last executing test programs: 44.639910948s ago: executing program 0 (id=183): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611808000000000018110000", @ANYRES32=r2, @ANYBLOB="000000000200"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff85000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) accept$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x18, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x15, 0x8, 0x40, 0x42, 0x1}, 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r5, &(0x7f0000001080)={0x2020}, 0x2020) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 44.579392774s ago: executing program 0 (id=186): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER(0xffffc90000000000, 0x0, &(0x7f0000000040)={0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00Z\x00\n']) munlockall() sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) munlockall() sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newnexthop={0x24, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x1}]}]}, 0x24}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x8, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000780)='syzkaller\x00'}, 0x80) r5 = fsopen(&(0x7f00000007c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000800)={r4, r6}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000840), 0x2, 0x3}}, 0x20) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x34, r7, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff001}]]}, 0x34}, 0x1, 0x0, 0x0, 0x24044040}, 0x20004056) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x4d2, 0x6c}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x40, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x500, {0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x6c, 0x0, @remote, @local}, "000004d200000000"}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@ipv4_newroute={0x24, 0x18, 0x401, 0x0, 0x0, {0x2, 0x20, 0x335245d9e7edf967, 0x0, 0xfe, 0x3, 0x0, 0x5}, [@RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x24}}, 0x0) 44.509449308s ago: executing program 0 (id=189): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8350, 0x2, 0x2, 0x8, 0x4}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000006c80)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000006d40)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000006d80)='./bus\x00', &(0x7f0000006f80), 0x8, &(0x7f0000006fc0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x20044001) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x2, 0x20800) ioctl$NILFS_IOCTL_GET_VINFO(r3, 0xc0186e86, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000000140), 0x800001d, 0x300) recvmmsg(r2, &(0x7f0000000180), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[], 0x2fc}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000480)="307106092a864886f70d010702a0643062020101310f300d06096086480165030402010500300b06092a864886f70d010701313f303d0211013014300f310d300b0603550403130454657374020101300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0x73, 0xffffffffffffffff) setns(0xc9, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/netlink\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000340)=""/215, 0xd7}], 0x1, 0x1006c, 0x0) chdir(&(0x7f0000007000)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f0000007040)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000007080)='./file7\x00', 0x1000) 44.47993227s ago: executing program 0 (id=190): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1b, {0x0, "0f31f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x63}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) ioctl$KVM_RUN(r3, 0xae80, 0x0) 44.21803634s ago: executing program 0 (id=196): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/48, 0x30}], 0x1, 0x5fac, 0x5) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@mpls_getroute={0x1b, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0x4}}]}, 0x24}}, 0x0) r2 = syz_open_dev$video(&(0x7f00000000c0), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x1) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000240)={0x1, {0xf8000002, 0x8b8, 0xc4f, 0x6}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f00000004c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049c6) mknodat$md(0xffffffffffffff9c, &(0x7f0000000500)='./md0\x00', 0x6180, 0x0) r4 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000540)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r4, 0x40480923, 0x0) ioctl$STOP_ARRAY(r4, 0x932, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, r6, 0x50dc85624ea6cf59, 0xfffffffe, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) openat$md_node(0xffffffffffffff9c, &(0x7f0000000580)='./md0\x00', 0x800, 0x0) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [{0x20, 'N\xb0\xdd\'\x0e\xdf\x14\t>\x9b\xccH\x00\xbf!\xd9\xc8\x96;r\xcc?//\xa5\xa6c\xc3\x05\xd1\x17\xea\x8b\x9b\xedNs\xb0\xe7\x13N\xc9g\x9f'}], 0xa, "989860917a72faf669b74709f32d59f95b1db6aae6e3df4595c0876b7e7816701602de18a8828bc2a4dcb634e6445c326f0d110d0fc035884857f74aac44829768425388c3295ecb131dc8797bbf2f395ee5851484b3ecb6a5950fd88db7daaf201418607dd18f"}, 0x9f) close(r3) execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r7 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e20, @loopback}}) 44.06778913s ago: executing program 0 (id=203): getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ed6000/0x2000)=nil, &(0x7f0000aa0000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004d8000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x0}, 0x68) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) rt_sigprocmask(0x2, &(0x7f0000000380)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f00000003c0)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigtimedwait(&(0x7f0000000440)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x45, &(0x7f0000000480)=ANY=[]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x5, 0x40, 0x1, 0x7}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'pimreg0\x00', 0x7c3}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) fchdir(0xffffffffffffffff) ioctl$COMEDI_SUBDINFO(0xffffffffffffffff, 0x80486402, &(0x7f00000002c0)) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000200)) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x8003cae, 0x1c080, 0xb, 0x20002f7}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000000)={0x3, 0x8000, 0x3a8a, @local, 'veth1_macvtap\x00'}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 29.058156667s ago: executing program 32 (id=203): getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ed6000/0x2000)=nil, &(0x7f0000aa0000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004d8000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x0}, 0x68) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) rt_sigprocmask(0x2, &(0x7f0000000380)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f00000003c0)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigtimedwait(&(0x7f0000000440)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x45, &(0x7f0000000480)=ANY=[]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x5, 0x40, 0x1, 0x7}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'pimreg0\x00', 0x7c3}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) fchdir(0xffffffffffffffff) ioctl$COMEDI_SUBDINFO(0xffffffffffffffff, 0x80486402, &(0x7f00000002c0)) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000200)) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x8003cae, 0x1c080, 0xb, 0x20002f7}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000000)={0x3, 0x8000, 0x3a8a, @local, 'veth1_macvtap\x00'}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.029978873s ago: executing program 3 (id=664): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000000)=0x40049, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r2, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000001400)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000400)={0x0, 0x80}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000000)=0x40049, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a83116752ddb11cfafffa3837841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e30df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cd17b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0544c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf80300cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9874620e322d9348900000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a35df8574eb49e972f7976eafee43a6c17009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d5040000000000000000000000000000074f21ec2b57bb2daf8fab7cd564d1e84c93af254ab029e6cd168007b9a10a6664d9d264aceede0183b2306c440b2c81c9e120ece36a61b0b015ea6716decf8783e0845fa975b6e5f7f4dd4abe2a95e764ae13288d4439ec2906659bc9f26212615423c3d8d58901a6b51a93c8aacb19c416d5260662031a295f2b33295a60db77b5f082bdc48cd06c6cd01e7a40e456d829d277c77c2ca9159c82a391a24d5f6193228d93e2fd99cd0cdeefa9b7c5ea02c5454ef4c6631e6766ffcba3cce4ab13c69622675683ab1f05edbb09641c9dba535b319a21a00287645449a61eefc00a2a8f6955d6573023325bc00ca0facb69d67c8b95e29b36c4a5f84a959262c382de9a411be7b9b500ca329e5eefcd323490eed4bcbcba4764618bf51a08498a64b0e19c00e33480b27c2b12c326e6bf10234f883b3082512e9ad2fbdf6bae"], &(0x7f0000001340)='syzkaller\x00'}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r2, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000001400)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) (async) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000400)={0x0, 0x80}) (async) 4.160002152s ago: executing program 3 (id=679): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xe, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000001c00)='GPL\x00'}, 0x48) 4.158249893s ago: executing program 3 (id=680): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80003, 0xff) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc) getpeername(r0, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="1808f9ffffffffffffff0000ffffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066580000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x2, 0xde, &(0x7f00000004c0)=""/222, 0x0, 0x8}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x10000, 0x1f7) pipe2(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x400203, 0x2) dup(r1) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x200, @local}, {0x2, 0x4e23, @local}, 0x37f, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0xa4e96d38234f64e2, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 4.079877875s ago: executing program 3 (id=681): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) io_uring_enter(r0, 0x602d, 0x7a79, 0x81, &(0x7f0000000040)={[0x40]}, 0x8) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x88000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x22081, 0x0) write(r1, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000440), 0x88, &(0x7f0000002540)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 4.07850785s ago: executing program 3 (id=683): r0 = openat$comedi(0xffffff9c, &(0x7f0000000940)='/dev/comedi1\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000980)={'comedi_bond\x00', [0xffe, 0x4, 0x7fffffff, 0x8, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0x9, 0x4, 0x1, 0x1, 0x1000008, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x1ff, 0x4e, 0x14000005, 0x1e41a175, 0x4, 0xff, 0xffffffff, 0x2, 0x5, 0x18, 0x2, 0x2000006, 0x77fd, 0xfffffff9]}) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24000080) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x5c, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x100, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}]}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0xfffffffd}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xfd}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x80}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xd}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xa}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x100}, 0x1, 0x0, 0x0, 0x4c080}, 0x2) r3 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000a40)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x74, 0x3]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000ac0)={{0xa, 0x4e24, 0x10000, @local, 0x4}, {0xa, 0x4e23, 0x7, @mcast2, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x2, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) (async) mount(0x0, 0x0, &(0x7f0000000bc0)='proc\x00', 0x0, 0x0) (async) socket(0x2, 0x2, 0x0) (async, rerun: 64) syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="001d043a6c4c5fd5ea1f5f58693be2005b7d5d10a97fddcbb9b7a3578ab0e3c8a91ce3eac2566c487af03d491d7b029e9a4ef8f8414d866f8aec90c0a40b8cca5c60854bb43065b022722c69d816cdd966d18cc317c21a18ea2f3ce6c8d509ddf6304b93efc01f97266149e098e40bfed4f026da3891c910f7", @ANYRES16=0x0, @ANYBLOB="0004000000000000000067000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="0800c40001000000"], 0x2c}}, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000d40), 0x4, 0x0) (async, rerun: 64) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d80), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e80)={0x1e8, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008810}, 0x200000c0) (async) syz_emit_ethernet(0x36, &(0x7f0000001080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x68, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1a4}}, 0x1004) (async, rerun: 64) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) (rerun: 64) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./trace/trace_clock\x00', 0x2, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000780)={0x73622a85, 0x1100, 0x1}) r7 = syz_open_dev$dmmidi(&(0x7f00000007c0), 0x200, 0x201) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0x810c5701, &(0x7f0000000800)) 3.929963894s ago: executing program 3 (id=685): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000000)={0x0, [{0x0, 0x2788, 0x6, &(0x7f00000003c0)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x6, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000900)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x2481, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x6, 0x4, 0x7, 0x10, 0x6df, 0x20, 0x1, 0x1, 0x1, &(0x7f00000002c0)=[0x0], 0x1, 0x0}) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000000)={0x0, [{0x0, 0x2788, 0x6, &(0x7f00000003c0)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x6, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000900)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x2481, 0x0) (async) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x6, 0x4, 0x7, 0x10, 0x6df, 0x20, 0x1, 0x1, 0x1, &(0x7f00000002c0)=[0x0], 0x1, 0x0}) (async) 3.825216902s ago: executing program 33 (id=685): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000000)={0x0, [{0x0, 0x2788, 0x6, &(0x7f00000003c0)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x6, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000900)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x2481, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x6, 0x4, 0x7, 0x10, 0x6df, 0x20, 0x1, 0x1, 0x1, &(0x7f00000002c0)=[0x0], 0x1, 0x0}) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000000)={0x0, [{0x0, 0x2788, 0x6, &(0x7f00000003c0)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x6, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000900)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x2481, 0x0) (async) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x6, 0x4, 0x7, 0x10, 0x6df, 0x20, 0x1, 0x1, 0x1, &(0x7f00000002c0)=[0x0], 0x1, 0x0}) (async) 3.409719437s ago: executing program 4 (id=693): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@delneigh={0x28, 0x1d, 0x1, 0xc00, 0x0, {0x7, 0x0, 0x0, r3, 0x40, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x20, 0x0) 3.173492174s ago: executing program 4 (id=695): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat$dm_control(0xffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x9000, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x1a4601, 0x0, 0x0, @by_dev={r2}, [@integrity={0x0, 0x2008, 0x0, 0x68, 'integrity\x00', {{@ram_num={'1:', 0x1}, 0x20, '128'}, 0x20, '1', 0x20, 'J', ' 1 bitmap_flush_interval:100'}}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0xa0001, 0x0) lseek(r3, 0xffff, 0x0) 3.019423814s ago: executing program 4 (id=700): symlink(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') mkdir(&(0x7f0000000200)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@uuid_off}, {@verity_on}, {@index_on}, {@index_on}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 2.927304024s ago: executing program 4 (id=701): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x8910, &(0x7f00000002c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee0000ea584000"}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'batadv_slave_0\x00', &(0x7f0000000340)=@ethtool_dump={0x3e, 0xffffff00, 0xfc17a14}}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback=0x1, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000480)={0x27}, 0x62) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x198fb580ea88f23a, 0x0, &(0x7f00000004c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5111) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000680)=r2, 0x4) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000006c0)={r5}, 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r6, &(0x7f0000000740)="020030397f00090100"/128, 0x80) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000006700), 0x2, 0x0) r8 = syz_ublk_setup_io_uring(0x2178, &(0x7f0000006740)={0x0, 0x0, 0x100}, &(0x7f00000067c0)=0x0, &(0x7f0000006800)=0x0, &(0x7f0000000040)=0x0) r12 = creat(&(0x7f0000000000)='./file0\x00', 0x88) ioctl$SIOCX25GCALLUSERDATA(r12, 0x89e4, &(0x7f0000000080)={0x80, "80dfbe02a7fdb6eddcefc47c931a471232c420f85e3188e78dad5f56da22d073822dd94b7f4329358f2bd43da8225959c09e531c288428c59dd02e235a3915513e05721020c1aaedceae91205cc3d8193f0118c3fc08567f34d6eeca65e220b9a2d83586dc52eddc1e401718396d4399a9c6eece3503192c96155672d3f04856"}) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000006980)={0x2e, 0x0, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000006a00)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bcbb}}}, 0x0) 2.870095267s ago: executing program 4 (id=702): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0xfffe}, 0xe) listen(r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000550001000000000000f90000070082011ebb943b36831badd488b2b79cb1e72a05fbe36e0d34d17ef92625afe25e295b95175dd9d09b819ac587f9016d5428f0d497146ec12089e2bad2e74ab9830ab7c78ec16841f6dc15fe510f8e78", @ANYRES32=r1, @ANYBLOB="200001002932d227a8c0fa809053597661106ebf6d6055615df10df3335d17dc6473fa291b9b0a2e1993d50b6c3be72f519291d59dfa8344e8ec93d5338d55f4767f95ec0830573f83da0b1ea40dcc8e18a3730a4b320541912c32bdbbe5bc9fbcaf759d7516685eddc3748c53410c19e64077775c1a88ae46ddd02754d5ae37bee46f08ee566fb881ae28e2e4034aa70d8056818f77e5d01f7e0172d61b98a6a273cd", @ANYRES32=r2, @ANYBLOB="00001000e0ec0300000100932a8461000002000008"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x11, 0x1, 0x800) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x11e, 0x1, 0x0, 0xfffffffffffffd61) r5 = syz_open_dev$vim2m(0x0, 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x1, 0x2, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1c0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/idVendor\x00', 0x80200, 0x0) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1c0) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/../../functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='dummy_udc.0', 0xb) 2.812078423s ago: executing program 4 (id=703): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @any, 0x4}, 0xe) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="120110030702120001c208100009046a80005a938b3f00"/36], 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000740), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000007c0)={[0x10000000000004, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x469, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x6], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000880), 0x1a9002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r4, 0x0) getrandom(&(0x7f00000008c0)=""/148, 0x94, 0x3) r5 = semget$private(0x0, 