last executing test programs: 13.559751782s ago: executing program 1 (id=1371): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x1) r0 = creat(&(0x7f0000000580)='./file2\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xb8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}]}, 0xb8}}, 0x0) (async) mount$nfs(&(0x7f0000000040)='%\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x20, &(0x7f0000000100)={[{'$:.\xc7\\\x9a'}, {'*&[)'}, {'}\\#'}, {}, {'*'}, {')+'}, {':@,{}#%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@pcr={'pcr', 0x3d, 0x1e}}, {@obj_type={'obj_type', 0x3d, '%\x96'}}]}) (async) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f00000000c0)={0x30, "58db8e2886c58dedae00f13cc17206c1c0dc504ae0ebea61dbf33843be189a6a1004eea6186435b4631012686b86ccf010c0de413adc834811ebcc33107b48f6fd3178493c6e694e73fa72b695e4cf1e47e6da7e03ec772868a2c65241d21058d4b193d0e1b56474a862f8aa99283cf8f507a54735c19b92c374eb97f52788c7"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x45) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2) 13.500274282s ago: executing program 1 (id=1372): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='rai', 0x3) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r0, &(0x7f00000007c0)='active', 0x6) 13.498640039s ago: executing program 1 (id=1374): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a000000850000000500000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3401) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x60000, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x5, 0x1}, 0x8, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ac}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) get_robust_list(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xffff, 0xfff2}, {0xffe0, 0xffff}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x2400c014) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x800, 0x0) sendfile(r8, r9, 0x0, 0x7fffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xb4, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfb, {}, [{0xa0, 0x1, [@m_connmark={0x9c, 0x1d, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0xffffffff, 0x6, 0x3, 0x6}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10040, 0xfffffe01, 0xffffffffffffffff, 0x10000, 0x3ef7cbf9}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x20000000, 0x4, 0xfffffffb}, 0x1}}]}, {0x17, 0x6, "ec88f8cc9527b479c6042fc8dfff6ed9dd6516"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xb4}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000200), &(0x7f0000000280)=r3}, 0x20) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) shutdown(r10, 0x1) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GPU_INFO(0xffffffffffffffff, 0xc0106440, &(0x7f0000000140)={0x0, 0x7fff, &(0x7f00000000c0)}) 13.409752084s ago: executing program 1 (id=1376): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0xa, 0x3, 0x0, 0x2}, 0x30, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=ANY=[@ANYBLOB="2c0000001800f1d1261d00000000df2502108004fc0200"/32], 0x2c}}, 0x0) landlock_restrict_self(r0, 0x2) r2 = socket$inet6(0xa, 0x2, 0x15) sendto$inet6(r2, 0x0, 0x0, 0x4000000, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) mount$bpf(0x0, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000400), 0x42, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000006800010003001000fdf6ff7f00000400000000000c000200010000001500000014000c80060001000200000008000300020000000600030001000000"], 0x33fe0}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (async) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) (async) landlock_create_ruleset(&(0x7f0000000080)={0x0, 0xa, 0x3, 0x0, 0x2}, 0x30, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=ANY=[@ANYBLOB="2c0000001800f1d1261d00000000df2502108004fc0200"/32], 0x2c}}, 0x0) (async) landlock_restrict_self(r0, 0x2) (async) socket$inet6(0xa, 0x2, 0x15) (async) sendto$inet6(r2, 0x0, 0x0, 0x4000000, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) (async) mount$bpf(0x0, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000400), 0x42, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000006800010003001000fdf6ff7f00000400000000000c000200010000001500000014000c80060001000200000008000300020000000600030001000000"], 0x33fe0}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) 13.299933329s ago: executing program 1 (id=1378): bpf$MAP_LOOKUP_BATCH(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10000}, 0x38) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) ioctl$BLKOPENZONE(r1, 0x40101286, &(0x7f0000000000)={0x3, 0xcba1}) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b00"/28, 0xfd99) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x8, 0x6, 0xe1, 0x6, 0xfc000004, 0x10001, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x7, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x2, 0x2, 0x5], [0x6, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x100005, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x60dd72ca, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0xf7dbebca9ce41145) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = accept4(r2, &(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x80, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000540)={'wg1\x00', &(0x7f0000000500)=@ethtool_pauseparam={0x12, 0x6, 0x7, 0x55}}) 13.100223236s ago: executing program 1 (id=1380): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [0x0, 0x3000000], 'wg2\x00', 'veth1_virt_wifi\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0xfffffffe, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 13.027595414s ago: executing program 32 (id=1380): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [0x0, 0x3000000], 'wg2\x00', 'veth1_virt_wifi\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0xfffffffe, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 9.479940128s ago: executing program 3 (id=1416): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x0, 0xc, 0x0, 0x7f, 0x4, 0xfc, 0x38}}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x90000, 0x0, 0x2}, 0x18) mknodat(r2, &(0x7f00000004c0)='./file0\x00', 0x80, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x20000000000, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x4000000001c00000, 0x8, 0x0, 0x4, 0x0, 0x1000000008000], 0x1, 0x3c4210}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000040)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) r10 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) 8.506690166s ago: executing program 3 (id=1441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)={0x20, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 8.429066107s ago: executing program 3 (id=1444): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 5.839862496s ago: executing program 3 (id=1494): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 'queue1\x00', 0x8001}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xbd, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @local, {[], "95fcfb390f1921ceb1949665441cac3b144ff1747a5e77936fb915c6c53038ddaf387acb315acbeec63b74fe5b491f65fc091bc31ae668fd765b56e8b33655ca68fe11e71bb52c88ef403184873fc7551d29e320df7882c8482108aeb4f4a4bb17ff4c463cabbf78ef0fb03bec00ab5b6a3239a1b9422d0c8904d6be62a7521900c2baf0bad214"}}}}}, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x185) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1', 0x1) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0xd, @vbi={0x8, 0x7fff, 0x2, 0x35315258, [0x0, 0xfffffff4], [0x5, 0x6], 0x108}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x1ff}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x800}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) chdir(&(0x7f00000003c0)='./bus\x00') removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/delay_retrans\x00', 0x2, 0x0) write(r4, &(0x7f00000000c0)='1', 0x1) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)={0x2d4, r5, 0x4, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2bc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '\\\xd9\xa5\xcb\x1d\t\xb0\x9f\xf9\x00\'\xf6\xb9\x9f\xa6\x02\x00{'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'workdir'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.@*#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'upperdir'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^I\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x200, 0x3, 0x0, 0x1, [{0x11c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '+!..},%%,:#-^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xfb\x0e@:%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'queue1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc7, 0x2, '-\x7ft\x00\x0e\xda\x14L\x92\n\x9b\xfc\x0f\xb8\xc48#\x06\xc6\xaeIF\x14r\x1f&\x1bk\x1cki\xea\x83G\xea=g@$\x9a\x1cU\x8c\xe1[\xc5\xf4\x9f\nL\xb9\xd4\xfd\x8b\x0e\x95n<\x8eCJ}\xdc\x03\x05\x1b\xf9/\xd3G\xd6\x86\x00\xa4\x87\xca\xbe\x99\x17\xf1\xb1\xf8\xcd:\x9e-\xae!\xdb\xe3\x1bMJ\xea\xde\x1d\xdd\x9e\b\x9d\\\x85\x1ad\x80\xd5\x10\xe9\xacb\xc6Y\xc5\x7fSE*=\x81\xdf\xae\x9f\xfe\xb9I\xd9\x02\xe3+\xe1\xa9\xfa\xf6\xe3\x8dr\xe4ue\x18\xb5\xabd\x96\x05\xd6\xcb\x8d\xf6\x14\aV\xc6od\x99\x93\xfc\x15\xbcl\xad\xa5\xd1\x85\xc3\x91\xf6\xdb?0\xaf\x17\x9c8\xda\x118\xa5\x97v./\x9aSe\x9d\x8a\\\b\xbf\xe0\xa6\xa7Z'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1d, 0x2, 'system.posix_acl_default\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':*-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'workdir'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x59}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'overlay\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*)!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'queue1\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "b018fe5caf2a0b3f543f0dcc84b59af241746a823a5dbeb81cd379fe2d613084f5e3dd0a360f6fe7b7cd"}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x2d4}}, 0x40814) r6 = open$dir(&(0x7f00000001c0)='./file2\x00', 0x420000, 0x80) move_mount(r6, &(0x7f00000004c0)='\x00', r2, &(0x7f0000000500)='./sys\x00', 0x0) mount$fuse(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f00000005c0), 0x1000, &(0x7f0000000680)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@blksize}], [{@fscontext={'fscontext', 0x3d, 'root'}}]}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x70bd27, 0x25dfdbfc, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4.920187774s ago: executing program 3 (id=1514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x20000050) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r2, 0x7, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "cd360000"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x40885) 4.827161724s ago: executing program 3 (id=1517): syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="0403592072e0f907295a1500ac73f438a7f625c5c6f20415bd42c005a91088ab40134ca0131753763ccd1bc089077458e6174b935b7a5c4609925bbb", @ANYRESHEX], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x54, 0x0, 0x0, {0x8, 0x1}, {0x4b, 0x2}, @rumble={0x101, 0xffff}}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x80048, &(0x7f0000000a00)=ANY=[@ANYBLOB="7472616e7301000000000000006f3d2aedde937448a0252267d3f49c9146b91363cc28043b5d2d92ce1fac17b887ec422b2d0c134ecfb70e5555660a91e7563d271a9238aca7f3da4998450ff6d590c5cc16936d3a9ca90c9443191036df49f7472d47e5024cd9e8ec269289dbe4c62157d3a32b27556e5bd63fbcd9ea302b", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',fsmagic=0x0000000000000003,\x00']) r4 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) splice(r4, &(0x7f00000001c0)=0x4, 0xffffffffffffffff, &(0x7f0000000340)=0x5, 0xfffffffffffffff2, 0x2) r5 = add_key$fscrypt_provisioning(&(0x7f0000000500), &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r1, @ANYRESOCT=r3], 0xe, 0xffffffffffffffff) keyctl$describe(0x6, r5, &(0x7f0000000840)=""/59, 0x3b) r6 = request_key(&(0x7f0000000380)='blacklist\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='\'/\x00', 0xfffffffffffffffe) r7 = add_key(&(0x7f0000000440)='.dead\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r6, r7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000000000010001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc0b45545, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000001004500001c000000000011907800000000000000c700144e2100089078"], 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r9, 0xee01) 4.718323241s ago: executing program 33 (id=1517): syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="0403592072e0f907295a1500ac73f438a7f625c5c6f20415bd42c005a91088ab40134ca0131753763ccd1bc089077458e6174b935b7a5c4609925bbb", @ANYRESHEX], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x54, 0x0, 0x0, {0x8, 0x1}, {0x4b, 0x2}, @rumble={0x101, 0xffff}}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x80048, &(0x7f0000000a00)=ANY=[@ANYBLOB="7472616e7301000000000000006f3d2aedde937448a0252267d3f49c9146b91363cc28043b5d2d92ce1fac17b887ec422b2d0c134ecfb70e5555660a91e7563d271a9238aca7f3da4998450ff6d590c5cc16936d3a9ca90c9443191036df49f7472d47e5024cd9e8ec269289dbe4c62157d3a32b27556e5bd63fbcd9ea302b", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',fsmagic=0x0000000000000003,\x00']) r4 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) splice(r4, &(0x7f00000001c0)=0x4, 0xffffffffffffffff, &(0x7f0000000340)=0x5, 0xfffffffffffffff2, 0x2) r5 = add_key$fscrypt_provisioning(&(0x7f0000000500), &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r1, @ANYRESOCT=r3], 0xe, 0xffffffffffffffff) keyctl$describe(0x6, r5, &(0x7f0000000840)=""/59, 0x3b) r6 = request_key(&(0x7f0000000380)='blacklist\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='\'/\x00', 0xfffffffffffffffe) r7 = add_key(&(0x7f0000000440)='.dead\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r6, r7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000000000010001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc0b45545, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000001004500001c000000000011907800000000000000c700144e2100089078"], 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r9, 0xee01) 1.659585485s ago: executing program 4 (id=1548): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f0000000600)={{[0xca13, 0x4, 0x2, 0xe]}, 0x0, 0x3, 0x7fff, 0x0, &(0x7f0000000480)=[{{@_ha_fsid={[0x8, 0x7]}, {0x5, 0x3, 0x0, 0x1}}, 0x3, 0x0, '/dev/adsp1\x00'}, {{@align=0xf465, {0x9, 0xdd6, 0x6, 0x5}}, 0x0, 0x0, '\x00'}, {{@align=0x80000000, {0xd, 0x9, 0x6, 0x81}}, 0xffff, 0x0, '\x00'}, {{@_ha_fsid={[0x7, 0x9]}, {0x1, 0xd8, 0x8, 0x8}}, 0x9, 0x0, '-[}}#!\\)w.}\x00'}, {{@align=0x100000001, {0x5, 0x8, 0x8000, 0x9}}, 0x42c187cf, 0x0, '&,%}]\x00'}, {{@_ha_fsid={[0x7, 0xffffffff]}, {0x6f, 0x2, 0x3, 0x400}}, 0x8, 0x0, ')[%\x00'}, {{@_ha_fsid={[0x2, 0x5]}, {0x0, 0x6, 0x7e, 0x6}}, 0x4, 0x0, '\xe4\x00'}, {{@_ha_fsid={[0x38e3, 0xb]}, {0x100, 0x800, 0x8, 0xe56b}}, 0x700, 0x0, '*$\x00'}, {{@align=0xa7, {0x9, 0x1, 0x1ff, 0x100000001}}, 0x0, 0x0, '+[\'#[^\v&\x00'}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000300004802c0001800c00010062697477697365001c0002800800014000000011080003403747000000000800024000000017050007406900000014000000110001000000000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x20008811}, 0x4000890) ppoll(&(0x7f00000002c0)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18) socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0xf06, &(0x7f0000000400)={0x0, 0x5962, 0x10000, 0xffffffff, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4110}, 0x1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x200000b1, 0x8a681) fadvise64(r7, 0x9, 0x2, 0x4) r8 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x4b162cd8, 0x141) ioctl$FE_SET_PROPERTY(r8, 0x40086f52, &(0x7f0000000880)={0x11, &(0x7f0000000680)=[{0x35, '\x00', @data=0x8, 0x5}, {0x1, '\x00', @buffer={"ed14b64c32c433a0f7580f68b136a20b432b94be353ceff95292936edadaa19b", 0x20}, 0xc42}, {0x2, '\x00', @data=0x1, 0x8}, {0x8, '\x00', @buffer={"e4881f0b8591b382ae5e2d4b5b0a671f8f98283935b054dfd48ad9249f342431", 0x20}, 0xcc}, {0x2a, '\x00', @st={0x4, [{0x2, @svalue=0x551a4e47}, {0x0, @svalue=0x57000000}, {0x1}, {0x3, @svalue=0x3}]}, 0xf86d}]}) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0xfce1) ioctl$TCFLSH(r5, 0x540b, 0x1) 1.609723902s ago: executing program 2 (id=1550): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {}, {0xfff1, 0xa}, {0x1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x10) 1.497842859s ago: executing program 2 (id=1551): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x2c, r4, 0x1, 0x72bd29, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e20, 0x200, @loopback, 0x1}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r7}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r7}}, 0x18) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xeb5, 0x41}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x40004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 1.398627205s ago: executing program 2 (id=1553): r0 = syz_open_dev$video(&(0x7f0000000180), 0x3, 0x1) r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60fc104600442f00fc000000000000000000000000000000ff02000000000000000000000000000124208100000000030000080000b37f5d4d0088be86ddffff100000000100000000000000080022eb0000"], 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0), 0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') open_by_handle_at(r2, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x1, 0x0, 0x105, 0xffffff7a, 0x4}}, 0x4202) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0xb, 0x32315258, 0x9, 0xe, 0x8, 0x5, 0xb, 0x0, 0x0, 0x0, 0x5}}) 1.339964173s ago: executing program 2 (id=1555): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) mount(&(0x7f0000000100)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='cifs\x00', 0x0, 0x0) 869.822068ms ago: executing program 0 (id=1562): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x2c, r4, 0x1, 0x72bd29, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e20, 0x200, @loopback, 0x1}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r7}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r7}}, 0x18) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xeb5, 0x41}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x40004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 868.995012ms ago: executing program 5 (id=1520): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x2c, r5, 0x1, 0x72bd29, 0x3, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e20, 0x200, @loopback, 0x1}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r8}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r8}}, 0x18) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xeb5, 0x41}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x40004) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtaction={0x68, 0x30, 0xb, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 780.266756ms ago: executing program 4 (id=1563): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x7000, 0x10000, 0xf, 0xf1, 0x23, 0xfd, 0xea, 0xd4, 0x0, 0xd9, 0xf6, 0x47}, {0xeeee0000, 0x1, 0xa, 0x19, 0x8, 0x3, 0x10, 0xb, 0x7, 0x4, 0x7, 0x45}, {0x70000, 0xdddd0000, 0xb, 0x2, 0x2, 0x2, 0x4, 0x9, 0x5, 0x1, 0xc4, 0x5}, {0xeeee3000, 0xffff1000, 0x805b134020ae36da, 0xf8, 0x3, 0x68, 0x9, 0x1, 0x6, 0x2, 0x8, 0x1}, {0xffffffff, 0xa000, 0x4, 0x5, 0x3, 0x9, 0xd, 0xa, 0x5, 0xc, 0x2c, 0x4b}, {0x8b000, 0xd000, 0xa, 0x0, 0x3, 0x9, 0x1, 0xc3, 0x4, 0x90, 0x2, 0x7}, {0xa000, 0xf000, 0x10, 0x82, 0x1, 0xfb, 0x2, 0x5, 0xfe, 0x1, 0x47, 0xf5}, {0x2000, 0x41000, 0xf, 0x5, 0xf9, 0x0, 0xa, 0x1, 0xb6, 0x1, 0xff, 0x7}, {0xfec00000, 0x2}, {0x80a0000, 0x8}, 0x4001000e, 0x0, 0x8080000, 0x100200, 0x6, 0xe000, 0xe6e70c00, [0x6, 0x401, 0x8, 0xc5]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000040)={{0x41000, 0xeeee0000, 0xa, 0x23, 0xe, 0xd, 0x1, 0x8, 0xd, 0xb, 0x3, 0x9}, {0x50000, 