io_error: 168 callbacks suppressed [ 111.907719][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.913530][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.917025][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 111.920187][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.924087][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 111.927223][ C0] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.930805][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 111.933881][ C0] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.937776][ C0] Buffer I/O error on dev loop6, logical block 4, async page read [ 111.940921][ C0] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.944955][ C0] Buffer I/O error on dev loop6, logical block 5, async page read [ 111.948087][ C0] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.952381][ C0] Buffer I/O error on dev loop6, logical block 6, async page read [ 111.956316][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.957890][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.960415][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.962849][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.962868][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 111.962921][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 111.970988][ T9558] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1014'. [ 111.975995][ T5338] ldm_validate_partition_table(): Disk read failed. [ 111.979974][ T9558] netlink: 'syz.3.1014': attribute type 10 has an invalid length. [ 111.990985][ T5338] Dev loop6: unable to read RDB block 0 [ 111.996529][ T5338] loop6: unable to read partition table [ 111.998626][ T5338] loop6: partition table beyond EOD, truncated [ 112.017131][ T9561] netlink: 'syz.2.1015': attribute type 5 has an invalid length. [ 112.054184][ T840] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 112.057080][ T840] ath9k_htc: Failed to initialize the device [ 112.062825][ T5995] usb 5-1: ath9k_htc: USB layer deinitialized [ 112.068034][ T9564] netlink: 'syz.2.1015': attribute type 5 has an invalid length. [ 112.118016][ T9567] lo: entered allmulticast mode [ 112.383361][ T5995] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 112.433707][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 112.436934][ T9586] netlink: 'syz.2.1023': attribute type 6 has an invalid length. [ 112.440056][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'. [ 112.450691][ T104] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.455065][ T104] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.458896][ T104] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.465733][ T104] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.469834][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'. [ 112.515310][ T9592] netlink: 'syz.2.1026': attribute type 1 has an invalid length. [ 112.532383][ T5995] usb 5-1: Invalid ep0 maxpacket: 64 [ 112.563297][ T9603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9603 comm=syz.2.1027 [ 112.568366][ T9603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=9603 comm=syz.2.1027 [ 112.664238][ T5995] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 112.672558][ T9615] pimreg9: entered allmulticast mode [ 112.810503][ T9633] autofs4:pid:9633:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 112.822914][ T5995] usb 5-1: Invalid ep0 maxpacket: 64 [ 112.825332][ T5995] usb usb5-port1: attempt power cycle [ 113.086495][ T9653] sctp: [Deprecated]: syz.3.1041 (pid 9653) Use of int in max_burst socket option. [ 113.086495][ T9653] Use struct sctp_assoc_value instead [ 113.172555][ T5942] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.182418][ T5995] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 113.202913][ T5995] usb 5-1: Invalid ep0 maxpacket: 64 [ 113.342427][ T5995] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 113.364873][ T5995] usb 5-1: Invalid ep0 maxpacket: 64 [ 113.366949][ T5995] usb usb5-port1: unable to enumerate USB device [ 113.854025][ T40] kauditd_printk_skb: 295 callbacks suppressed [ 113.854040][ T40] audit: type=1400 audit(2000000042.299:2345): avc: denied { append } for pid=9698 comm="syz.0.1050" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 113.871032][ T40] audit: type=1400 audit(2000000042.309:2346): avc: denied { write } for pid=9698 comm="syz.0.1050" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 113.892512][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.953831][ T40] audit: type=1400 audit(2000000042.399:2347): avc: denied { module_request } for pid=9702 comm="syz.3.1051" kmod="netdev-virt_wifi0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 114.020535][ T40] audit: type=1400 audit(2000000042.459:2348): avc: denied { read write } for pid=9698 comm="syz.0.1050" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.028388][ T40] audit: type=1400 audit(2000000042.459:2349): avc: denied { open } for pid=9698 comm="syz.0.1050" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.036425][ T40] audit: type=1400 audit(2000000042.459:2350): avc: denied { ioctl } for pid=9698 comm="syz.0.1050" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.051338][ T40] audit: type=1400 audit(2000000042.489:2351): avc: denied { sys_module } for pid=9702 comm="syz.3.1051" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 114.115882][ T40] audit: type=1400 audit(2000000042.559:2352): avc: denied { read write } for pid=9708 comm="syz.3.1053" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 114.119004][ T9709] fuse: Bad value for 'user_id' [ 114.124234][ T40] audit: type=1400 audit(2000000042.559:2353): avc: denied { open } for pid=9708 comm="syz.3.1053" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 114.127175][ T9709] fuse: Bad value for 'user_id' [ 114.133848][ T40] audit: type=1400 audit(2000000042.559:2354): avc: denied { create } for pid=9708 comm="syz.3.