0x207, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="d00100001b0004002bbd8d00fedbdf25fe8000000000000000000000000000bbac1e000100000000eeb8a2b1c20f00004e2100024e200000020080803b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000000000f00000000000000090000000000000006000000000000000700000000000000010000000000000006000000000000000200000000000000050000000000000009000000000000004002000000000000090000000000000002000000050000000100010200000000020000000000000008001800ff0f0000e400060000000000000000000000000000000001fe8000000000000000000000000000bb4e2300004e2400080200a0801d000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="fc020000000000000000000000000001000004d53c000000e000000200000000000000000000000010000000000000000300000000000000fcffffffffffffff0a0000000000000005000000000000000300000000000000ff010000000000000300000000000000c15d0000000000000100000000000000000000000090000006000000000000000800000008000000ffffffff2dbd7000033500000a00020622000000000000002400090005000000000000000200000000000000ffffff7f000000000700000000000000"], 0x1d0}, 0x1, 0x0, 0x0, 0x400c00c}, 0x44050) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x20842, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000580), 0x10) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f00000006c0), 0x10) write$P9_RLERRORu(r6, &(0x7f0000000440)=ANY=[], 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r9, 0x0, 0x30, 0x1b}, 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000040)=""/166) openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000440)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) 2.116552994s ago: executing program 1 (id=707): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x14, 0x3a, 0x301, 0x70ad2d, 0x25dfdbfd, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4008005}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000500)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000740)='source', &(0x7f0000000780)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$sg(&(0x7f0000000200), 0x4, 0x98b043) write(r8, &(0x7f0000000640)="18e24b719cb87d7cf77eda59666c3bfab8311928798ce28e6f7af60e1226ff3be0c68cc20ceab5df4b1022c158fec7fc5eeef5d13d2655f31b4d61d830149d8a1178381a6ba715f95878230ff4c664b6f675be00ecd148605244c6d9cf844f5e351115c800fdb6cce54b0171bcb43fba7e1852aa3a8afb928e5093ddbe49dc3d85658bc75122c58c5b10128635ac28259757ebd7820bdc52edeeb12a672610b8fe22f2afd382105ba147afc58029dba3877fb1f8488d0804926433ba807d2433636feb0b3bd269257751cb5fc65c35bf0b6592e322ac0a06ec014e636d2392b83cd4", 0xe2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',cache=fscache,mmap,access=', @ANYRESDEC=r6, @ANYBLOB="2c6e6f6465766d61702c6f626a5f726f6c653d6e6c3830323131002c61707072616973655f747970653d696d6173696701df696972616973652c657569643e", @ANYRESDEC=r6, @ANYBLOB=',fowner>', @ANYRESDEC=r7, @ANYBLOB=',\x00']) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)={0x24, r10, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$netlink(r3, 0x0, 0x90) 2.041441817s ago: executing program 1 (id=708): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8000, 0x1f7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x200, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8000002, 0x3a10, 0x3, 0x3}, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000180), 0x80000005, 0x20040) socket$inet(0x2, 0x2, 0x1) syz_open_dev$loop(&(0x7f0000000440), 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x78}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000780)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000007c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, 0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe70b, 0x42, 0x3, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3071, 0x2, 0x5, 0x19f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf4be, 0x20, 0x20000001, 0x26d}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000000200"/20, @ANYRES32=r2, @ANYBLOB="00000600040c01001c00128009000100626f6e64000000000c0002800800090001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0xc864, 0x16d04}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 1.148562688s ago: executing program 1 (id=710): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x20200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2710, 0x3, 0xf0000000, 0x1000, &(0x7f000064b000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x2710, 0x0, 0x8080000, 0x2000, &(0x7f0000694000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000240)='0', 0xfffffd2c) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000700)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="010000000b00"/16, @ANYBLOB="d2f383454a5c150c8a48", @ANYRES16=r6, @ANYRES64=r6, @ANYRESOCT=r2, @ANYRES16=0x0], 0x48}}, 0x24000061) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./dev\x00', 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000540)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x3, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) setresgid(0x0, 0xffffffffffffffff, 0xee00) openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/rfcomm0\x00', 0x802, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0x32, &(0x7f0000000040)=0x1000000, 0x4) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000001c0)=0xc) 849.759059ms ago: executing program 2 (id=713): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xe, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000001c00)='GPL\x00'}, 0x48) 846.879633ms ago: executing program 2 (id=714): set_mempolicy(0x4005, &(0x7f0000000340)=0x8000, 0x78) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3e, 0x2) (async) set_mempolicy(0x3, &(0x7f0000000700)=0x3, 0x200) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000009c0)={0x1, &(0x7f0000000a00)=[{0x6, 0x0, 0x0, 0x7fff7fff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc\x00', 0x161) (async) mount(0x0, &(0x7f0000000a80)='./proc\x00', &(0x7f0000000ac0)='proc\x00', 0x214000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000b40)='100', 0x3) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000001c0)=0x1) (async) r4 = fcntl$dupfd(r3, 0x406, r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x14, &(0x7f0000000200)={{0x1}, 0x0, 0x0}, 0x20) (async) write$tun(r4, &(0x7f0000000200)=ANY=[], 0xa2) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000280)=""/149, 0x95}], 0x1) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0417"], 0x9) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000780)={'rose0\x00', 0x2000}) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000bc0)=@newtfilter={0x138c, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r7, {0x5, 0x3da48c8682330ab8}, {0xd}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x135c, 0x2, [@TCA_BASIC_ACT={0x1358, 0x3, [@m_sample={0x14c, 0xa, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x116}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x5, 0x7, 0xa, 0xa}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_PARMS={0xc, 0x2, {0x1, 0x9, 0x5, 0x0, 0x1}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0xffff, 0x5, 0x9, 0x401}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}]}, {0xbd, 0x6, "ae244f52447b563e93af7952896b732111ab533687db1b953ed064a610ca946ac7409cb3e6f11c963e592d31f28bcc6eca70f4f21d16f2670fd8504977c01aa8e88780fd857afed7b7362c6e02a4737b07792dac57748b0df87041eacddc86ce1af07cc4fa06d059b4e834bda31a1633e41f6f15b3824dc1d6be900b9f6db8feaed837f3d5314c7f869b48c9a9f65b2ce3a19f5faef0d33f3836b3feab8be78e73d2b9b00acd711fe8d3d81bbe3b43a73464eace68ca5dc65f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0xa8, 0x0, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xffff}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x7, 0xf9803306ec947de6, 0x10000, 0x1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0x8}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x400}]}, {0x34, 0x6, "b034f529c30978b23f75fdd6bf123f0d7686cfc9091282616b1bdb8271cb7c807c32abc3ce274c960443e47a2a2c10e5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x9c, 0xb, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x1, 0x8, 0x5b, 0xbc}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x1a, 0x6, "5bf86b664c819becc79cf4e6b25c14aec88a49c5dbdd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x106c, 0x8, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x6, 0x6, 0x100, 0x2}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe7, 0xd, 0x6, 0x1, 0x101}, 0x10}}]}, {0x1004, 0x6, "f96cf051ed5af2b6d0f8bb2e3d27cfbaec8e127ab5aa50193a3786c6b48336e482155794bdcd6b7247a0a5293a450a39ce672b272eb7e02c269f17e3a0cde72394792b8e2e7daf97e7baf631b2f3af03b5c8ee14add9c69a41a896eb5b2dcebbdd6c62073f1c063dbe4e30e237e0af0f49b97efa9bd24bb17b1c0cd2dbaa9a61adc9550a65f7d6106c470945f72e1d5056a1be1aa3513c66bb0d9e0b70e47e6d733551c0bf8bf27a4cfcd185f2bae9f2546ca1da9180b32b03ca76ee9ad8eed9577ff91c79197f97748434c7260dec2b7a9f1742db390d9998212ca1d44b72fad73f0866b5d3aa838f0f3c614084ec95cf6006048b69cf8b8e3276e1711432426978b583c659ff4e879127d68b95d3fe825aa7a8a3bfe9b78d80b72f9e0a93006b20843b3dbf220258b0355d86c6c2445a08e5219ecf50cddd637b289b05c18ab60012eef6550377316983910dccdecd93e8e10b820d967127a7f5798ef1d8c4e7832523d9b91b8ede1d8f3c9b7296f397ae2f29a357aebeaf2be45bd53dcaf6cb5b34b38d07222c38531d6c0201913c554823a16d7e58f6bed54f0799cf00449f0ba0a80dfd59ad48a8bd41f19d4f1817cb6a9f55dd626ed2127576f05bcf3f8680a0a9c97c9c68e352ee07d8db8945dd0666b333d511ebfdc105cfb4eda9e0122dfb2bf0a3c4565e73fe1473d39d08106241761eaeae1835cc7a7c0fc4acf532673c1dc3c7dc98c39094a5c73c4d88b35f51e542db2a877248afa91fff891bdb800d27dc4cd00b2cdd83000f82f811dc6f8a01401c5ed885fbcb44fddb43c9916e429adbc477118877b04936d83f087b2625dbc8b6e55fe687f6e0cd52a1d7398339ce6674c4666ae2d532a05eabc452fafedbcd2ad355c665e444c0d1571809ef43ecf70fc9f65f55551ea0df77985ef683626b6e3448cc4f37bd39ea2526b681d6521f1c1640b1b40601fa48d2b50c8d204d81d4979a56df93196ec0592d8479d3a9bb5c1b20bd03f4ac57a06a18f8057a3c7c152e1884f025cab2723d370f3211cbab0ae57e320607fdfed23e0082d1479e7c2c0a8063fd7f6ef9f241103e612200011129fa1507526d37f8b60162d342ce9d77f2df63397e2e7db615a407ad7ccaffc2739f0ba610d5b60b2b03baf2c2e861e9e5682c597f584b827dd050e4d540d4ea9feee8c25c0cc8e970122a9872ce04ab4f0643ff59225d691ba88031aaec35c8056df10d5d8276a1502432e12bdd8e4f2c51e72212733c345e16e5d6353b9af02d2b06fbc26b0b8315b221ee10e2bc47dca759db7ef024626a2d9871e579b86fe565b150e1458917b7b80e988d5960b58e3de7a62e95f2d30dba3932b1fa079c6276b8e61c2e8b04b4f0dcb3a376016a1acb4ca25ecaea219635742cb908439e42666ca15c27cc43af927f32d47e4a0300a453820ea0ccfe16de0c2279559cd6da5328203e700c480a58dba80078de6380fb0c8a7e43c806373c81027c0b4a3adfd5315141570907fbf3ab6e60b0a011ad70601176c5c360ec3d30b51db28c253f44dc2b6ef22ce88a8d32925af4ef8202d5bb633e6bd075dea27a66b63595e0431296d7a4205eabf2ce08d117ecc8605078b5a0b77d82ffbc2ca43f09072a5e5a592f6b2222f635453a866fd87558f9c8b327d23fc0464e4ca7206389eba63458651f0a24b4c9636ae654be4cad309dcecbeca830ae972aeff13c4866f4cd241cf920bcd8cef39e9860b4370d7f24daf228dc9d2adc00e21dbddf1fa09a85cb607a20a1c1ffaa61baf52bf78f247677e60eb6a35e9511f16966145684f39b6044b1595a8409e99eb4226c2c6ffa2934713032bc3aad3165768ed2ae52bcd4fa843dfe0137d6e3331f3041fb3ff820795364c6561cf4ca463e0a25bd390bba868fdf77680e749702616e0f78549adf97a5a3415b9967e46ef9c9ee54925b06187d17dc0dd0756486764176bc3454ac87c0a74c150622d6744ff97c859c16ae3b005c1fc6766e89ad02761e66286af10fc787b2afc36ea47305961e5cafac60f7e7b17583de08a9b761774092318d97f53a9c64782c811ee40cea17feaa8276360abfd94a2aa64fe84e21d26826f543fa76031b3330150352b57d36e973a86f5105f8239f09355f16943eacef015ce26273ba559e92e561148f5266107147945bdd985e98e8e8acc8aa78fea2afe5a8299e2b5887ef77dcf658ed541e2676978baa2a164eebc5b2e555524176255426efc5d1e05dcb21f87a68935dfb04829762dfbf06227ee83879d9be3df93b830fbb2ae3628508da72ade16d9188cdf071b9eacec47fcca5b0efc6d572efcd71bf87138aa25b51997c9cc3f743f2c87f8e8c5df2f88e6c1029d267fb68dd353c275cab606d958b39cf75eb332b3c19b58f3054a4b220a2f0562f00372878519e2f63cda215b4efae7d885adbddf6c8c76edb08d17408998b2c10b315bc2eeb72e2c6aec06091c7aca60c15f260db7050549e53a66f3e55264a498c3bed0f5fcba138042cca635f5083acbeb5a235dba7913ac792c479535c49ccfbe311b3bea1e46327ca418e4780129bb9e6c165967d09c423bee83156e31575560d25629d4a508ab387c8402beca8cfa33572e211aa1f8769e673a15d7683b270948aec1f7afa7e70966365b88fdaa2e0ee15c1ecd7e4536d843de68ef17927d04d990083f624e2e91c8bfe2dfd0b267d9984c4aca16b44c5128bd93134cc9bcd05f382ebe9f8e2f123491582365768dd8db8a1e9f0c3b73b23c87b0a233c30e4faab7fd7f84c35d495ff4c88875e50f8ef8cbbd458b7ac7baab0e62a5435f4c9d098124a754e2e8254e67a2b70007c0a309a584499ade222cd86d700505aa8823459894561601b26065533acfa994fdfab979dbbbfc388ea7ab0a96c0908e423fe47d4c3729dcbd72b0bf1fb714155b712e2bb3535d7ee2301146b35976961bd8c4fe75ada7880c83ef218465935caf38df6980a0d9c5682d726d1768a023c0e4f24733ef30c9342be850686bf8b1205d6a5fc33b4d6d816cf2e4c4d6557841ade90c5a69501827fc50b2d5d6be8d214256bbf771a81cf0d006b77c4dfe36178bf10a919d3913116a57057fb29af352e2a00f705834bd8a1f746c7febbb031261a87f425f8abee9a9da8d1567dd01d9d7582786f48b136049815cbf2387625256adf592c94dfca361d05017fa6f1f9ec0dc36191d801ac207be3538b55426878720dd0956cf5594390631211cfc645dcad70723ed592b4c0d826f72302299a870823e93cea23902bff2ea058ea9262c001f40f9b314da59c4b34a47d2882f56a7341cd2e18fb86ae8393dc18dba37e541e68bf37af79cb26387c473e90a2c206e09c5664ab46a1834d3b8522fa37c0f1b084001bcf2ed3260738d862cf8b86f5168a649d1717fda3575d75cd6001116bdb442643b05a244167f6621172e03fdf3a87090ac8a43557d54096636cae8696eaa12154395bfa188946cdcd7fdc1fcab91720720001bc6e055cff56d85d901f3bdb74cb0a4c1872d78437c3d0a4a16b3676066e942b9b53909742c9fd5ef3beaa2f8bfb98d9a4ddc1f736364c42befedf90af4a8abaf3d06990668ae2bd1ff53014f6c05923317d0c0b6d354d00ab40872d486a8b0b664abf25af7e8153228913c3f841f3969e3adbe559f58dde5b3359133e84ea5fcffa83c55f157da48c2504cc8666dcfa1e53345a932d728425b2ada7ad2197ca9fd17b6b2842d8e0826d9e7d58162734301b34f6a78e2adf5abe39854872b99b05ff31f8334aa4254299d8d2c09975063affb8c3930c36c1be9dbac29e01bb302362337f3cbb463dd3cdd6d29117a61e270c7da7b72166a9bdd5bb5ee01560cc9db99d8fcd8d5891e1f670b54ad448d9178b9d51a964ae5c776fb0018209cd8ccbdd7e05e1a3aca2b9c6d6f6ee20f064399bbe075b21ac5ed7b3ce53485e8cc9ef494e19f360e58271e8ffd7963295635cea17308e213b13e4397c2439ee6b47bdcf26dd62ea066a9d21c3009d901cc20fff608b17e7f4a7798d696df08d20becdbc3fdd6500e687cb69f7baa5178696804bddd750b557e51cfe33d462f25c363eaeb7466c63f4b860d3231fe683b34c8a78f8728f2b6c72688a9187ba4239b860304ad54e92208d9f5bb3482079c05e385033d6765bcc9a8fb6daa501d895fbb4be9294db6fafb515dc0579fa4d7a86565bdf7bbecd5e0943b46a2d363d5d47a2754703cab158279b6e5abb7aaf4334f2a4f176f29d18df87f780d45362eb467c6fe9121e0a65bfc753b3d7443364f1ce33d4e0165483eb82f34ee000b6c525bb0fdc546bc7d033f5c254f0a781b986e178901be6723c044c2aff1f49973352d162461687677ecc332015f0f0433b83b995535da1328fa7d6d498c96f32bcb8159f97a2541446e86623bcf4688866c49b8fb37613b142a586aafaa7042fd27967e9db4361337277db4d122995bb168eb34aba247cb963a0f8e8006b8a718e1a964a9da7f1117e8efc7b4e8ac8add9d7f23c15a4cadc717cc1f86ff1cd0ad99059bb1693ebf30058bf9482610cddd3b34ee91925c24ef4d568c284b39b92181958d2c708bd96aee176e132c2435e728e63d66cef91f491b3e6d4f3a32e334b4933249d24c097c25b785fc9406ec868254534337d1f55cb245c811652d8ff64875401b3119b5d9157b959c6e0f7a7d5ed3238b69476d1708d09b0203405084e57407f085da93f041dfbbde04af492704bde6fb3f07a35c3f63be32198fabdd00661379b35004dd4486eadcb86e95f96f554d3a7f2c401731e9b34770453f452560ee9a8a7d7f833b38d858291d99a922f637e1a6a659d4657b158724c180002d45dd9281c0f822401c1bbe89efca7349e19f7d5b48fe5b8f71b65e93e17e96ba69332197ba4b1643ce6b8b3140854a159db3693664843d91d57f269e4536814116206308588b70655a88ce26a364edea392504556332909166b0769ec057c16d2beaeacba82b282300f991d131cee92839967fb13808d3151115305ca1803c31ce4d7c90eeccf0be10062fb10a05285bae3337d71defa66d50b2386fc1d55ee78627a3b8046cef90bfc636c9ae4493c41fb31f5fbfac11f8b157b9234acdfd8edbbc881d2fbe0f48b49eebb65cc5faf9e3a3517b1898439573bbc8dcb3daf855104312812ba953468e0ef251f860d7b34ce9f058f1913fd80de8da5cc280dec6491aa95a1d1e3697a78c74963905384bc6ab137ca4e9e29fad5598457d0b960493eb19a2ac9d6ce1e1bd75a51c77dae073647a92c2ce656eae7e05fb744dbcd0843b77af59abbbbb46a6a1cfea06af7c75c1c2bac3eeb57ff3da9f76ddcc56875ee2ff83668b2b80592ba913199df54090ed4527697f32f43297e8beb1ef57feb3fb0fae70780e6f1e694b411a8ebb71205fdfc8b5de1a473a4841596a3b86cdd8dab3b3a088ddbdcb73ee6c95b90e3524fce6acd75d782dfe0ef079acd2f9270669956b692bc1d98ebdfbc00fd15051d21ee45a128c605510d6041936530e703a0ed47b30f1bdcf2b0019c8572139cb78abbc59ee42b233d1900242a27d464bbb3d7fcafcf1e31f83ebfd89a5e9858cbd3459b10d695d9a45e995f4320615ae5f305e7381723e797a7a0e06eb766afb41de5a35e2c3cf4695392dcad4519d3bcf1deee8025609ae47069713951d70a31875d21df92e1126c0cddb734ffa23e55a184393a2e63ed18bb2647f4141064826cc3e4871c20aad36b7bf8a91b0586e83b284ff628fb3015fcdd93"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x58, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0x30, 0x6, "d761acd643c40e2fecf0aad403c131eaf4eafd327033a805b30971e1e6eaebcb371d5e25ae75f1e81636feb9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x138c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x3, 0x3234564e, 0x2, 0x7, [{0x8, 0x2}, {0x8, 0x1ff}, {0x5, 0x70ade1c0}, {0xbb, 0x7}, {0xfffffff7, 0x7}, {0x5, 0xd}, {0x1, 0x6}, {0x4, 0x3}], 0x0, 0xa4, 0x6, 0x2, 0x5}}) r8 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x10002, 0x1000009, 0x82110, r4, 0x20000000) (async) syz_io_uring_setup(0x29d7, &(0x7f0000000380)={0x0, 0x8550, 0x10, 0x1, 0xf5}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000004c0)=@IORING_OP_WAITID={0x32, 0x49, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) (async) syz_io_uring_submit(r8, 0x0, 0x0, &(0x7f0000000680)=@IORING_OP_READ_FIXED={0x4, 0x18, 0x6000, @fd_index=0x9, 0x4, &(0x7f0000001fc0)=[{&(0x7f0000000940)=""/118, 0x76}, {&(0x7f0000001f80)=""/32, 0x20}], 0x2, 0x8, 0x0, {0x1, 0x0, 0x8, '\x00', &(0x7f0000002080)={0x6, 0x825, 0x4c, &(0x7f0000002000)="8ac8a0149a52c87876725867b28952a926fc005a4abdb4dacd9b93b1e3efbd170ea820693805d47bf9425f65b48e86952630d0f19a7f54a702d9f7405df51c2e83d4ad645b8ad3a08262bfc6", 0x8}, 0x400}}) 821.085811ms ago: executing program 5 (id=686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x50, r2, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x50}}, 0x40041) sendmsg$NFT_BATCH(r0, &(0x7f0000019f80)={0x0, 0x0, &(0x7f0000019fc0)={&(0x7f000001a000)=ANY=[@ANYBLOB="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"], 0x1a8}}, 0x0) 729.988518ms ago: executing program 5 (id=715): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000002200)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000002240)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x106}, 0x1c) close(r3) syz_emit_ethernet(0xce, &(0x7f0000002380)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @icmp={{0x16, 0x4, 0x1, 0x3b, 0xc0, 0x64, 0x0, 0x7f, 0x1, 0x0, @broadcast, @rand_addr=0x64010100, {[@rr={0x7, 0xb, 0x10, [@broadcast, @empty]}, @ssrr={0x89, 0x17, 0x6b, [@rand_addr=0x64010102, @loopback, @multicast1, @remote, @local]}, @ssrr={0x89, 0x7, 0xfc, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x1b, 0x33, [@private=0xa010101, @rand_addr=0x64010102, @local, @private=0xa010100, @private=0xa010101, @private=0xa010100]}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x17, 0x4, 0x0, 0x2, 0x4, 0x67, 0x7052, 0x9, 0x4, 0x100, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x32, 0x3, [{0x2, 0x6, "ee59e391"}, {0x0, 0xb, "408ec5b283a65980cd"}, {0x2, 0x5, "10bd12"}, {0x1, 0xa, "474f179e6b62709a"}, {0x1, 0xc, "3dad8bd5496fd1de9634"}]}, @rr={0x7, 0xf, 0xce, [@multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x41}]}]}}, "757f47f1"}}}}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bridge0/bridge/multicast_querier_interval\x00', 0x2, 0x0) write(r4, &(0x7f0000000140)='1000\n\x00', 0x5) r5 = syz_create_resource$kvm_nested_state(&(0x7f0000000180)=@vmx={0x8, 0x0, 0x2080, {0x6000, 0xeeef0000, {0x4}, 0x0, 0x1}, {"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", "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"}}) ioctl$KVM_SET_NESTED_STATE_res(r4, 0x4080aebf, r5) r6 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x2a, {0x0, "48b8004040000000000048c70000000000f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x72}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE_res(r6, 0x4080aebf, r5) 569.931158ms ago: executing program 5 (id=716): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80003, 0xff) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc) getpeername(r0, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="1808f9ffffffffffffff0000ffffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066580000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x2, 0xde, &(0x7f00000004c0)=""/222, 0x0, 0x8}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x10000, 0x1f7) pipe2(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x400203, 0x2) dup(r1) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_helper', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x200, @local}, {0x2, 0x4e23, @local}, 0x37f, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0xa4e96d38234f64e2, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 199.204026ms ago: executing program 2 (id=717): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x6}, @NFC_ATTR_VENDOR_DATA={0x85, 0x1f, "3b423ab050fca75a6171e8c65d60a5442d6d1a3de73ddca90199f0a308fd9746b10a24765bc69199bd6bb76d087a28f0c70429fe46f7be94ba7efb0efeb2574e3c3c8d8fe2167f4214be36c1ecf2e895ef956cc98c94d5e7d9d4903f030c1f81b1b9c5fa75810f29b7ed9137d17e701ff51d744a1be57a1be00ff82b466000d162"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x400, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x51}, 0x8044000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x140b, 0x200, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041804}, 0x40) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10080008}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000001}, 0x4000814) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100050}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r5) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000001ac0)={&(0x7f0000000680), 0xc, &(0x7f0000001a80)={&(0x7f0000000700)={0x1348, r7, 0xc00, 0x70bd2b, 0xb0b, {}, [@TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x88}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x339b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcad}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x27}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd21}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4d0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_NODE={0x1008, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff186d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x251b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x1348}, 0x1, 0x0, 0x0, 0x4000}, 0x800) write$nci(0xffffffffffffffff, &(0x7f0000001b00)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x52, {0x1, 0x8, 0x1, 0x8, 0x4, 0xf, 0x7, 0x7b18, 0x77, "19396f6f0b459fc69941a43b25868deff6c71c2c16794e2e618085a4825543bd3dfe9598dbc465acce00a08f15dd5ae0867e1f3c160177b22563a42ba2a39ddfdb61e50e0cc4869032305ea4b4d6ca04f2e7e2ba455fd667f5b5c942067524cf477a1b2fd5ea45c432d63effc66bd811c3d1c43311ed4d"}}, 0x88) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r5) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x20, r8, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x15}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000091) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001d40), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x50, r9, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x90) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000002100)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001ec0)={0x1cc, r8, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xc53}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x9c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}}, {0x8c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x87, 0x1, "4cdb67cc29e16496f3d69c08cac3182353555f57be3c7bed91d6ce995cb0f5563e83b36d172f7596c23a4205ddc1eb689810fee69f2e8ed007c0cf19645f967bbcbcc48e7bd852a4c4e6fcf2416b63b30e21798c824a1f6f3cc6b6f13417a77782260c331f0c1805e421f6d0c61672ce02069d5c3c857896ea72fc8a9b16deff21e244"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xf}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xe4, 0x3, 0x0, 0x1, [{0xd4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xcd, 0x1, "0b3fc83e774e7c2b119d560a3dab878bb1e2dd0396ed490c6afde927a4927a1413432171cbf33cca1b20440aa75da67efcc1402ecfa95d2169df628d2d84740b8bcd62cfcc5c1e7a6cf4b8b28554c2f77b406f4e5513a0e50ac8a1294bdd7031aa30e9757959ab9f06722da2804555721e79351193af157dfe1a7ed3449ba6abbeaa30dc35b9529ad6919355cc911ecfefc2358bdab70e6a108b6821aa8b61d5f681cc9a22cb850a0051bf6ab5ffc6f28adf6f9371bf798120aa41f199ccb8dd5563cf27fd5752313c"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xffff698d}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x74, r9, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:systemd_unit_file_t:s0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0xc084}, 0x24008847) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000002400)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x48, r10, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xfa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40020) r12 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000002500)={&(0x7f0000002440), 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x1c, r6, 0x800, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4) r13 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000002540), 0x800) getsockopt$PNPIPE_ENCAP(r13, 0x113, 0x1, &(0x7f0000002580), &(0x7f00000025c0)=0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f0000002640)=0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x2c, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x8}, @NFC_ATTR_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x8011) 198.590871ms ago: executing program 2 (id=718): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @empty, 0x400}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000400)=0x6196, 0x4) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0xb41) socket$inet(0x2, 0x8000f, 0x8) write$binfmt_script(r0, &(0x7f0000000480), 0x28) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) 192.124004ms ago: executing program 1 (id=719): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000280)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800000}, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r7, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffa}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040) bind$netlink(r5, &(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8}, 0xc) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_tables_targets\x00') creat(&(0x7f0000000380)='./file0\x00', 0x0) pipe(&(0x7f00000003c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r10, @ANYRES32=r10], 0x44}}, 0x2000800) r11 = socket$netlink(0x10, 0x3, 0x2) writev(r11, &(0x7f0000001100)=[{&(0x7f0000001140)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 107.895603ms ago: executing program 2 (id=720): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x0, 0xc, &(0x7f0000002d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002d80)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002dc0)={0x0, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002ec0)={{r3}, &(0x7f0000002f00), &(0x7f0000002f40)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002f80)={0xe, 0x0, &(0x7f0000003040)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003080)={0x6, 0xc, &(0x7f0000003140)=ANY=[], &(0x7f0000003180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000031c0)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000003240)="630b008646dc3f0adf33c9f7b986", 0x0, 0x7f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x9c10, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x228, 0x138, 0x1, 0x0, 0x9410, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@crypt={0x0, 0x2050, 0x0, 0xf0, 'crypt\x00', {'aes-cbc-elephant:sha256', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '16', 0x20, {@ram_num={'1:', 0x1}, 0x20, '1'}, ' 1 integrity:8:none'}}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x101042, 0x15) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000002840)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x6, 0x2, 0x4, 0x6], 0x6, 0x4}, {0x1, [0x1, 0x2, 0x1, 0x1, 0x2, 0x4], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) sendfile(r5, r5, 0x0, 0x2) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000002740)={0x50, 0x0, r8, {0x7, 0x2b, 0x40, 0x4f834c58, 0x3, 0x101, 0x7, 0xa15, 0x0, 0x0, 0x20, 0x9}}, 0x50) write$FUSE_INIT(r5, &(0x7f00000027c0)={0x50, 0x0, r8, {0x7, 0x2d, 0x5, 0x1000000, 0x0, 0x3, 0x2, 0x5, 0x0, 0x0, 0x100, 0x1}}, 0x50) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000000c0)={'veth0_to_team\x00', 0x100}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003280)=ANY=[@ANYBLOB="5000000010000d042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a400090000000000000012800c0001006d6163766c616e000c000280080009000100006163766c616e3000000000000000000000000000005684deb3f39dd7a8a2b228b20b2d56d6ed38c317e65a07ed034547769c2494ec28edd6142ff7a7d99eab9e9dfe553c47daacac7e5856064e56525eb88c59bf678d6c6b4547d912d80b792b68a4d66c81279203"], 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) connect(r0, &(0x7f0000000000)=@in6={0xa, 0x4e23, 0x4, @private2, 0x3}, 0x80) 49.721719ms ago: executing program 1 (id=721): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xe, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000001c00)='GPL\x00'}, 0x48) 49.393335ms ago: executing program 1 (id=722): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x7, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000040)=""/127, &(0x7f0000000140)=0x7f) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x2000, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040020}, 0x4000) 0s ago: executing program 2 (id=723): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000280)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000340)=[{&(0x7f0000000380)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000880)=[{0x4, 0x3, {0x0, 0x62da12a15307ded4}, {0x1, 0x1}, 0xfe, 0x2}, {0x3, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0}, 0xfe, 0x2}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x2, 0xe}, {0xf, 0xa}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x0) r3 = semget(0x1, 0x4, 0xe0) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000000)=""/120) kernel console output (not intermixed with test programs): 000000010 [ 56.425398][ T6228] RBP: 00007f8433837b70 R08: 0000000000000000 R09: 0000000000000000 [ 56.425406][ T6228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.425413][ T6228] R13: 00007f8433a26038 R14: 00007f8433a25fa0 R15: 00007ffdf4b55308 [ 56.425429][ T6228] [ 56.425436][ T6228] socket: no more sockets [ 56.425992][ T6228] netlink: 76 bytes leftover after parsing attributes in process `syz.2.88'. [ 56.463744][ T6230] loop9: detected capacity change from 0 to 524287998 [ 56.650721][ T6241] xt_cgroup: no path or classid specified [ 56.682139][ T6246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.686909][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 56.719351][ T6253] FAULT_INJECTION: forcing a failure. [ 56.719351][ T6253] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 56.719378][ T6253] CPU: 0 UID: 0 PID: 6253 Comm: syz.2.95 Not tainted syzkaller #0 PREEMPT(full) [ 56.719398][ T6253] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.719408][ T6253] Call Trace: [ 56.719415][ T6253] [ 56.719422][ T6253] dump_stack_lvl+0x100/0x190 [ 56.719457][ T6253] should_fail_ex.cold+0x5/0xa [ 56.719487][ T6253] _copy_from_user+0x2e/0xd0 [ 56.719525][ T6253] mtdchar_ioctl+0x441/0x1fd0 [ 56.719562][ T6253] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 56.719584][ T6253] ? lock_acquire+0x1d1/0x380 [ 56.719609][ T6253] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 56.719635][ T6253] ? rcu_is_watching+0x13/0xc0 [ 56.719657][ T6253] ? trace_contention_end+0x126/0x160 [ 56.719687][ T6253] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 56.719707][ T6253] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 56.719723][ T6253] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 56.719752][ T6253] ? __pfx___mutex_lock+0x10/0x10 [ 56.719773][ T6253] ? __fget_files+0x34/0x3d0 [ 56.719806][ T6253] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 56.719823][ T6253] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 56.719842][ T6253] __x64_sys_ioctl+0x18e/0x210 [ 56.719862][ T6253] do_syscall_64+0x123/0x790 [ 56.719890][ T6253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.719910][ T6253] RIP: 0033:0x7f843379fb19 [ 56.719924][ T6253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.719940][ T6253] RSP: 002b:00007f84346c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.719958][ T6253] RAX: ffffffffffffffda RBX: 00007f8433a25fa0 RCX: 00007f843379fb19 [ 56.719970][ T6253] RDX: 0000200000000100 RSI: 00000000c0104d04 RDI: 0000000000000003 [ 56.719980][ T6253] RBP: 00007f84346c2090 R08: 0000000000000000 R09: 0000000000000000 [ 56.719992][ T6253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.720003][ T6253] R13: 00007f8433a26038 R14: 00007f8433a25fa0 R15: 00007ffdf4b55308 [ 56.720028][ T6253] [ 56.767937][ T6258] netlink: 'syz.2.97': attribute type 4 has an invalid length. [ 56.785068][ T6258] netlink: 'syz.2.97': attribute type 17 has an invalid length. [ 56.790016][ T6258] netlink: 'syz.2.97': attribute type 1 has an invalid length. [ 56.810413][ T6258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.820815][ T6260] FAULT_INJECTION: forcing a failure. [ 56.820815][ T6260] name failslab, interval 1, probability 0, space 0, times 0 [ 56.820842][ T6260] CPU: 2 UID: 0 PID: 6260 Comm: syz.0.96 Not tainted syzkaller #0 PREEMPT(full) [ 56.820864][ T6260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.820875][ T6260] Call Trace: [ 56.820881][ T6260] [ 56.820890][ T6260] dump_stack_lvl+0x100/0x190 [ 56.820941][ T6260] should_fail_ex.cold+0x5/0xa [ 56.820972][ T6260] should_failslab+0xc2/0x120 [ 56.820995][ T6260] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 56.821027][ T6260] ? proc_alloc_inode+0x25/0x200 [ 56.821059][ T6260] ? __pfx_proc_alloc_inode+0x10/0x10 [ 56.821089][ T6260] proc_alloc_inode+0x25/0x200 [ 56.821117][ T6260] alloc_inode+0x68/0x250 [ 56.821135][ T6260] new_inode+0x22/0x1c0 [ 56.821156][ T6260] proc_pid_make_inode+0x22/0x160 [ 56.821186][ T6260] proc_map_files_instantiate+0x72/0x1a0 [ 56.821217][ T6260] proc_fill_cache+0x2a3/0x3a0 [ 56.821245][ T6260] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 56.821276][ T6260] ? __pfx_proc_fill_cache+0x10/0x10 [ 56.821303][ T6260] ? __pfx___up_read+0x10/0x10 [ 56.821322][ T6260] ? proc_map_files_readdir+0x457/0xb10 [ 56.821357][ T6260] proc_map_files_readdir+0x5b5/0xb10 [ 56.821399][ T6260] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 56.821428][ T6260] ? lock_acquire+0x1d1/0x380 [ 56.821464][ T6260] ? down_read_killable+0x358/0x520 [ 56.821491][ T6260] ? __ww_mutex_lock.constprop.0+0x3760/0x3f50 [ 56.821513][ T6260] ? selinux_file_permission+0x30/0x6a0 [ 56.821564][ T6260] iterate_dir+0x2ba/0xc10 [ 56.821590][ T6260] __x64_sys_getdents+0x13b/0x2b0 [ 56.821611][ T6260] ? __pfx___x64_sys_getdents+0x10/0x10 [ 56.821632][ T6260] ? __pfx_filldir+0x10/0x10 [ 56.821660][ T6260] do_syscall_64+0x123/0x790 [ 56.821683][ T6260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.821704][ T6260] RIP: 0033:0x7f6d1ed9fb19 [ 56.821720][ T6260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.821737][ T6260] RSP: 002b:00007f6d1fbe5028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 56.821755][ T6260] RAX: ffffffffffffffda RBX: 00007f6d1f026090 RCX: 00007f6d1ed9fb19 [ 56.821769][ T6260] RDX: 0000000000001012 RSI: 00002000000001c0 RDI: 0000000000000007 [ 56.821780][ T6260] RBP: 00007f6d1ee37b70 R08: 0000000000000000 R09: 0000000000000000 [ 56.821790][ T6260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.821802][ T6260] R13: 00007f6d1f026128 R14: 00007f6d1f026090 R15: 00007ffe528ce638 [ 56.821829][ T6260] [ 56.999335][ T6281] batman_adv: batadv0: Adding interface: syzkaller0 [ 56.999352][ T6281] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.999376][ T6281] batman_adv: batadv0: Interface activated: syzkaller0 [ 57.052341][ T6281] SELinux: DCCP has been removed, pid=6281 comm=syz.1.102 [ 57.554021][ T6278] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 57.572223][ T6278] batman_adv: batadv0: Removing interface: syzkaller0 [ 57.612251][ T42] kauditd_printk_skb: 98 callbacks suppressed [ 57.612271][ T42] audit: type=1400 audit(1793865304.765:379): avc: denied { mount } for pid=6289 comm="syz.0.105" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 57.732636][ T42] audit: type=1400 audit(1793865304.885:380): avc: denied { unmount } for pid=5789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 57.785944][ T6303] device-mapper: table: 248:2: clone: Error opening source device (-ENOENT) [ 57.785961][ T6303] device-mapper: ioctl: error adding target to table [ 57.787134][ T42] audit: type=1400 audit(1793865304.935:381): avc: denied { read } for pid=6307 comm="syz.2.109" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 57.787164][ T42] audit: type=1400 audit(1793865304.935:382): avc: denied { open } for pid=6307 comm="syz.2.109" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 57.787185][ T42] audit: type=1400 audit(1793865304.945:383): avc: denied { create } for pid=6302 comm="syz.1.107" name="dm0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.837888][ T42] audit: type=1400 audit(1793865304.995:384): avc: denied { create } for pid=6307 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 57.839234][ T42] audit: type=1400 audit(1793865304.995:385): avc: denied { read write } for pid=6307 comm="syz.2.109" name="set_event" dev="tracefs" ino=822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 57.839538][ T42] audit: type=1400 audit(1793865304.995:386): avc: denied { open } for pid=6307 comm="syz.2.109" path="/34/trace/set_event" dev="tracefs" ino=822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 57.840836][ T6311] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20000 [ 57.841436][ T6311] x_tables: duplicate underflow at hook 1 [ 57.873306][ T42] audit: type=1400 audit(1793865305.025:387): avc: denied { ioctl } for pid=6307 comm="syz.2.109" path="socket:[13558]" dev="sockfs" ino=13558 ioctlcmd=0x9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 57.962502][ T42] audit: type=1400 audit(1793865305.115:388): avc: denied { append } for pid=6319 comm="syz.3.111" name="uprobe_events" dev="tracefs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 58.022514][ T6322] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 58.052879][ T6326] overlay: ./bus is not a directory [ 58.135443][ T6333] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 58.615619][ T6308] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 58.617264][ T6308] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.628155][ T6308] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.648465][ T6308] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 58.648619][ T6308] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 58.652205][ T6308] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 58.658430][ T6338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.116'. [ 58.659338][ T6333] syz.3.115 (6333): drop_caches: 2 [ 58.659435][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 58.661344][ T6308] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.661392][ T6308] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.669078][ T6308] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.677304][ T6308] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.677382][ T6308] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.685473][ T6308] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.703417][ T6340] netlink: 'syz.0.117': attribute type 1 has an invalid length. [ 58.712319][ T6340] bond1: entered promiscuous mode [ 58.712511][ T6340] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.723837][ T6340] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.724187][ T6340] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 58.724204][ T6340] bond1: (slave sit1): Setting fail_over_mac to active for active-backup mode [ 58.735955][ T6347] netlink: 44 bytes leftover after parsing attributes in process `syz.2.120'. [ 58.735971][ T6347] netlink: 43 bytes leftover after parsing attributes in process `syz.2.120'. [ 58.735980][ T6347] netlink: 'syz.2.120': attribute type 5 has an invalid length. [ 58.735987][ T6347] netlink: 43 bytes leftover after parsing attributes in process `syz.2.120'. [ 58.737892][ T6340] bond1: (slave sit1): making interface the new active one [ 58.737912][ T6340] sit1: entered promiscuous mode [ 58.744921][ T6340] bond1: (slave sit1): Enslaving as an active interface with an up link [ 58.770684][ T6058] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.791196][ T6354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.122'. [ 58.791280][ T6354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.122'. [ 58.843718][ T5793] Bluetooth: hci0: unexpected event for opcode 0x0c14 [ 58.854824][ T5793] Bluetooth: hci0: unexpected event for opcode 0x0c14 [ 59.157845][ T5793] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 59.346317][ T1643] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 59.496314][ T1643] usb 8-1: Using ep0 maxpacket: 8 [ 59.497032][ T1643] usb 8-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 