0x80a0000, 0x10, 0xe8, 0x6, 0x8, 0x8, 0x1, 0x7, 0xd6, 0x4, 0x7}, {0xfec00000, 0x58000, 0xd, 0x8, 0xb, 0xd, 0x9, 0x9, 0xe, 0x8, 0x5b, 0xf8}, {0x1, 0x5000, 0x9, 0x1, 0x6, 0x2, 0x9, 0x6, 0xaa, 0x0, 0x81, 0x8}, {0x4000, 0x30000, 0x10, 0x0, 0x2, 0xa, 0x1, 0x84, 0x40, 0x0, 0x0, 0x3}, {0x0, 0xeefe8000, 0xb, 0xb, 0x8, 0x7, 0x9, 0x4, 0x3, 0x9, 0x4, 0xe}, {0xeeef0000, 0xdddd0000, 0x8, 0x3, 0x1, 0x3, 0x8, 0x0, 0x2, 0x7, 0x80, 0x81}, {0xffff1000, 0x6000, 0x0, 0xea, 0x2, 0x1, 0x10, 0x2, 0xdc, 0x2, 0x8, 0x2}, {0x25000, 0xa}, {0xc000}, 0xe000001b, 0x0, 0x7000, 0x84, 0x6, 0x4400, 0xeeee4000, [0xfffffffffffffffa, 0x2, 0x1, 0x9]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0x4, 0x1a, 0x2, 0x40, 0xfb, 0x7, 0xd4, 0x0, 0x4, 0x7, 0x2}, {0xffff1000, 0x2, 0xd, 0xb, 0x8, 0x40, 0x6, 0x8, 0x5, 0xf, 0x3, 0xcc}, {0xeeee0000, 0xdddd1000, 0x4, 0x8, 0x2, 0x7, 0x4, 0x1, 0x8c, 0x9, 0x6, 0x5}, {0xeeef0000, 0x3000, 0xd, 0xf, 0x43, 0x46, 0x2, 0xd, 0x46, 0x3, 0xfc, 0x1}, {0x100000, 0x58000, 0x3, 0x3f, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6f, 0x1, 0xfb, 0x4, 0x80, 0x1, 0xfc}, {0x8080000, 0x2000, 0xc, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x1, 0x7, 0x0, 0x6}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x6, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x100000, 0x5}, {0xdddd1000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0x7, 0x0, 0x9000, [0x4, 0x402, 0x8, 0x1]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x7000, 0x10000, 0xf, 0xf1, 0x23, 0xfd, 0xea, 0xd4, 0x0, 0xd9, 0xf6, 0x47}, {0xeeee0000, 0x1, 0xa, 0x19, 0x8, 0x3, 0x10, 0xb, 0x7, 0x4, 0x7, 0x45}, {0x70000, 0xdddd0000, 0xb, 0x2, 0x2, 0x2, 0x4, 0x9, 0x5, 0x1, 0xc4, 0x5}, {0xeeee3000, 0xffff1000, 0x805b134020ae36da, 0xf8, 0x3, 0x68, 0x9, 0x1, 0x6, 0x2, 0x8, 0x1}, {0xffffffff, 0xa000, 0x4, 0x5, 0x3, 0x9, 0xd, 0xa, 0x5, 0xc, 0x2c, 0x4b}, {0x8b000, 0xd000, 0xa, 0x0, 0x3, 0x9, 0x1, 0xc3, 0x4, 0x90, 0x2, 0x7}, {0xa000, 0xf000, 0x10, 0x82, 0x1, 0xfb, 0x2, 0x5, 0xfe, 0x1, 0x47, 0xf5}, {0x2000, 0x41000, 0xf, 0x5, 0xf9, 0x0, 0xa, 0x1, 0xb6, 0x1, 0xff, 0x7}, {0xfec00000, 0x2}, {0x80a0000, 0x8}, 0x4001000e, 0x0, 0x8080000, 0x100200, 0x6, 0xe000, 0xe6e70c00, [0x6, 0x401, 0x8, 0xc5]}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000040)={{0x41000, 0xeeee0000, 0xa, 0x23, 0xe, 0xd, 0x1, 0x8, 0xd, 0xb, 0x3, 0x9}, {0x50000, 0x80a0000, 0x10, 0xe8, 0x6, 0x8, 0x8, 0x1, 0x7, 0xd6, 0x4, 0x7}, {0xfec00000, 0x58000, 0xd, 0x8, 0xb, 0xd, 0x9, 0x9, 0xe, 0x8, 0x5b, 0xf8}, {0x1, 0x5000, 0x9, 0x1, 0x6, 0x2, 0x9, 0x6, 0xaa, 0x0, 0x81, 0x8}, {0x4000, 0x30000, 0x10, 0x0, 0x2, 0xa, 0x1, 0x84, 0x40, 0x0, 0x0, 0x3}, {0x0, 0xeefe8000, 0xb, 0xb, 0x8, 0x7, 0x9, 0x4, 0x3, 0x9, 0x4, 0xe}, {0xeeef0000, 0xdddd0000, 0x8, 0x3, 0x1, 0x3, 0x8, 0x0, 0x2, 0x7, 0x80, 0x81}, {0xffff1000, 0x6000, 0x0, 0xea, 0x2, 0x1, 0x10, 0x2, 0xdc, 0x2, 0x8, 0x2}, {0x25000, 0xa}, {0xc000}, 0xe000001b, 0x0, 0x7000, 0x84, 0x6, 0x4400, 0xeeee4000, [0xfffffffffffffffa, 0x2, 0x1, 0x9]}) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0x4, 0x1a, 0x2, 0x40, 0xfb, 0x7, 0xd4, 0x0, 0x4, 0x7, 0x2}, {0xffff1000, 0x2, 0xd, 0xb, 0x8, 0x40, 0x6, 0x8, 0x5, 0xf, 0x3, 0xcc}, {0xeeee0000, 0xdddd1000, 0x4, 0x8, 0x2, 0x7, 0x4, 0x1, 0x8c, 0x9, 0x6, 0x5}, {0xeeef0000, 0x3000, 0xd, 0xf, 0x43, 0x46, 0x2, 0xd, 0x46, 0x3, 0xfc, 0x1}, {0x100000, 0x58000, 0x3, 0x3f, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6f, 0x1, 0xfb, 0x4, 0x80, 0x1, 0xfc}, {0x8080000, 0x2000, 0xc, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x1, 0x7, 0x0, 0x6}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x6, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x100000, 0x5}, {0xdddd1000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0x7, 0x0, 0x9000, [0x4, 0x402, 0x8, 0x1]}) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) (async) 779.395293ms ago: executing program 0 (id=1564): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x1a, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x101, 0x117, 0x0, 0x1, [@nested={0xc, 0x31c8, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @u32=0x4}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x1a, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x101, 0x117, 0x0, 0x1, [@nested={0xc, 0x31c8, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @u32=0x4}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) 777.531357ms ago: executing program 0 (id=1565): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8905, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)='&', 0x1}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(r4, 0x0, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0x2100) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 527.539552ms ago: executing program 0 (id=1566): ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x7) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000040)=0x10) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001540)={&(0x7f00000000c0)={0x1470, 0x14, 0x400, 0x70bd25, 0x25dfdbfe, {0x1f, 0x7f}, [@INET_DIAG_REQ_BYTECODE={0xe0, 0x1, "738239c1f458e00bde9186c6a4f94a642bf05430a30832686f277f90c77c4424354634a733c1b12826b011b8efddf43feadabe45f56771252d0c001b32e392c778d314e3dcc2bd66f4f08ab5fb321d4c1b26d9fbe946cac011a75cea0e3a6a4a27b4e67719fcaabb08c1d987cbf94112a86023e80d7f3f43b56e9bbbd06b21bb8f546270fbca979db6533ba8d0d056fead9645d4652cc396d2d9e03b4b69396374ee932a904b130799e1f337cd74c985f691dc0804d613fb65dbc22ec3ccc74b2f3b2c2c747f279382dddf2f9a28f1bf4adbe7a18dc26bb47d9eb9f2"}, @INET_DIAG_REQ_BYTECODE={0xd6, 0x1, "604a6d3809af9d846fb18423b2c95912f89b0fb0b3ce993559171649e748fb6286ea3e31b0d8831be3cc76b7537e537e6476c30691acb953c12f20c000288d38638ea17af3de13b7fe8cd57f7b3c49ad437bc15c7d1743aaba3db6867adfcd6a1aee79e6c42e55c5d4dc29a3764ac7bcda9a78983cf45a4691b2c5f79b6e7ce4ef8c9e0a639936bd4496fbd4594daec83b689b2872fc4292ec0f6891f1952dec82c5c9f253dab2a6c8dc8a5ca89276b145a0bf77760d26b0719f161d01c05b13c9492a77733d506be9605ec16f889e7f8566"}, @INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "afe133ddd9eb92632a6da9a9e3703d9b4cfa2e9e90574a31e8a449e4c4c6416bec119bc46a66f34b26052d4ffd33f45dd51d082924f76fb655ace760ee90838cb27e63f53feed15ba17c4a57197e7b57e6368128390902b4bb616fb4df235e4ff81257a9d692b341eaab01a3a7fa1ea17ba170a5c6c67b12438d4b75470f8372051619ee239c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "8266cfbba7b07924e7cbeb73734d5f7c1e20106573012a2a7fe9cd007dcef358a41b85e00c35ab0f5cc65fd1149294d172d2c1b64e0b1240f98f93e36f6e2a4c5099ac544adcec5cd1dc6fec32772d3b1880e7b2c2fabf1d2420668a9421637cde6bfdb1666dd2336a1ce7350fb38ff53885e4ac56f89bc90b973c85f79f634be8f6b7970e7ada74ef824cb54c38ede9ed99dfd8561c664f5a20abaca1e46fe1827b197c14bde1f1c317fd391f8b32f0e5cf0cd5982186418d99e603e1e5f8fa67887276c47ff22d7a3580ad63a6535e527e593e85aa02487468452fe12fe0974761013d7e933b4869206d9b"}, @INET_DIAG_REQ_BYTECODE={0x29, 0x1, "99d89307e33a55fb99dc5cb0c65525e494f2248a39cbb87caf7ca642444fba1c9b28d2bdfa"}, @INET_DIAG_REQ_BYTECODE={0x62, 0x1, "b27f1054a13bf332eab87da8d267317740d584055d6f46102cf6ac37eafec25fb60d88af868ac042248b8d7c423cd75f30cba864944367910162663c9f468adaac5df26a6d46bb8eeb9e3567ebdc41250cbaa07138b18f632b656da2e601"}, @INET_DIAG_REQ_BYTECODE={0x92, 0x1, "6f42294252cdf416ba5f78ee92c7d5482a88a3a6760bcc091d6fce7b162a40c39f40a7b5e1780ee1d0d1f14d615be6eea82c8b1c2adae3b21f2bc6824903a52d353bf636f7e2f6c92c186b698112e7f0260f2157f75dcc180d99ab1b0c5037ce901aa539b34993a0be9a2ed42a13a55d89cded4f1958a5af5d6c94a110c66ba04d826ff59b310732c5b2ee894311"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1470}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000020) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r1, &(0x7f00000015c0)="4f8e664650a939f1443e7ec64752fff6abb90be4c67982ef8b2b38d6ed80d7a7a90684ad797e49e9efe401beabbd56da81411f9d610f5397016046c34b86b1423df119082786ec6cccae8a5a45ed096a06553123d2b900c333e95e3ad51b34706ac0c5c4306042f80012fa2bcd", 0x6d, 0x10000, &(0x7f0000001640)={0x2, 0x4e23, @private=0x80000000}, 0x10) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000001680)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_open_procfs$namespace(r2, &(0x7f0000001700)='ns/time_for_children\x00') r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000001980)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000001940)={&(0x7f00000017c0)={0x14c, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x80000000}, {0xc, 0x90, 0x401}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1000}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xff}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0xdac}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2}, {0xc}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000001b80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a40)={0x100, r5, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x19}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x44010) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x48, r5, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4f4b4a8d86d8f59f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x380}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x452a}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000040) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001d00), 0x104c0, 0x0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001d40), 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000001d80)={0xffffffffffffffff, r7}) read$dsp(r7, &(0x7f0000001dc0)=""/4096, 0x1000) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000002ec0)={r7, &(0x7f0000002dc0)='\x00', 0x101001, &(0x7f0000002e00)={@_ha_fsid={[0x2b8, 0x8]}, {0xfff9, 0x2, 0x7, 0x100000000}}, 0x3, &(0x7f0000002e40), &(0x7f0000002e80)=0x9}) accept$inet(r8, &(0x7f0000002f00), &(0x7f0000002f40)=0x10) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000002fc0)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000003080)=@multiplanar_overlay={0x2, 0xe, 0x4, 0x4000, 0xff, {r10, r11/1000+60000}, {0x3, 0x1, 0xc, 0x2, 0x4, 0xcf, "ce0fdf65"}, 0x0, 0x3, {&(0x7f0000003000)=[{0xa, 0x9, {0x8077}, 0xd5b6}, {0x1, 0x5, {0x6}, 0x4}]}, 0x3ff, 0x0, r6}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003100)={{0x7f, 0x45, 0x4c, 0x46, 0x41, 0x10, 0x6e, 0x5, 0x8, 0x2, 0x3, 0x6, 0x373, 0x40, 0xea, 0x3, 0x200, 0x38, 0x2, 0x81, 0x6, 0x8}, [{0x60000006, 0x3e, 0x4, 0x8311, 0xfffffffffffff758, 0xfffffffffffffffb, 0x81, 0xffffffffffffffff}, {0x3, 0x380000, 0x229, 0x80000000, 0xfc, 0x3b, 0x5, 0xf8}], "beaf4f1d59742cce225d860cfa768a3849176423425bb4e08c43538cf003651822a897cda16c13ce250b9a6b98b139d7b646fb48706d5bef29431e21fb2fe84e7fba0ba3d748fce8caffd592cd488a97d6d4b9b7eb83db2524e8ad0305c4f06ea3d56dbd1dfab3f01572dbdbafdc6ae2ae56551531f8bf4960c944712ddb031094f18613f471e59af6d200e9bcf20fd4edf4330ebe37e2e5a929eaf6024a6588b4c658c8150815af34c12998b0640f186aa136e758a68bd35d14aded2abbec131950d6f1ed68d1540bb2b032606214d7bc68b23684", ['\x00', '\x00', '\x00', '\x00']}, 0x585) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003700), r8) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r12, &(0x7f0000003800)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003740)={0x70, r13, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2c}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004}, 0x40040884) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000003880), r12) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r14, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x1c, r15, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) 526.5403ms ago: executing program 0 (id=1567): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000000c0)="3c40a7eb", 0x4}], 0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {}, {0xfff1, 0xa}, {0x1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x10) 524.124331ms ago: executing program 4 (id=1568): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0xe, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f54016d1a85a056f5d759ded130e04d528539f3d328973747a75d1f3d000017deb7d6193b3e7772fd29f35239d200000000008000", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}}) dup(r1) (async) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r2, 0x0) madvise(&(0x7f0000049000/0x3000)=nil, 0x3011, 0x16) syz_io_uring_setup(0x16e8b, &(0x7f0000000240)={0x0, 0x0, 0x2000}, &(0x7f0000000440), &(0x7f0000000080), &(0x7f0000000000)) 500.489306ms ago: executing program 2 (id=1569): r0 = io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x277}) r1 = syz_io_uring_setup(0x3cdb, &(0x7f0000000600)={0x0, 0x469b, 0x1, 0x3, 0x1ef, 0x0, r0}, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000440)={0x2, 0x4, 0x27b0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)="870ace6033bcd4d08d856851d3ebac76a650364508db46be0114bf6d320060854329c0ae9fa18095bb257d51850f92a28834e5bb53e04d0f6c3b99ba36c9d1974bf0d2", 0x43, 0x13, 0x0, 0x11}, &(0x7f0000000400)={&(0x7f0000000880)="3ee9abc4dcc2bb4a00d43e00d55887764164d3e96dd63c2cfa67f8c397c7d81b8d64f93ffe1dca2d58cd2554764ffd4170ff65239d70ed063fcf1a22c81e62d8ca16be76e04543b9baf09a1a2cdfef7fe595202674cc4dff1cd32693b07cb3cebb870fc3d3724b1bf629103df5abe73c32ab2c43c35f4522744e0abbfb1f3b621d1ebecc8a5f6d2dd403e8beb17b7b1901d42f68c2b444fe413c4324df0f33302318ecb02e84563df59744241f99d214ddfb976c2f794199b1340970ae8ff1777549bb1989ba95cffb55c7147c5cc36be5e6ec6297f92f0c310caf54c315567340e7749cadba516bb661ab56a76c77e7caa64b715fb74260a956ff3358b4256608fa509e9efa7b608d6d8f6f98df1f608ab989b8bf9e2f94fb923d87bf4f96e7ecf215d6597236e1233971938ec5628f8963b6c28989b538beeb518c890a507e6853d8262fad50754481b25a928967973c0bdcae84f7f2c41c3a204f3b321c", 0x15f, 0x0, 0x6, 0x7}, {0x103, 0x0, 0x7}, 0x0, 0x7bf}, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r2, 0xc0186445, &(0x7f0000000340)={0x2, 0x2}) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01864c1, &(0x7f0000000080)={r3}) chdir(&(0x7f0000000540)='./cgroup\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') pread64(r5, &(0x7f0000000080)=""/237, 0xed, 0x5) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x3, 0x0, 0x0, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000000040)={'sit0\x00', 0x0}) fstat(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r7, r8, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 428.41002ms ago: executing program 0 (id=1570): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14, 0x80800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x10}}]}, 0x38}}, 0x4080) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0x0, 0xfff2}, {0x0, 0xa}}}, 0xa}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048000) recvfrom$packet(r0, &(0x7f00000007c0)=""/131, 0x83, 0x12120, &(0x7f0000000880)={0x11, 0x6, r2, 0x1, 0xfb, 0x6, @remote}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r3, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@llc={0x4, {@llc={0xff, 0x0, "a8"}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$sock(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="ad3916e0538690c70394b36c8f1a0b882997b9943f92a6e2999dba8889159c1491c3cfba8f9eaa98c1028bf8aaccddceaeff67dafc4b9626c6dd48f39e71a738bf8a4c551c87388c8fc7b6f37573f8c5b33ca9208caaee37614d6bfe5670bd63674509a4ff11f53fea73bb7ad45614bff1b7cd6b0f872cf48ee1b31dec49a29ffda78832a55b931646872f0425a4bb97ec", 0x91}, {&(0x7f0000000400)="0ab1f3dd4609c08232010a39444e617413ee39a13114a54e162a377b3795c9b15a83a59aaf2978e1d287c3002657b3f5baa2e5fa1e6c4079bbf33314f2025663245ecefaca290acfc62c77925a3dadef68f94d54392ad5452ad8b8578ebd5e5e7eca39b1419b9cd0be44a227558a9e3dd57794453fefd6ae1e1d7403fff84bb81598b3190014e735319be80fb8b8def57726fbe9470e6ad2ad255d4918b128eb4f8082", 0xa3}, {&(0x7f00000004c0)="8f016fb6e14e9a471e936e5f63721b1457ae09e884c0b6d657dc381f2624d6ed43f7ac4eeda0b470bb549c98e438016c87e95836162b4a716051192b07dd8146d0d59efdac554b66b7e73b4f512abddfa69a46b9926456792ec9a298b006ff2fec5c3000924658d4a011751d006ab72d954f894c4db793c1346aad8d1a", 0x7d}, {&(0x7f0000000540)="957ead6aba879f777adccca884173d93247769f3a0649639b6a529ad5a4864007d924bf759beb6dfe1ea0267f3a6aa02348ac83bb9a2ff03eae625961fa1631f40aa7e748fc62679c316bb8d99d1f91b6e2f584a63ad5d5035f7ece62cc74431fe39ded8866892a673f43c2dd1d7c8ba72f07ebb80c299d9f8d68d0f63f464ca7a334918e1af686f8ac5f5ef5b3addbf61ca1366b1", 0x95}, {&(0x7f0000000600)="209085", 0x3}, {&(0x7f0000000640)="4bf5bcf329197a31faccb6ab63c8e629b98959d212b8d71638", 0x19}], 0x6}, 0x4010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3bf0960d8bfa1045}]}}]}, 0x64}}, 0x44080) mount(&(0x7f0000000100)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='cifs\x00', 0x0, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000140), 0x8001, 0x103000) getsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f00000008c0)=""/104, &(0x7f0000000940)=0x68) ioctl$HIDIOCINITREPORT(r9, 0x4805, 0x0) 330.031602ms ago: executing program 2 (id=1571): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', r3, 0x8, 0x20, 0x1, 0x7fff, {{0xe, 0x4, 0x2, 0x8, 0x38, 0x68, 0x0, 0xcf, 0x2f, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x1c, 0x30, 0x3, 0x7, [{@broadcast, 0x3}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x892}]}, @timestamp={0x44, 0x8, 0x6, 0x0, 0x8, [0x35]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r6, 0x200, 0xfffffffe, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x20000844) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='vlan0\x00', 0x10) 329.791195ms ago: executing program 4 (id=1572): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0xf, 0x0, 0x0, 0x40, 0x8, 0x9, 0x6, 0x1, 0x3, 0xfffffffa, 'syz1\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000000)={0xd, 0x1, {0xffffffffffffffff}, {0xee01}, 0x6, 0xc}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000240)=r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f00000000c0), 0x4) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000001c0)={0x1, 0x1}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000440), 0x4002, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000480)={0x2, 0xffffffffffffffff}) ioctl$USBDEVFS_BULK(r6, 0xc0185502, 0xffffffffffffffff) mkdirat(r8, &(0x7f00000004c0)='./file0\x00', 0x122) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x9c, r5, 0x800, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40010}, 0x4004000) 218.990441ms ago: executing program 4 (id=1573): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x2c, r4, 0x1, 0x72bd29, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e20, 0x200, @loopback, 0x1}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r7}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r7}}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtaction={0x68, 0x30, 0xb, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 0s ago: executing program 4 (id=1574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000000c14010027bd7000fddbdf250800010012c0a428080003000100000008003d0005000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r3 = syz_usbip_server_init(0x5) write$usbip_server(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="000000017f"], 0x30) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @exit], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c00, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0, @in=@multicast2, 0x1, 0x716, 0x4e23, 0x7, 0x0, 0x0, 0x0, 0x3a}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4d8, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x192, 0x1, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0xffffffffffffffff, 0x900, 0x8000000000000000}, {0x3, 0x8}, 0x70bd2c, 0x3507, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r5 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMLOCK(r5, 0x40084d05, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) recvmmsg(r6, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}], 0x1}, 0x2}], 0x1, 0x100, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060086dd0000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=@getsa={0xf8, 0x12, 