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 114.262593][ T6013] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 114.434622][ T6013] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 114.438427][ T6013] usb 5-1: config 186 has an invalid descriptor of length 46, skipping remainder of the config [ 114.443012][ T6013] usb 5-1: config 186 has no interfaces? [ 114.445380][ T6013] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 114.449841][ T6013] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.553569][ T9731] mkiss: ax0: crc mode is auto. [ 114.688871][ T9747] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 114.695361][ T9747] sctp: [Deprecated]: syz.1.1064 (pid 9747) Use of int in maxseg socket option. [ 114.695361][ T9747] Use struct sctp_assoc_value instead [ 114.847730][ T9771] tmpfs: Bad value for 'mpol' [ 115.102855][ T840] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 115.151288][ T9781] __nla_validate_parse: 8 callbacks suppressed [ 115.151456][ T9781] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1072'. [ 115.158307][ T9781] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1072'. [ 115.254120][ T840] usb 6-1: Using ep0 maxpacket: 32 [ 115.258716][ T840] usb 6-1: config 9 has an invalid interface number: 211 but max is 0 [ 115.261760][ T840] usb 6-1: config 9 has no interface number 0 [ 115.264379][ T840] usb 6-1: config 9 interface 211 altsetting 15 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 115.268146][ T840] usb 6-1: config 9 interface 211 altsetting 15 has a duplicate endpoint with address 0x8, skipping [ 115.271485][ T840] usb 6-1: config 9 interface 211 altsetting 15 bulk endpoint 0x7 has invalid maxpacket 32 [ 115.275070][ T840] usb 6-1: config 9 interface 211 altsetting 15 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 115.278511][ T840] usb 6-1: config 9 interface 211 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 115.281905][ T840] usb 6-1: config 9 interface 211 altsetting 15 has a duplicate endpoint with address 0x7, skipping [ 115.285805][ T840] usb 6-1: config 9 interface 211 has no altsetting 0 [ 115.289625][ T840] usb 6-1: New USB device found, idVendor=059b, idProduct=0040, bcdDevice= 1.00 [ 115.292598][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.295126][ T840] usb 6-1: Product: 䐊 [ 115.296457][ T840] usb 6-1: Manufacturer: Ђ [ 115.297880][ T840] usb 6-1: SerialNumber: ᐉ [ 115.302211][ T9771] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 115.408089][ T9790] overlay: ./file0 is not a directory [ 115.510081][ T9771] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1069'. [ 115.518324][ T840] usb-storage 6-1:9.211: USB Mass Storage device detected [ 115.528704][ T840] usb-storage 6-1:9.211: Quirks match for vid 059b pid 0040: 1 [ 115.680097][ T840] usb 6-1: USB disconnect, device number 5 [ 115.702922][ T9804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1081'. [ 115.706012][ T9804] validate_nla: 7 callbacks suppressed [ 115.706023][ T9804] netlink: 'syz.2.1081': attribute type 7 has an invalid length. [ 115.710347][ T9804] netlink: 'syz.2.1081': attribute type 8 has an invalid length. [ 115.713172][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1081'. [ 115.798674][ T9814] PM: Enabling pm_trace changes system date and time during resume. [ 115.798674][ T9814] PM: Correct system time has to be restored manually after resume. [ 115.991663][ T9827] syz_tun: entered allmulticast mode [ 116.054515][ T9829] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.057693][ T9829] IPv6: NLM_F_CREATE should be set when creating new route [ 116.060772][ T9829] IPv6: NLM_F_CREATE should be set when creating new route [ 116.067327][ T9829] SET target dimension over the limit! [ 116.067733][ T9830] SET target dimension over the limit! [ 116.268920][ T9847] bridge4: entered promiscuous mode [ 116.281317][ T9850] random: crng reseeded on system resumption [ 116.376786][ T9854] tmpfs: Bad value for 'mpol' [ 116.405219][ T9860] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1099'. [ 116.629149][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.632491][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.812548][ T6013] usb 5-1: string descriptor 0 read error: -71 [ 116.826428][ T6013] usb 5-1: USB disconnect, device number 23 [ 117.752526][ T840] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 117.908162][ T840] usb 8-1: config index 0 descriptor too short (expected 28277, got 36) [ 117.910844][ T840] usb 8-1: config 186 has an invalid descriptor of length 46, skipping remainder of the config [ 117.914485][ T840] usb 8-1: config 186 has no interfaces? [ 117.916533][ T840] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 117.919406][ T840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.072357][ T6013] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 118.168504][ T9942] 9pnet_virtio: no channels available for device ./file0 [ 118.222356][ T6013] usb 5-1: Using ep0 maxpacket: 16 [ 118.225260][ T6013] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 118.228668][ T6013] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.232076][ T6013] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.235315][ T6013] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 118.239700][ T6013] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 118.242724][ T6013] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.247365][ T6013] usb 5-1: config 0 descriptor?? [ 118.268829][ T9945] No source specified [ 118.321810][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'. [ 118.327125][ T9948] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 118.397187][ T9955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1127'. [ 118.519749][ T6013] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5013.0002/input/input9 [ 118.598224][ T6013] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5013.0002/input/input10 [ 118.747865][ T6013] kye 0003:0458:5013.0002: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 118.796354][ T9978] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1133'. [ 118.802729][ T9981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1133'. [ 118.873133][ T6013] usb 5-1: USB disconnect, device number 24 [ 118.892121][ T40] kauditd_printk_skb: 354 callbacks suppressed [ 118.892223][ T40] audit: type=1400 audit(2000000047.329:2709): avc: denied { sys_module } for pid=9977 comm="syz.1.1133" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 118.958618][ T40] audit: type=1400 audit(2000000047.399:2710): avc: denied { create } for pid=9988 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.980280][ T40] audit: type=1400 audit(2000000047.399:2711): avc: denied { write } for pid=9988 comm="syz.0.1135" name="unix" dev="proc" ino=4026533065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 119.003414][ T40] audit: type=1400 audit(2000000047.399:2712): avc: denied { write } for pid=9988 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.009887][ T40] audit: type=1400 audit(2000000047.399:2713): avc: denied { read } for pid=9988 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.023241][ T40] audit: type=1400 audit(2000000047.399:2714): avc: denied { create } for pid=9988 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.029314][ T40] audit: type=1400 audit(2000000047.399:2715): avc: denied { write } for pid=9988 comm="syz.0.1135" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.036346][ T40] audit: type=1400 audit(2000000047.409:2716): avc: denied { name_bind } for pid=9988 comm="syz.0.1135" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 119.043060][ T40] audit: type=1400 audit(2000000047.409:2717): avc: denied { node_bind } for pid=9988 comm="syz.0.1135" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 119.050648][ T40] audit: type=1400 audit(2000000047.439:2718): avc: denied { prog_load } for pid=9993 comm="syz.1.