59.497844][ T1643] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 59.497869][ T1643] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 59.497881][ T1643] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 59.497894][ T1643] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 59.497906][ T1643] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.497926][ T1643] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.676297][ T64] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 59.836503][ T5793] Bluetooth: hci1: command 0x0c1a tx timeout [ 59.837781][ T64] usb 7-1: New USB device found: idVendor=104f, idProduct=0004, bcdDevice=1.00 [ 59.838282][ T64] usb 7-1: config 0 has no interfaces? [ 59.839602][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 59.839620][ T64] usb 7-1: Product: syz [ 59.839632][ T64] usb 7-1: Manufacturer: syz [ 59.841611][ T64] usb 7-1: config 0 descriptor?? [ 60.063455][ T6408] netlink: 'syz.1.138': attribute type 3 has an invalid length. [ 60.069669][ T5873] usb 7-1: USB disconnect, device number 3 [ 60.168856][ T6414] ip6tnl0 speed is unknown, defaulting to 1000 [ 60.170548][ T6414] ip6tnl0 speed is unknown, defaulting to 1000 [ 60.171302][ T6414] ip6tnl0 speed is unknown, defaulting to 1000 [ 60.172791][ T6414] FAULT_INJECTION: forcing a failure. [ 60.172791][ T6414] name failslab, interval 1, probability 0, space 0, times 0 [ 60.172848][ T6414] CPU: 3 UID: 0 PID: 6414 Comm: syz.1.139 Not tainted syzkaller #0 PREEMPT(full) [ 60.172874][ T6414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.172897][ T6414] Call Trace: [ 60.172909][ T6414] [ 60.172919][ T6414] dump_stack_lvl+0x100/0x190 [ 60.172993][ T6414] should_fail_ex.cold+0x5/0xa [ 60.173052][ T6414] should_failslab+0xc2/0x120 [ 60.173097][ T6414] kmem_cache_alloc_noprof+0x92/0x6a0 [ 60.173139][ T6414] ? __asan_memcpy+0x3c/0x60 [ 60.173169][ T6414] ? __kernfs_new_node+0xd2/0xa10 [ 60.173205][ T6414] __kernfs_new_node+0xd2/0xa10 [ 60.173230][ T6414] ? __pfx___kernfs_new_node+0x10/0x10 [ 60.173254][ T6414] ? lock_acquire+0x1d1/0x380 [ 60.173299][ T6414] ? kernfs_root+0x23/0x2a0 [ 60.173330][ T6414] ? find_held_lock+0x2b/0x80 [ 60.173351][ T6414] ? kernfs_root+0xee/0x2a0 [ 60.173377][ T6414] ? kernfs_root+0xee/0x2a0 [ 60.173413][ T6414] kernfs_new_node+0x194/0x200 [ 60.173436][ T6414] ? __pfx_kernfs_new_node+0x10/0x10 [ 60.173465][ T6414] __kernfs_create_file+0x53/0x350 [ 60.173495][ T6414] sysfs_add_file_mode_ns+0x207/0x3c0 [ 60.173530][ T6414] internal_create_group+0x593/0xfb0 [ 60.173567][ T6414] ? __pfx_internal_create_group+0x10/0x10 [ 60.173597][ T6414] ? __pfx_kobject_add+0x10/0x10 [ 60.173645][ T6414] ? __pfx_get_perf_mad+0x10/0x10 [ 60.173685][ T6414] ? __kmalloc_noprof+0x350/0x840 [ 60.173720][ T6414] internal_create_groups+0x9d/0x150 [ 60.173756][ T6414] setup_port+0x409/0x16c0 [ 60.173793][ T6414] ? __pfx_setup_port+0x10/0x10 [ 60.173823][ T6414] ? do_raw_spin_unlock+0x145/0x1e0 [ 60.173859][ T6414] ? rxe_get_link_layer+0x64/0xc0 [ 60.173892][ T6414] ? __pfx_rxe_get_link_layer+0x10/0x10 [ 60.173916][ T6414] ? rdma_port_get_link_layer+0x57/0xe0 [ 60.173951][ T6414] ib_setup_port_attrs+0x201/0x600 [ 60.173978][ T6414] ? kobject_put+0xb9/0x640 [ 60.174009][ T6414] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 60.174044][ T6414] ? __pfx_rxe_ib_alloc_hw_port_stats+0x10/0x10 [ 60.174069][ T6414] ? rdma_counter_init+0x209/0x400 [ 60.174100][ T6414] ib_register_device+0x8a7/0xdd0 [ 60.174138][ T6414] rxe_register_device+0x277/0x360 [ 60.174165][ T6414] rxe_net_add+0x95/0xf0 [ 60.174186][ T6414] rxe_newlink+0x9c/0x160 [ 60.174216][ T6414] nldev_newlink+0x3b0/0x630 [ 60.174244][ T6414] ? __pfx_nldev_newlink+0x10/0x10 [ 60.174367][ T6414] ? cred_has_capability.isra.0+0x186/0x300 [ 60.174416][ T6414] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 60.174442][ T6414] ? lock_acquire+0x1d1/0x380 [ 60.174473][ T6414] ? hook_capable+0x1bc/0x500 [ 60.174515][ T6414] ? cap_capable+0x107/0x430 [ 60.174544][ T6414] ? security_capable+0x80/0x260 [ 60.174571][ T6414] ? ns_capable+0xcd/0xf0 [ 60.174604][ T6414] ? __pfx_nldev_newlink+0x10/0x10 [ 60.174634][ T6414] rdma_nl_rcv_msg+0x392/0x6f0 [ 60.174663][ T6414] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 60.174693][ T6414] ? __lock_acquire+0x5c0/0x1f40 [ 60.174730][ T6414] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 60.174763][ T6414] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 60.174804][ T6414] ? netlink_deliver_tap+0x1ae/0xb50 [ 60.174863][ T6414] netlink_unicast+0x668/0x950 [ 60.174895][ T6414] ? __pfx_netlink_unicast+0x10/0x10 [ 60.174931][ T6414] netlink_sendmsg+0x9ac/0x10c0 [ 60.174963][ T6414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.174997][ T6414] ? selinux_socket_sendmsg+0x198/0x2f0 [ 60.175031][ T6414] ? ____sys_sendmsg+0xa99/0xc30 [ 60.175060][ T6414] ____sys_sendmsg+0xa99/0xc30 [ 60.175088][ T6414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.175117][ T6414] ? __pfx_____sys_sendmsg+0x10/0x10 [ 60.175160][ T6414] ___sys_sendmsg+0x190/0x1e0 [ 60.175192][ T6414] ? __pfx____sys_sendmsg+0x10/0x10 [ 60.175223][ T6414] ? futex_wait+0x11e/0x370 [ 60.175275][ T6414] ? find_held_lock+0x2b/0x80 [ 60.175318][ T6414] __sys_sendmsg+0x160/0x210 [ 60.175342][ T6414] ? __pfx___sys_sendmsg+0x10/0x10 [ 60.175382][ T6414] do_syscall_64+0x123/0x790 [ 60.175407][ T6414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.175429][ T6414] RIP: 0033:0x7f78cfd9fb19 [ 60.175448][ T6414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.175467][ T6414] RSP: 002b:00007f78d0c59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.175488][ T6414] RAX: ffffffffffffffda RBX: 00007f78d0026090 RCX: 00007f78cfd9fb19 [ 60.175503][ T6414] RDX: 000000000000c000 RSI: 00002000000003c0 RDI: 0000000000000007 [ 60.175516][ T6414] RBP: 00007f78cfe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 60.175529][ T6414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.175539][ T6414] R13: 00007f78d0026128 R14: 00007f78d0026090 R15: 00007ffe55f6bf28 [ 60.175566][ T6414] [ 60.180096][ T6414] infiniband syz0: Couldn't register device with driver model [ 60.181740][ T6414] rdma_rxe: rxe_newlink: failed to add ip6tnl0 [ 60.271924][ T6415] usbtmc 8-1:16.0: simple usb_control_msg returned 0 [ 60.475773][ T29] usb 8-1: USB disconnect, device number 3 [ 60.650974][ T6421] syz.2.141 uses obsolete (PF_INET,SOCK_PACKET) [ 60.650975][ T6420] syz.2.141 uses obsolete (PF_INET,SOCK_PACKET) [ 60.716424][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 61.135582][ T6441] input: syz0 as /devices/virtual/input/input5 [ 61.253680][ T6462] overlay: filesystem on ./file0 not supported as upperdir [ 61.318386][ T6470] Illegal XDP return value 4294967274 on prog (id 14) dev N/A, expect packet loss! [ 61.321315][ T6471] __nla_validate_parse: 14 callbacks suppressed [ 61.321333][ T6471] netlink: 48 bytes leftover after parsing attributes in process `syz.2.151'. [ 61.321538][ T6473] sctp: [Deprecated]: syz.2.151 (pid 6473) Use of struct sctp_assoc_value in delayed_ack socket option. [ 61.321538][ T6473] Use struct sctp_sack_info instead [ 61.321850][ T6474] sctp: [Deprecated]: syz.2.151 (pid 6474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 61.321850][ T6474] Use struct sctp_sack_info instead [ 61.654058][ T6490] Device name not specified. [ 61.654058][ T6490] [ 61.661195][ T6490] SELinux: Context system_u:object_r:lost_found_t:s0 is not valid (left unmapped). [ 61.703678][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 61.916267][ T5793] Bluetooth: hci1: command 0x0c1a tx timeout [ 61.929007][ T6505] lo: left promiscuous mode [ 61.962712][ T6505] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.963242][ T6505] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.999218][ T6516] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 62.030480][ T6505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.038409][ T6505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.082615][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 62.142708][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.166749][ T6519] bridge_slave_1 (unregistering): left allmulticast mode [ 62.166777][ T6519] bridge_slave_1 (unregistering): left promiscuous mode [ 62.166838][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.207167][ T5859] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.207286][ T5859] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.207318][ T5859] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.207346][ T5859] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.306575][ T6532] Bluetooth: MGMT ver 1.23 [ 62.322695][ T6537] netlink: 24 bytes leftover after parsing attributes in process `syz.3.167'. [ 62.407635][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 62.407657][ T6543] FAULT_INJECTION: forcing a failure. [ 62.407657][ T6543] name failslab, interval 1, probability 0, space 0, times 0 [ 62.407689][ T6543] CPU: 2 UID: 0 PID: 6543 Comm: syz.0.170 Not tainted syzkaller #0 PREEMPT(full) [ 62.407726][ T6543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.407750][ T6543] Call Trace: [ 62.407761][ T6543] [ 62.407770][ T6543] dump_stack_lvl+0x100/0x190 [ 62.407838][ T6543] should_fail_ex.cold+0x5/0xa [ 62.407878][ T6543] should_failslab+0xc2/0x120 [ 62.407915][ T6543] __kmalloc_noprof+0xfc/0x840 [ 62.407958][ T6543] ? nft_trans_alloc+0x1d/0x2d0 [ 62.407996][ T6543] nft_trans_alloc+0x1d/0x2d0 [ 62.408020][ T6543] nf_tables_newflowtable+0x1aeb/0x25e0 [ 62.408049][ T6543] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 62.408072][ T6543] ? lockdep_hardirqs_on+0x7d/0x110 [ 62.408099][ T6543] ? irqentry_exit+0x202/0xab0 [ 62.408130][ T6543] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 62.408157][ T6543] nfnetlink_rcv_batch+0x1410/0x2880 [ 62.408201][ T6543] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 62.408236][ T6543] ? lock_acquire+0x1d1/0x380 [ 62.408273][ T6543] ? avc_has_perm_noaudit+0x56/0x470 [ 62.408314][ T6543] ? avc_has_perm_noaudit+0x145/0x470 [ 62.408363][ T6543] ? __nla_parse+0x40/0x60 [ 62.408406][ T6543] nfnetlink_rcv+0x3bd/0x440 [ 62.408432][ T6543] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 62.408467][ T6543] netlink_unicast+0x668/0x950 [ 62.408492][ T6543] ? __pfx_netlink_unicast+0x10/0x10 [ 62.408522][ T6543] netlink_sendmsg+0x9ac/0x10c0 [ 62.408550][ T6543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.408603][ T6543] ? selinux_socket_sendmsg+0x198/0x2f0 [ 62.408637][ T6543] ? ____sys_sendmsg+0xa99/0xc30 [ 62.408665][ T6543] ____sys_sendmsg+0xa99/0xc30 [ 62.408714][ T6543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.408744][ T6543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.408787][ T6543] ___sys_sendmsg+0x190/0x1e0 [ 62.408819][ T6543] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.408848][ T6543] ? futex_wait+0x11e/0x370 [ 62.408899][ T6543] ? find_held_lock+0x2b/0x80 [ 62.408939][ T6543] __sys_sendmsg+0x160/0x210 [ 62.408965][ T6543] ? __pfx___sys_sendmsg+0x10/0x10 [ 62.409001][ T6543] do_syscall_64+0x123/0x790 [ 62.409024][ T6543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.409047][ T6543] RIP: 0033:0x7f6d1ed9fb19 [ 62.409065][ T6543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.409083][ T6543] RSP: 002b:00007f6d1fc06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.409104][ T6543] RAX: ffffffffffffffda RBX: 00007f6d1f025fa0 RCX: 00007f6d1ed9fb19 [ 62.409118][ T6543] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 62.409130][ T6543] RBP: 00007f6d1ee37b70 R08: 0000000000000000 R09: 0000000000000000 [ 62.409142][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.409153][ T6543] R13: 00007f6d1f026038 R14: 00007f6d1f025fa0 R15: 00007ffe528ce638 [ 62.409180][ T6543] [ 62.439598][ T6550] FAULT_INJECTION: forcing a failure. [ 62.439598][ T6550] name failslab, interval 1, probability 0, space 0, times 0 [ 62.439628][ T6550] CPU: 1 UID: 0 PID: 6550 Comm: syz.3.173 Not tainted syzkaller #0 PREEMPT(full) [ 62.439652][ T6550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.439665][ T6550] Call Trace: [ 62.439673][ T6550] [ 62.439682][ T6550] dump_stack_lvl+0x100/0x190 [ 62.439720][ T6550] should_fail_ex.cold+0x5/0xa [ 62.439753][ T6550] should_failslab+0xc2/0x120 [ 62.439779][ T6550] __kmalloc_cache_noprof+0x91/0x6d0 [ 62.439808][ T6550] ? io_wq_create+0x6a/0x9a0 [ 62.439858][ T6550] io_wq_create+0x6a/0x9a0 [ 62.439884][ T6550] io_uring_alloc_task_context+0x2d9/0x656 [ 62.439915][ T6550] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 62.439946][ T6550] ? alloc_file_pseudo+0x1e9/0x290 [ 62.440006][ T6550] __io_uring_add_tctx_node.cold+0x15/0x21a [ 62.440034][ T6550] ? security_inode_init_security_anon+0x7b/0x230 [ 62.440069][ T6550] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 62.440115][ T6550] ? __anon_inode_getfile+0x17c/0x280 [ 62.440155][ T6550] io_uring_setup.cold+0x19bf/0x1c7e [ 62.440185][ T6550] ? __pfx_io_uring_setup+0x10/0x10 [ 62.440207][ T6550] ? find_held_lock+0x2b/0x80 [ 62.440252][ T6550] ? xfd_validate_state+0x129/0x190 [ 62.440297][ T6550] __x64_sys_io_uring_setup+0xc2/0x170 [ 62.440325][ T6550] do_syscall_64+0x123/0x790 [ 62.440351][ T6550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.440373][ T6550] RIP: 0033:0x7fcf85d9fb19 [ 62.440392][ T6550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.440413][ T6550] RSP: 002b:00007fcf86c91fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 62.440435][ T6550] RAX: ffffffffffffffda RBX: 0000200000000140 RCX: 00007fcf85d9fb19 [ 62.440451][ T6550] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000005d29 [ 62.440463][ T6550] RBP: 00007fcf85e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 62.440476][ T6550] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 62.440489][ T6550] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffde129c158 [ 62.440516][ T6550] [ 62.515230][ T6558] batadv_slave_1: entered promiscuous mode [ 62.516456][ T6559] batadv_slave_1: left promiscuous mode [ 62.665303][ T42] kauditd_printk_skb: 65 callbacks suppressed [ 62.665326][ T42] audit: type=1400 audit(1793865309.815:454): avc: denied { create } for pid=6562 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.773324][ T5793] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 62.777648][ T6572] smc: net device lo applied user defined pnetid SYZ0 [ 62.777785][ T6572] smc: smcd device lo applied user defined pnetid SYZ0 [ 62.796391][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 63.325890][ T6576] FAULT_INJECTION: forcing a failure. [ 63.325890][ T6576] name failslab, interval 1, probability 0, space 0, times 0 [ 63.325911][ T6576] CPU: 0 UID: 0 PID: 6576 Comm: syz.1.180 Not tainted syzkaller #0 PREEMPT(full) [ 63.325928][ T6576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.325936][ T6576] Call Trace: [ 63.325941][ T6576] [ 63.325946][ T6576] dump_stack_lvl+0x100/0x190 [ 63.325970][ T6576] should_fail_ex.cold+0x5/0xa [ 63.325990][ T6576] should_failslab+0xc2/0x120 [ 63.326004][ T6576] __kvmalloc_node_noprof+0x113/0x9b0 [ 63.326024][ T6576] ? lockdep_init_map_type+0x5c/0x250 [ 63.326042][ T6576] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 63.326074][ T6576] v4l2_ctrl_handler_init_class+0x201/0x350 [ 63.326091][ T6576] ? mutex_init_lockdep+0xf1/0x120 [ 63.326111][ T6576] vim2m_open+0x11c/0x870 [ 63.326129][ T6576] v4l2_open+0x1d2/0x490 [ 63.326146][ T6576] ? __pfx_v4l2_open+0x10/0x10 [ 63.326185][ T6576] chrdev_open+0x234/0x6a0 [ 63.326207][ T6576] ? __pfx_chrdev_open+0x10/0x10 [ 63.326232][ T6576] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 63.326280][ T6576] do_dentry_open+0x674/0x1470 [ 63.326299][ T6576] ? __pfx_chrdev_open+0x10/0x10 [ 63.326316][ T6576] vfs_open_consume+0xcc/0x460 [ 63.326334][ T6576] path_openat+0x1547/0x23f0 [ 63.326352][ T6576] ? __pfx_path_openat+0x10/0x10 [ 63.326370][ T6576] do_file_open+0x20e/0x430 [ 63.326386][ T6576] ? __pfx_do_file_open+0x10/0x10 [ 63.326411][ T6576] ? _raw_spin_unlock+0x28/0x50 [ 63.326433][ T6576] ? alloc_fd+0x471/0x7a0 [ 63.326453][ T6576] do_sys_openat2+0x163/0x1d0 [ 63.326470][ T6576] ? __pfx_do_sys_openat2+0x10/0x10 [ 63.326484][ T6576] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 63.326518][ T6576] __x64_sys_openat+0x12d/0x210 [ 63.326534][ T6576] ? __pfx___x64_sys_openat+0x10/0x10 [ 63.326565][ T6576] do_syscall_64+0x123/0x790 [ 63.326579][ T6576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.326593][ T6576] RIP: 0033:0x7f78cfd6034e [ 63.326604][ T6576] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 63.326615][ T6576] RSP: 002b:00007f78d0c79b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 63.326627][ T6576] RAX: ffffffffffffffda RBX: 00007f78d0c7a6c0 RCX: 00007f78cfd6034e [ 63.326634][ T6576] RDX: 0000000000000002 RSI: 00007f78d0c79c00 RDI: ffffffffffffff9c [ 63.326641][ T6576] RBP: 00007f78d0c79c00 R08: 0000000000000000 R09: 0000000000000000 [ 63.326648][ T6576] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 63.326655][ T6576] R13: 00007f78d0026038 R14: 00007f78d0025fa0 R15: 00007ffe55f6bf28 [ 63.326671][ T6576] [ 63.339742][ T6558] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 63.343559][ T57] cfg80211: failed to load regulatory.db [ 63.344731][ T6558] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 63.346889][ T6558] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 63.347017][ T6558] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 63.457702][ T42] audit: type=1400 audit(1793865310.615:455): avc: denied { accept } for pid=6582 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.522212][ T6591] program syz.0.186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.578037][ T42] audit: type=1400 audit(1793865310.735:456): avc: denied { watch } for pid=6595 comm="syz.1.188" path="/47" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.581320][ T42] audit: type=1400 audit(1793865310.735:457): avc: denied { mount } for pid=6595 comm="syz.1.188" name="/" dev="ramfs" ino=14642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 63.588492][ T6596] PKCS7: Unsupported SignerInfo version [ 63.758685][ T42] audit: type=1400 audit(1793865310.915:458): avc: denied { write } for pid=6612 comm="syz.1.193" path="socket:[15362]" dev="sockfs" ino=15362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.802020][ T6621] FAULT_INJECTION: forcing a failure. [ 63.802020][ T6621] name failslab, interval 1, probability 0, space 0, times 0 [ 63.802043][ T6621] CPU: 0 UID: 0 PID: 6621 Comm: syz.1.194 Not tainted syzkaller #0 PREEMPT(full) [ 63.802057][ T6621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.802064][ T6621] Call Trace: [ 63.802068][ T6621] [ 63.802073][ T6621] dump_stack_lvl+0x100/0x190 [ 63.802099][ T6621] should_fail_ex.cold+0x5/0xa [ 63.802118][ T6621] should_failslab+0xc2/0x120 [ 63.802134][ T6621] __kmalloc_cache_noprof+0x91/0x6d0 [ 63.802152][ T6621] ? autofs_init_fs_context+0x173/0x5f0 [ 63.802199][ T6621] autofs_init_fs_context+0x173/0x5f0 [ 63.802219][ T6621] alloc_fs_context+0x607/0xf40 [ 63.802243][ T6621] __x64_sys_fsopen+0x16b/0x2d0 [ 63.802275][ T6621] do_syscall_64+0x123/0x790 [ 63.802290][ T6621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.802302][ T6621] RIP: 0033:0x7f78cfd9fb19 [ 63.802313][ T6621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.802325][ T6621] RSP: 002b:00007f78d0c7a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 63.802337][ T6621] RAX: ffffffffffffffda RBX: 00007f78d0025fa0 RCX: 00007f78cfd9fb19 [ 63.802345][ T6621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001a80 [ 63.802351][ T6621] RBP: 00007f78cfe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 63.802359][ T6621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.802367][ T6621] R13: 00007f78d0026038 R14: 00007f78d0025fa0 R15: 00007ffe55f6bf28 [ 63.802383][ T6621] [ 63.804350][ T42] audit: type=1400 audit(1793865310.955:459): avc: denied { write } for pid=6620 comm="syz.1.194" name="loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.806432][ T6621] loop0: detected capacity change from 0 to 4096 [ 63.835603][ T42] audit: type=1400 audit(1793865310.985:460): avc: denied { ioctl } for pid=6622 comm="syz.3.195" path="cgroup:[4026532885]" dev="nsfs" ino=4026532885 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.847190][ T6621] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 63.847216][ T6621] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 63.847227][ T6621] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 63.847269][ T6621] loop0: [ 63.904264][ T42] audit: type=1400 audit(1793865311.055:461): avc: denied { mounton } for pid=6625 comm="syz.0.196" path="/38/proc_mnt/sys/net/ipv4/conf/lo/forwarding" dev="proc" ino=15382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 