0x300, 0x70bd29, 0x25dfdbfd, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x2, 0x32}, [@iptfs_reorder_window={0x6, 0x25, 0x1}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0xa}}, @algo_auth_trunc={0x99, 0x14, {{'rmd320-generic\x00'}, 0x268, 0x100, "c72015ea8ab3aa12693901b389e0d9ddeebf7b12f9fe121b903e3d699abcee8f9c996dcf6d245517acce7e409095e126d0020cf6721ae985888428060112db754e08c6ad6a4bb27ed67dc6fd61"}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000080) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x1, 0xc000, 0x4, 0xfb, 0x1, 0x8, 0x3, 0xa, 0x2, 0x6, 0x12, 0x5, 0x40}, {0x8, 0x2, 0x1, 0x4d, 0x7, 0x0, 0x44, 0x20, 0x9, 0xc, 0x6, 0x6f, 0x20e}, {0x0, 0x5, 0x38, 0x4, 0x84, 0x7, 0x3, 0x50, 0xc, 0x2, 0x7, 0x8, 0x20024a9}], 0xdfffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000001, 0xd4, 0x801, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x3, 0x206, 0xf, 0x5, 0x8000000000000006, 0x3, 0x48000000000, 0x6, 0xf73c], 0x80a0000, 0x40}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 0s ago: executing program 0 (id=1575): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f00000000c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x0) socket$inet6(0xa, 0x2, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000001dc0)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0xfeff9a7f, 0x42) syz_fuse_handle_req(r2, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xfffffffeffffffff, {0x5, 0x3, 0x4, 0x4080000000004, 0xfffffffd, 0x6, {0x2, 0xfff, 0x808, 0x9, 0x8, 0x81, 0xfaae, 0x6, 0x5, 0x4000, 0xe44, r4, 0x0, 0x4, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r5, &(0x7f0000003240)={0x2020}, 0x2020) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r8, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) kernel console output (not intermixed with test programs): 34.355994][ T10] usb 8-1: Product: syz [ 134.357779][ T10] usb 8-1: Manufacturer: syz [ 134.359778][ T10] usb 8-1: SerialNumber: syz [ 134.386125][ T10] usb 8-1: config 0 descriptor?? [ 134.390166][ T10] ums-onetouch 8-1:0.0: USB Mass Storage device detected [ 134.440230][ T7834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.711'. [ 134.594901][ T60] usb 8-1: USB disconnect, device number 15 [ 134.871979][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 135.136753][ T7844] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7844 comm=syz.3.713 [ 135.230625][ T7850] team0: Unable to change to the same mode the team is in [ 136.665914][ T7874] jffs2: notice: (7874) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 136.709683][ T42] audit: type=1400 audit(1787245752.058:582): avc: denied { write } for pid=7872 comm="syz.2.727" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.716676][ T7881] team0: No ports can be present during mode change [ 136.729384][ T7879] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 136.992706][ T42] audit: type=1400 audit(1787245752.308:583): avc: denied { setopt } for pid=7894 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.205871][ T42] audit: type=1400 audit(1787245752.558:584): avc: denied { mount } for pid=7896 comm="syz.1.735" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 137.321446][ T7905] dummy0: left promiscuous mode [ 137.323283][ T7905] dummy0: left allmulticast mode [ 137.372931][ T7905] v: left promiscuous mode [ 137.378122][ T7905] v: entered promiscuous mode [ 137.639063][ T7908] team0: No ports can be present during mode change [ 137.907328][ T7924] __nla_validate_parse: 4 callbacks suppressed [ 137.907346][ T7924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.745'. [ 137.938856][ T7924] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7924 comm=syz.1.745 [ 138.067969][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 138.125902][ T7931] team0: No ports can be present during mode change [ 138.788918][ T7946] CIFS: Attempting to mount //127.0.0.1/share [ 138.957846][ T7951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.756'. [ 139.008921][ T7955] lo speed is unknown, defaulting to 1000 [ 139.104591][ T42] audit: type=1400 audit(1787245754.458:585): avc: denied { write } for pid=7954 comm="syz.1.758" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 139.113411][ T42] audit: type=1400 audit(1787245754.458:586): avc: denied { open } for pid=7954 comm="syz.1.758" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 139.403352][ T42] audit: type=1400 audit(1787245754.748:587): avc: denied { write } for pid=7968 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 139.406566][ T7975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.765'. [ 139.545825][ T40] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 139.621885][ T7946] CIFS: VFS: Error connecting to socket. Aborting operation. [ 139.624590][ T7946] CIFS: VFS: cifs_mount failed w/return code = -4 [ 139.693576][ T40] usb 6-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 139.697338][ T40] usb 6-1: config index 0 descriptor too short (expected 1572, got 36) [ 139.699873][ T40] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.705276][ T40] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.707961][ T40] usb 6-1: Product: syz [ 139.709380][ T40] usb 6-1: Manufacturer: syz [ 139.710925][ T40] usb 6-1: SerialNumber: syz [ 139.721638][ T40] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input15 [ 139.779765][ T7981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.767'. [ 139.917103][ T5121] bcm5974 6-1:1.0: could not read from device [ 139.934518][ T40] bcm5974 6-1:1.0: could not read from device [ 139.950183][ T5121] bcm5974 6-1:1.0: could not read from device [ 139.962630][ T40] input: failed to attach handler mousedev to device input15, error: -5 [ 139.974816][ T40] usb 6-1: USB disconnect, device number 14 [ 139.979948][ T5121] bcm5974 6-1:1.0: could not read from device [ 139.988215][ T7991] netlink: 128 bytes leftover after parsing attributes in process `syz.0.772'. [ 139.991976][ T7991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.772'. [ 140.019341][ T5736] udevd[5736]: Error opening device "/dev/input/event4": No such file or directory [ 140.029511][ T5736] udevd[5736]: Unable to EVIOCGABS device "/dev/input/event4" [ 140.032934][ T5736] udevd[5736]: Unable to EVIOCGABS device "/dev/input/event4" [ 140.036066][ T5736] udevd[5736]: Unable to EVIOCGABS device "/dev/input/event4" [ 140.039161][ T5736] udevd[5736]: Unable to EVIOCGABS device "/dev/input/event4" [ 140.124542][ T7997] CIFS: Attempting to mount //127.0.0.1/share [ 140.128838][ T7997] CIFS: VFS: Error connecting to socket. Aborting operation. [ 140.131676][ T7997] CIFS: VFS: cifs_mount failed w/return code = -101 [ 140.192635][ T8004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.779'. [ 140.209650][ T8001] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50000 [ 140.216533][ T8001] flags: 0xfff10000000014(referenced|dirty|node=0|zone=1|lastcpupid=0x7ff) [ 140.220589][ T8001] raw: 00fff10000000014 0000000000000000 dead000000000122 0000000000000000 [ 140.226688][ T8001] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 140.229759][ T8001] page dumped because: unmovable page [ 140.231705][ T8001] page_owner tracks the page as allocated [ 140.235974][ T42] audit: type=1400 audit(1787245755.588:588): avc: denied { read } for pid=5118 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 140.240046][ T8001] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5720, tgid 5720 (syz-executor), ts 47553717874, free_ts 0 [ 140.244931][ T42] audit: type=1400 audit(1787245755.588:589): avc: denied { search } for pid=5118 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.257216][ T8001] post_alloc_hook+0xfd/0x120 [ 140.260235][ T42] audit: type=1400 audit(1787245755.608:590): avc: denied { write search } for pid=5118 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.260893][ T8001] get_page_from_freelist+0xf46/0x3500 [ 140.269659][ T42] audit: type=1400 audit(1787245755.608:591): avc: denied { add_name } for pid=5118 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.271380][ T8001] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 140.278964][ T42] audit: type=1400 audit(1787245755.608:592): avc: denied { create } for pid=5118 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.282151][ T8001] alloc_pages_mpol+0x1fb/0x540 [ 140.288737][ T42] audit: type=1400 audit(1787245755.608:593): avc: denied { append open } for pid=5118 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.288787][ T42] audit: type=1400 audit(1787245755.608:594): avc: denied { getattr } for pid=5118 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.307131][ T8001] alloc_pages_noprof+0x1a/0x160 [ 140.310846][ T8001] __vmalloc_node_range_noprof+0xf9a/0x1630 [ 140.313235][ T8001] vmalloc_user_noprof+0x9e/0xe0 [ 140.314996][ T8001] kcov_ioctl+0x4d/0x760 [ 140.316550][ T8001] __x64_sys_ioctl+0x18e/0x210 [ 140.318238][ T8001] do_syscall_64+0x123/0x790 [ 140.319938][ T8001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.321811][ T8001] page_owner free stack trace missing [ 140.412321][ T5740] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 140.895614][ T8037] netlink: 'syz.0.793': attribute type 1 has an invalid length. [ 140.926411][ T8037] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.985197][ T8039] netlink: 'syz.0.793': attribute type 10 has an invalid length. [ 140.987706][ T8039] netlink: 40 bytes leftover after parsing attributes in process `syz.0.793'. [ 141.617520][ T8037] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 141.621197][ T8039] dummy0: entered promiscuous mode [ 141.712641][ T5776] bond1: (slave dummy0): link status up again after 0 ms [ 141.718772][ T5776] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 141.732915][ T5776] bond1: (slave dummy0): link status up again after 0 ms [ 141.755434][ T5776] bond1: (slave dummy0): link status up again after 0 ms [ 141.772689][ T5776] bond1: (slave dummy0): link status up again after 0 ms [ 141.792642][ T5776] bond1: (slave dummy0): link status up again after 0 ms [ 141.812701][ T5776] bond1: (slave dummy0): link status up again after 0 ms [ 141.833606][ T5776] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 141.836685][ T5776] bond1: (slave dummy0): link status up again after 0 ms [ 141.852814][ T5776] bond1: (slave dummy0): link status up again after 0 ms [ 141.874958][ T5776] bond1: (slave dummy0): link status up again after 0 ms [ 141.892859][ T5776] bond1: (slave dummy0): link status up again after 0 ms [ 142.105411][ T8039] bond1: (slave dummy0): Removing an active aggregator [ 142.115695][ T8039] bond1: (slave dummy0): Releasing backup interface [ 142.139125][ T8055] team0: No ports can be present during mode change [ 142.144533][ T6951] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 142.198773][ T5740] Bluetooth: hci0: unexpected event for opcode 0x0007 [ 142.313104][ T6951] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 142.320598][ T6951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.327585][ T6951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.334771][ T6951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.345766][ T6951] usb 6-1: config 0 descriptor?? [ 142.393080][ T40] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 142.543131][ T40] usb 8-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 142.552439][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.556211][ T40] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 142.562688][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.568722][ T40] usb 8-1: config 0 descriptor?? [ 142.753938][ T6951] hid_parser_main: 5 callbacks suppressed [ 142.753952][ T6951] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 142.759362][ T6951] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 142.763764][ T6951] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.0005/input/input16 [ 142.794697][ T6951] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 142.953112][ T24] usb 6-1: USB disconnect, device number 15 [ 142.987744][ T40] aquacomputer_d5next 0003:0C70:F00B.0006: unknown main item tag 0x0 [ 143.000225][ T40] aquacomputer_d5next 0003:0C70:F00B.0006: unknown main item tag 0x0 [ 143.007024][ T40] aquacomputer_d5next 0003:0C70:F00B.0006: unknown main item tag 0x0 [ 143.010259][ T40] aquacomputer_d5next 0003:0C70:F00B.0006: unknown main item tag 0x0 [ 143.014135][ T40] aquacomputer_d5next 0003:0C70:F00B.0006: unknown main item tag 0x0 [ 143.017537][ T40] aquacomputer_d5next 0003:0C70:F00B.0006: unknown main item tag 0x0 [ 143.020746][ T40] aquacomputer_d5next 0003:0C70:F00B.0006: unknown main item tag 0x0 [ 143.025033][ T40] aquacomputer_d5next 0003:0C70:F00B.0006: unknown main item tag 0x0 [ 143.034658][ T40] aquacomputer_d5next 0003:0C70:F00B.0006: hidraw1: USB HID v0.20 Device [HID 0c70:f00b] on usb-dummy_hcd.3-1/input0 [ 143.082828][ T8072] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 143.087185][ T8072] CIFS: Attempting to mount //127.0.0.1/share [ 143.181068][ T8057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.184616][ T8057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.194874][ T8057] netlink: 592 bytes leftover after parsing attributes in process `syz.3.801'. [ 143.202340][ T24] usb 8-1: USB disconnect, device number 16 [ 143.527344][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.808'. [ 143.736619][ T8083] team0: No ports can be present during mode change [ 143.913131][ T8072] CIFS: VFS: Error connecting to socket. Aborting operation. [ 143.916530][ T8072] CIFS: VFS: cifs_mount failed w/return code = -4 [ 144.206549][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 144.206569][ T42] audit: type=1400 audit(1787245759.558:599): avc: denied { read } for pid=8098 comm="syz.2.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.082222][ T8113] CIFS: Attempting to mount //127.0.0.1/share [ 145.129161][ T8115] team0: No ports can be present during mode change [ 145.279151][ T42] audit: type=1400 audit(1787245760.628:600): avc: denied { bind } for pid=8120 comm="syz.1.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 145.422668][ T149] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 145.505671][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'. [ 145.823124][ T149] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 145.827625][ T149] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 145.908892][ T8113] CIFS: VFS: Error connecting to socket. Aborting operation. [ 145.912116][ T8113] CIFS: VFS: cifs_mount failed w/return code = -4 [ 145.950023][ T5740] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 146.174661][ T149] usb 8-1: can't read configurations, error -61 [ 146.312614][ T149] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 146.335308][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.833'. [ 146.338115][ T8144] netlink: 32 bytes leftover after parsing attributes in process `syz.1.833'. [ 146.374760][ T8148] CIFS: Attempting to mount //127.0.0.1/share [ 146.377742][ T8148] CIFS: VFS: Error connecting to socket. Aborting operation. [ 146.380179][ T8148] CIFS: VFS: cifs_mount failed w/return code = -111 [ 146.463104][ T149] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 146.467704][ T149] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 146.470869][ T149] usb 8-1: can't read configurations, error -61 [ 146.477127][ T149] usb usb8-port1: attempt power cycle [ 147.034808][ T149] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 147.064068][ T149] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 147.068491][ T149] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 147.071253][ T149] usb 8-1: can't read configurations, error -61 [ 147.202936][ T149] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 147.224231][ T149] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 147.231746][ T149] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 147.239246][ T149] usb 8-1: can't read configurations, error -61 [ 147.246499][ T149] usb usb8-port1: unable to enumerate USB device [ 147.255553][ T42] audit: type=1800 audit(1787245762.608:601): pid=8159 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.838" name="file" dev="configfs" ino=18435 res=0 errno=0 [ 147.256182][ T8159] mass_storage.0/lun.0: unable to open backing file: fil [ 147.480606][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 147.484582][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'. [ 147.487019][ T8178] team0: No ports can be present during mode change [ 147.682662][ T40] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 147.833315][ T40] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 147.837272][ T40] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.840643][ T40] usb 7-1: config 0 has no interfaces? [ 147.843440][ T40] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.846638][ T40] usb 7-1: config 0 has no interfaces? [ 147.849146][ T40] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.852448][ T40] usb 7-1: config 0 has no interfaces? [ 147.856946][ T40] usb 7-1: string descriptor 0 read error: -22 [ 147.858918][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.863555][ T40] usb 7-1: config 0 descriptor?? [ 148.097837][ T8174] can: request_module (can-proto-0) failed. [ 148.102955][ T40] usb 7-1: USB disconnect, device number 13 [ 148.582796][ T149] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 148.703730][ T8201] futex_wake_op: syz.1.851 tries to shift op by -1; fix this program [ 148.733166][ T149] usb 8-1: Using ep0 maxpacket: 32 [ 148.736736][ T149] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 148.741626][ T149] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 148.745793][ T149] usb 8-1: config 0 has no interface number 0 [ 148.748499][ T149] usb 8-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 148.752821][ T149] usb 8-1: config 0 interface 184 has no altsetting 0 [ 148.757873][ T149] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.761368][ T149] usb 8-1: Product: syz [ 148.763271][ T149] usb 8-1: Manufacturer: syz [ 148.765249][ T149] usb 8-1: SerialNumber: syz [ 148.804513][ T149] usb 8-1: config 0 descriptor?? [ 148.808231][ T8185] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 148.902278][ T42] audit: type=1400 audit(1787245764.248:602): avc: denied { create } for pid=8205 comm="syz.2.852" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 148.967172][ T42] audit: type=1400 audit(1787245764.318:603): avc: denied { unlink } for pid=5723 comm="syz-executor" name="file0" dev="tmpfs" ino=1055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 149.020429][ T8185] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 149.176675][ T8213] netlink: 52 bytes leftover after parsing attributes in process `syz.2.855'. [ 149.231727][ T149] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 149.232946][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 149.235910][ T149] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 149.244763][ T149] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 149.249575][ T149] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -61 [ 150.603927][ T8232] lo speed is unknown, defaulting to 1000 [ 151.004762][ T1478] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 151.015663][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'. [ 151.022033][ T8240] team0: No ports can be present during mode change [ 151.140385][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 151.163422][ T1478] usb 7-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 151.168211][ T1478] usb 7-1: config index 0 descriptor too short (expected 1572, got 36) [ 151.171010][ T1478] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.176821][ T1478] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.179924][ T1478] usb 7-1: Product: syz [ 151.181315][ T1478] usb 7-1: Manufacturer: syz [ 151.182862][ T1478] usb 7-1: SerialNumber: syz [ 151.196700][ T1478] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input17 [ 151.389048][ T42] audit: type=1400 audit(1787245766.738:604): avc: denied { read } for pid=8231 comm="syz.2.862" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 151.450589][ T5121] bcm5974 7-1:1.0: could not read from device [ 151.459633][ T1478] bcm5974 7-1:1.0: could not read from device [ 151.466156][ T5121] bcm5974 7-1:1.0: could not read from device [ 151.469960][ T1478] input: failed to attach handler mousedev to device input17, error: -5 [ 151.479149][ T5121] bcm5974 7-1:1.0: could not read from device [ 151.483310][ T1478] usb 7-1: USB disconnect, device number 14 [ 151.483823][ T5121] bcm5974 7-1:1.0: could not read from device [ 151.527261][ T60] usb 8-1: USB disconnect, device number 21 [ 152.150547][ T8261] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.873'. [ 152.222880][ T8263] team0: Unable to change to the same mode the team is in [ 152.458555][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.879'. [ 152.481406][ T8276] CIFS: Attempting to mount //127.0.0.1/share [ 152.484628][ T8276] CIFS: VFS: Error connecting to socket. Aborting operation. [ 152.487540][ T8276] CIFS: VFS: cifs_mount failed w/return code = -101 [ 152.534593][ T8279] netlink: 52 bytes leftover after parsing attributes in process `syz.3.882'. [ 152.579685][ T8281] team0: No ports can be present during mode change [ 152.622181][ T8283] syzkaller0: entered promiscuous mode [ 152.625404][ T8283] syzkaller0: entered allmulticast mode [ 152.632057][ T8283] tipc: Started in network mode [ 152.634055][ T8283] tipc: Node identity a6e946764dea, cluster identity 4711 [ 152.636943][ T8283] tipc: Enabled bearer , priority 0 [ 152.644402][ T8283] tipc: Resetting bearer [ 152.649910][ T8282] tipc: Resetting bearer [ 152.666184][ T8282] tipc: Disabling bearer [ 152.670998][ T42] audit: type=1400 audit(1787245768.018:605): avc: denied { name_bind } for pid=8284 comm="syz.0.885" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 153.330915][ T8301] CIFS: Attempting to mount //127.0.0.1/share [ 153.332880][ T42] audit: type=1400 audit(1787245768.678:606): avc: denied { mounton } for pid=8300 comm="syz.2.892" path="/210/file0" dev="tmpfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 153.410408][ T8304] sctp: [Deprecated]: syz.2.892 (pid 8304) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.410408][ T8304] Use struct sctp_sack_info instead [ 153.419179][ T8304] sctp: [Deprecated]: syz.2.892 (pid 8304) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.419179][ T8304] Use struct sctp_sack_info instead [ 153.686573][ T42] audit: type=1400 audit(1787245769.038:607): avc: denied { bind } for pid=8310 comm="syz.1.