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 119.102469][ T5995] IPVS: starting estimator thread 0... [ 119.192543][T10000] IPVS: using max 44 ests per chain, 105600 per kthread [ 119.336697][T10006] tmpfs: Bad value for 'mpol' [ 119.400279][T10011] binder: 10010:10011 ioctl c0306201 200000000480 returned -14 [ 119.497314][T10019] netlink: 'syz.2.1144': attribute type 1 has an invalid length. [ 119.507521][T10020] input: syz0 as /devices/virtual/input/input11 [ 119.840251][T10048] [U] V3Fپ"S/4:XTZWTLW= [ 119.880503][T10047] [U] J"E:" [ 119.987765][T10052] sp0: Synchronizing with TNC [ 119.999515][T10051] [U] [ 120.157260][T10060] afs: Unknown parameter './file0/../file0' [ 120.207924][T10064] ip6t_REJECT: ECHOREPLY is not supported [ 120.267176][T10069] __nla_validate_parse: 3 callbacks suppressed [ 120.267193][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1161'. [ 120.276079][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1161'. [ 120.280308][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1161'. [ 120.369339][ T840] usb 8-1: string descriptor 0 read error: -71 [ 120.377107][ T840] usb 8-1: USB disconnect, device number 7 [ 120.415366][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1165'. [ 120.420477][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1165'. [ 120.832540][ T840] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 120.984087][ T840] usb 8-1: config 0 has an invalid descriptor of length 171, skipping remainder of the config [ 120.987590][ T840] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 120.990719][ T840] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 120.993838][ T840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.001997][ T840] usb 8-1: config 0 descriptor?? [ 121.564219][T10097] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.569649][T10097] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.611419][T10120] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 121.614593][T10120] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 121.617618][T10120] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 121.645523][T10122] vxfs: unable to read disk superblock at 1 [ 121.648012][T10122] vxfs: unable to read disk superblock at 8 [ 121.649999][T10122] vxfs: can't find superblock. [ 121.901512][T10141] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1182'. [ 121.925455][T10141] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1182'. [ 121.928875][T10141] netlink: 'syz.0.1182': attribute type 2 has an invalid length. [ 122.024063][T10146] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1184'. [ 122.120817][T10148] usb usb7: usbfs: process 10148 (syz.0.1185) did not claim interface 0 before use [ 122.223493][T10157] tmpfs: Bad value for 'mpol' [ 122.723069][T10167] 9p: Bad value for 'wfdno' [ 122.863449][ T5942] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.937325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.012629][ T5995] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 123.212338][ T5995] usb 7-1: Using ep0 maxpacket: 8 [ 123.216384][ T5995] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 123.220031][ T5995] usb 7-1: config 179 has no interface number 0 [ 123.222806][ T5995] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 123.227383][ T5995] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 123.232030][ T5995] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 123.236735][ T5995] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 123.241408][ T5995] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 123.246939][ T5995] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 123.250730][ T5995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.269017][T10170] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 123.489354][ T5995] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input13 [ 123.523418][ T5995] usb 8-1: USB disconnect, device number 8 [ 123.572895][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.743156][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 123.743159][ T6013] usb 7-1: USB disconnect, device number 9 [ 123.748141][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 124.318434][ T40] kauditd_printk_skb: 912 callbacks suppressed [ 124.318488][ T40] audit: type=1400 audit(2000000052.759:3631): avc: denied { allowed } for pid=10187 comm="syz.2.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 124.327832][ T40] audit: type=1400 audit(2000000052.759:3632): avc: denied { create } for pid=10187 comm="syz.2.1198" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.335641][ T40] audit: type=1400 audit(2000000052.759:3633): avc: denied { map } for pid=10187 comm="syz.2.1198" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.344498][ T40] audit: type=1400 audit(2000000052.759:3634): avc: denied { read write } for pid=10187 comm="syz.2.1198" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.355739][ T40] audit: type=1400 audit(2000000052.759:3635): avc: denied { create } for pid=10187 comm="syz.2.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.365066][ T40] audit: type=1400 audit(2000000052.759:3636): avc: denied { write } for pid=10187 comm="syz.2.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.379619][ T40] audit: type=1400 audit(2000000052.819:3637): avc: denied { ioctl } for pid=10187 comm="syz.2.1198" path="socket:[31314]" dev="sockfs" ino=31314 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.402188][T10189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1198'. [ 125.284925][T10161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.292023][ T40] audit: type=1400 audit(2000000053.729:3638): avc: denied { module_request } for pid=10171 comm="syz.1.1193" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 125.338493][ T40] audit: type=1400 audit(2000000053.779:3639): avc: denied { read } for pid=10192 comm="syz.3.1199" dev="nsfs" ino=4026533097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 125.350421][ T40] audit: type=1400 audit(2000000053.779:3640): avc: denied { open } for pid=10192 comm="syz.3.1199" path="net:[4026533097]" dev="nsfs" ino=4026533097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 125.374790][T10196] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 125.379062][T10193] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 125.403616][T10199] netem: change failed [ 125.408486][T10199] SELinux: security_context_str_to_sid () failed with errno=-22 [ 125.427165][T10203] netlink: 'syz.2.1204': attribute type 12 has an invalid length. [ 125.430927][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1204'. [ 125.434936][T10203] netlink: 'syz.2.1204': attribute type 12 has an invalid length. [ 125.437523][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1204'. [ 125.684290][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'. [ 125.687052][T10241] netlink: 'syz.0.1215': attribute type 30 has an invalid length. [ 125.689519][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1215'. [ 125.758400][T10249] IPv6: Can't replace route, no match found [ 126.033681][T10266] mkiss: ax0: crc mode is auto. [ 126.321967][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'. [ 126.328378][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1226'. [ 126.331282][T10276] netlink: 'syz.2.1226': attribute type 20 has an invalid length. [ 126.343626][ T5929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.348012][ T5929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.351968][ T5929] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.356299][ T5929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.358903][ T5929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 126.413541][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'. [ 126.416553][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1226'. [ 126.419458][T10276] netlink: 'syz.2.1226': attribute type 20 has an invalid length. [ 126.472936][T10282] chnl_net:caif_netlink_parms(): no params data found [ 126.534411][T10282] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.535156][T10295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1228'. [ 126.537617][T10282] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.542639][T10294] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 126.544633][T10282] bridge_slave_0: entered allmulticast mode [ 126.546918][T10295] Mount JFS Failure: -22 [ 126.548199][T10282] bridge_slave_0: entered promiscuous mode [ 126.552715][T10282] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.556295][T10282] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.558535][T10282] bridge_slave_1: entered allmulticast mode [ 126.561188][T10282] bridge_slave_1: entered promiscuous mode [ 126.585593][T10282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.590345][T10282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.629836][T10297] bond2: (slave bond_slave_1): Device is not bonding slave [ 126.632177][T10297] bond2: option active_slave: invalid value (bond_slave_1) [ 126.639931][T10297] bond2 (unregistering): Released all slaves [ 126.652920][T10282] team0: Port device team_slave_0 added [ 126.664954][T10282] team0: Port device team_slave_1 added [ 126.678686][T10304] support for cryptoloop has been removed. Use dm-crypt instead. [ 126.692924][T10282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.695391][T10282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.708571][T10282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.714857][T10282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.717866][T10282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.729118][T10282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.782443][T10282] hsr_slave_0: entered promiscuous mode [ 126.785688][T10282] hsr_slave_1: entered promiscuous mode [ 126.786164][T10317] xt_l2tp: v2 doesn't support IP mode [ 126.788786][T10282] debugfs: 'hsr0' already exists in 'hsr' [ 126.793503][T10282] Cannot create hsr debugfs directory [ 126.858219][T10325] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1240'. [ 126.937708][T10336] overlayfs: conflicting options: userxattr,metacopy=on [ 127.008034][T10340] ***************************************************** [ 127.011133][T10338] nftables ruleset with unbound chain [ 127.012601][T10340] ORANGEFS Device Error: You cannot open the device file [ 127.013261][T10340] [ 127.013261][T10340] /dev/pvfs2-req more than once. Please make sure that [ 127.013261][T10340] there are no [ 127.015855][T10340] instances of a program using this device [ 127.015855][T10340] currently running. (You must verify this!) [ 127.023892][T10340] For example, you can use the lsof program as follows: [ 127.026357][T10340] 'lsof | grep pvfs2-req' (run this as root) [ 127.030039][T10340] open_access_count = 1 [ 127.031788][T10340] ***************************************************** [ 127.042703][T10334] netlink: 'syz.0.1243': attribute type 1 has an invalid length. [ 127.058071][T10282] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.081744][T10282] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.104727][T10335] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 127.109803][T10335] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 127.131367][T10334] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 127.137735][T10334] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 127.149949][T10282] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.157761][T10282] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.229798][T10282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.243624][T10282] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.251115][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.254017][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.266211][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.268846][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.322390][ T840] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 127.424816][T10282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.482536][ T840] usb 8-1: Using ep0 maxpacket: 32 [ 127.485784][ T840] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 127.488421][ T840] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 127.491216][ T840] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 127.493397][T10381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10381 comm=syz.2.1252 [ 127.496514][ T840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 127.502799][ T840] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 127.505980][ T840] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 127.510245][ T840] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 127.517013][T10381] netlink: 'syz.2.1252': attribute type 1 has an invalid length. [ 127.517856][ T840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.532973][ T840] usb 8-1: config 0 descriptor?? [ 127.557548][T10381] bond2: (slave bridge3): making interface the new active one [ 127.561351][T10381] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 127.600895][T10282] veth0_vlan: entered promiscuous mode [ 127.609723][T10282] veth1_vlan: entered promiscuous mode [ 127.626317][T10282] veth0_macvtap: entered promiscuous mode [ 127.630674][T10282] veth1_macvtap: entered promiscuous mode [ 127.640496][T10282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.648946][T10282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.656950][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.660077][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.666513][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.669444][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.715596][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.719016][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.742087][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.745036][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.782499][ T9] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 127.894333][T10401] netlink: 'syz.4.1258': attribute type 10 has an invalid length. [ 127.911175][T10401] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 127.943053][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 127.944894][T10342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.952848][T10342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.070616][T10414] trusted_key: encrypted_key: master key parameter '' is invalid [ 128.082731][ T9] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 128.252521][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 128.255122][ T9] usb usb5-port1: attempt power cycle [ 128.330695][T10425] could not allocate digest TFM handle sha256-mb [ 128.393869][T10429] use of bytesused == 0 is deprecated and will be removed in the future, [ 128.396923][T10429] use the actual size instead. [ 128.452592][ T5942] Bluetooth: hci1: command tx timeout [ 128.475042][T10432] binder: BINDER_SET_CONTEXT_MGR already set [ 128.477569][T10432] binder: 10430:10432 ioctl 4018620d 200000000100 returned -16 [ 128.592571][ T9] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 128.613276][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 128.752602][ T9] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 128.782983][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 128.785640][ T9] usb usb5-port1: unable to enumerate USB device [ 129.475447][ T40] kauditd_printk_skb: 299 callbacks suppressed [ 129.475463][ T40] audit: type=1400 audit(2000000057.919:3940): avc: denied { read } for pid=10464 comm="syz.2.1279" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 129.483938][ T40] audit: type=1400 audit(2000000057.919:3941): avc: denied { open } for pid=10464 comm="syz.2.1279" path="net:[4026532886]" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 129.491734][ T40] audit: type=1400 audit(2000000057.919:3942): avc: denied { create } for pid=10464 comm="syz.2.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 129.498351][ T40] audit: type=1400 audit(2000000057.919:3943): avc: denied { write } for pid=10464 comm="syz.2.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 129.504674][ T40] audit: type=1400 audit(2000000057.919:3944): avc: denied { read } for pid=10464 comm="syz.2.1279" name="dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.513344][ T40] audit: type=1400 audit(2000000057.919:3945): avc: denied { open } for pid=10464 comm="syz.2.1279" path="/dev/dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.522707][ T40] audit: type=1326 audit(2000000057.919:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10464 comm="syz.2.1279" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe0c299c819 code=0x0 [ 130.077533][ T40] audit: type=1400 audit(2000000058.519:3947): avc: denied { create } for pid=10443 comm="syz.4.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.107952][ T840] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 130.111468][ T40] audit: type=1400 audit(2000000058.549:3948): avc: denied { write } for pid=10443 comm="syz.4.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.132522][ T840] usb 8-1: USB disconnect, device number 9 [ 130.137724][ T840] usblp0: removed [ 130.146577][ T40] audit: type=1400 audit(2000000058.589:3949): avc: denied { read } for pid=10470 comm="syz.3.1280" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 130.163023][T10471] binder: BINDER_SET_CONTEXT_MGR already set [ 130.165096][T10471] binder: 10470:10471 ioctl 4018620d 200000004a80 returned -16 [ 130.169844][T10471] program syz.3.1280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.192534][T10471] fuse: Bad value for 'fd' [ 130.229409][T10476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.279997][T10482] program syz.2.1281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.511663][T10498] netlink: 'syz.3.1288': attribute type 10 has an invalid length. [ 130.524780][T10498] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.529949][T10498] bond0: (slave team0): Enslaving as an active interface with an up link [ 130.532469][ T5942] Bluetooth: hci1: command tx timeout [ 130.546627][T10502] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20003 [ 130.552154][ T50] IPVS: starting estimator thread 0... [ 130.642717][T10512] IPVS: using max 31 ests per chain, 74400 per kthread [ 130.931964][T10526] __nla_validate_parse: 7 callbacks suppressed [ 130.932086][T10526] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1293'. [ 130.953099][T10541] bond6: option downdelay: invalid value (18446744073709551615) [ 130.955571][T10541] bond6: option downdelay: allowed values 0 - 2147483647 [ 130.961249][T10541] bond6 (unregistering): Released all slaves [ 131.177734][T10565] netlink: 'syz.3.1299': attribute type 2 has an invalid length. [ 131.181620][T10565] netlink: 'syz.3.1299': attribute type 1 has an invalid length. [ 131.209322][T10565] netlink: 'syz.3.1299': attribute type 1 has an invalid length. [ 131.396789][T10585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1303'. [ 131.659830][T10602] vlan2: entered allmulticast mode [ 131.662008][T10602] bond0: entered allmulticast mode [ 131.664819][T10602] bond_slave_0: entered allmulticast mode [ 131.667227][T10602] bond_slave_1: entered allmulticast mode [ 131.740564][T10608] Driver unsupported XDP return value 0 on prog (id 131) dev N/A, expect packet loss! [ 131.750785][T10606] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1309'. [ 131.800789][T10608] hfsplus: unable to find HFS+ superblock [ 131.896016][T10618] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1312'. [ 132.402355][ T6172] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 132.563587][T10600] syz.3.1306 (10600) used greatest stack depth: 19912 bytes left [ 132.566152][ T6172] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 132.568781][ T6172] usb 5-1: config 186 has an invalid descriptor of length 46, skipping remainder of the config [ 132.571992][ T6172] usb 5-1: config 186 has no interfaces? [ 132.574546][ T6172] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 132.577566][ T6172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.612389][ T5942] Bluetooth: hci1: command tx timeout [ 133.206159][T10660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1324'. [ 133.214041][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 133.220470][T10660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1324'. [ 133.224261][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 133.228505][T10660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1324'. [ 133.242676][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 133.418805][T10643] Set syz1 is full, maxelem 65536 reached [ 133.520870][T10672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.778634][T10706] nftables ruleset with unbound set [ 133.799416][T10706] (syz.4.1337,10706,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 133.803623][T10706] (syz.4.1337,10706,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 134.074661][T10722] gfs2: error -5 reading superblock [ 134.366811][T10739] afs: Unknown parameter '\\Mm7OLύQo!