63.911859][ T42] audit: type=1400 audit(1793865311.065:462): avc: denied { read write } for pid=6625 comm="syz.0.196" name="md0" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 63.912095][ T42] audit: type=1400 audit(1793865311.065:463): avc: denied { open } for pid=6625 comm="syz.0.196" path="/38/md0" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 63.939114][ T6626] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 63.939283][ T6626] block device autoloading is deprecated and will be removed. [ 63.996455][ T6626] md: md0 stopped. [ 64.002477][ T6626] process 'syz.0.196' launched './file0' with NULL argv: empty string added [ 64.123952][ T6646] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 64.364000][ T194] IPVS: starting estimator thread 0... [ 64.404177][ T6656] loop7: detected capacity change from 0 to 7 [ 64.447147][ T6654] IPVS: using max 42 ests per chain, 100800 per kthread [ 64.454997][ T6656] Dev loop7: unable to read RDB block 7 [ 64.455020][ T6656] loop7: unable to read partition table [ 64.455111][ T6656] loop7: partition table beyond EOD, truncated [ 64.455121][ T6656] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 64.539721][ T6664] SELinux: Context system_u:object_r:sound_device_t:s0 is not valid (left unmapped). [ 64.645957][ T6672] gadgetfs: bound to dummy_udc driver [ 64.646313][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.836376][ T6058] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 64.977404][ T6675] netlink: 40 bytes leftover after parsing attributes in process `syz.3.215'. [ 64.986869][ T6058] usb 7-1: New USB device found: idVendor=0a99, idProduct=0001, bcdDevice=0.00 [ 64.987686][ T6058] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.988872][ T6058] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 64.988885][ T6058] usb 7-1: Product: syz [ 64.988892][ T6058] usb 7-1: Manufacturer: syz [ 64.992019][ T6058] navman 7-1:1.0: navman converter detected [ 64.994025][ T6058] usb 7-1: navman converter now attached to ttyUSB0 [ 65.195138][ T6058] usb 7-1: USB disconnect, device number 4 [ 65.203237][ T6058] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 65.206402][ T6058] navman 7-1:1.0: device disconnected [ 65.324803][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880583bb400: rx timeout, send abort [ 65.325891][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880583bb400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 65.357306][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.357382][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.357407][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.746395][ T6681] ip_tables: iptables: counters copy to user failed while replacing table [ 65.857253][ T6681] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 65.879463][ T68] block nbd3: Receive control failed (result -32) [ 65.883673][ T6689] block nbd3: shutting down sockets [ 66.017749][ T6695] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6695 comm=syz.3.222 [ 66.085677][ T6700] ip_tables: iptables: counters copy to user failed while replacing table [ 66.378339][ T6705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 66.610256][ T6711] warning: `syz.2.227' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.656134][ T6713] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 66.721337][ T6719] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 67.436465][ T67] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.436607][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.603936][ T6758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.240'. [ 67.687044][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 67.687071][ T42] audit: type=1400 audit(1793865314.845:508): avc: denied { write } for pid=6759 comm="syz.3.241" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 67.690779][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 67.690799][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 67.786313][ T42] audit: type=1400 audit(1793865314.935:509): avc: denied { connect } for pid=6767 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.786853][ T42] audit: type=1400 audit(1793865314.945:510): avc: denied { setopt } for pid=6767 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.787172][ T42] audit: type=1400 audit(1793865314.945:511): avc: denied { bind } for pid=6767 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.789514][ T42] audit: type=1400 audit(1793865314.945:512): avc: denied { write } for pid=6767 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.818208][ T6770] netlink: 'syz.3.245': attribute type 38 has an invalid length. [ 67.851093][ T42] audit: type=1400 audit(1793865315.005:513): avc: denied { create } for pid=6773 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.852812][ T42] audit: type=1400 audit(1793865315.005:514): avc: denied { ioctl } for pid=6773 comm="syz.3.247" path="socket:[13199]" dev="sockfs" ino=13199 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.858905][ T42] audit: type=1400 audit(1793865315.015:515): avc: denied { read } for pid=6773 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.910011][ T42] audit: type=1400 audit(1793865315.065:516): avc: denied { write } for pid=6773 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.965234][ T42] audit: type=1400 audit(1793865315.115:517): avc: denied { append } for pid=6782 comm="syz.3.249" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 68.022055][ T6788] overlayfs: failed lookup in lower (newroot/66, name='bus', err=-40): overlapping layers [ 68.022249][ T6788] overlayfs: failed lookup in lower (newroot/66, name='bus', err=-40): overlapping layers [ 68.075828][ T6793] overlayfs: failed lookup in lower (newroot/66, name='bus', err=-40): overlapping layers [ 68.077905][ T6793] overlayfs: failed lookup in lower (newroot/66, name='bus', err=-40): overlapping layers [ 68.342289][ T6797] bond0: option mode: unable to set because the bond device has slaves [ 68.381291][ T6797] bond0: option mode: unable to set because the bond device has slaves [ 68.632037][ T6810] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.083275][ T6825] loop4: detected capacity change from 0 to 2640 [ 69.086568][ T6825] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 69.086897][ T6825] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 69.091547][ T5788] Buffer I/O error on dev loop4, logical block 3, async page read [ 69.222790][ T6827] syz_tun: entered allmulticast mode [ 69.496343][ T6058] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 69.516402][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.656297][ T6058] usb 7-1: Using ep0 maxpacket: 8 [ 69.667005][ T6826] syz_tun: left allmulticast mode [ 69.667685][ T6058] usb 7-1: unable to get BOS descriptor or descriptor too short [ 69.667761][ T6058] usb 7-1: New USB device found: idVendor=13e5, idProduct=0001, bcdDevice=0.40 [ 69.670095][ T6058] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 69.670123][ T6058] usb 7-1: can't read configurations, error -71 [ 69.986863][ T1643] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 70.116276][ T1643] usb 6-1: device descriptor read/64, error -71 [ 70.311817][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 70.311818][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 70.332282][ T6869] hsr_slave_1 (unregistering): left promiscuous mode [ 70.356386][ T1643] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 70.390991][ T6875] qnx4: unable to read the superblock [ 70.392860][ T6875] macvlan1: mtu less than device minimum [ 70.422492][ T6877] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 70.486457][ T1643] usb 6-1: device descriptor read/64, error -71 [ 70.499886][ T6880] netlink: 'syz.2.276': attribute type 2 has an invalid length. [ 70.499900][ T6880] netlink: 46 bytes leftover after parsing attributes in process `syz.2.276'. [ 70.558992][ T6891] Bluetooth: MGMT ver 1.23 [ 70.562358][ T6891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.563022][ T6891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.598675][ T1643] usb usb6-port1: attempt power cycle [ 70.946363][ T1643] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 70.976791][ T57] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 70.979591][ T1643] usb 6-1: device descriptor read/8, error -71 [ 71.138261][ T57] usb 7-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 71.139229][ T57] usb 7-1: config index 0 descriptor too short (expected 65374, got 45) [ 71.140795][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.140809][ T57] usb 7-1: Product: syz [ 71.140816][ T57] usb 7-1: Manufacturer: syz [ 71.140824][ T57] usb 7-1: SerialNumber: syz [ 71.238076][ T1643] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 71.267126][ T1643] usb 6-1: device descriptor read/8, error -71 [ 71.377205][ T1643] usb usb6-port1: unable to enumerate USB device [ 71.618897][ T6919] netlink: 'syz.3.287': attribute type 64 has an invalid length. [ 71.845267][ T57] rtl8150 7-1:1.0: couldn't reset the device [ 71.845522][ T57] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 71.854419][ T57] usb 7-1: USB disconnect, device number 7 [ 72.000669][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.000727][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.038974][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 73.039004][ T42] audit: type=1400 audit(1793865320.195:542): avc: denied { create } for pid=6964 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.041220][ T42] audit: type=1400 audit(1793865320.195:543): avc: denied { write } for pid=6964 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.233314][ T6976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6976 comm=syz.3.301 [ 73.235995][ T6976] netlink: 'syz.3.301': attribute type 1 has an invalid length. [ 73.579683][ T6984] ptrace attach of "/syz-executor exec"[5782] was attempted by ""[6984] [ 73.633956][ T6986] hfs: unable to load iocharset "io#harset" [ 73.655285][ T42] audit: type=1400 audit(1793865320.805:544): avc: denied { write } for pid=6991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.693277][ T42] audit: type=1400 audit(1793865320.845:545): avc: denied { write } for pid=6996 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.235316][ T6976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.284863][ T42] audit: type=1400 audit(1793865323.435:546): avc: denied { accept } for pid=7006 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.699712][ T7026] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 76.701937][ T42] audit: type=1400 audit(1793865323.855:547): avc: denied { name_connect } for pid=7025 comm="syz.2.311" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 76.739604][ T7028] comedi comedi0: ni_at_a2150: I/O base address not correctly aligned [ 76.952708][ T7042] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=7042 comm=syz.2.316 [ 77.216779][ T42] audit: type=1400 audit(1793865324.365:548): avc: denied { link } for pid=7043 comm="syz.2.317" name="file0" dev="fuse" ino=4503599627370496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 77.221435][ T7044] eCryptfs: maximum fs stacking depth exceeded [ 77.223695][ T7044] Reading sb failed; rc = [-22] [ 77.295571][ T42] audit: type=1400 audit(1793865324.445:549): avc: denied { setopt } for pid=7048 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.312577][ T42] audit: type=1400 audit(1793865324.465:550): avc: denied { read } for pid=7048 comm="syz.3.319" lport=55266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.326715][ T42] audit: type=1400 audit(1793865324.475:551): avc: denied { unmount } for pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 77.937244][ T7063] jffs2: notice: (7063) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 77.940791][ T7063] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 78.017543][ T7065] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 78.380993][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 78.381012][ T42] audit: type=1400 audit(1793865325.535:557): avc: denied { lock } for pid=7073 comm="syz.3.328" path="socket:[16927]" dev="sockfs" ino=16927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.382235][ T42] audit: type=1400 audit(1793865325.535:558): avc: denied { create } for pid=7073 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 78.383174][ T42] audit: type=1400 audit(1793865325.535:559): avc: denied { read } for pid=7073 comm="syz.3.328" name="cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 78.383553][ T42] audit: type=1400 audit(1793865325.535:560): avc: denied { open } for pid=7073 comm="syz.3.328" path="/dev/cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 78.386565][ T42] audit: type=1400 audit(1793865325.545:561): avc: denied { create } for pid=7074 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.390583][ T42] audit: type=1400 audit(1793865325.545:562): avc: denied { setopt } for pid=7074 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.517548][ T42] audit: type=1400 audit(1793865325.675:563): avc: denied { append } for pid=7090 comm="syz.2.331" name="comedi3" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.531393][ T7091] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 78.765585][ T42] audit: type=1400 audit(1793865325.915:564): avc: denied { write } for pid=7108 comm="syz.3.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.799805][ T42] audit: type=1400 audit(1793865325.955:565): avc: denied { create } for pid=7113 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.800641][ T42] audit: type=1400 audit(1793865325.955:566): avc: denied { getopt } for pid=7113 comm="syz.3.341" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.927179][ T7120] misc userio: No port type given on /dev/userio [ 79.161171][ T67] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.165144][ T67] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.165815][ T67] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.167658][ T67] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.167991][ T67] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.298984][ T7148] lo: entered promiscuous mode [ 79.300865][ T7148] tunl0: entered promiscuous mode [ 79.301747][ T7148] gre0: entered promiscuous mode [ 79.306507][ T7148] gretap0: entered promiscuous mode [ 79.314960][ T7148] erspan0: entered promiscuous mode [ 79.318696][ T7148] ip_vti0: entered promiscuous mode [ 79.319407][ T7148] ip6_vti0: entered promiscuous mode [ 79.322820][ T7148] sit0: entered promiscuous mode [ 79.326564][ T7148] ip6tnl0: entered promiscuous mode [ 79.330134][ T7148] ip6gre0: entered promiscuous mode [ 79.333985][ T7148] syz_tun: entered promiscuous mode [ 79.339402][ T7148] ip6gretap0: entered promiscuous mode [ 79.341848][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.344842][ T7148] bridge0: entered promiscuous mode [ 79.353836][ T7148] vcan0: entered promiscuous mode [ 79.358128][ T7148] bond0: entered promiscuous mode [ 79.358516][ T7148] bond_slave_0: entered promiscuous mode [ 79.358639][ T7148] bond_slave_1: entered promiscuous mode [ 79.371413][ T7148] team0: entered promiscuous mode [ 79.371426][ T7148] team_slave_0: entered promiscuous mode [ 79.371523][ T7148] team_slave_1: entered promiscuous mode [ 79.378704][ T7148] dummy0: entered promiscuous mode [ 79.379755][ T7148] nlmon0: entered promiscuous mode [ 79.386814][ T7148] batadv0: entered promiscuous mode [ 79.389517][ T7148] vxcan0: entered promiscuous mode [ 79.390213][ T7148] vxcan1: entered promiscuous mode [ 79.390930][ T7148] veth0: entered promiscuous mode [ 79.393522][ T7148] veth1: entered promiscuous mode [ 79.396380][ T7148] wg0: entered promiscuous mode [ 79.399073][ T7148] wg1: entered promiscuous mode [ 79.403548][ T7148] wg2: entered promiscuous mode [ 79.407598][ T7148] veth0_to_bridge: entered promiscuous mode [ 79.412551][ T7148] veth0_to_bond: entered promiscuous mode [ 79.417346][ T7148] veth1_to_bond: entered promiscuous mode [ 79.421634][ T7148] veth0_to_team: entered promiscuous mode [ 79.429093][ T7148] veth1_to_team: entered promiscuous mode [ 79.431235][ T7148] veth0_to_batadv: entered promiscuous mode [ 79.432395][ T7148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.432420][ T7148] batadv_slave_0: entered promiscuous mode [ 79.433985][ T7148] veth1_to_batadv: entered promiscuous mode [ 79.439916][ T7148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.439948][ T7148] batadv_slave_1: entered promiscuous mode [ 79.441654][ T7148] xfrm0: entered promiscuous mode [ 79.442753][ T7148] veth0_to_hsr: entered promiscuous mode [ 79.445506][ T7148] veth1_to_hsr: entered promiscuous mode [ 79.450203][ T7148] hsr0: entered promiscuous mode [ 79.451527][ T7148] veth1_virt_wifi: entered promiscuous mode [ 79.452799][ T7148] veth0_virt_wifi: entered promiscuous mode [ 79.457137][ T7148] virt_wifi0: entered promiscuous mode [ 79.463140][ T7148] vlan0: entered promiscuous mode [ 79.465929][ T7148] vlan1: entered promiscuous mode [ 79.474688][ T7148] macvlan0: entered promiscuous mode [ 79.483157][ T7148] macvlan1: entered promiscuous mode [ 79.485063][ T7148] ipvlan0: entered promiscuous mode [ 79.485291][ T7148] ipvlan1: entered promiscuous mode [ 79.492497][ T7148] macvtap0: entered promiscuous mode [ 79.494030][ T7148] macsec0: entered promiscuous mode [ 79.495754][ T7148] geneve0: entered promiscuous mode [ 79.499529][ T7148] geneve1: entered promiscuous mode [ 79.509793][ T7148] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 79.522170][ T7148] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 79.532552][ T7148] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 79.541938][ T7148] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 79.555205][ T7148] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 79.559631][ T7148] caif0: entered promiscuous mode [ 79.561042][ T7148] bridge1: entered promiscuous mode [ 79.576691][ T5826] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.576721][ T5826] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.576740][ T5826] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.576773][ T5826] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.617935][ T7150] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.650524][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'. [ 79.719642][ T7135] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.783299][ T7165] hugetlbfs: Bad value '%' for mount option 'size' [ 79.783299][ T7165] [ 79.963734][ T5859] bridge_slave_1: left allmulticast mode [ 79.963862][ T5859] bridge_slave_1: left promiscuous mode [ 79.965459][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.969031][ T5859] bridge_slave_0: left allmulticast mode [ 79.969047][ T5859] bridge_slave_0: left promiscuous mode [ 79.969191][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.995920][ T7173] nvme_fabrics: missing parameter 'traddr=%s' [ 80.003893][ T5859] bond1 (unregistering): (slave sit1): Releasing backup interface [ 80.003937][ T5859] sit1 (unregistering): left promiscuous mode [ 80.032364][ T7181] nvme_fabrics: missing parameter 'traddr=%s' [ 80.049171][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.060543][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.067105][ T5859] bond0 (unregistering): Released all slaves [ 80.070105][ T5859] bond1 (unregistering): Released all slaves [ 80.133206][ T7207] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 80.252650][ T5496] 8021q: adding VLAN 0 to HW filter on device eth3 [ 80.255262][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'. [ 80.255278][ T7220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.363'. [ 80.363242][ T7231] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 80.370094][ T7231] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 80.372044][ T7135] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.372124][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.372185][ T7135] bridge_slave_0: entered allmulticast mode [ 80.372926][ T7135] bridge_slave_0: entered promiscuous mode [ 80.374673][ T7135] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.374713][ T7135] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.374771][ T7135] bridge_slave_1: entered allmulticast mode [ 80.375456][ T7135] bridge_slave_1: entered promiscuous mode [ 80.388897][ T7135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.390267][ T7135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.411522][ T7229] ip_tables: iptables: counters copy to user failed while replacing table [ 80.421636][ T7135] team0: Port device team_slave_0 added [ 80.425342][ T7135] team0: Port device team_slave_1 added [ 80.427426][ T7236] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 80.437984][ T7229] xt_CT: No such helper "pptp" [ 80.440449][ T7229] netlink: 'syz.2.365': attribute type 11 has an invalid length. [ 80.589316][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.589330][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.589346][ T7135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.595075][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.595092][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.595118][ T7135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.601218][ T7256] hugetlbfs: syz.2.370 (7256): Using mlock ulimits for SHM_HUGETLB is obsolete [ 80.613135][ T5496] 8021q: adding VLAN 0 to HW filter on device eth5 [ 80.636694][ T5859] hsr_slave_0: left promiscuous mode [ 80.637350][ T5859] hsr_slave_1: left promiscuous mode [ 80.637909][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.640141][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.744458][ T5859] team0 (unregistering): Port device team_slave_1 removed [ 80.749181][ T5859] team0 (unregistering): Port device team_slave_0 removed [ 80.837302][ T7135] hsr_slave_0: entered promiscuous mode [ 80.837760][ T7135] hsr_slave_1: entered promiscuous mode [ 80.838131][ T7135] debugfs: 'hsr0' already exists in 'hsr' [ 80.838148][ T7135] Cannot create hsr debugfs directory [ 80.971991][ T7135] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.975036][ T7135] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.975486][ T7135] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.978690][ T7135] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.979466][ T7135] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.985001][ T7135] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.985442][ T7135] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.987927][ T7135] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.038994][ T7135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.052463][ T7135] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.062133][ T5496] 8021q: adding VLAN 0 to HW filter on device eth4 [ 81.065257][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.065345][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.070866][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.070912][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.196591][ T5143] Bluetooth: hci4: command tx timeout [ 81.219019][ T5496] 8021q: adding VLAN 0 to HW filter on device eth6 [ 81.431957][ T5496] 8021q: adding VLAN 0 to HW filter on device eth7 [ 81.487540][ T7135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.556377][ T29] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 81.675928][ T7135] veth0_vlan: entered promiscuous mode [ 81.681334][ T7135] veth1_vlan: entered promiscuous mode [ 81.715824][ T7135] veth0_macvtap: entered promiscuous mode [ 81.716260][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 81.717377][ T7309] FAULT_INJECTION: forcing a failure. [ 81.717377][ T7309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.717397][ T7309] CPU: 1 UID: 0 PID: 7309 Comm: syz.3.376 Not tainted syzkaller #0 PREEMPT(full) [ 81.717410][ T7309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.717434][ T7309] Call Trace: [ 81.717439][ T7309] [ 81.717444][ T7309] dump_stack_lvl+0x100/0x190 [ 81.717499][ T7309] should_fail_ex.cold+0x5/0xa [ 81.717528][ T7309] _copy_to_user+0x32/0xd0 [ 81.717552][ T7309] raw_ioctl+0x1103/0x2b80 [ 81.717573][ T7309] ? __pfx_raw_ioctl+0x10/0x10 [ 81.717598][ T7309] ? selinux_file_ioctl+0x1e0/0x290 [ 81.717626][ T7309] ? selinux_file_ioctl+0x1e7/0x290 [ 81.717644][ T7309] ? __pfx_raw_ioctl+0x10/0x10 [ 81.717662][ T7309] __x64_sys_ioctl+0x18e/0x210 [ 81.717683][ T7309] do_syscall_64+0x123/0x790 [ 81.717697][ T7309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.717709][ T7309] RIP: 0033:0x7fcf85d9f7ab [ 81.717719][ T7309] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 81.717730][ T7309] RSP: 002b:00007fcf86c8ff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.717742][ T7309] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fcf85d9f7ab [ 81.717749][ T7309] RDX: 00007fcf86c90fd0 RSI: 0000000080085502 RDI: 0000000000000005 [ 81.717756][ T7309] RBP: 00007fcf86c90fd0 R08: 0000000000000012 R09: 00007fcf86c8ffc8 [ 81.717763][ T7309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 81.717770][ T7309] R13: 0000000800000000 R14: 0000000000000012 R15: 00007fcf85e56ba4 [ 81.717785][ T7309] [ 81.722156][ T7309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.722457][ T7309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.723367][ T7135] veth1_macvtap: entered promiscuous mode [ 81.728193][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 81.728218][ T29] usb 8-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 81.728901][ T29] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 81.728918][ T29] usb 8-1: can't read configurations, error -71 [ 81.734193][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.744905][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.770140][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.806604][ T5859] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.818969][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.818990][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.839837][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.839857][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.857423][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.866821][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.871036][ T7354] 9pnet_virtio: no channels available for device syz [ 81.873451][ T7354] 9pnet_virtio: no channels available for device syz [ 82.169488][ T7362] syzkaller0: entered promiscuous mode [ 82.169511][ T7362] syzkaller0: entered allmulticast mode [ 82.337875][ T7368] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 82.341837][ T7368] bond1: (slave lo): Enslaving as an active interface with an up link [ 82.342165][ T7368] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 82.343446][ T7368] jffs2: notice: (7368) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 82.586379][ T64] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 82.616629][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 82.618466][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 82.737506][ T64] usb 7-1: not running at top speed; connect to a high speed hub [ 82.737539][ T64] usb 7-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 82.738501][ T64] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 14385, setting to 64 [ 82.738538][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.741950][ T7371] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 82.742786][ T64] cyberjack 7-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 82.743798][ T7396] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 82.746567][ T7396] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 82.748894][ T7396] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 82.751454][ T64] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 82.755056][ T7396] hfsplus: unable to find HFS+ superblock [ 82.866958][ T7407] netlink: 72 bytes leftover after parsing attributes in process `syz.4.401'. [ 82.954690][ T7371] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 82.955638][ T6300] usb 7-1: USB disconnect, device number 8 [ 82.956466][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.961760][ T6300] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 82.962057][ T6300] cyberjack 7-1:1.0: device disconnected [ 83.288847][ T5143] Bluetooth: hci4: command tx timeout [ 83.300015][ T7434] No control pipe specified [ 83.302831][ T7434] ceph: No source [ 83.508981][ T7444] overlayfs: missing 'lowerdir' [ 83.514332][ T7444] netlink: 176 bytes leftover after parsing attributes in process `syz.4.409'. [ 83.652613][ T7448] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.653583][ T7448] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.721675][ T42] kauditd_printk_skb: 67 callbacks suppressed [ 83.721691][ T42] audit: type=1400 audit(1793865330.875:634): avc: denied { setopt } for pid=7453 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.722739][ T42] audit: type=1400 audit(1793865330.875:635): avc: denied { getopt } for pid=7453 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.772820][ T5143] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 83.773165][ T5143] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 83.778000][ T42] audit: type=1400 audit(1793865330.935:636): avc: denied { write } for pid=7451 comm="syz.2.413" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.905477][ T7463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.417'. [ 83.956077][ T7469] netlink: 3604 bytes leftover after parsing attributes in process `syz.2.418'. [ 84.066878][ T42] audit: type=1400 audit(1793865331.225:637): avc: denied { create } for pid=7481 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 84.069080][ T42] audit: type=1400 audit(1793865331.225:638): avc: denied { write } for pid=7481 comm="syz.1.423" path="socket:[20096]" dev="sockfs" ino=20096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 84.112166][ T7485] netlink: 'syz.1.424': attribute type 16 has an invalid length. [ 84.112182][ T7485] netlink: 'syz.1.424': attribute type 17 has an invalid length. [ 84.112283][ T7485] lo: left promiscuous mode [ 84.117993][ T7485] tunl0: left promiscuous mode [ 84.119552][ T7485] gre0: left promiscuous mode [ 84.122944][ T7485] gretap0: left promiscuous mode [ 84.127624][ T7485] erspan0: left promiscuous mode [ 84.132159][ T7485] ip_vti0: left promiscuous mode [ 84.133231][ T7485] ip6_vti0: left promiscuous mode [ 84.134326][ T7485] sit0: left promiscuous mode [ 84.140081][ T7485] ip6tnl0: left promiscuous mode [ 84.141177][ T7485] ip6gre0: left promiscuous mode [ 84.142500][ T7485] syz_tun: left promiscuous mode [ 84.145154][ T7485] ip6gretap0: left promiscuous mode [ 84.150321][ T7485] bridge0: left promiscuous mode [ 84.151843][ T7485] vcan0: left promiscuous mode [ 84.152968][ T7485] bond0: left promiscuous mode [ 84.154547][ T7485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.155483][ T7485] team0: left promiscuous mode [ 84.159175][ T7485] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.161461][ T7485] dummy0: left promiscuous mode [ 84.165548][ T7485] nlmon0: left promiscuous mode [ 84.168512][ T7485] batadv0: left promiscuous mode [ 84.170673][ T7485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.171517][ T7485] vxcan0: left promiscuous mode [ 84.173664][ T7485] vxcan1: left promiscuous mode [ 84.174607][ T7485] veth0: left promiscuous mode [ 84.178341][ T7485] veth1: left promiscuous mode [ 84.183872][ T7485] wg0: left promiscuous mode [ 84.188608][ T7485] wg1: left promiscuous mode [ 84.193309][ T7485] wg2: left promiscuous mode [ 84.193952][ T7485] veth0_to_bridge: left promiscuous mode [ 84.196725][ T7485] veth0_to_bond: left promiscuous mode [ 84.199988][ T7485] bond_slave_0: left promiscuous mode [ 84.201101][ T7485] veth1_to_bond: left promiscuous mode [ 84.203462][ T7485] bond_slave_1: left promiscuous mode [ 84.204476][ T7485] veth0_to_team: left promiscuous mode [ 84.207431][ T7485] team_slave_0: left promiscuous mode [ 84.210074][ T7485] veth1_to_team: left promiscuous mode [ 84.212366][ T7485] team_slave_1: left promiscuous mode [ 84.213145][ T7485] veth0_to_batadv: left promiscuous mode [ 84.214205][ T7485] batadv_slave_0: left promiscuous mode [ 84.214849][ T7485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.215233][ T7485] veth1_to_batadv: left promiscuous mode [ 84.216632][ T7485] batadv_slave_1: left promiscuous mode [ 84.216996][ T7485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.217280][ T7485] xfrm0: left promiscuous mode [ 84.218438][ T7485] veth0_to_hsr: left promiscuous mode [ 84.220879][ T7485] veth1_to_hsr: left promiscuous mode [ 84.223050][ T7485] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.223064][ T7485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.223090][ T7485] hsr0: left promiscuous mode [ 84.225158][ T7485] veth1_virt_wifi: left promiscuous mode [ 84.227347][ T7485] veth0_virt_wifi: left promiscuous mode [ 84.228576][ T7485] virt_wifi0: left promiscuous mode [ 84.231979][ T7485] veth1_vlan: left promiscuous mode [ 84.235710][ T7485] vlan0: left promiscuous mode [ 84.237346][ T7485] vlan1: left promiscuous mode [ 84.238205][ T7485] veth1_vlan: entered promiscuous mode [ 84.238300][ T7485] macvlan0: left promiscuous mode [ 84.241464][ T7485] macvlan1: left promiscuous mode [ 84.245321][ T7485] ipvlan0: left promiscuous mode [ 84.246678][ T7485] ipvlan1: left promiscuous mode [ 84.247841][ T7485] veth1_macvtap: left promiscuous mode [ 84.249457][ T7485] veth0_macvtap: left promiscuous mode [ 84.250186][ T7485] veth0_macvtap: entered promiscuous mode [ 84.250282][ T7485] macvtap0: left promiscuous mode [ 84.251355][ T7485] veth1_macvtap: entered promiscuous mode [ 84.251502][ T7485] macsec0: left promiscuous mode [ 84.252574][ T7485] geneve0: left promiscuous mode [ 84.253771][ T7485] geneve1: left promiscuous mode [ 84.255092][ T42] audit: type=1400 audit(1793865331.405:639): avc: denied { connect } for pid=7489 comm="syz.2.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 84.255871][ T42] audit: type=1400 audit(1793865331.405:640): avc: denied { cmd } for pid=7489 comm="syz.2.426" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 84.258959][ T7485] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 84.259184][ T7485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.261383][ T7485] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 84.261748][ T7485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.263424][ T7485] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 84.263602][ T7485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.265807][ T7485] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 84.266047][ T7485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.275760][ T7485] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 84.277522][ T7485] caif0: left promiscuous mode [ 84.278491][ T7485] bridge1: left promiscuous mode [ 84.278751][ T42] audit: type=1400 audit(1793865331.435:641): avc: denied { map } for pid=7489 comm="syz.2.426" path="/dev/ublkc0" dev="devtmpfs" ino=2964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.279168][ T7490] ublk0: read batch cmd buffer failed [ 84.279216][ T7490] ublk0: read batch cmd buffer failed [ 84.284538][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.284584][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.315575][ T42] audit: type=1400 audit(1793865331.465:642): avc: denied { map } for pid=7497 comm="syz.1.428" path="/dev/video0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.316398][ T5859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.316477][ T5859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.316499][ T5859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.319529][ T7490] ublk0: read batch cmd buffer failed [ 84.319579][ T7490] ublk0: read batch cmd buffer failed [ 84.338540][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.405581][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.429'. [ 84.410971][ T7500] IPv6: sit1: Disabled Multicast RS [ 84.411588][ T7500] sit1: entered allmulticast mode [ 84.420507][ T7502] nci: nci_start_poll: failed to set local general bytes [ 84.512534][ T42] audit: type=1400 audit(1793865331.665:643): avc: denied { read write } for pid=7528 comm="syz.2.434" name="uhid" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 84.533270][ T7526] Invalid ELF header magic: != ELF [ 84.543677][ T6299] hid-sensor-hub 0003:1234:5678.0002: hidraw1: USB HID v0.01 Device [syz0] on syz0 [ 84.734028][ T7533] fido_id[7533]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.785001][ T7501] cgroup: fork rejected by pids controller in /syz3 [ 84.827456][ T7546] netlink: 72 bytes leftover after parsing attributes in process `syz.2.436'. [ 84.890038][ T7556] netlink: 14 bytes leftover after parsing attributes in process `syz.2.438'. [ 84.999218][ T7565] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 85.036407][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.366402][ T67] Bluetooth: hci4: command tx timeout [ 85.589384][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.442'. [ 85.724131][ T7580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7580 comm=syz.1.443 [ 85.767484][ T7585] loop5: detected capacity change from 0 to 7 [ 85.770999][ T7585] Dev loop5: unable to read RDB block 7 [ 85.771016][ T7585] loop5: AHDI p1 [ 85.771027][ T7585] loop5: partition table partially beyond EOD, truncated [ 85.856009][ T7591] tmpfs: Bad value for 'mpol' [ 85.916333][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.916513][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.916554][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.916608][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.916646][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.916680][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.916717][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.916758][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.916798][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.916833][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917071][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917114][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917149][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917184][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917220][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917264][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917300][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917335][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917372][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917407][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917447][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917482][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917519][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917554][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917588][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917629][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917665][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917699][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917734][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917773][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917811][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.917845][ T7591] blktrace: Concurrent blktraces are not allowed on sg0 [ 85.924949][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'. [ 85.995318][ T7609] Unknown cursor 8 [ 86.202797][ T7628] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 86.202858][ T7628] overlayfs: missing 'lowerdir' [ 86.240749][ T7636] ALSA: seq fatal error: cannot create timer (-22) [ 86.242081][ T7638] netlink: 'syz.3.463': attribute type 21 has an invalid length. [ 86.242095][ T7638] netlink: 128 bytes leftover after parsing attributes in process `syz.3.463'. [ 86.244705][ T7638] netlink: 3 bytes leftover after parsing attributes in process `syz.3.463'. [ 86.263348][ T7640] ALSA: seq fatal error: cannot create timer (-22) [ 86.334896][ T7653] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 86.468018][ T7665] loop5: detected capacity change from 0 to 7 [ 86.469219][ T7665] Buffer I/O error on dev loop5, logical block 0, async page read [ 86.469254][ T7665] Buffer I/O error on dev loop5, logical block 0, async page read [ 86.469282][ T7665] Buffer I/O error on dev loop5, logical block 0, async page read [ 86.469308][ T7665] Buffer I/O error on dev loop5, logical block 0, async page read [ 86.469354][ T7665] Buffer I/O error on dev loop5, logical block 0, async page read [ 86.469389][ T7665] Buffer I/O error on dev loop5, logical block 0, async page read [ 86.469415][ T7665] Buffer I/O error on dev loop5, logical block 0, async page read [ 86.469428][ T7665] ldm_validate_partition_table(): Disk read failed. [ 86.469451][ T7665] Buffer I/O error on dev loop5, logical block 0, async page read [ 86.469476][ T7665] Buffer I/O error on dev loop5, logical block 0, async page read [ 86.469501][ T7665] Buffer I/O error on dev loop5, logical block 0, async page read [ 86.469529][ T7665] Dev loop5: unable to read RDB block 0 [ 86.469584][ T7665] loop5: unable to read partition table [ 86.469748][ T7665] loop5: partition table beyond EOD, truncated [ 86.469770][ T7665] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 86.485756][ T7665] btrfs: Unknown parameter 'barri' [ 86.508819][ T7663] syz.1.468 (7663): drop_caches: 2 [ 86.673867][ T7677] XFS (nullb0): Invalid device [./loop0], error=-15 [ 86.718839][ T7680] wg1 speed is unknown, defaulting to 1000 [ 86.719894][ T7680] wg1 speed is unknown, defaulting to 1000 [ 86.720543][ T7680] wg1 speed is unknown, defaulting to 1000 [ 86.876061][ T7680] infiniband syz2: set down [ 86.876146][ T6299] wg1 speed is unknown, defaulting to 1000 [ 86.881545][ T7680] infiniband syz2: added wg1 [ 86.893162][ T7680] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 86.893199][ T7680] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 86.893241][ T7680] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 86.915406][ T7680] RDS/IB: syz2: added [ 86.915469][ T7680] smc: adding ib device syz2 with port count 1 [ 86.915488][ T7680] smc: ib device syz2 port 1 has no pnetid [ 86.918384][ T6299] wg1 speed is unknown, defaulting to 1000 [ 86.922844][ T7680] wg1 speed is unknown, defaulting to 1000 [ 87.083843][ T7680] wg1 speed is unknown, defaulting to 1000 [ 87.167455][ T7680] wg1 speed is unknown, defaulting to 1000 [ 87.241160][ T7680] wg1 speed is unknown, defaulting to 1000 [ 87.265255][ T7492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 87.350561][ T43] IPVS: starting estimator thread 0... [ 87.354537][ T7696] ip_tables: iptables: counters copy to user failed while replacing table [ 87.378607][ T7696] xt_CT: No such helper "pptp" [ 87.386841][ T7696] device-mapper: ioctl: device name cannot contain '/' [ 87.432379][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 87.434938][ T7706] ip_tables: iptables: counters copy to user failed while replacing table [ 87.436611][ T67] Bluetooth: hci4: command tx timeout [ 87.447815][ T7695] IPVS: using max 42 ests per chain, 100800 per kthread [ 87.466950][ T7711] comedi comedi1: Minor 6 could not be opened [ 87.481616][ T7712] scsi_nl_rcv_msg: discarding partial skb [ 87.518878][ T67] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 87.589190][ T7729] netlink: 56 bytes leftover after parsing attributes in process `syz.2.482'. [ 87.836294][ T5887] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 87.882127][ T7745] bond1: down delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 87.966247][ T5887] usb 9-1: device descriptor read/64, error -71 [ 88.037976][ T7749] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 88.037993][ T7749] UDF-fs: Scanning with blocksize 2048 failed [ 88.041580][ T7749] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 88.041593][ T7749] UDF-fs: Scanning with blocksize 4096 failed [ 88.055555][ T7749] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 88.055575][ T7749] UDF-fs: Scanning with blocksize 2048 failed [ 88.059689][ T7749] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 88.059701][ T7749] UDF-fs: Scanning with blocksize 4096 failed [ 88.162054][ T7761] XFS (nullb0): Invalid superblock magic number [ 88.184282][ T3523] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 88.193979][ T7761] XFS (nullb0): io_pages changed from 0 to 31, not restoring. [ 88.193999][ T7761] XFS (nullb0): ra_pages changed from 0 to 32, not restoring. [ 88.207733][ T5887] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 88.240285][ T7774] batman_adv: batadv0: Adding interface: syzkaller0 [ 88.240298][ T7774] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.240317][ T7774] batman_adv: batadv0: Interface activated: syzkaller0 [ 88.302537][ T7778] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 88.336300][ T5887] usb 9-1: device descriptor read/64, error -71 [ 88.448472][ T5887] usb usb9-port1: attempt power cycle [ 88.494387][ T7773] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 88.504699][ T7773] batman_adv: batadv0: Removing interface: syzkaller0 [ 88.786271][ T5887] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 88.806706][ T5887] usb 9-1: device descriptor read/8, error -71 [ 88.998404][ T6058] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 89.046241][ T5887] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 89.066644][ T5887] usb 9-1: device descriptor read/8, error -71 [ 89.158983][ T6058] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 89.159895][ T6058] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.159913][ T6058] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.159926][ T6058] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.159946][ T6058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.165344][ T6058] usb 6-1: config 0 descriptor?? [ 89.178551][ T5887] usb usb9-port1: unable to enumerate USB device [ 89.271248][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 89.271302][ T42] audit: type=1400 audit(1793865336.425:666): avc: denied { bind } for pid=7791 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.399501][ T67] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 89.450127][ T42] audit: type=1400 audit(1793865336.605:667): avc: denied { ioctl } for pid=7797 comm="syz.2.502" path="socket:[21225]" dev="sockfs" ino=21225 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.505516][ T42] audit: type=1400 audit(1793865336.655:668): avc: denied { name_connect } for pid=7797 comm="syz.2.502" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 89.510340][ T42] audit: type=1400 audit(1793865336.665:669): avc: denied { getopt } for pid=7797 comm="syz.2.502" lport=43924 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 89.573452][ T6058] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 89.617961][ T6058] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 89.753063][ T42] audit: type=1400 audit(1793865336.905:670): avc: denied { bind } for pid=7814 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.754191][ T42] audit: type=1400 audit(1793865336.905:671): avc: denied { listen } for pid=7814 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.754671][ T42] audit: type=1400 audit(1793865336.905:672): avc: denied { write } for pid=7814 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.841533][ T42] audit: type=1400 audit(1793865336.995:673): avc: denied { map } for pid=7823 comm="syz.2.509" path="socket:[21268]" dev="sockfs" ino=21268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 90.205269][ T7835] netlink: 'syz.3.512': attribute type 1 has an invalid length. [ 90.220440][ T7835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.512'. [ 90.261839][ T7838] bridge_slave_0: invalid flags given to default FDB implementation [ 90.881076][ C0] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 91.165395][ T42] audit: type=1400 audit(1793865338.315:674): avc: denied { write } for pid=7863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.165957][ T42] audit: type=1400 audit(1793865338.315:675): avc: denied { create } for pid=7863 comm="dhcpcd-run-hook" name="resolv.conf.eth4.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.485166][ T7871] netlink: 778 bytes leftover after parsing attributes in process `syz.1.521'. [ 91.608983][ T7873] netlink: 'syz.1.522': attribute type 16 has an invalid length. [ 91.609005][ T7873] netlink: 'syz.1.522': attribute type 17 has an invalid length. [ 91.624444][ T7873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.654988][ T7873] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 91.657720][ T7873] bond2: (slave lo): Enslaving as an active interface with an up link [ 91.658426][ T7873] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 91.672872][ T5873] usb 6-1: USB disconnect, device number 6 [ 91.720973][ T7878] netlink: 76 bytes leftover after parsing attributes in process `syz.3.525'. [ 91.761160][ T7884] vivid-004: ================= START STATUS ================= [ 91.761350][ T7884] vivid-004: Radio HW Seek Mode: Bounded [ 91.761386][ T7884] vivid-004: Radio Programmable HW Seek: false [ 91.761406][ T7884] vivid-004: RDS Rx I/O Mode: Block I/O [ 91.761424][ T7884] vivid-004: Generate RBDS Instead of RDS: false [ 91.761444][ T7884] vivid-004: RDS Reception: true [ 91.761472][ T7884] vivid-004: RDS Program Type: 0 inactive [ 91.761497][ T7884] vivid-004: RDS PS Name: inactive [ 91.761520][ T7884] vivid-004: RDS Radio Text: inactive [ 91.761542][ T7884] vivid-004: RDS Traffic Announcement: false inactive [ 91.761565][ T7884] vivid-004: RDS Traffic Program: false inactive [ 91.761588][ T7884] vivid-004: RDS Music: false inactive [ 91.761611][ T7884] vivid-004: ================== END STATUS ================== [ 91.763637][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'. [ 91.780083][ T7885] Bluetooth: ISO socket layer initialized [ 91.853518][ T7885] netlink: 'syz.3.525': attribute type 3 has an invalid length. [ 91.898340][ T7891] kvm [7889]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 91.899936][ T7891] kvm [7889]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 92.061331][ T7914] netlink: 'syz.4.530': attribute type 10 has an invalid length. [ 92.071328][ T7914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.073588][ T7914] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 92.076041][ T7919] netlink: 'syz.4.530': attribute type 10 has an invalid length. [ 92.124544][ T7924] netlink: 228 bytes leftover after parsing attributes in process `syz.4.531'. [ 92.245930][ T7937] netlink: 112 bytes leftover after parsing attributes in process `syz.3.535'. [ 92.320077][ T7948] team0: entered allmulticast mode [ 92.320094][ T7948] team_slave_0: entered allmulticast mode [ 92.320104][ T7948] team_slave_1: entered allmulticast mode [ 92.323187][ T7948] team0: Cannot enslave team device to itself [ 92.434075][ T7953] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 92.439431][ T7958] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 92.570881][ T7973] netlink: 56 bytes leftover after parsing attributes in process `syz.4.544'. [ 92.614054][ T7980] netlink: 'syz.3.548': attribute type 1 has an invalid length. [ 92.614070][ T7980] netlink: 244 bytes leftover after parsing attributes in process `syz.3.548'. [ 92.649998][ T7977] 9pnet_virtio: no channels available for device syz [ 92.771466][ T5573] hid-generic 0003:0001:0001.0004: hidraw1: USB HID v0.01 Mouse [syz1] on syz0 [ 92.822811][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'. [ 92.920092][ T8004] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 92.920116][ T8004] overlayfs: missing 'lowerdir' [ 93.041253][ T8011] veth2: entered allmulticast mode [ 93.949243][ T8062] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 93.949267][ T8062] overlayfs: missing 'lowerdir' [ 93.983303][ T8068] netlink: 'syz.1.569': attribute type 4 has an invalid length. [ 94.021138][ T8070] netlink: 536 bytes leftover after parsing attributes in process `syz.1.570'. [ 94.035123][ T8070] ip6erspan0: entered promiscuous mode [ 94.074625][ T8071] nbd: must specify at least one socket [ 94.075703][ T8079] nbd: must specify at least one socket [ 94.282535][ T8106] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (7) [ 94.418523][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 94.418544][ T42] audit: type=1400 audit(1793865341.575:711): avc: denied { setopt } for pid=8107 comm="syz.2.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 94.506576][ T5573] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 94.516530][ T5887] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 94.658117][ T5573] usb 9-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 94.659116][ T5573] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 94.660275][ T5573] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 94.663038][ T5573] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.663053][ T5573] usb 9-1: Product: syz [ 94.663061][ T5573] usb 9-1: Manufacturer: syz [ 94.663070][ T5573] usb 9-1: SerialNumber: syz [ 94.668364][ T5573] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 94.674446][ T5887] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 94.682941][ T5573] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 94.686140][ T5573] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 94.703694][ T5887] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.703740][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.720812][ T5887] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 94.721009][ T5887] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 94.721062][ T5887] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 94.722186][ T5887] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 94.722251][ T5887] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 94.725187][ T5887] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 94.744715][ T5887] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 94.744784][ T5887] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 94.752954][ T5887] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 94.876443][ T5887] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 94.983027][ T8144] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 95.037710][ T5887] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 95.038763][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.252773][ T5887] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 95.500775][ T8161] __nla_validate_parse: 2 callbacks suppressed [ 95.500797][ T8161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.583'. [ 95.501992][ T8161] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8161 comm=syz.3.583 [ 95.508639][ T6058] usb 8-1: USB disconnect, device number 6 [ 95.528888][ T8139] netlink: 64 bytes leftover after parsing attributes in process `syz.4.580'. [ 95.998501][ T42] audit: type=1400 audit(1793865343.155:712): avc: denied { map } for pid=8162 comm="syz.2.586" path="socket:[24855]" dev="sockfs" ino=24855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.998724][ T42] audit: type=1400 audit(1793865343.155:713): avc: denied { read } for pid=8162 comm="syz.2.586" path="socket:[24855]" dev="sockfs" ino=24855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.129593][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'. [ 96.221469][ T42] audit: type=1800 audit(1793865343.375:714): pid=8180 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.589" name="/newroot/181/bus" dev="tmpfs" ino=1001 res=0 errno=-13 [ 96.242187][ T8180] overlayfs: failed to verify upper (181/file1, ino=1002, err=-116) [ 96.242223][ T8180] overlayfs: failed to verify index dir 'upper' xattr [ 96.242230][ T8180] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 96.397562][ T8104] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 96.399159][ C3] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 96.399351][ C3] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 96.399529][ C3] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 96.399716][ C3] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 96.399903][ C3] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 96.400088][ C3] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 96.400272][ C3] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 96.400276][ T5887] usb 9-1: USB disconnect, device number 6 [ 96.400282][ C3] usb 9-1: ti_interrupt_callback - resubmit interrupt urb failed, -19 [ 96.402127][ T8106] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -19 [ 96.402178][ T8106] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -19 [ 96.402197][ T8106] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -19 [ 96.402237][ T8106] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -19 [ 96.405902][ T6058] usb 6-1: USB disconnect, device number 7 [ 96.416295][ T5887] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 96.420654][ T6058] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 96.423176][ T6058] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 96.423476][ T6058] keyspan 6-1:1.0: device disconnected [ 96.439707][ T5887] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 96.440386][ T5887] ti_usb_3410_5052 9-1:2.0: device disconnected [ 96.486374][ T6299] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 96.616330][ T6299] usb 7-1: device descriptor read/64, error -71 [ 96.856295][ T6299] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 96.949396][ T42] audit: type=1400 audit(1793865344.105:715): avc: denied { setattr } for pid=8192 comm="syz.4.592" name="vbi7" dev="devtmpfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 96.950439][ T42] audit: type=1400 audit(1793865344.105:716): avc: denied { read } for pid=8192 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.953977][ T42] audit: type=1400 audit(1793865344.105:717): avc: denied { ioctl } for pid=8192 comm="syz.4.592" path="socket:[23861]" dev="sockfs" ino=23861 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.986389][ T6299] usb 7-1: device descriptor read/64, error -71 [ 96.992365][ T42] audit: type=1400 audit(1793865344.145:718): avc: denied { connect } for pid=8202 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 97.030471][ T42] audit: type=1400 audit(1793865344.185:719): avc: denied { bind } for pid=8205 comm="syz.4.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.051014][ T42] audit: type=1400 audit(1793865344.205:720): avc: denied { setopt } for pid=8202 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 97.097017][ T6299] usb usb7-port1: attempt power cycle [ 97.400734][ T8231] xt_hashlimit: size too large, truncated to 1048576 [ 97.436936][ T6299] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 97.460591][ T6299] usb 7-1: device descriptor read/8, error -71 [ 97.479608][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'. [ 97.696291][ T6299] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 97.717058][ T6299] usb 7-1: device descriptor read/8, error -71 [ 97.826484][ T6299] usb usb7-port1: unable to enumerate USB device [ 100.315020][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 100.315035][ T42] audit: type=1400 audit(1793865347.465:724): avc: denied { write } for pid=8238 comm="syz.4.604" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 100.317744][ T8239] c6xdigio 00:03: in use; can't configure [ 100.365385][ T8243] Cannot find set identified by id 0 to match [ 100.373891][ T8243] Cannot find set identified by id 0 to match [ 100.404367][ T8241] netlink: 84 bytes leftover after parsing attributes in process `syz.1.606'. [ 100.514124][ T8254] tipc: Started in network mode [ 100.514139][ T8254] tipc: Node identity 1001001, cluster identity 4711 [ 100.514154][ T8254] tipc: Node number set to 16781313 [ 100.516942][ T8254] tipc: Enabled bearer , priority 10 [ 100.635647][ T8256] device-mapper: table: 248:5: crypt: Error allocating crypto tfm (-EINVAL) [ 100.635688][ T8256] device-mapper: ioctl: error adding target to table [ 100.648603][ T8278] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 100.720286][ T42] audit: type=1400 audit(1793865347.875:725): avc: denied { mount } for pid=8287 comm="syz.4.614" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 100.723499][ T42] audit: type=1400 audit(1793865347.875:726): avc: denied { mounton } for pid=8287 comm="syz.4.614" path="/file0" dev="bpf" ino=22353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 100.723585][ T8289] fuse: Unknown parameter 'fȞ𦜘d' [ 100.725904][ T8289] xt_hashlimit: max too large, truncated to 1048576 [ 100.730649][ T8260] device-mapper: table: 248:5: crypt: Error allocating crypto tfm (-EINVAL) [ 100.730671][ T8260] device-mapper: ioctl: error adding target to table [ 101.023154][ T42] audit: type=1400 audit(1793865348.175:727): avc: denied { write } for pid=8308 comm="syz.2.621" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 101.156323][ T6299] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 101.223452][ T8316] trusted_key: encrypted_key: insufficient parameters specified [ 101.308440][ T6299] usb 9-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 101.309542][ T6299] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 101.309577][ T6299] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1056, setting to 64 [ 101.309599][ T6299] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 101.310650][ T6299] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 101.310671][ T6299] usb 9-1: SerialNumber: syz [ 101.319306][ T8303] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 101.319465][ T8303] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 101.439818][ T8325] nvme_fabrics: missing parameter 