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 153.740039][ T42] audit: type=1400 audit(1787245769.088:608): avc: denied { read write } for pid=8316 comm="syz.3.896" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 153.747752][ T42] audit: type=1400 audit(1787245769.088:609): avc: denied { open } for pid=8316 comm="syz.3.896" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 154.165834][ T8301] CIFS: VFS: Error connecting to socket. Aborting operation. [ 154.168382][ T8301] CIFS: VFS: cifs_mount failed w/return code = -4 [ 154.623450][ T5740] Bluetooth: hci1: unexpected event for opcode 0x0413 [ 154.628987][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 156.106729][ T8354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.908'. [ 156.229924][ T8364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.912'. [ 156.362663][ T60] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 156.362771][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 156.514657][ T60] usb 6-1: unable to get BOS descriptor or descriptor too short [ 156.518280][ T60] usb 6-1: not running at top speed; connect to a high speed hub [ 156.521527][ T60] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 156.526979][ T60] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 156.530104][ T60] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 156.533458][ T60] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 156.537710][ T60] usb 6-1: config 14 has no interface number 0 [ 156.540300][ T60] usb 6-1: config 14 has no interface number 1 [ 156.543010][ T60] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 156.547194][ T60] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 156.552040][ T60] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 156.556734][ T60] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.560709][ T60] usb 6-1: config 14 interface 57 has no altsetting 0 [ 156.563682][ T60] usb 6-1: config 14 interface 228 has no altsetting 0 [ 156.570989][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.574382][ T60] usb 6-1: Product: syz [ 156.576257][ T60] usb 6-1: Manufacturer: syz [ 156.578197][ T60] usb 6-1: SerialNumber: syz [ 156.651422][ T8376] CIFS: Attempting to mount //127.0.0.1/share [ 156.654111][ T8376] CIFS: VFS: Error connecting to socket. Aborting operation. [ 156.657335][ T8376] CIFS: VFS: cifs_mount failed w/return code = -101 [ 156.794197][ T60] legousbtower 6-1:14.57: interrupt endpoints not found [ 156.798950][ T60] legousbtower 6-1:14.228: get version request failed: -71 [ 156.801341][ T60] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 156.806686][ T60] usb 6-1: USB disconnect, device number 16 [ 156.932694][ T29] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 157.082621][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 157.085843][ T29] usb 8-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 157.091129][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.095483][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.103352][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.107947][ T29] usb 8-1: Product: syz [ 157.109726][ T29] usb 8-1: Manufacturer: syz [ 157.111714][ T29] usb 8-1: SerialNumber: syz [ 157.116217][ T29] usb 8-1: config 0 descriptor?? [ 157.121516][ T29] qmi_wwan 8-1:0.0: probe with driver qmi_wwan failed with error -22 [ 157.184025][ T8385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.921'. [ 157.317728][ T8395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.926'. [ 157.322208][ T5516] usb 8-1: USB disconnect, device number 22 [ 157.327833][ T8395] team0: Unable to change to the same mode the team is in [ 157.351949][ T8399] comedi comedi4: bad chanlist[0]=0x000000ff chan=255 range length=1 [ 157.471534][ T8406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.931'. [ 157.509978][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'. [ 158.388981][ T8445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.937'. [ 158.396182][ T8445] team0: Unable to change to the same mode the team is in [ 158.651848][ T8465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.941'. [ 158.809343][ T8479] team0: Unable to change to the same mode the team is in [ 158.845956][ T8477] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 159.740926][ T8494] __nla_validate_parse: 2 callbacks suppressed [ 159.740938][ T8494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.952'. [ 159.932420][ T8500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.955'. [ 159.939890][ T8500] team0: No ports can be present during mode change [ 160.030344][ T42] audit: type=1400 audit(1787245775.378:610): avc: denied { write } for pid=8495 comm="syz.2.953" name="nullb" dev="configfs" ino=5593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.099520][ T8506] loop2: detected capacity change from 0 to 2640 [ 160.104406][ T42] audit: type=1400 audit(1787245775.418:611): avc: denied { write } for pid=8495 comm="syz.2.953" name="nullb" dev="configfs" ino=5593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.111941][ T42] audit: type=1400 audit(1787245775.418:612): avc: denied { remove_name } for pid=8495 comm="syz.2.953" name="nullb1" dev="configfs" ino=17853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.120032][ T42] audit: type=1400 audit(1787245775.418:613): avc: denied { rmdir } for pid=8495 comm="syz.2.953" name="nullb1" dev="configfs" ino=17853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.127676][ T8507] buffer_io_error: 29 callbacks suppressed [ 160.127701][ T8507] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 160.132484][ T8507] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 160.135357][ T8507] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 160.137960][ T8507] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 160.140591][ T8507] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 160.143156][ T8507] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 160.145730][ T8507] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 160.148329][ T8507] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 160.151053][ T8507] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 160.153829][ T8507] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 160.938749][ T8517] netlink: 52 bytes leftover after parsing attributes in process `syz.2.959'. [ 161.650250][ T8530] netlink: 36 bytes leftover after parsing attributes in process `syz.0.964'. [ 161.654310][ T8530] netlink: 16 bytes leftover after parsing attributes in process `syz.0.964'. [ 161.658225][ T8530] netlink: 36 bytes leftover after parsing attributes in process `syz.0.964'. [ 162.453263][ T8535] netlink: 52 bytes leftover after parsing attributes in process `syz.0.967'. [ 162.524585][ T8539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.969'. [ 162.533932][ T8539] team0: No ports can be present during mode change [ 162.625867][ T8543] netlink: 'syz.3.971': attribute type 13 has an invalid length. [ 163.038000][ T8550] loop4: detected capacity change from 0 to 7 [ 163.050523][ T8550] Dev loop4: unable to read RDB block 7 [ 163.057483][ T8550] loop4: unable to read partition table [ 163.060205][ T8550] loop4: partition table beyond EOD, truncated [ 163.065309][ T8550] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 163.137626][ T42] audit: type=1400 audit(1787245778.488:614): avc: denied { setopt } for pid=8551 comm="syz.3.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.424882][ T34] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 163.565832][ T8558] netlink: 16 bytes leftover after parsing attributes in process `syz.1.978'. [ 163.572107][ T8558] team0: Unable to change to the same mode the team is in [ 163.593826][ T34] usb 8-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 163.598713][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 163.603930][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.607847][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.614571][ T34] usb 8-1: config 0 descriptor?? [ 164.257575][ T34] usbhid 8-1:0.0: can't add hid device: -71 [ 164.259515][ T34] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 164.263619][ T34] usb 8-1: USB disconnect, device number 23 [ 164.392722][ T6951] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 164.532668][ T6951] usb 7-1: device descriptor read/64, error -71 [ 164.722796][ T1478] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 164.772839][ T6951] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 164.882645][ T1478] usb 6-1: Using ep0 maxpacket: 16 [ 164.889556][ T1478] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 164.894045][ T1478] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 164.898109][ T1478] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 164.902597][ T6951] usb 7-1: device descriptor read/64, error -71 [ 164.903152][ T1478] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.907425][ T1478] usb 6-1: Product: syz [ 164.908724][ T1478] usb 6-1: Manufacturer: syz [ 164.910219][ T1478] usb 6-1: SerialNumber: syz [ 164.916581][ T1478] usb 6-1: config 0 descriptor?? [ 164.920386][ T1478] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 164.923555][ T1478] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 165.017793][ T6951] usb usb7-port1: attempt power cycle [ 165.095032][ T8581] netlink: 16 bytes leftover after parsing attributes in process `syz.0.988'. [ 165.101384][ T8581] team0: No ports can be present during mode change [ 165.135792][ T8583] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 165.362598][ T6951] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 165.383200][ T6951] usb 7-1: device descriptor read/8, error -71 [ 165.521387][ T1478] em28xx 6-1:0.0: chip ID is em2828X [ 165.632670][ T6951] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 165.653403][ T6951] usb 7-1: device descriptor read/8, error -71 [ 165.724950][ T1478] usb 6-1: USB disconnect, device number 17 [ 165.735499][ T1478] em28xx 6-1:0.0: Disconnecting em28xx [ 165.771326][ T1478] em28xx: Freeing device [ 165.774498][ T6951] usb usb7-port1: unable to enumerate USB device [ 165.782957][ T42] audit: type=1400 audit(1787245781.128:615): avc: denied { setopt } for pid=8593 comm="syz.3.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 165.790726][ T42] audit: type=1400 audit(1787245781.128:616): avc: denied { ioctl } for pid=8593 comm="syz.3.994" path="socket:[18790]" dev="sockfs" ino=18790 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 165.833313][ T42] audit: type=1400 audit(1787245781.178:617): avc: denied { accept } for pid=8593 comm="syz.3.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 166.573426][ T8594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.616977][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.997'. [ 166.621406][ T8607] team0: Unable to change to the same mode the team is in [ 166.635974][ T8609] netlink: 1 bytes leftover after parsing attributes in process `syz.3.998'. [ 166.641424][ T8609] netlink: 1 bytes leftover after parsing attributes in process `syz.3.998'. [ 166.753837][ T8611] tipc: Enabling of bearer rejected, failed to enable media [ 166.836260][ T42] audit: type=1400 audit(1787245782.188:618): avc: denied { write } for pid=8622 comm="syz.1.1002" name="node" dev="configfs" ino=11985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 166.894389][ T8623] event trace: Could not enable event p [ 167.068634][ T8627] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 167.109493][ T62] Bluetooth: hci4: Frame reassembly failed (-84) [ 167.115168][ T42] audit: type=1400 audit(1787245782.448:619): avc: denied { name_bind } for pid=8625 comm="syz.1.1003" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 167.129345][ T62] Bluetooth: hci4: Frame reassembly failed (-84) [ 167.533358][ T8629] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1004'. [ 168.015736][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'. [ 168.214158][ T8639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1006'. [ 168.345920][ T8635] team0: No ports can be present during mode change [ 168.982743][ T8647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1013'. [ 169.133146][ T5740] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 169.665034][ T8658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1017'. [ 169.714081][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'. [ 169.728551][ T8660] team0: No ports can be present during mode change [ 169.843625][ T42] audit: type=1400 audit(1787245785.198:620): avc: denied { setopt } for pid=8661 comm="syz.1.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 169.997266][ T8670] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 170.808492][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'. [ 170.824025][ T8690] team0: Unable to change to the same mode the team is in [ 170.957027][ T8696] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1030'. [ 171.204175][ T8708] CIFS: Attempting to mount //127.0.0.1/share [ 171.252661][ T149] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 171.313300][ T42] audit: type=1400 audit(1787245786.668:621): avc: denied { write } for pid=8703 comm="syz.1.1034" name="functions" dev="configfs" ino=12525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.327084][ T42] audit: type=1400 audit(1787245786.668:622): avc: denied { write } for pid=8703 comm="syz.1.1034" name="c.1" dev="configfs" ino=12530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.344505][ T42] audit: type=1400 audit(1787245786.678:623): avc: denied { write } for pid=8703 comm="syz.1.1034" name="c.1" dev="configfs" ino=12530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.403470][ T149] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 171.407379][ T149] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.410755][ T149] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 171.414082][ T149] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 171.417222][ T149] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.421338][ T149] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.493644][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 171.498378][ T8715] team0: Unable to change to the same mode the team is in [ 171.592693][ T1478] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 171.635083][ T42] audit: type=1400 audit(1787245786.988:624): avc: denied { nlmsg_read } for pid=8697 comm="syz.2.