>>aĊ:]lMej [ 134.366811][T10739] QjTKGo4(M-' [ 134.383952][T10741] netlink: 'syz.2.1350': attribute type 10 has an invalid length. [ 134.390145][T10741] netlink: 'syz.2.1350': attribute type 27 has an invalid length. [ 134.400680][T10741] xfrm1: left allmulticast mode [ 134.404267][T10741] vlan2: left allmulticast mode [ 134.406148][T10741] vlan0: left allmulticast mode [ 134.407948][T10741] veth0_vlan: left allmulticast mode [ 134.410403][T10741] ip6gre1: left promiscuous mode [ 134.412102][T10741] ip6gre1: left allmulticast mode [ 134.440699][T10743] netlink: 'syz.2.1350': attribute type 10 has an invalid length. [ 134.445567][ T1148] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.448719][ T1148] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.451423][ T1148] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.457984][T10745] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45 sclass=netlink_xfrm_socket pid=10745 comm=syz.4.1351 [ 134.486852][T10742] 8021q: adding VLAN 0 to HW filter on device .` [ 134.489635][T10742] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.496767][T10742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.501951][T10743] batadv0: entered promiscuous mode [ 134.504143][T10743] batadv0: entered allmulticast mode [ 134.506026][T10743] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 134.513643][ T1148] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.525563][ T40] kauditd_printk_skb: 281 callbacks suppressed [ 134.525576][ T40] audit: type=1400 audit(2000000062.969:4231): avc: denied { create } for pid=10748 comm="syz.4.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.536285][ T40] audit: type=1400 audit(2000000062.969:4232): avc: denied { setopt } for pid=10748 comm="syz.4.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.541240][T10749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.547320][ T40] audit: type=1400 audit(2000000062.969:4233): avc: denied { write } for pid=10748 comm="syz.4.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.554372][ T40] audit: type=1400 audit(2000000062.969:4234): avc: denied { connect } for pid=10748 comm="syz.4.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.560463][ T40] audit: type=1400 audit(2000000062.969:4235): avc: denied { name_connect } for pid=10748 comm="syz.4.1353" dest=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 134.567554][ T40] audit: type=1400 audit(2000000062.979:4236): avc: denied { shutdown } for pid=10748 comm="syz.4.1353" lport=47777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.574287][ T40] audit: type=1400 audit(2000000062.979:4237): avc: denied { read } for pid=10748 comm="syz.4.1353" lport=47777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.580419][T10757] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 134.580648][ T40] audit: type=1400 audit(2000000062.979:4238): avc: denied { allowed } for pid=10748 comm="syz.4.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 134.589124][ T40] audit: type=1400 audit(2000000062.979:4239): avc: denied { create } for pid=10748 comm="syz.4.1353" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 134.599567][ T40] audit: type=1400 audit(2000000062.979:4240): avc: denied { prog_load } for pid=10748 comm="syz.4.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 134.692479][ T5942] Bluetooth: hci1: command tx timeout [ 134.911975][ T6172] usb 5-1: string descriptor 0 read error: -71 [ 134.915888][ T6172] usb 5-1: USB disconnect, device number 29 [ 134.952813][T10778] netlink: 'syz.4.1358': attribute type 2 has an invalid length. [ 135.090564][T10780] gtp0: entered promiscuous mode [ 135.093076][T10780] gtp0: entered allmulticast mode [ 135.099322][T10780] team0: Device gtp0 is of different type [ 135.223478][T10785] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.227934][T10785] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 135.326262][T10785] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.329440][T10785] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 135.352412][ T50] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 135.396692][T10785] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.399895][T10785] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 135.496577][T10785] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 135.500007][T10785] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.502412][ T50] usb 9-1: device descriptor read/64, error -71 [ 135.505649][T10785] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 135.570544][T10800] [ 135.571362][T10800] ====================================================== [ 135.573654][T10800] WARNING: possible circular locking dependency detected [ 135.575849][T10800] syzkaller #0 Tainted: G L [ 135.577806][T10800] ------------------------------------------------------ [ 135.580090][T10800] syz.2.1371/10800 is trying to acquire lock: [ 135.582019][T10800] ffffffff90890938 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xd3/0x820 [ 135.584861][T10800] [ 135.584861][T10800] but task is already holding lock: [ 135.587239][T10800] ffffffff908908d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x2c/0x820 [ 135.590090][T10800] [ 135.590090][T10800] which lock already depends on the new lock. [ 135.590090][T10800] [ 135.593175][T10800] [ 135.593175][T10800] the existing dependency chain (in reverse order) is: [ 135.595860][T10800] [ 135.595860][T10800] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 135.598378][T10800] _raw_spin_lock_bh+0x33/0x40 [ 135.600069][T10800] nr_rt_ioctl+0x6e2/0x29e0 [ 135.601806][T10800] nr_ioctl+0x16e/0x2d0 [ 135.603262][T10800] sock_do_ioctl+0x118/0x280 [ 135.604897][T10800] sock_ioctl+0x599/0x6b0 [ 135.606487][T10800] __x64_sys_ioctl+0x18e/0x210 [ 135.608107][T10800] do_syscall_64+0x106/0xf80 [ 135.609615][T10800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.611689][T10800] [ 135.611689][T10800] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 135.614007][T10800] _raw_spin_lock_bh+0x33/0x40 [ 135.615637][T10800] nr_rt_ioctl+0x29b/0x29e0 [ 135.617171][T10800] nr_ioctl+0x16e/0x2d0 [ 135.618599][T10800] sock_do_ioctl+0x118/0x280 [ 135.620183][T10800] sock_ioctl+0x599/0x6b0 [ 135.621801][T10800] __x64_sys_ioctl+0x18e/0x210 [ 135.624046][T10800] do_syscall_64+0x106/0xf80 [ 135.626229][T10800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.628875][T10800] [ 135.628875][T10800] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 135.632085][T10800] __lock_acquire+0x14b8/0x2630 [ 135.634357][T10800] lock_acquire+0x1cf/0x380 [ 135.636385][T10800] _raw_spin_lock_bh+0x33/0x40 [ 135.638537][T10800] nr_rt_device_down+0xd3/0x820 [ 135.640743][T10800] nr_device_event+0x126/0x170 [ 135.642950][T10800] notifier_call_chain+0x99/0x420 [ 135.645294][T10800] call_netdevice_notifiers_info+0xbe/0x110 [ 135.647895][T10800] __dev_notify_flags+0x1f7/0x2e0 [ 135.650219][T10800] netif_change_flags+0x108/0x160 [ 135.652522][T10800] dev_change_flags+0xba/0x250 [ 135.654734][T10800] dev_ifsioc+0x1682/0x1f20 [ 135.656860][T10800] dev_ioctl+0x342/0x10e0 [ 135.658896][T10800] sock_do_ioctl+0x1a0/0x280 [ 135.661011][T10800] sock_ioctl+0x599/0x6b0 [ 135.663018][T10800] __x64_sys_ioctl+0x18e/0x210 [ 135.665247][T10800] do_syscall_64+0x106/0xf80 [ 135.667343][T10800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.669917][T10800] [ 135.669917][T10800] other info that might help us debug this: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 135.669917][T10800] [ 135.674214][T10800] Chain exists of: [ 135.674214][T10800] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 135.674214][T10800] [ 135.679756][T10800] Possible unsafe locking scenario: [ 135.679756][T10800] [ 135.682789][T10800] CPU0 CPU1 [ 135.684959][T10800] ---- ---- [ 135.687113][T10800] lock(nr_neigh_list_lock); [ 135.689080][T10800] lock(&nr_node->node_lock); [ 135.691300][T10800] lock(nr_neigh_list_lock); [ 135.694199][T10800] lock(nr_node_list_lock); [ 135.696098][T10800] [ 135.696098][T10800] *** DEADLOCK *** [ 135.696098][T10800] [ 135.699277][T10800] 2 locks held by syz.2.1371/10800: [ 135.701370][T10800] #0: ffffffff90614628 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x331/0x10e0 [ 135.704907][T10800] #1: ffffffff908908d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x2c/0x820 [ 135.708974][T10800] [ 135.708974][T10800] stack backtrace: [ 135.711476][T10800] CPU: 0 UID: 0 PID: 10800 Comm: syz.2.1371 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.711502][T10800] Tainted: [L]=SOFTLOCKUP [ 135.711507][T10800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.711586][T10800] Call Trace: [ 135.711594][T10800] [ 135.711602][T10800] dump_stack_lvl+0x100/0x190 [ 135.711639][T10800] print_circular_bug.cold+0x178/0x1c7 [ 135.711668][T10800] check_noncircular+0x146/0x160 [ 135.711694][T10800] ? rt6_disable_ip+0x24e/0x980 [ 135.711812][T10800] __lock_acquire+0x14b8/0x2630 [ 135.711834][T10800] lock_acquire+0x1cf/0x380 [ 135.711850][T10800] ? nr_rt_device_down+0xd3/0x820 [ 135.711873][T10800] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 135.711896][T10800] _raw_spin_lock_bh+0x33/0x40 [ 135.711920][T10800] ? nr_rt_device_down+0xd3/0x820 [ 135.711941][T10800] nr_rt_device_down+0xd3/0x820 [ 135.711965][T10800] ? __local_bh_enable_ip+0x9e/0x120 [ 135.711989][T10800] nr_device_event+0x126/0x170 [ 135.712006][T10800] notifier_call_chain+0x99/0x420 [ 135.712049][T10800] call_netdevice_notifiers_info+0xbe/0x110 [ 135.712072][T10800] __dev_notify_flags+0x1f7/0x2e0 [ 135.712096][T10800] ? __pfx___dev_notify_flags+0x10/0x10 [ 135.712120][T10800] ? __pfx___dev_change_flags+0x10/0x10 [ 135.712147][T10800] netif_change_flags+0x108/0x160 [ 135.712173][T10800] dev_change_flags+0xba/0x250 [ 135.712190][T10800] dev_ifsioc+0x1682/0x1f20 [ 135.712215][T10800] ? __pfx_dev_ifsioc+0x10/0x10 [ 135.712236][T10800] ? __pfx___mutex_lock+0x10/0x10 [ 135.712257][T10800] ? dev_load+0x8e/0x240 [ 135.712277][T10800] ? dev_load+0x8e/0x240 [ 135.712299][T10800] dev_ioctl+0x342/0x10e0 [ 135.712322][T10800] sock_do_ioctl+0x1a0/0x280 [ 135.712341][T10800] ? __pfx_sock_do_ioctl+0x10/0x10 [ 135.712360][T10800] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 135.712385][T10800] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 135.712474][T10800] sock_ioctl+0x599/0x6b0 [ 135.712493][T10800] ? __pfx_sock_ioctl+0x10/0x10 [ 135.712510][T10800] ? hook_file_ioctl_common+0x146/0x410 [ 135.712533][T10800] ? selinux_file_ioctl+0x139/0x290 [ 135.712557][T10800] ? selinux_file_ioctl+0xb4/0x290 [ 135.712583][T10800] ? __pfx_sock_ioctl+0x10/0x10 [ 135.712602][T10800] __x64_sys_ioctl+0x18e/0x210 [ 135.712634][T10800] do_syscall_64+0x106/0xf80 [ 135.712651][T10800] ? clear_bhb_loop+0x40/0x90 [ 135.712670][T10800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.712689][T10800] RIP: 0033:0x7fe0c299c819 [ 135.712705][T10800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.712720][T10800] RSP: 002b:00007fe0c37f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.712735][T10800] RAX: ffffffffffffffda RBX: 00007fe0c2c15fa0 RCX: 00007fe0c299c819 [ 135.712745][T10800] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000003 [ 135.712753][T10800] RBP: 00007fe0c2a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 135.712763][T10800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.712771][T10800] R13: 00007fe0c2c16038 R14: 00007fe0c2c15fa0 R15: 00007ffd33bb32f8 [ 135.712787][T10800] [ 135.883498][ T50] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 135.892605][ T46] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 135.896006][ T46] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 135.906126][ T1148] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 135.908700][ T1148] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 135.914798][ T1148] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 135.917856][ T1148] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 135.932382][ T1148] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 135.935149][ T1148] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 136.015841][T10803] syz_tun (unregistering): left allmulticast mode [ 136.078959][T10785] syz_tun (unregistering): left allmulticast mode [ 136.964667][ T1148] bond2 (unregistering): (slave bridge3): Releasing active interface [ 137.114511][ T1148] bond1 (unregistering): (slave .`): Releasing active interface [ 137.118374][ T1148] .` (unregistering): Released all slaves [ 137.123161][ T1148] bond1 (unregistering): Released all slaves [ 137.129158][ T1148] bond0 (unregistering): Released all slaves [ 137.135207][ T1148] bond2 (unregistering): Released all slaves [ 137.141369][ T1148] bond3 (unregistering): Released all slaves [ 137.148819][ T1148] bond4 (unregistering): Released all slaves [ 137.265724][ T1148] tipc: Left network mode [ 137.704427][ T1148] hsr_slave_0: left promiscuous mode [ 137.707109][ T1148] hsr_slave_1: left promiscuous mode [ 138.294717][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.455150][ T1148] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.458181][ T1148] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 138.461240][ T1148] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 138.535473][ T1148] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.539483][ T1148] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 138.543540][ T1148] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 138.634953][ T1148] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.638096][ T1148] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 138.641222][ T1148] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 138.686211][ T1148] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.689817][ T1148] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 138.693883][ T1148] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 138.770160][ T1148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.831480][ T1148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.897365][ T1148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.008426][ T1148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.108405][ T1148] bridge_slave_1: left allmulticast mode [ 139.111546][ T1148] bridge_slave_1: left promiscuous mode [ 139.115062][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.119217][ T1148] bridge_slave_0: left allmulticast mode [ 139.121408][ T1148] bridge_slave_0: left promiscuous mode [ 139.123753][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.131573][ T1148] bridge_slave_1: left allmulticast mode [ 139.134470][ T1148] bridge_slave_1: left promiscuous mode [ 139.137143][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.141469][ T1148] bridge_slave_0: left allmulticast mode [ 139.143752][ T1148] bridge_slave_0: left promiscuous mode [ 139.146146][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.194603][ T1148] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 139.197957][ T1148] ip6gre1 (unregistering): left promiscuous mode [ 139.222735][ T1148] bond4 (unregistering): (slave erspan2): Releasing active interface [ 139.225342][ T1148] erspan2 (unregistering): left promiscuous mode [ 139.584058][ T1148] bond5 (unregistering): (slave bridge5): Releasing active interface [ 139.658157][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.663259][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.668107][ T1148] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 139.674924][ T1148] bond0 (unregistering): (slave team0): Releasing backup interface [ 139.679168][ T1148] bond0 (unregistering): Released all slaves [ 139.684458][ T1148] bond1 (unregistering): Released all slaves [ 139.690791][ T1148] bond2 (unregistering): Released all slaves [ 139.699174][ T1148] bond3 (unregistering): Released all slaves [ 139.705562][ T1148] bond4 (unregistering): Released all slaves [ 139.714586][ T1148] bond5 (unregistering): Released all slaves [ 139.721664][ T1148] bond6 (unregistering): Released all slaves [ 139.817447][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.822519][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.826695][ T1148] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 139.833078][ T1148] bond0 (unregistering): Released all slaves [ 139.837896][ T1148] bond1 (unregistering): Released all slaves [ 139.913295][ T1148] tipc: Disabling bearer [ 139.915226][ T1148] tipc: Left network mode [ 139.943659][ T1148] IPVS: stopping backup sync thread 8273 ... [ 140.316958][ T1148] hsr_slave_0: left promiscuous mode [ 140.319068][ T1148] hsr_slave_1: left promiscuous mode [ 140.320981][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.324388][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.327118][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.329463][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.333972][ T1148] hsr_slave_0: left promiscuous mode [ 140.336076][ T1148] hsr_slave_1: left promiscuous mode [ 140.337977][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.340287][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.344052][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.346387][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.351878][ T1148] veth1_to_batadv: left promiscuous mode [ 140.354520][ T1148] veth1_macvtap: left promiscuous mode [ 140.356283][ T1148] veth0_macvtap: left allmulticast mode [ 140.358061][ T1148] veth0_macvtap: left promiscuous mode [ 140.359808][ T1148] veth1_vlan: left promiscuous mode [ 140.362476][ T1148] veth1_macvtap: left promiscuous mode [ 140.364229][ T1148] veth0_macvtap: left promiscuous mode [ 140.366002][ T1148] veth1_vlan: left promiscuous mode [ 140.367629][ T1148] veth0_vlan: left promiscuous mode [ 140.404809][ T1148] pimreg9 (unregistering): left allmulticast mode [ 140.448826][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 140.480737][ T1148] lo (unregistering): left allmulticast mode [ 140.517672][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 140.522100][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 141.160563][ T1148] IPVS: stop unused estimator thread 0... [ 141.163505][ T1148] IPVS: stop unused estimator thread 0... [ 141.456033][ T1148] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 141.460119][ T1148] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 141.504463][ T1148] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 141.507506][ T1148] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 141.574316][ T1148] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 141.577518][ T1148] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 141.614366][ T1148] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 141.617592][ T1148] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 141.678757][ T1148] bridge_slave_1: left allmulticast mode [ 141.680793][ T1148] bridge_slave_1: left promiscuous mode [ 141.683505][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.686576][ T1148] bridge_slave_0: left allmulticast mode [ 141.688616][ T1148] bridge_slave_0: left promiscuous mode [ 141.691053][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.755556][ T1148] bond4 (unregistering): (slave geneve2): Releasing active interface [ 141.917841][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.920779][ T1148] bond_slave_0: left allmulticast mode [ 141.923447][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.926426][ T1148] bond_slave_1: left allmulticast mode [ 141.928946][ T1148] bond0 (unregistering): Released all slaves [ 141.932599][ T1148] bond1 (unregistering): Released all slaves [ 141.936905][ T1148] bond2 (unregistering): Released all slaves [ 141.941335][ T1148] bond3 (unregistering): Released all slaves [ 141.945902][ T1148] bond4 (unregistering): Released all slaves [ 141.950225][ T1148] bond5 (unregistering): Released all slaves [ 142.675540][ T1148] : left promiscuous mode [ 142.851819][ T1148] hsr_slave_0: left promiscuous mode [ 142.854048][ T1148] hsr_slave_1: left promiscuous mode [ 142.856031][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.858363][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.861029][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.864268][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.872630][ T1148] veth1_macvtap: left promiscuous mode [ 142.874872][ T1148] veth0_macvtap: left promiscuous mode [ 142.877131][ T1148] veth1_vlan: left promiscuous mode [ 142.879202][ T1148] veth0_vlan: left promiscuous mode [ 142.939409][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 142.962832][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 143.377672][ T1148] IPVS: stop unused estimator thread 0...