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 171.662425][ T149] usb 7-1: USB disconnect, device number 19 [ 171.753004][ T1478] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 171.759664][ T1478] usb 5-1: Dual-Role OTG device on HNP port [ 171.762652][ T10] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 171.768092][ T1478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.800323][ T1478] usb-storage 5-1:1.0: USB Mass Storage device detected [ 171.814134][ T1478] scsi host6: usb-storage 5-1:1.0 [ 171.932571][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 171.935150][ T10] usb 8-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 171.939377][ T10] usb 8-1: config 0 has an invalid interface number: 49 but max is 0 [ 171.942398][ T10] usb 8-1: config 0 has no interface number 0 [ 171.944553][ T10] usb 8-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 171.947866][ T10] usb 8-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 171.952170][ T10] usb 8-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 171.958627][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.961238][ T10] usb 8-1: Product: syz [ 171.962667][ T10] usb 8-1: Manufacturer: syz [ 171.964193][ T10] usb 8-1: SerialNumber: syz [ 171.968467][ T10] usb 8-1: config 0 descriptor?? [ 171.971891][ T8716] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 172.035093][ T8708] CIFS: VFS: Error connecting to socket. Aborting operation. [ 172.038343][ T8708] CIFS: VFS: cifs_mount failed w/return code = -4 [ 172.182781][ T8716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.201053][ T8716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.256086][ T8727] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1042'. [ 172.371582][ T10] usb 8-1: USB disconnect, device number 24 [ 172.448392][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'. [ 172.477207][ T8739] team0: Unable to change to the same mode the team is in [ 172.676476][ T8750] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1052'. [ 172.776712][ T8755] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1053'. [ 172.993332][ T1162] scsi 6:0:0:0: Direct-Access Linux File-Stor Gadget 0702 PQ: 0 ANSI: 2 [ 173.014961][ T8767] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1060'. [ 173.021234][ T8767] team0: Unable to change to the same mode the team is in [ 173.083556][ T8721] sd 6:0:0:0: Power-on or device reset occurred [ 173.090164][ T1162] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 173.093758][ T72] sd 6:0:0:0: [sdb] Media removed, stopped polling [ 173.102065][ T42] audit: type=1400 audit(1787245788.448:625): avc: denied { write } for pid=8768 comm="syz.1.1061" name="subsystems" dev="configfs" ino=13461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 173.105052][ T8769] nvmet_tcp: malformed ip/port passed: : [ 173.122263][ T42] audit: type=1400 audit(1787245788.458:626): avc: denied { write } for pid=8768 comm="syz.1.1061" name="subsystems" dev="configfs" ino=13461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 173.190552][ T72] sd 6:0:0:0: [sdb] Attached SCSI removable disk [ 173.197840][ T8772] netlink: 'syz.1.1062': attribute type 13 has an invalid length. [ 173.207117][ T8773] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 173.525115][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1068'. [ 173.598597][ T65] block nbd1: Receive control failed (result -32) [ 173.620852][ T8784] block nbd1: shutting down sockets [ 173.651112][ T8790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1069'. [ 173.655712][ T8790] team0: Unable to change to the same mode the team is in [ 173.963971][ T34] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 173.996335][ T8801] syzkaller0: entered promiscuous mode [ 173.998647][ T8801] syzkaller0: entered allmulticast mode [ 174.124027][ T34] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 174.128284][ T34] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.131560][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 174.134991][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.139616][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.143668][ T34] usb 7-1: config 0 descriptor?? [ 174.202041][ T8809] jffs2: notice: (8809) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 174.275483][ T42] audit: type=1400 audit(1787245789.618:627): avc: denied { write } for pid=8808 comm="syz.3.1077" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.306518][ T42] audit: type=1400 audit(1787245789.618:628): avc: denied { create } for pid=8808 comm="syz.3.1077" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 174.326961][ T42] audit: type=1400 audit(1787245789.678:629): avc: denied { read write } for pid=8808 comm="syz.3.1077" name="fillfile" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 174.362320][ T42] audit: type=1400 audit(1787245789.688:630): avc: denied { open } for pid=8808 comm="syz.3.1077" path="/265/mnt/fillfile" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 174.684862][ T8817] team0: No ports can be present during mode change [ 174.707522][ T10] IPVS: starting estimator thread 0... [ 174.759176][ T6951] usb 7-1: USB disconnect, device number 20 [ 174.832660][ T8820] IPVS: using max 21 ests per chain, 50400 per kthread [ 175.138943][ T8836] syz_tun: entered allmulticast mode [ 175.148901][ T8835] syz_tun: left allmulticast mode [ 175.471453][ T8844] team0: Unable to change to the same mode the team is in [ 175.908151][ T1478] IPVS: starting estimator thread 0... [ 175.952266][ T8864] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 175.992684][ T8862] IPVS: using max 29 ests per chain, 69600 per kthread [ 176.028147][ T8868] team0: Unable to change to the same mode the team is in [ 176.065561][ T8864] md: could not open device unknown-block(1,0). [ 176.185578][ T8882] overlayfs: failed to clone lowerpath [ 176.194458][ T8884] jffs2: notice: (8884) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 176.935425][ T8874] ima: policy update failed [ 176.938027][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 176.938224][ T42] audit: type=1802 audit(1787245792.288:638): pid=8874 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.1100" res=0 errno=0 [ 177.277567][ T8893] team0: No ports can be present during mode change [ 177.588232][ T8899] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 177.670804][ T8906] CIFS: Attempting to mount //127.0.0.1/share [ 177.673355][ T8906] CIFS: VFS: Error connecting to socket. Aborting operation. [ 177.675800][ T8906] CIFS: VFS: cifs_mount failed w/return code = -101 [ 177.704465][ T8910] __nla_validate_parse: 6 callbacks suppressed [ 177.704484][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 177.715252][ T8904] md: could not open device unknown-block(1,0). [ 177.850318][ T8918] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1117'. [ 177.982697][ T29] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 178.154568][ T29] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 178.159326][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.167167][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.169857][ T29] usb 6-1: Product: syz [ 178.171318][ T29] usb 6-1: Manufacturer: syz [ 178.172930][ T29] usb 6-1: SerialNumber: syz [ 178.178823][ T29] usb 6-1: config 0 descriptor?? [ 178.561221][ T8920] team0: Unable to change to the same mode the team is in [ 178.578570][ T8922] jffs2: notice: (8922) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 178.597193][ T8908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.610767][ T8908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.616970][ T24] usb 6-1: USB disconnect, device number 18 [ 178.638531][ T42] audit: type=1400 audit(1787245793.988:639): avc: denied { write } for pid=8923 comm="syz.2.1120" name="instances" dev="tracefs" ino=2282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 178.668029][ T42] audit: type=1400 audit(1787245794.018:640): avc: denied { append } for pid=8926 comm="syz.3.1121" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 178.737908][ T42] audit: type=1400 audit(1787245794.088:641): avc: denied { ioctl } for pid=8926 comm="syz.3.1121" path="/dev/usbmon0" dev="devtmpfs" ino=736 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 178.845917][ T8936] CIFS: Attempting to mount //127.0.0.1/share [ 179.270245][ T8940] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 179.393701][ T8941] md: could not open device unknown-block(1,0). [ 179.446984][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 179.538467][ T8948] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 179.630636][ T8936] CIFS: VFS: Error connecting to socket. Aborting operation. [ 179.634016][ T8936] CIFS: VFS: cifs_mount failed w/return code = -4 [ 179.691718][ T8952] team0: No ports can be present during mode change [ 179.751646][ T8956] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1131'. [ 179.922680][ T6951] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 180.093586][ T6951] usb 8-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 180.097612][ T6951] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.101472][ T6951] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 180.106112][ T6951] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.110419][ T6951] usb 8-1: config 0 descriptor?? [ 180.315649][ T42] audit: type=1400 audit(1787245795.668:642): avc: denied { watch watch_reads } for pid=8960 comm="syz.2.1133" path="pipe:[18239]" dev="pipefs" ino=18239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 180.316642][ T8963] jffs2: notice: (8963) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 180.403099][ T42] audit: type=1400 audit(1787245795.758:643): avc: denied { write } for pid=8961 comm="syz.1.1132" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.533267][ T6951] hid_parser_main: 30 callbacks suppressed [ 180.533287][ T6951] aquacomputer_d5next 0003:0C70:F00B.0007: unknown main item tag 0x0 [ 180.540297][ T6951] aquacomputer_d5next 0003:0C70:F00B.0007: unknown main item tag 0x0 [ 180.543827][ T6951] aquacomputer_d5next 0003:0C70:F00B.0007: unknown main item tag 0x0 [ 180.547336][ T6951] aquacomputer_d5next 0003:0C70:F00B.0007: unknown main item tag 0x0 [ 180.550987][ T6951] aquacomputer_d5next 0003:0C70:F00B.0007: unknown main item tag 0x0 [ 180.554462][ T6951] aquacomputer_d5next 0003:0C70:F00B.0007: unknown main item tag 0x0 [ 180.557886][ T6951] aquacomputer_d5next 0003:0C70:F00B.0007: unknown main item tag 0x0 [ 180.561481][ T6951] aquacomputer_d5next 0003:0C70:F00B.0007: unknown main item tag 0x0 [ 180.564873][ T6951] aquacomputer_d5next 0003:0C70:F00B.0007: unknown main item tag 0x0 [ 180.568325][ T6951] aquacomputer_d5next 0003:0C70:F00B.0007: unknown main item tag 0x0 [ 180.592658][ T6951] aquacomputer_d5next 0003:0C70:F00B.0007: hidraw1: USB HID v0.20 Device [HID 0c70:f00b] on usb-dummy_hcd.3-1/input0 [ 180.727812][ T6951] usb 8-1: USB disconnect, device number 25 [ 180.802191][ T8973] CIFS: Attempting to mount //127.0.0.1/share [ 181.202476][ T8977] team0: Unable to change to the same mode the team is in [ 181.279833][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 181.355567][ T8990] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 181.453410][ T8990] md: could not open device unknown-block(1,0). [ 181.558933][ T8999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1149'. [ 181.565873][ T8999] team0: No ports can be present during mode change [ 181.626869][ T42] audit: type=1400 audit(1787245796.978:644): avc: denied { remount } for pid=9002 comm="syz.1.1151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 181.633527][ T8973] CIFS: VFS: Error connecting to socket. Aborting operation. [ 181.638354][ T8973] CIFS: VFS: cifs_mount failed w/return code = -4 [ 181.661908][ T9006] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_batadv, syncid = 0, id = 0 [ 181.741390][ T9013] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 181.914024][ T5776] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 182.138514][ T9027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1159'. [ 182.608418][ T42] audit: type=1400 audit(1787245797.958:645): avc: denied { name_bind } for pid=9029 comm="syz.0.1160" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 182.679117][ T9034] CIFS: Attempting to mount //127.0.0.1/share [ 183.508816][ T9034] CIFS: VFS: Error connecting to socket. Aborting operation. [ 183.512483][ T9034] CIFS: VFS: cifs_mount failed w/return code = -4 [ 183.553939][ T9036] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 183.559016][ T9036] CIFS: Attempting to mount //127.0.0.1/share [ 184.386298][ T9036] CIFS: VFS: Error connecting to socket. Aborting operation. [ 184.389685][ T9036] CIFS: VFS: cifs_mount failed w/return code = -4 [ 184.427450][ T9038] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 184.766462][ T9043] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 184.852083][ T9021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.899552][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1167'. [ 184.964330][ T64] Bluetooth: hci0: unexpected event for opcode 0x0407 [ 185.017853][ T9046] netlink: 'syz.3.1167': attribute type 29 has an invalid length. [ 185.049423][ T42] audit: type=1400 audit(1787245800.398:646): avc: denied { create } for pid=9055 comm="syz.0.1171" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 185.061166][ T42] audit: type=1400 audit(1787245800.408:647): avc: denied { write } for pid=9062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.074685][ T42] audit: type=1400 audit(1787245800.428:648): avc: denied { map } for pid=9055 comm="syz.0.1171" path="socket:[21201]" dev="sockfs" ino=21201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 185.075826][ T9057] netlink: 'syz.3.1167': attribute type 29 has an invalid length. [ 185.084990][ T42] audit: type=1400 audit(1787245800.428:649): avc: denied { read } for pid=9055 comm="syz.0.1171" path="socket:[21201]" dev="sockfs" ino=21201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 185.100275][ T42] audit: type=1400 audit(1787245800.448:650): avc: denied { write } for pid=9067 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.240498][ T42] audit: type=1400 audit(1787245800.588:651): avc: denied { unlink } for pid=5727 comm="syz-executor" name="file0" dev="tmpfs" ino=1879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 185.272007][ T9079] net_ratelimit: 9 callbacks suppressed [ 185.272018][ T9079] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 185.304133][ T9071] netlink: 'syz.2.1180': attribute type 10 has an invalid length. [ 185.313510][ T9071] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 185.385405][ T9090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1178'. [ 185.392115][ T9090] team0: Unable to change to the same mode the team is in [ 185.432702][ T6951] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 185.583093][ T6951] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.587073][ T6951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.591076][ T6951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.594925][ T6951] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.599289][ T6951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.601356][ T9096] 9p: Bad value for 'wfdno' [ 185.603165][ T6951] usb 6-1: config 0 descriptor?? [ 185.677311][ T42] audit: type=1400 audit(1787245801.028:652): avc: denied { read } for pid=9097 comm="syz.2.1183" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 185.685133][ T42] audit: type=1400 audit(1787245801.028:653): avc: denied { open } for pid=9097 comm="syz.2.1183" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 185.692307][ T42] audit: type=1400 audit(1787245801.038:654): avc: denied { ioctl } for pid=9097 comm="syz.2.1183" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 185.810280][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1184'. [ 185.849663][ T9105] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 185.950415][ T9108] jffs2: notice: (9108) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 186.277093][ T6951] usbhid 6-1:0.0: can't add hid device: -71 [ 186.279154][ T6951] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 186.285246][ T6951] usb 6-1: USB disconnect, device number 19 [ 186.704044][ T9118] netlink: 'syz.3.1190': attribute type 1 has an invalid length. [ 186.723179][ T9118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.743101][ T9118] bond1: (slave geneve2): making interface the new active one [ 186.746307][ T9118] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 186.795033][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 186.811419][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 186.822073][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 186.848362][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 186.889792][ T9129] 9pnet_virtio: no channels available for device syz [ 186.893995][ T9132] 9pnet_virtio: no channels available for device syz [ 186.956703][ T9137] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1195'. [ 187.087765][ T9145] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 187.150072][ T9147] jffs2: notice: (9147) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 187.249785][ T9157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1205'. [ 187.563757][ T9170] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1207'. [ 187.783442][ T10] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 187.805023][ T9178] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.917399][ T9181] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 187.943423][ T10] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 187.950586][ T10] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 187.957481][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.964487][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.969926][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 187.977627][ T10] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 187.980567][ T10] usb 8-1: Manufacturer: syz [ 187.984776][ T10] usb 8-1: config 0 descriptor?? [ 187.999934][ T9183] netlink: 'syz.0.1213': attribute type 1 has an invalid length. [ 188.071334][ T9189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1213'. [ 188.103805][ T9183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.370106][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1215'. [ 188.379217][ T9204] team0: Unable to change to the same mode the team is in [ 188.414811][ T9206] CIFS: Attempting to mount //127.0.0.1/share [ 188.967537][ T9222] jffs2: notice: (9222) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 189.032499][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 189.034654][ T42] audit: type=1400 audit(2000000000.699:673): avc: denied { write } for pid=9221 comm="syz.1.1222" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.242960][ T9206] CIFS: VFS: Error connecting to socket. Aborting operation. [ 189.245805][ T9206] CIFS: VFS: cifs_mount failed w/return code = -4 [ 189.299587][ T9227] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1223'. [ 189.350302][ T9231] overlayfs: failed to clone upperpath [ 189.920083][ T9240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1229'. [ 189.931228][ T9240] team0: Unable to change to the same mode the team is in [ 189.950353][ T64] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 190.037298][ T42] audit: type=1400 audit(2000000001.709:674): avc: denied { write } for pid=9238 comm="syz.1.1228" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 190.051014][ T42] audit: type=1400 audit(2000000001.719:675): avc: denied { read } for pid=9238 comm="syz.1.1228" dev="nsfs" ino=4026533055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 190.062666][ T42] audit: type=1400 audit(2000000001.719:676): avc: denied { open } for pid=9238 comm="syz.1.1228" path="net:[4026533055]" dev="nsfs" ino=4026533055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 190.140130][ T9246] CIFS: Attempting to mount //127.0.0.1/share [ 190.144623][ T9241] bond1: entered promiscuous mode [ 190.146588][ T9241] bond1: entered allmulticast mode [ 190.149238][ T9241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.156826][ T9246] CIFS: VFS: Error connecting to socket. Aborting operation. [ 190.164984][ T9246] CIFS: VFS: cifs_mount failed w/return code = -111 [ 190.192676][ T9250] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 190.228735][ T9252] ip_tables: iptables: counters copy to user failed while replacing table [ 190.265732][ T42] audit: type=1400 audit(2000000001.939:677): avc: denied { ioctl } for pid=9253 comm="syz.0.1234" path="socket:[19451]" dev="sockfs" ino=19451 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 190.311084][ T9260] jffs2: notice: (9260) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 190.381933][ T42] audit: type=1400 audit(2000000002.049:678): avc: denied { write } for pid=9259 comm="syz.2.1236" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.660472][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 190.921445][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 190.973895][ T42] audit: type=1800 audit(2000000002.649:679): pid=9270 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1238" name="addr_trtype" dev="configfs" ino=22545 res=0 errno=0 [ 190.992756][ T42] audit: type=1400 audit(2000000002.659:680): avc: denied { append } for pid=9269 comm="syz.3.1238" name="addr_trtype" dev="configfs" ino=22545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 191.019632][ T42] audit: type=1800 audit(2000000002.689:681): pid=9270 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1238" name="addr_adrfam" dev="configfs" ino=22546 res=0 errno=0 [ 191.020388][ T9270] nvmet_rdma: malformed ip/port passed: : [ 191.034056][ T42] audit: type=1400 audit(2000000002.689:682): avc: denied { write } for pid=9269 comm="syz.3.1238" name="subsystems" dev="configfs" ino=13461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.101584][ T9272] tipc: Started in network mode [ 191.105606][ T9272] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 191.110311][ T9272] tipc: Enabled bearer , priority 10 [ 191.111508][ T9270] nvmet_rdma: enabling port 1 (127.0.0.1:4) [ 191.190169][ T10] usb 8-1: USB disconnect, device number 26 [ 191.225455][ T9280] program syz.3.1241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.235896][ T9277] CIFS: Attempting to mount //127.0.0.1/share [ 191.273263][ T1127] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 191.279608][ T1127] ata1.00: irq_stat 0x40000000 [ 191.279685][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1241'. [ 191.281751][ T1127] ata1.00: failed command: ZAC MANAGEMENT OUT [ 191.291907][ T1127] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 5 [ 191.291907][ T1127] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 191.299721][ T1127] ata1.00: status: { DRDY ERR } [ 191.301962][ T1127] ata1.00: error: { ABRT } [ 191.304330][ T1127] ata1.00: device reported invalid CHS sector 0 [ 191.317558][ T9268] infiniband syz0: set down [ 191.320140][ T9268] infiniband syz0: added bond_slave_1 [ 191.337295][ T9268] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 191.342153][ T9268] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 191.350795][ T9268] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 191.423850][ T9268] RDS/IB: syz0: added [ 191.435288][ T9268] smc: adding ib device syz0 with port count 1 [ 191.438153][ T9268] smc: ib device syz0 port 1 has no pnetid [ 192.041204][ T9277] CIFS: VFS: Error connecting to socket. Aborting operation. [ 192.044537][ T9277] CIFS: VFS: cifs_mount failed w/return code = -4 [ 192.118373][ T24] tipc: Node number set to 1 [ 192.209815][ T9300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1248'. [ 192.229017][ T9302] i2c i2c-0: new_device: Invalid device name [ 192.303071][ T9306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1252'. [ 192.335981][ T9311] CIFS: Attempting to mount //127.0.0.1/share [ 192.339374][ T9311] CIFS: VFS: Error connecting to socket. Aborting operation. [ 192.342665][ T9311] CIFS: VFS: cifs_mount failed w/return code = -101 [ 192.395428][ T9315] MTD: Couldn't look up 'mtd0/file0': -2 [ 192.437850][ T9319] bridge_slave_0: left allmulticast mode [ 192.440355][ T9319] bridge_slave_0: left promiscuous mode [ 192.445243][ T9319] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.477331][ T9317] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 192.671999][ T9319] bridge_slave_1: left promiscuous mode [ 192.674090][ T9319] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.691855][ T9319] bond0: (slave bond_slave_0): Releasing backup interface [ 192.703455][ T9319] bond0: (slave bond_slave_1): Releasing backup interface [ 192.712453][ T9319] team0: Port device team_slave_0 removed [ 192.724626][ T9319] team0: Port device team_slave_1 removed [ 192.729805][ T9319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.734387][ T9319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.742488][ T9319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.745426][ T9319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.753273][ T9319] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 192.768233][ T9328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1259'. [ 192.788071][ T9326] overlayfs: failed lookup in lower (newroot/304, name='bus', err=-40): overlapping layers [ 192.826932][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 192.830567][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1261'. [ 192.842318][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1261'. [ 192.886842][ T64] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 192.901957][ T9341] CIFS: Attempting to mount //127.0.0.1/share [ 192.905048][ T9341] CIFS: VFS: Error connecting to socket. Aborting operation. [ 192.908143][ T9341] CIFS: VFS: cifs_mount failed w/return code = -101 [ 193.061163][ T9357] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.084972][ T9359] jffs2: notice: (9359) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 193.097383][ T9359] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 193.164844][ T9374] netlink: 'syz.2.1275': attribute type 2 has an invalid length. [ 193.274503][ T9387] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 193.300334][ T9385] bond0: (slave veth0_to_bond): Releasing backup interface [ 193.317272][ T9385] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.587518][ T9416] input: syz1 as /devices/virtual/input/input18 [ 193.711177][ T9420] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 193.786731][ T9422] bridge_slave_0: left allmulticast mode [ 193.789235][ T9422] bridge_slave_0: left promiscuous mode [ 193.791891][ T9422] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.802396][ T9422] bridge_slave_1: left allmulticast mode [ 193.806282][ T9422] bridge_slave_1: left promiscuous mode [ 193.808849][ T9422] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.835265][ T9422] bond0: (slave bond_slave_0): Releasing backup interface [ 193.846946][ T9422] bond0: (slave bond_slave_1): Releasing backup interface [ 193.867032][ T9422] team0: Port device team_slave_0 removed [ 193.878341][ T9422] team0: Port device team_slave_1 removed [ 193.882251][ T9422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.886434][ T9422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.891264][ T9422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.895290][ T9422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.900271][ T9422] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 194.046647][ T9442] fuse: fd is not a fuse device [ 194.064895][ T9444] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 194.078955][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 194.078967][ T42] audit: type=1400 audit(2000000005.749:696): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=34222 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 194.082401][ T9446] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 194.089662][ T42] audit: type=1400 audit(2000000005.759:697): avc: denied { recv } for pid=5638 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46638 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 194.146840][ T9452] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9452 comm=syz.3.1305 [ 194.155678][ T9452] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=9452 comm=syz.3.1305 [ 194.169783][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1305'. [ 194.175726][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.181197][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.181578][ T9454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1306'. [ 194.232431][ T9456] FAULT_INJECTION: forcing a failure. [ 194.232431][ T9456] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 194.238308][ T9456] CPU: 2 UID: 0 PID: 9456 Comm: syz.3.1307 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.238337][ T9456] Tainted: [L]=SOFTLOCKUP [ 194.238343][ T9456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.238353][ T9456] Call Trace: [ 194.238377][ T9456] [ 194.238384][ T9456] dump_stack_lvl+0x100/0x190 [ 194.238431][ T9456] should_fail_ex.cold+0x5/0xa [ 194.238457][ T9456] _copy_from_user+0x2e/0xd0 [ 194.238486][ T9456] copy_msghdr_from_user+0x9f/0x4c0 [ 194.238554][ T9456] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 194.238593][ T9456] ___sys_sendmsg+0x106/0x1e0 [ 194.238616][ T9456] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.238640][ T9456] ? get_pid_task+0x106/0x250 [ 194.238669][ T9456] ? find_held_lock+0x2b/0x80 [ 194.238700][ T9456] __sys_sendmsg+0x160/0x210 [ 194.238716][ T9456] ? __pfx___sys_sendmsg+0x10/0x10 [ 194.238742][ T9456] do_syscall_64+0x123/0x790 [ 194.238841][ T9456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.238857][ T9456] RIP: 0033:0x7f6a0539e0d9 [ 194.238871][ T9456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.238891][ T9456] RSP: 002b:00007f6a06255028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.238916][ T9456] RAX: ffffffffffffffda RBX: 00007f6a05625fa0 RCX: 00007f6a0539e0d9 [ 194.238927][ T9456] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 194.238937][ T9456] RBP: 00007f6a06255090 R08: 0000000000000000 R09: 0000000000000000 [ 194.238949][ T9456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.238959][ T9456] R13: 00007f6a05626038 R14: 00007f6a05625fa0 R15: 00007ffece8a6378 [ 194.238983][ T9456] [ 194.321468][ T9462] jffs2: notice: (9462) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 194.370589][ T9466] lo speed is unknown, defaulting to 1000 [ 194.428449][ T42] audit: type=1400 audit(2000000006.099:698): avc: denied { write } for pid=9461 comm="syz.1.1309" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.662275][ T9473] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 194.842871][ T6951] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 194.991561][ T9493] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 194.996176][ T9493] CIFS: Attempting to mount //127.0.0.1/share [ 195.014580][ T6951] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 195.018690][ T6951] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.021796][ T6951] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.026659][ T6951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.053420][ T9494] __nla_validate_parse: 1 callbacks suppressed [ 195.053479][ T9494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1316'. [ 195.240972][ T6951] usb 7-1: GET_CAPABILITIES returned 0 [ 195.247353][ T6951] usbtmc 7-1:16.0: can't read capabilities [ 195.248226][ T9499] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 195.277646][ T9501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1323'. [ 195.283997][ T9503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1325'. [ 195.327171][ T9506] ip6tnl0: Caught tx_queue_len zero misconfig [ 195.330793][ T42] audit: type=1400 audit(2000000006.999:699): avc: denied { append } for pid=9504 comm="syz.1.1326" path="socket:[23811]" dev="sockfs" ino=23811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.448698][ T9470] usbtmc 7-1:16.0: usbtmc_ioctl_request failed -32 [ 195.460884][ T9470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1313'. [ 195.466323][ T1478] usb 7-1: USB disconnect, device number 21 [ 195.474112][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1332'. [ 195.512204][ T9526] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 195.528504][ T9528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1335'. [ 195.547724][ T9530] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 195.604700][ T42] audit: type=1400 audit(2000000007.279:700): avc: denied { write } for pid=9531 comm="syz.1.1337" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 195.606056][ T9534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1338'. [ 195.786428][ T42] audit: type=1400 audit(2000000007.459:701): avc: denied { write } for pid=9536 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 195.797117][ T42] audit: type=1400 audit(2000000007.459:702): avc: denied { read } for pid=9536 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 195.825074][ T9493] CIFS: VFS: Error connecting to socket. Aborting operation. [ 195.828220][ T9493] CIFS: VFS: cifs_mount failed w/return code = -4 [ 195.939707][ T9550] jffs2: notice: (9550) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 196.007077][ T9556] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 196.008822][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1344'. [ 196.008960][ T42] audit: type=1400 audit(2000000007.679:703): avc: denied { accept } for pid=9548 comm="syz.1.1344" lport=57630 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 196.051404][ T9558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1347'. [ 196.058921][ T42] audit: type=1326 audit(2000000007.729:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.0.1348" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f493479e0d9 code=0x0 [ 196.060788][ T9562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1349'. [ 196.110637][ T64] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 196.160227][ T64] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 196.180194][ T9569] program syz.3.1352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.200375][ T9578] openvswitch: netlink: Actions may not be safe on all matching packets [ 196.392646][ T60] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 196.416220][ T9582] block nbd3: Device being setup by another task [ 196.423977][ T9580] block nbd3: shutting down sockets [ 196.553505][ T60] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 196.554158][ T9593] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 196.558595][ T60] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.568807][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.594851][ T60] as10x_usb: device has been detected [ 196.597874][ T60] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 196.621894][ T60] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 196.691200][ T42] audit: type=1400 audit(2000000008.359:706): avc: denied { getopt } for pid=9601 comm="syz.3.1364" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 196.697828][ T60] as10x_usb: error during firmware upload part1 [ 196.701497][ T60] Registered device Abilis Systems DVB-Titan [ 196.749982][ T9611] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 196.885923][ T9622] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.283554][ T9654] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.302716][ T9654] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 197.400087][ T9654] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.403449][ T9654] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 197.506511][ T9654] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.510882][ T9654] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 197.530200][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.534737][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.541887][ T5740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.551451][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.558789][ T5740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.599551][ T9654] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.603311][ T9654] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 197.735832][ T5825] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 197.739922][ T5825] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.745054][ T5825] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 197.748523][ T5825] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.773237][ T5825] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 197.776256][ T5825] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.782859][ T5825] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 197.785887][ T5825] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.803157][ T9658] lo speed is unknown, defaulting to 1000 [ 198.001212][ T9676] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 198.061776][ T9658] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.064488][ T9658] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.066874][ T9658] bridge_slave_0: entered allmulticast mode [ 198.069775][ T9658] bridge_slave_0: entered promiscuous mode [ 198.073471][ T9658] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.075863][ T9658] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.078223][ T9658] bridge_slave_1: entered allmulticast mode [ 198.080980][ T9658] bridge_slave_1: entered promiscuous mode [ 198.103801][ T9658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.109189][ T9658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.133612][ T9658] team0: Port device team_slave_0 added [ 198.137015][ T9658] team0: Port device team_slave_1 added [ 198.152349][ T9658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.154844][ T9658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.158890][ T9687] overlay: filesystem on ./file0 not supported as upperdir [ 198.163721][ T9658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.170972][ T9658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.173505][ T9658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.174284][ T9687] evm: overlay not supported [ 198.182379][ T9658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.205976][ T9658] hsr_slave_0: entered promiscuous mode [ 198.208843][ T9658] hsr_slave_1: entered promiscuous mode [ 198.211014][ T9658] debugfs: 'hsr0' already exists in 'hsr' [ 198.213534][ T9658] Cannot create hsr debugfs directory [ 198.238040][ T9691] CIFS: Attempting to mount //127.0.0.1/share [ 198.240481][ T9691] CIFS: VFS: Error connecting to socket. Aborting operation. [ 198.243488][ T9691] CIFS: VFS: cifs_mount failed w/return code = -101 [ 198.359528][ T9658] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 198.366463][ T9658] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.369361][ T9658] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 198.374842][ T9658] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.377606][ T9658] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 198.381753][ T9658] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.384775][ T9658] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 198.388814][ T9658] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.412665][ T6951] usb 7-1: USB disconnect, device number 22 [ 198.450692][ T6951] Unregistered device Abilis Systems DVB-Titan [ 198.453821][ T6951] as10x_usb: device has been disconnected [ 198.627225][ T9658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.649629][ T9658] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.660655][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.663360][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.677102][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.679492][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.725522][ T9713] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 198.746643][ T5825] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 198.750997][ T5825] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 198.756181][ T5825] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 198.759780][ T5825] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 198.764038][ T5825] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 198.767592][ T5825] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 198.771135][ T5825] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 198.775543][ T5825] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 199.005645][ T64] Bluetooth: hci0: unexpected event for opcode 0x200a [ 199.034504][ T9658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.069794][ T9739] CIFS: Attempting to mount //127.0.0.1/share [ 199.084244][ T9739] CIFS: VFS: Error connecting to socket. Aborting operation. [ 199.088124][ T9739] CIFS: VFS: cifs_mount failed w/return code = -111 [ 199.160645][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 199.160657][ T42] audit: type=1400 audit(2000000010.829:724): avc: denied { setattr } for pid=9751 comm="syz.0.1398" name="PHONET" dev="sockfs" ino=23171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 199.239057][ T9658] veth0_vlan: entered promiscuous mode [ 199.249560][ T9658] veth1_vlan: entered promiscuous mode [ 199.283918][ T9658] veth0_macvtap: entered promiscuous mode [ 199.290289][ T9658] veth1_macvtap: entered promiscuous mode [ 199.341243][ T9658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.353078][ T9658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.463804][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.470050][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.497046][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.500481][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.512668][ T5776] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.516600][ T5776] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.519556][ T9766] unsupported nla_type 4111 [ 199.538625][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.542152][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.562904][ T42] audit: type=1400 audit(2000000011.229:725): avc: denied { mounton } for pid=9658 comm="syz-executor" path="/syzkaller.2H0G43/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 199.574462][ T42] audit: type=1400 audit(2000000011.249:726): avc: denied { mounton } for pid=9658 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 199.584425][ T42] audit: type=1400 audit(2000000011.249:727): avc: denied { mounton } for pid=9658 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 199.603751][ T5871] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x103) [ 199.622822][ T64] Bluetooth: hci3: command tx timeout [ 199.715947][ T9775] CIFS: Attempting to mount //127.0.0.1/share [ 199.718871][ T9775] CIFS: VFS: Error connecting to socket. Aborting operation. [ 199.721349][ T9775] CIFS: VFS: cifs_mount failed w/return code = -111 [ 199.801167][ T60] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 199.814121][ T9777] ceph: No mds server is up or the cluster is laggy [ 199.892723][ T29] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 199.922420][ T42] audit: type=1400 audit(2000000011.589:728): avc: denied { append } for pid=9782 comm="syz.4.1406" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 200.065580][ T29] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 200.072362][ T29] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.080369][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 200.086048][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 200.092136][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.095787][ T29] usb 8-1: Product: syz [ 200.097490][ T29] usb 8-1: Manufacturer: syz [ 200.099688][ T29] usb 8-1: SerialNumber: syz [ 200.106002][ T29] usb 8-1: config 0 descriptor?? [ 200.113174][ T9771] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 200.193007][ T29] rc_core: IR keymap rc-streamzap not found [ 200.196024][ T29] Registered IR keymap rc-empty [ 200.200723][ T9790] syz_tun: entered allmulticast mode [ 200.201837][ T29] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 200.208398][ T29] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input19 [ 200.251015][ T42] audit: type=1400 audit(2000000011.919:729): avc: denied { name_bind } for pid=9794 comm="syz.0.1409" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 200.254454][ T9790] pim6reg: entered allmulticast mode [ 200.282109][ T9790] syz_tun (unregistering): left allmulticast mode [ 200.320615][ T9799] __nla_validate_parse: 7 callbacks suppressed [ 200.320690][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 200.340864][ T42] audit: type=1400 audit(2000000012.009:730): avc: denied { map } for pid=9769 comm="syz.3.1403" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 200.364892][ T29] usb 8-1: USB disconnect, device number 27 [ 200.841879][ T9808] bond1: entered promiscuous mode [ 200.871463][ T9811] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 200.882617][ T9811] CIFS mount error: No usable UNC path provided in device string! [ 200.882617][ T9811] [ 200.885997][ T9811] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 201.140091][ T9820] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1417'. [ 201.281942][ T42] audit: type=1400 audit(2000000012.949:731): avc: denied { create } for pid=9840 comm="syz.2.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 201.299735][ T42] audit: type=1400 audit(2000000012.969:732): avc: denied { setopt } for pid=9840 comm="syz.2.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 201.308960][ T42] audit: type=1400 audit(2000000012.979:733): avc: denied { ioctl } for pid=9840 comm="syz.2.1422" path="socket:[25933]" dev="sockfs" ino=25933 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 201.495268][ T9861] fuse: fd is not a fuse device [ 201.641810][ T9872] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 201.683822][ T9874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1433'. [ 201.699706][ T64] Bluetooth: hci3: command tx timeout [ 201.712230][ T9876] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 201.716631][ T9876] CIFS mount error: No usable UNC path provided in device string! [ 201.716631][ T9876] [ 201.719743][ T9876] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 201.876504][ T9888] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 201.949632][ T9901] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 201.969065][ T9903] jffs2: notice: (9903) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 201.979942][ T9905] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 202.269646][ T9931] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 202.300111][ T9933] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 202.327508][ T9935] jffs2: notice: (9935) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 202.689659][ T9948] netlink: 2312 bytes leftover after parsing attributes in process `syz.0.1459'. [ 202.745638][ T5820] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 202.786473][ T9952] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1461'. [ 203.015195][ T9963] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 203.070794][ T9965] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 203.113316][ T9965] team0: Mode changed to "activebackup" [ 203.238770][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1468'. [ 203.271721][ T9971] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 203.292039][ T9971] team0: Unable to change to the same mode the team is in [ 203.334377][ T5820] usb 9-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 203.338291][ T5820] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 203.341522][ T5820] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 203.350707][ T5820] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.353395][ T5820] usb 9-1: Product: syz [ 203.354749][ T5820] usb 9-1: Manufacturer: syz [ 203.356658][ T5820] usb 9-1: SerialNumber: syz [ 203.402361][ T9987] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 203.403650][ T9988] jffs2: notice: (9988) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 203.467475][ T9992] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 203.474591][ T9992] FAULT_INJECTION: forcing a failure. [ 203.474591][ T9992] name failslab, interval 1, probability 0, space 0, times 0 [ 203.479687][ T9992] CPU: 1 UID: 0 PID: 9992 Comm: syz.2.1475 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.479711][ T9992] Tainted: [L]=SOFTLOCKUP [ 203.479717][ T9992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.479726][ T9992] Call Trace: [ 203.479756][ T9992] [ 203.479763][ T9992] dump_stack_lvl+0x100/0x190 [ 203.479807][ T9992] should_fail_ex.cold+0x5/0xa [ 203.479825][ T9992] should_failslab+0xc2/0x120 [ 203.479857][ T9992] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 203.479878][ T9992] ? __alloc_skb+0x5b7/0x710 [ 203.479946][ T9992] ? __alloc_skb+0x140/0x710 [ 203.479970][ T9992] __alloc_skb+0x140/0x710 [ 203.479990][ T9992] ? __alloc_skb+0x5b7/0x710 [ 203.480011][ T9992] ? __pfx___alloc_skb+0x10/0x10 [ 203.480037][ T9992] netlink_alloc_large_skb+0x69/0x150 [ 203.480089][ T9992] netlink_sendmsg+0x680/0xda0 [ 203.480115][ T9992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.480138][ T9992] ? selinux_socket_sendmsg+0x198/0x2f0 [ 203.480174][ T9992] ____sys_sendmsg+0xa4d/0xbe0 [ 203.480201][ T9992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.480225][ T9992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.480255][ T9992] ___sys_sendmsg+0x190/0x1e0 [ 203.480275][ T9992] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.480292][ T9992] ? get_pid_task+0x106/0x250 [ 203.480324][ T9992] ? find_held_lock+0x2b/0x80 [ 203.480353][ T9992] __sys_sendmsg+0x160/0x210 [ 203.480367][ T9992] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.480391][ T9992] do_syscall_64+0x123/0x790 [ 203.480468][ T9992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.480485][ T9992] RIP: 0033:0x7fe2a399e0d9 [ 203.480499][ T9992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.480514][ T9992] RSP: 002b:00007fe2a479d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.480538][ T9992] RAX: ffffffffffffffda RBX: 00007fe2a3c25fa0 RCX: 00007fe2a399e0d9 [ 203.480550][ T9992] RDX: 0000000000044084 RSI: 00002000000000c0 RDI: 0000000000000004 [ 203.480560][ T9992] RBP: 00007fe2a479d090 R08: 0000000000000000 R09: 0000000000000000 [ 203.480572][ T9992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.480581][ T9992] R13: 00007fe2a3c26038 R14: 00007fe2a3c25fa0 R15: 00007ffea689f858 [ 203.480603][ T9992] [ 203.542263][ T64] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 203.593678][ T5820] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 203.675805][T10007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=10007 comm=syz.0.1479 [ 203.680589][T10007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1479'. [ 203.727465][T10009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1482'. [ 203.772779][ T64] Bluetooth: hci3: command tx timeout [ 203.826489][T10013] size and base must be multiples of 4 kiB [ 203.829043][T10013] CPU: 3 UID: 0 PID: 10013 Comm: syz.2.1484 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.829075][T10013] Tainted: [L]=SOFTLOCKUP [ 203.829081][T10013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.829093][T10013] Call Trace: [ 203.829100][T10013] [ 203.829107][T10013] dump_stack_lvl+0x100/0x190 [ 203.829157][T10013] mtrr_del.cold+0x72/0x85 [ 203.829179][T10013] mtrr_ioctl+0xbc8/0xcf0 [ 203.829204][T10013] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 203.829227][T10013] ? __pfx_mtrr_ioctl+0x10/0x10 [ 203.829253][T10013] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 203.829289][T10013] ? __pfx_mtrr_ioctl+0x10/0x10 [ 203.829312][T10013] proc_reg_unlocked_ioctl+0x229/0x320 [ 203.829345][T10013] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 203.829366][T10013] __x64_sys_ioctl+0x18e/0x210 [ 203.829391][T10013] do_syscall_64+0x123/0x790 [ 203.829421][T10013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.829441][T10013] RIP: 0033:0x7fe2a399e0d9 [ 203.829458][T10013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.829473][T10013] RSP: 002b:00007fe2a479d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.829492][T10013] RAX: ffffffffffffffda RBX: 00007fe2a3c25fa0 RCX: 00007fe2a399e0d9 [ 203.829504][T10013] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000005 [ 203.829514][T10013] RBP: 00007fe2a3a35024 R08: 0000000000000000 R09: 0000000000000000 [ 203.829525][T10013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.829535][T10013] R13: 00007fe2a3c26038 R14: 00007fe2a3c25fa0 R15: 00007ffea689f858 [ 203.829559][T10013] [ 203.884917][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1484'. [ 203.889006][ C3] usblp0: nonzero read bulk status received: -71 [ 203.889179][ T29] usb 9-1: USB disconnect, device number 2 [ 203.896853][ T9930] usblp0: error -71 reading from printer [ 203.946422][T10021] jffs2: notice: (10021) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 203.973589][T10026] ip_tables: iptables: counters copy to user failed while replacing table [ 204.013348][T10030] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 204.027434][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1490'. [ 204.096041][ T9928] usblp0: removed [ 204.173126][T10037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=10037 comm=syz.2.1492 [ 204.216454][T10039] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 204.677939][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 204.677959][ T42] audit: type=1400 audit(2000000016.349:748): avc: denied { read write } for pid=10049 comm="syz.4.1496" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 204.691064][ T42] audit: type=1400 audit(2000000016.349:749): avc: denied { open } for pid=10049 comm="syz.4.1496" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 204.702460][ T42] audit: type=1400 audit(2000000016.359:750): avc: denied { ioctl } for pid=10049 comm="syz.4.1496" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 204.795820][T10053] bridge_slave_1: left allmulticast mode [ 204.798204][T10053] bridge_slave_1: left promiscuous mode [ 204.804486][T10053] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.810318][T10053] bridge_slave_0: left allmulticast mode [ 204.814296][T10053] bridge_slave_0: left promiscuous mode [ 204.816203][T10053] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.926841][T10057] JFS: charset not found [ 204.992366][T10063] input: syz0 as /devices/virtual/input/input20 [ 205.236324][T10087] jffs2: notice: (10087) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 205.496797][ T5728] overlayfs: failed lookup in lower (newroot/368, name='bus', err=-40): overlapping layers [ 205.519605][ T5728] overlayfs: failed lookup in lower (newroot/368, name='bus', err=-40): overlapping layers [ 205.765602][T10109] jffs2: notice: (10109) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 205.842863][ T42] audit: type=1400 audit(2000000017.509:751): avc: denied { create } for pid=10112 comm="syz.2.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 205.851074][ T42] audit: type=1400 audit(2000000017.509:752): avc: denied { write } for pid=10112 comm="syz.2.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 205.851232][ T5740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.869935][ T5740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.882499][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.883462][ T42] audit: type=1400 audit(2000000017.559:753): avc: denied { getopt } for pid=10116 comm="syz.0.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 205.887531][ T5740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.894006][ T42] audit: type=1400 audit(2000000017.569:754): avc: denied { read } for pid=10116 comm="syz.0.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 205.896006][ T5740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.984286][T10126] __nla_validate_parse: 2 callbacks suppressed [ 205.984298][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1524'. [ 206.091763][T10138] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 206.097834][T10138] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 206.109468][T10138] CIFS: Attempting to mount //127.0.0.1/share [ 206.171685][T10111] lo speed is unknown, defaulting to 1000 [ 206.407686][ T12] bond1 (unregistering): (slave geneve2): Releasing active interface [ 206.446070][ T12] bond0 (unregistering): Released all slaves [ 206.451640][ T12] bond1 (unregistering): Released all slaves [ 206.591648][ T42] audit: type=1400 audit(2000000018.259:755): avc: denied { write } for pid=10150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.602214][ T12] tipc: Left network mode [ 206.669769][ T42] audit: type=1400 audit(2000000018.339:756): avc: denied { write } for pid=10156 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.756139][ T12] IPVS: stopping master sync thread 9006 ... [ 206.759233][ T5438] 8021q: adding VLAN 0 to HW filter on device eth2 [ 206.817543][T10162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1532'. [ 206.832442][T10138] CIFS: VFS: Error connecting to socket. Aborting operation. [ 206.836674][T10138] CIFS: VFS: cifs_mount failed w/return code = -4 [ 206.898921][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 206.924914][ T42] audit: type=1400 audit(2000000018.599:757): avc: denied { set_context_mgr } for pid=10169 comm="syz.4.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 206.937188][T10170] binder: BINDER_SET_CONTEXT_MGR already set [ 206.944656][T10170] binder: 10169:10170 ioctl 4018620d 200000000100 returned -16 [ 206.951263][T10170] binder: BINDER_SET_CONTEXT_MGR already set [ 206.955287][T10170] binder: 10169:10170 ioctl 4018620d 200000004a80 returned -16 [ 207.119360][T10172] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.159536][ T5438] 8021q: adding VLAN 0 to HW filter on device eth3 [ 207.162871][T10111] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.166007][T10111] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.169112][T10111] bridge_slave_0: entered allmulticast mode [ 207.173117][T10111] bridge_slave_0: entered promiscuous mode [ 207.177794][T10111] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.180855][T10111] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.184288][T10111] bridge_slave_1: entered allmulticast mode [ 207.188331][T10111] bridge_slave_1: entered promiscuous mode [ 207.227318][T10111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.234118][T10111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.280939][T10172] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.342364][T10111] team0: Port device team_slave_0 added [ 207.354458][T10111] team0: Port device team_slave_1 added [ 207.411505][T10111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.414879][T10111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.423744][T10111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.495707][T10172] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.512426][T10111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.516367][T10111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.528008][T10111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.593219][ T5438] 8021q: adding VLAN 0 to HW filter on device eth4 [ 207.729526][T10172] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.764372][T10111] hsr_slave_0: entered promiscuous mode [ 207.767813][T10111] hsr_slave_1: entered promiscuous mode [ 207.771738][T10111] debugfs: 'hsr0' already exists in 'hsr' [ 207.777653][T10111] Cannot create hsr debugfs directory [ 207.785254][ T5776] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.822744][ T12] hsr_slave_0: left promiscuous mode [ 207.826188][ T12] hsr_slave_1: left promiscuous mode [ 207.882374][T10232] CIFS: Attempting to mount //127.0.0.1/share [ 207.943131][ T64] Bluetooth: hci2: command tx timeout [ 208.091740][T10187] smbdirect: ib_dev[syz2] removed [ 208.108506][T10231] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 208.282125][ T5776] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.342619][ T5776] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.355792][ T5825] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.361609][ T5825] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.374176][ T5825] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.449413][ T5438] 8021q: adding VLAN 0 to HW filter on device eth5 [ 208.504573][T10246] jffs2: notice: (10246) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 208.516084][T10111] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 208.521923][T10111] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 208.526291][T10111] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 208.542466][T10111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 208.549779][T10111] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 208.567486][T10111] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 208.570376][T10111] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 208.576751][T10111] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 208.584732][ T12] IPVS: stop unused estimator thread 0... [ 208.661950][T10111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.665484][T10232] CIFS: VFS: Error connecting to socket. Aborting operation. [ 208.671231][T10232] CIFS: VFS: cifs_mount failed w/return code = -4 [ 208.679921][T10111] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.698186][T10187] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.701681][T10187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.713550][T10187] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.716942][T10187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.722499][T10264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1547'. [ 208.734495][T10262] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 208.762686][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.794115][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.027341][T10111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.029807][T10295] jffs2: notice: (10295) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 209.098042][T10307] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 209.102048][T10307] CIFS: Attempting to mount //127.0.0.1/share [ 209.189901][T10111] veth0_vlan: entered promiscuous mode [ 209.198891][T10111] veth1_vlan: entered promiscuous mode [ 209.232385][T10111] veth0_macvtap: entered promiscuous mode [ 209.239802][T10111] veth1_macvtap: entered promiscuous mode [ 209.259030][T10111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.265638][T10321] tc_dump_action: action bad kind [ 209.275513][T10111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.333638][ T5776] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.336572][ T5776] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.344256][ T5776] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.450417][T10188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.453540][T10188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.481959][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.486184][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.492691][ T5825] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.495970][T10329] jffs2: notice: (10329) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 209.600991][T10335] team0 (unregistering): Port device team_slave_0 removed [ 209.607771][T10335] team0 (unregistering): Port device team_slave_1 removed [ 209.712283][T10345] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 209.897395][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 209.897412][ T42] audit: type=1400 audit(2000000021.569:767): avc: denied { write } for pid=10352 comm="syz.0.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 209.908711][T10353] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=10353 comm=syz.0.1566 [ 209.932202][T10307] CIFS: VFS: Error connecting to socket. Aborting operation. [ 209.935691][T10307] CIFS: VFS: cifs_mount failed w/return code = -4 [ 209.988495][T10357] loop4: detected capacity change from 0 to 2640 [ 209.992283][T10357] buffer_io_error: 320 callbacks suppressed [ 209.992296][T10357] Buffer I/O error on dev loop4, logical block 0, async page read [ 209.999563][T10357] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.002391][T10357] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.005921][T10357] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.008547][T10357] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.011105][T10357] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.016288][T10357] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.019906][T10357] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.022344][T10357] ldm_validate_partition_table(): Disk read failed. [ 210.024768][ T64] Bluetooth: hci2: command tx timeout [ 210.030621][T10357] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.033584][T10357] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.036406][T10357] Dev loop4: unable to read RDB block 0 [ 210.038573][T10357] loop4: unable to read partition table [ 210.040116][ T42] audit: type=1400 audit(2000000021.709:768): avc: denied { map } for pid=10356 comm="syz.4.1568" path="/dev/loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.044880][T10357] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 210.050665][ T42] audit: type=1400 audit(2000000021.709:769): avc: denied { map } for pid=10356 comm="syz.4.1568" path="/dev/loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.063279][ T42] audit: type=1400 audit(2000000021.709:770): avc: denied { execute } for pid=10356 comm="syz.4.1568" path="/dev/loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.079814][ T5136] ldm_validate_partition_table(): Disk read failed. [ 210.082062][ T5136] Dev loop4: unable to read RDB block 0 [ 210.085639][ T5136] loop4: unable to read partition table [ 210.100566][T10362] CIFS: Attempting to mount //127.0.0.1/share [ 210.138995][T10369] syzkaller0: entered promiscuous mode [ 210.141387][T10369] syzkaller0: entered allmulticast mode [ 210.262231][T10374] team0 (unregistering): Port device team_slave_0 removed [ 210.267154][T10374] team0 (unregistering): Port device team_slave_1 removed [ 210.476106][T10377] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 210.478802][T10377] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 210.482095][T10377] vhci_hcd vhci_hcd.0: Device attached [ 210.485736][T10378] vhci_hcd: unknown pdu 1 [ 210.494889][ T5776] vhci_hcd vhci_hcd.4: stop threads [ 210.497229][ T5776] vhci_hcd vhci_hcd.4: release socket [ 210.499092][ T5776] vhci_hcd vhci_hcd.4: disconnect device [ 210.499872][ T42] audit: type=1400 audit(2000000022.169:771): avc: denied { write } for pid=10376 comm="syz.4.1574" name="/" dev="9p" ino=77886175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.510746][ T42] audit: type=1400 audit(2000000022.169:772): avc: denied { unlink } for pid=10376 comm="syz.4.1574" name="file0" dev="9p" ino=77886251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 210.521017][ T42] audit: type=1400 audit(2000000022.189:773): avc: denied { write } for pid=10376 comm="syz.4.1574" name="/" dev="9p" ino=77886175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.530747][ T42] audit: type=1400 audit(2000000022.189:774): avc: denied { create } for pid=10376 comm="syz.4.1574" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 210.549129][ T42] audit: type=1400 audit(2000000022.219:775): avc: denied { write } for pid=10376 comm="syz.4.1574" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 210.553474][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1574'. [ 210.568333][T10377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1574'. [ 210.572194][T10377] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 210.589382][ T42] audit: type=1400 audit(2000000022.259:776): avc: denied { nlmsg_read } for pid=10376 comm="syz.4.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 210.840013][T10362] CIFS: VFS: Error connecting to socket. Aborting operation. [ 210.843773][T10362] CIFS: VFS: cifs_mount failed w/return code = -4 [ 210.881838][T10383] [ 210.882728][T10383] ====================================================== [ 210.884907][T10383] WARNING: possible circular locking dependency detected [ 210.887090][T10383] syzkaller #0 Tainted: G L [ 210.889644][T10383] ------------------------------------------------------ [ 210.892465][T10383] syz.0.1575/10383 is trying to acquire lock: [ 210.894930][T10383] ffff88803d685d40 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: ima_file_truncate+0xe6/0x190 [ 210.899300][T10383] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 210.899300][T10383] but task is already holding lock: [ 210.902384][T10383] ffff88805a6c0460 (sb_writers#6){.+.+}-{0:0}, at: path_openat+0x1a45/0x2440 [ 210.905586][T10383] [ 210.905586][T10383] which lock already depends on the new lock. [ 210.905586][T10383] [ 210.909185][T10383] [ 210.909185][T10383] the existing dependency chain (in reverse order) is: [ 210.912409][T10383] [ 210.912409][T10383] -> #4 (sb_writers#6){.+.+}-{0:0}: [ 210.915081][T10383] lock_acquire+0x1b9/0x370 [ 210.916928][T10383] mnt_want_write+0x6f/0x420 [ 210.918828][T10383] lookup_open+0x150/0x1990 [ 210.920666][T10383] path_openat+0xa2c/0x2440 [ 210.922484][T10383] do_file_open+0x20e/0x430 [ 210.924360][T10383] file_open_name+0x1c3/0x3e0 [ 210.926258][T10383] filp_open+0x2e/0x50 [ 210.927954][T10383] fsg_lun_open+0x6b/0x7b0 [ 210.929799][T10383] fsg_store_file+0x1e7/0x450 [ 210.931695][T10383] configfs_write_iter+0x302/0x4e0 [ 210.933719][T10383] vfs_write+0x6af/0x1050 [ 210.935495][T10383] ksys_write+0x12a/0x250 [ 210.937267][T10383] do_syscall_64+0x123/0x790 [ 210.939131][T10383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.941467][T10383] [ 210.941467][T10383] -> #3 (&common->filesem){++++}-{4:4}: [ 210.944228][T10383] lock_acquire+0x1b9/0x370 [ 210.946049][T10383] down_read+0x99/0x4c0 [ 210.947791][T10383] fsg_show_file+0x20/0x180 [ 210.949613][T10383] configfs_read_iter+0x426/0x6f0 [ 210.951594][T10383] __kernel_read+0x397/0xad0 [ 210.953453][T10383] integrity_kernel_read+0x7e/0xb0 [ 210.955484][T10383] ima_calc_file_hash_tfm+0x25e/0x350 [ 210.957616][T10383] ima_calc_file_hash+0x1e3/0x380 [ 210.959654][T10383] ima_collect_measurement+0x94f/0xb30 [ 210.961818][T10383] process_measurement+0xdfe/0x2350 [ 210.963882][T10383] ima_file_check+0xc3/0x110 [ 210.965729][T10383] security_file_post_open+0xc4/0x210 [ 210.967867][T10383] path_openat+0x5cd/0x2440 [ 210.969733][T10383] do_file_open+0x20e/0x430 [ 210.971569][T10383] do_sys_openat2+0x10f/0x1e0 [ 210.973464][T10383] __x64_sys_openat+0x12d/0x210 [ 210.975415][T10383] do_syscall_64+0x123/0x790 [ 210.977292][T10383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.979644][T10383] [ 210.979644][T10383] -> #2 (&p->frag_sem){++++}-{4:4}: [ 210.982189][T10383] lock_acquire+0x1b9/0x370 [ 210.984042][T10383] down_read+0x99/0x4c0 [ 210.985752][T10383] configfs_read_iter+0x346/0x6f0 [ 210.987755][T10383] __kernel_read+0x397/0xad0 [ 210.989620][T10383] integrity_kernel_read+0x7e/0xb0 [ 210.991668][T10383] ima_calc_file_hash_tfm+0x25e/0x350 [ 210.993806][T10383] ima_calc_file_hash+0x1e3/0x380 [ 210.995819][T10383] ima_collect_measurement+0x94f/0xb30 [ 210.998001][T10383] process_measurement+0xdfe/0x2350 [ 211.000120][T10383] ima_file_check+0xc3/0x110 [ 211.001968][T10383] security_file_post_open+0xc4/0x210 [ 211.004115][T10383] path_openat+0x5cd/0x2440 [ 211.005905][T10383] do_file_open+0x20e/0x430 [ 211.007738][T10383] do_sys_openat2+0x10f/0x1e0 [ 211.009650][T10383] __x64_sys_openat+0x12d/0x210 [ 211.011613][T10383] do_syscall_64+0x123/0x790 [ 211.013471][T10383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.015789][T10383] [ 211.015789][T10383] -> #1 (&buffer->mutex){+.+.}-{4:4}: [ 211.018513][T10383] lock_acquire+0x1b9/0x370 [ 211.020366][T10383] __mutex_lock+0x1a4/0x1bc0 [ 211.022223][T10383] configfs_read_iter+0x79/0x6f0 [ 211.024216][T10383] __kernel_read+0x397/0xad0 [ 211.026071][T10383] integrity_kernel_read+0x7e/0xb0 [ 211.028124][T10383] ima_calc_file_hash_tfm+0x25e/0x350 [ 211.030294][T10383] ima_calc_file_hash+0x1e3/0x380 [ 211.032301][T10383] ima_collect_measurement+0x94f/0xb30 [ 211.034484][T10383] process_measurement+0xdfe/0x2350 [ 211.036541][T10383] ima_file_check+0xc3/0x110 [ 211.038395][T10383] security_file_post_open+0xc4/0x210 [ 211.040573][T10383] path_openat+0x5cd/0x2440 [ 211.042399][T10383] do_file_open+0x20e/0x430 [ 211.044236][T10383] do_sys_openat2+0x10f/0x1e0 [ 211.046122][T10383] __x64_sys_openat+0x12d/0x210 [ 211.047976][T10383] do_syscall_64+0x123/0x790 [ 211.049746][T10383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.051909][T10383] [ 211.051909][T10383] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 211.054986][T10383] check_prev_add+0xeb/0xe60 [ 211.056846][T10383] __lock_acquire+0x1492/0x1ec0 [ 211.058790][T10383] lock_acquire+0x1b9/0x370 [ 211.060631][T10383] __mutex_lock+0x1a4/0x1bc0 [ 211.062478][T10383] ima_file_truncate+0xe6/0x190 [ 211.064415][T10383] security_file_truncate+0xf9/0x1e0 [ 211.066514][T10383] path_openat+0x1d7e/0x2440 [ 211.068371][T10383] do_file_open+0x20e/0x430 [ 211.070215][T10383] do_sys_openat2+0x10f/0x1e0 [ 211.072112][T10383] __x64_sys_openat+0x12d/0x210 [ 211.074073][T10383] do_syscall_64+0x123/0x790 [ 211.075940][T10383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.078243][T10383] [ 211.078243][T10383] other info that might help us debug this: [ 211.078243][T10383] [ 211.081876][T10383] Chain exists of: [ 211.081876][T10383] &ima_iint_mutex_key[depth] --> &common->filesem --> sb_writers#6 [ 211.081876][T10383] [ 211.086698][T10383] Possible unsafe locking scenario: [ 211.086698][T10383] [ 211.089349][T10383] CPU0 CPU1 [ 211.091322][T10383] ---- ---- [ 211.093254][T10383] rlock(sb_writers#6); [ 211.094810][T10383] lock(&common->filesem); [ 211.097314][T10383] lock(sb_writers#6); [ 211.099718][T10383] lock(&ima_iint_mutex_key[depth]); [ 211.101653][T10383] [ 211.101653][T10383] *** DEADLOCK *** [ 211.101653][T10383] [ 211.104550][T10383] locks held by syz.0.1575/10383: 1, last CPU#2: [ 211.106825][T10383] #0: ffff88805a6c0460 (sb_writers#6){.+.+}-{0:0}, at: path_openat+0x1a45/0x2440 [ 211.110010][T10383] [ 211.110010][T10383] stack backtrace: [ 211.112080][T10383] CPU: 2 UID: 0 PID: 10383 Comm: syz.0.1575 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.112101][T10383] Tainted: [L]=SOFTLOCKUP [ 211.112106][T10383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.112115][T10383] Call Trace: [ 211.112124][T10383] [ 211.112131][T10383] dump_stack_lvl+0x100/0x190 [ 211.112152][T10383] print_circular_bug.cold+0x178/0x1be [ 211.112177][T10383] check_noncircular+0x146/0x160 [ 211.112200][T10383] check_prev_add+0xeb/0xe60 [ 211.112220][T10383] __lock_acquire+0x1492/0x1ec0 [ 211.112242][T10383] ? tomoyo_path_perm+0x2db/0x460 [ 211.112265][T10383] lock_acquire+0x1b9/0x370 [ 211.112283][T10383] ? ima_file_truncate+0xe6/0x190 [ 211.112298][T10383] ? __pfx___might_resched+0x10/0x10 [ 211.112316][T10383] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 211.112338][T10383] __mutex_lock+0x1a4/0x1bc0 [ 211.112360][T10383] ? ima_file_truncate+0xe6/0x190 [ 211.112375][T10383] ? ima_file_truncate+0xe6/0x190 [ 211.112391][T10383] ? __pfx___mutex_lock+0x10/0x10 [ 211.112413][T10383] ? __pfx_ima_file_check+0x10/0x10 [ 211.112428][T10383] ? hook_file_truncate+0xba/0x280 [ 211.112452][T10383] ? ima_file_truncate+0xe6/0x190 [ 211.112467][T10383] ima_file_truncate+0xe6/0x190 [ 211.112482][T10383] security_file_truncate+0xf9/0x1e0 [ 211.112499][T10383] path_openat+0x1d7e/0x2440 [ 211.112522][T10383] ? __pfx_path_openat+0x10/0x10 [ 211.112544][T10383] do_file_open+0x20e/0x430 [ 211.112564][T10383] ? __pfx_do_file_open+0x10/0x10 [ 211.112589][T10383] ? _raw_spin_unlock+0x28/0x50 [ 211.112604][T10383] ? alloc_fd+0x471/0x7a0 [ 211.112625][T10383] do_sys_openat2+0x10f/0x1e0 [ 211.112646][T10383] ? __pfx_do_sys_openat2+0x10/0x10 [ 211.112666][T10383] ? find_held_lock+0x2b/0x80 [ 211.112682][T10383] __x64_sys_openat+0x12d/0x210 [ 211.112703][T10383] ? __pfx___x64_sys_openat+0x10/0x10 [ 211.112726][T10383] do_syscall_64+0x123/0x790 [ 211.112747][T10383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.112762][T10383] RIP: 0033:0x7f493479e0d9 [ 211.112776][T10383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.112790][T10383] RSP: 002b:00007f4935671028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 211.112804][T10383] RAX: ffffffffffffffda RBX: 00007f4934a25fa0 RCX: 00007f493479e0d9 [ 211.112813][T10383] RDX: 00000000000a4242 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 211.112823][T10383] RBP: 00007f4934835024 R08: 0000000000000000 R09: 0000000000000000 [ 211.112833][T10383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.112842][T10383] R13: 00007f4934a26038 R14: 00007f4934a25fa0 R15: 00007ffdeaf67848 [ 211.112856][T10383] [ 211.337810][ T5776] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.341164][ T5776] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.476785][ T5776] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.480278][ T5776] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.577273][ T5776] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.581509][ T5776] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.716596][ T5776] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.720947][ T5776] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.861332][ T5776] pim6reg: left allmulticast mode [ 211.900860][ T5776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.905442][ T5776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.909482][ T5776] bond0 (unregistering): Released all slaves [ 212.006793][ T5438] 8021q: adding VLAN 0 to HW filter on device eth6 [ 212.119907][ T5438] 8021q: adding VLAN 0 to HW filter on device eth7 [ 212.226487][ T5438] 8021q: adding VLAN 0 to HW filter on device eth8 [ 212.322083][ T5776] hsr_slave_0: left promiscuous mode [ 212.325320][ T5776] hsr_slave_1: left promiscuous mode [ 212.327309][ T5776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.329712][ T5776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.332354][ T5776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.338914][ T5776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.343562][ T5776] veth1_macvtap: left promiscuous mode [ 212.345349][ T5776] veth0_macvtap: left promiscuous mode [ 212.347189][ T5776] veth1_vlan: left promiscuous mode [ 212.348806][ T5776] veth0_vlan: left promiscuous mode [ 212.435613][ T5438] 8021q: adding VLAN 0 to HW filter on device eth9 [ 213.097928][ T5776] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.166692][ T5776] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.246093][ T5776] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.297801][ T5776] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.403388][ T5776] bridge_slave_1: left allmulticast mode [ 213.405662][ T5776] bridge_slave_1: left promiscuous mode [ 213.407588][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.411507][ T5776] bridge_slave_0: left allmulticast mode [ 213.414518][ T5776] bridge_slave_0: left promiscuous mode [ 213.416861][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.465492][ T5776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.470208][ T5776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.474968][ T5776] bond0 (unregistering): Released all slaves [ 213.605406][ T5438] 8021q: adding VLAN 0 to HW filter on device eth10 [ 213.720300][ T5438] 8021q: adding VLAN 0 to HW filter on device eth11 [ 213.762629][ T5776] hsr_slave_0: left promiscuous mode [ 213.765364][ T5776] hsr_slave_1: left promiscuous mode [ 213.767827][ T5776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.770899][ T5776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.782653][ T5776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.785578][ T5776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.791230][ T5776] veth1_macvtap: left promiscuous mode [ 213.793969][ T5776] veth0_macvtap: left promiscuous mode [ 213.796258][ T5776] veth1_vlan: left promiscuous mode [ 213.798372][ T5776] veth0_vlan: left promiscuous mode [ 213.921247][ T5438] 8021q: adding VLAN 0 to HW filter on device eth12 [ 214.038126][ T5438] 8021q: adding VLAN 0 to HW filter on device eth13 [ 219.458296][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 219.458314][ T42] audit: type=1400 audit(2000000031.129:794): avc: denied { write } for pid=10464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.491920][ T42] audit: type=1400 audit(2000000031.159:795): avc: denied { write } for pid=10467 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.725611][ T42] audit: type=1400 audit(2000000031.399:796): avc: denied { write } for pid=10473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.752390][ T42] audit: type=1400 audit(2000000031.419:797): avc: denied { write } for pid=10476 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.734620][ T42] audit: type=1400 audit(2000000032.409:798): avc: denied { write } for pid=10480 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.778296][ T42] audit: type=1400 audit(2000000032.449:799): avc: denied { write } for pid=10483 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1