'transport=%s' [ 101.439835][ T8325] nvme_fabrics: missing parameter 'nqn=%s' [ 101.490022][ T8329] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 101.497860][ T8329] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 101.524278][ T8298] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 101.524376][ T8298] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 101.706810][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'. [ 101.773400][ T8344] netlink: 136 bytes leftover after parsing attributes in process `syz.1.632'. [ 101.773568][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 101.805569][ T8344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.632'. [ 101.874449][ T8349] blktrace: Concurrent blktraces are not allowed on sg0 [ 101.876921][ T8349] blktrace: Concurrent blktraces are not allowed on sg0 [ 101.940911][ T6299] cdc_ether 9-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 101.990686][ T42] audit: type=1400 audit(1793865349.145:728): avc: denied { append } for pid=8356 comm="syz.2.635" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 102.039348][ T8363] netlink: 64 bytes leftover after parsing attributes in process `syz.1.637'. [ 102.054459][ T42] audit: type=1400 audit(1793865349.205:729): avc: denied { write } for pid=8361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.115313][ T42] audit: type=1400 audit(1793865349.265:730): avc: denied { write } for pid=8374 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.157743][ T6299] usb 9-1: USB disconnect, device number 7 [ 102.158737][ T6299] cdc_ether 9-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 102.193170][ T8383] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 102.275260][ T42] audit: type=1400 audit(1793865349.425:731): avc: denied { write } for pid=8384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.326821][ T8395] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 102.382636][ T42] audit: type=1400 audit(1793865349.535:732): avc: denied { write } for pid=8402 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.528612][ T8419] bond1: (slave lo): Releasing backup interface [ 102.529303][ T8419] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 102.530822][ T8419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.568474][ T42] audit: type=1400 audit(1793865349.725:733): avc: denied { map } for pid=8422 comm="syz.3.654" path="socket:[23526]" dev="sockfs" ino=23526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.603350][ T8425] nbd: must specify an index to disconnect [ 102.764810][ T8437] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 102.822157][ T8441] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 103.056388][ T6299] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 103.206393][ T6299] usb 9-1: Using ep0 maxpacket: 16 [ 103.209906][ T6299] usb 9-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 103.210860][ T6299] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.210874][ T6299] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.212671][ T6299] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.212684][ T6299] usb 9-1: Product: syz [ 103.212692][ T6299] usb 9-1: Manufacturer: syz [ 103.212700][ T6299] usb 9-1: SerialNumber: syz [ 103.226999][ T6299] r8152-cfgselector 9-1: Unknown version 0x0000 [ 103.227014][ T6299] r8152-cfgselector 9-1: config 0 descriptor?? [ 103.435232][ T6299] r8152-cfgselector 9-1: USB disconnect, device number 8 [ 103.601480][ T8470] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 103.633220][ T8479] netlink: 36 bytes leftover after parsing attributes in process `syz.1.671'. [ 103.972413][ T8514] Bluetooth: hci0: unsupported parameter 255 [ 103.972429][ T8514] Bluetooth: hci0: unsupported parameter 255 [ 104.392848][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.399416][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.402761][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.403589][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.409395][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.452082][ T8532] Bluetooth: hci0: unsupported parameter 255 [ 104.452106][ T8532] Bluetooth: hci0: unsupported parameter 255 [ 104.624455][ T13] bridge_slave_1: left allmulticast mode [ 104.624479][ T13] bridge_slave_1: left promiscuous mode [ 104.624691][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.626756][ T13] bridge_slave_0: left allmulticast mode [ 104.626776][ T13] bridge_slave_0: left promiscuous mode [ 104.626962][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.744102][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.693'. [ 104.778980][ T8552] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 104.785531][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.794679][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.801613][ T13] bond0 (unregistering): Released all slaves [ 104.807208][ T13] b (unregistering): Released all slaves [ 104.817062][ T13] bond1 (unregistering): Released all slaves [ 104.827235][ T13] bond2 (unregistering): Released all slaves [ 104.838513][ T8549] ip6gretap0: default FDB implementation only supports local addresses [ 104.859970][ T8529] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.963651][ T8569] bridge3: entered promiscuous mode [ 105.031859][ T8576] Bluetooth: hci0: unsupported parameter 255 [ 105.031877][ T8576] Bluetooth: hci0: unsupported parameter 255 [ 105.033510][ T8561] device-mapper: table: 248:7: integrity: Not enough provided sectors for requested mapping size (-EINVAL) [ 105.033538][ T8561] device-mapper: ioctl: error adding target to table [ 105.040038][ T8529] wg1 speed is unknown, defaulting to 1000 [ 105.088866][ T8580] ip6t_hbh: unknown flags 83 [ 105.111259][ T5496] 8021q: adding VLAN 0 to HW filter on device eth8 [ 105.120183][ T8584] overlayfs: failed to resolve './file1': -2 [ 105.371459][ T5496] 8021q: adding VLAN 0 to HW filter on device eth9 [ 105.432965][ T13] hsr_slave_0: left promiscuous mode [ 105.433519][ T13] hsr_slave_1: left promiscuous mode [ 105.433917][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.434449][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.488919][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 105.488948][ T42] audit: type=1400 audit(1793865352.645:749): avc: denied { write } for pid=8603 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.494457][ T8606] device-mapper: ioctl: The device has no table. [ 105.502031][ T8606] ecryptfs_get_tree: kern_path() failed [ 105.512415][ T8606] Reading sb failed; rc = [-20] [ 105.560256][ T5895] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 105.566545][ T42] audit: type=1400 audit(1793865352.715:750): avc: denied { write } for pid=8609 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.620413][ T13] team0 (unregistering): Port device team_slave_1 removed [ 105.625657][ T13] team0 (unregistering): Port device team_slave_0 removed [ 105.662120][ T36] smc: removing ib device syz2 [ 105.686485][ T5895] usb 9-1: device descriptor read/64, error -71 [ 105.704909][ T36] smbdirect: ib_dev[syz2] removed [ 105.742260][ T5496] 8021q: adding VLAN 0 to HW filter on device eth10 [ 105.865781][ T42] audit: type=1400 audit(1793865353.015:751): avc: denied { write } for pid=8619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.926093][ T42] audit: type=1400 audit(1793865353.075:752): avc: denied { write } for pid=8624 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.936341][ T5895] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 105.957346][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.957428][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.957488][ T8529] bridge_slave_0: entered allmulticast mode [ 105.958810][ T8529] bridge_slave_0: entered promiscuous mode [ 105.960332][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.960402][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.960456][ T8529] bridge_slave_1: entered allmulticast mode [ 105.961445][ T8529] bridge_slave_1: entered promiscuous mode [ 105.985514][ T8529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.016000][ T5826] tipc: Subscription rejected, illegal request [ 106.017609][ T8529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.019853][ T5496] 8021q: adding VLAN 0 to HW filter on device eth11 [ 106.047231][ T8627] tipc: Started in network mode [ 106.047250][ T8627] tipc: Node identity 4, cluster identity 4711 [ 106.047273][ T8627] tipc: Node number set to 4 [ 106.066328][ T5895] usb 9-1: device descriptor read/64, error -71 [ 106.085185][ T8529] team0: Port device team_slave_0 added [ 106.087013][ T8529] team0: Port device team_slave_1 added [ 106.136512][ T8529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.136528][ T8529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.136543][ T8529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.138170][ T8529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.138181][ T8529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.138196][ T8529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.141706][ T8631] netlink: 'syz.1.708': attribute type 1 has an invalid length. [ 106.170844][ T8631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=8631 comm=syz.1.708 [ 106.176782][ T5895] usb usb9-port1: attempt power cycle [ 106.184242][ T8631] bond3: (slave bridge4): making interface the new active one [ 106.187731][ T8631] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 106.222661][ T8529] hsr_slave_0: entered promiscuous mode [ 106.223549][ T8529] hsr_slave_1: entered promiscuous mode [ 106.223967][ T8529] debugfs: 'hsr0' already exists in 'hsr' [ 106.223984][ T8529] Cannot create hsr debugfs directory [ 106.412075][ T8529] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.414987][ T8529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.415732][ T8529] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.418734][ T8529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.419598][ T8529] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.428824][ T8529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.429634][ T8529] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.441300][ T8529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.467885][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.467981][ T8529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.468181][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.468273][ T8529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.476379][ T67] Bluetooth: hci1: command tx timeout [ 106.482288][ T13] IPVS: stop unused estimator thread 0... [ 106.515030][ T8529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.516320][ T5895] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 106.525166][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.525817][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.538289][ T5895] usb 9-1: device descriptor read/8, error -71 [ 106.540026][ T8529] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.545235][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.545318][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.550982][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.551067][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.776370][ T5895] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 106.797056][ T5895] usb 9-1: device descriptor read/8, error -71 [ 106.828815][ T8529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.906871][ T5895] usb usb9-port1: unable to enumerate USB device [ 107.019057][ T8529] veth0_vlan: entered promiscuous mode [ 107.030981][ T8529] veth1_vlan: entered promiscuous mode [ 107.050821][ T8529] veth0_macvtap: entered promiscuous mode [ 107.055339][ T8529] veth1_macvtap: entered promiscuous mode [ 107.071735][ T8529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.073629][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'. [ 107.077638][ T8666] IPv6: sit2: Disabled Multicast RS [ 107.078283][ T8666] sit2: entered allmulticast mode [ 107.083973][ T8529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.091777][ T42] audit: type=1400 audit(1793865354.245:753): avc: denied { mount } for pid=8665 comm="syz.2.711" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 107.107767][ T5859] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.163372][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.163394][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.171002][ T8669] loop4: detected capacity change from 0 to 7 [ 107.196886][ T8669] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 107.196905][ T8669] loop4: partition table partially beyond EOD, truncated [ 107.197233][ T8669] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 107.201260][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.201279][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.206847][ T5859] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.207030][ T5859] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.207051][ T5859] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.220830][ T5788] udevd[5788]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 107.223738][ T42] audit: type=1400 audit(1793865354.375:754): avc: denied { unmount } for pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 107.323653][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.686'. [ 107.338822][ T42] audit: type=1400 audit(1793865354.495:755): avc: denied { map } for pid=8675 comm="syz.2.714" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 107.646606][ T5895] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 107.776281][ T5895] usb 9-1: device descriptor read/64, error -71 [ 107.942737][ T42] audit: type=1400 audit(1793865355.095:756): avc: denied { read } for pid=8696 comm="syz.2.718" laddr=fe80::b lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.011826][ T8703] device-mapper: table: 248:6: ram5 too small for target: start=1, len=8272, dev_size=8192 [ 108.011847][ T8703] device-mapper: core: Cannot calculate initial queue limits [ 108.011852][ T8703] device-mapper: ioctl: unable to set up device queue for new table. [ 108.018267][ T5895] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 108.038991][ T8703] ipt_REJECT: TCP_RESET invalid for non-tcp [ 108.040299][ T8703] veth0_to_team: entered promiscuous mode [ 108.048893][ T8703] netlink: 48 bytes leftover after parsing attributes in process `syz.2.720'. [ 108.089471][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 108.090941][ T42] audit: type=1400 audit(1793865355.245:757): avc: denied { write } for pid=8711 comm="syz.1.722" name="functions" dev="configfs" ino=9199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.092599][ T42] audit: type=1400 audit(1793865355.245:758): avc: denied { write } for pid=8711 comm="syz.1.722" name="target" dev="configfs" ino=3552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.097318][ T8713] [ 108.117689][ T8713] ====================================================== [ 108.120327][ T8713] WARNING: possible circular locking dependency detected [ 108.123046][ T8713] syzkaller #0 Not tainted [ 108.124833][ T8713] ------------------------------------------------------ [ 108.127534][ T8713] syz.1.722/8713 is trying to acquire lock: [ 108.129747][ T8713] ffff88802188c880 (&sb->s_type->i_mutex_key#28){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 108.133918][ T8713] [ 108.133918][ T8713] but task is already holding lock: [ 108.136781][ T8713] ffffffff916b6c60 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 108.140131][ T8713] [ 108.140131][ T8713] which lock already depends on the new lock. [ 108.140131][ T8713] [ 108.144090][ T8713] [ 108.144090][ T8713] the existing dependency chain (in reverse order) is: [ 108.146276][ T5895] usb 9-1: device descriptor read/64, error -71 [ 108.149608][ T8713] [ 108.149608][ T8713] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 108.152677][ T8713] lock_acquire+0x1d1/0x380 [ 108.154710][ T8713] __mutex_lock+0x19f/0x1c10 [ 108.156749][ T8713] usbg_make_tpg+0x10b/0x610 [ 108.158773][ T8713] target_fabric_make_tpg+0xab/0x8c0 [ 108.161068][ T8713] configfs_mkdir+0x525/0xd40 [ 108.162878][ T8713] vfs_mkdir+0x36d/0x8a0 [ 108.164643][ T8713] filename_mkdirat+0x4c4/0x630 [ 108.166741][ T8713] __x64_sys_mkdirat+0x89/0xc0 [ 108.168838][ T8713] do_syscall_64+0x123/0x790 [ 108.170854][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.173406][ T8713] [ 108.173406][ T8713] -> #1 (&subsys->su_mutex){+.+.}-{4:4}: [ 108.176150][ T8713] lock_acquire+0x1d1/0x380 [ 108.178065][ T8713] __mutex_lock+0x19f/0x1c10 [ 108.180067][ T8713] configfs_rmdir+0x5ae/0x950 [ 108.182124][ T8713] vfs_rmdir+0x328/0x8e0 [ 108.184028][ T8713] filename_rmdir+0x31a/0x610 [ 108.185700][ T8713] __x64_sys_rmdir+0x46/0x70 [ 108.187713][ T8713] do_syscall_64+0x123/0x790 [ 108.189756][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.192258][ T8713] [ 108.192258][ T8713] -> #0 (&sb->s_type->i_mutex_key#28){++++}-{4:4}: [ 108.195556][ T8713] check_prev_add+0xeb/0xe60 [ 108.197362][ T8713] __lock_acquire+0x1528/0x1f40 [ 108.199476][ T8713] lock_acquire+0x1d1/0x380 [ 108.201453][ T8713] down_write+0x86/0x1f0 [ 108.203370][ T8713] configfs_depend_item_unlocked+0xf3/0x6a0 [ 108.205848][ T8713] usbg_make_tpg+0x251/0x610 [ 108.207445][ T8713] target_fabric_make_tpg+0xab/0x8c0 [ 108.209680][ T8713] configfs_mkdir+0x525/0xd40 [ 108.211710][ T8713] vfs_mkdir+0x36d/0x8a0 [ 108.213638][ T8713] filename_mkdirat+0x4c4/0x630 [ 108.215766][ T8713] __x64_sys_mkdirat+0x89/0xc0 [ 108.217853][ T8713] do_syscall_64+0x123/0x790 [ 108.219495][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.222005][ T8713] [ 108.222005][ T8713] other info that might help us debug this: [ 108.222005][ T8713] [ 108.225966][ T8713] Chain exists of: [ 108.225966][ T8713] &sb->s_type->i_mutex_key#28 --> &subsys->su_mutex --> tpg_instances_lock [ 108.225966][ T8713] [ 108.231339][ T8713] Possible unsafe locking scenario: [ 108.231339][ T8713] [ 108.234227][ T8713] CPU0 CPU1 [ 108.236289][ T8713] ---- ---- [ 108.238342][ T8713] lock(tpg_instances_lock); [ 108.239850][ T8713] lock(&subsys->su_mutex); [ 108.242579][ T8713] lock(tpg_instances_lock); [ 108.244974][ T8713] lock(&sb->s_type->i_mutex_key#28); [ 108.247049][ T8713] [ 108.247049][ T8713] *** DEADLOCK *** [ 108.247049][ T8713] [ 108.249847][ T8713] locks held by syz.1.722/8713: 4, last CPU#2: [ 108.252093][ T8713] #0: ffff888025760478 (sb_writers#17){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 108.255293][ T8713] #1: ffff88803a4b1dc0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 108.256469][ T5895] usb usb9-port1: attempt power cycle [ 108.260807][ T8713] #2: ffffffff911e6b08 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4c0/0xd40 [ 108.264374][ T8713] #3: ffffffff916b6c60 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 108.267669][ T8713] [ 108.267669][ T8713] stack backtrace: [ 108.269914][ T8713] CPU: 2 UID: 0 PID: 8713 Comm: syz.1.722 Not tainted syzkaller #0 PREEMPT(full) [ 108.273014][ T8713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.276694][ T8713] Call Trace: [ 108.277934][ T8713] [ 108.279090][ T8713] dump_stack_lvl+0x100/0x190 [ 108.281000][ T8713] print_circular_bug.cold+0x178/0x1be [ 108.283171][ T8713] check_noncircular+0x146/0x160 [ 108.284954][ T8713] check_prev_add+0xeb/0xe60 [ 108.286413][ T8713] __lock_acquire+0x1528/0x1f40 [ 108.288316][ T8713] ? rcu_is_watching+0x13/0xc0 [ 108.290211][ T8713] lock_acquire+0x1d1/0x380 [ 108.291991][ T8713] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 108.293962][ T8713] ? __pfx___might_resched+0x10/0x10 [ 108.295921][ T8713] down_write+0x86/0x1f0 [ 108.297599][ T8713] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 108.299948][ T8713] ? __pfx_down_write+0x10/0x10 [ 108.301835][ T8713] ? kstrtou16+0xde/0x130 [ 108.303594][ T8713] configfs_depend_item_unlocked+0xf3/0x6a0 [ 108.305627][ T8713] usbg_make_tpg+0x251/0x610 [ 108.307202][ T8713] ? __pfx_usbg_make_tpg+0x10/0x10 [ 108.309231][ T8713] ? find_held_lock+0x2b/0x80 [ 108.311046][ T8713] ? __pfx_usbg_make_tpg+0x10/0x10 [ 108.313063][ T8713] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 108.315324][ T8713] target_fabric_make_tpg+0xab/0x8c0 [ 108.317412][ T8713] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 108.319696][ T8713] configfs_mkdir+0x525/0xd40 [ 108.321564][ T8713] ? may_create+0x280/0x430 [ 108.323387][ T8713] ? __pfx_configfs_mkdir+0x10/0x10 [ 108.325416][ T8713] vfs_mkdir+0x36d/0x8a0 [ 108.327087][ T8713] filename_mkdirat+0x4c4/0x630 [ 108.329127][ T8713] ? __pfx_filename_mkdirat+0x10/0x10 [ 108.331228][ T8713] ? strncpy_from_user+0x19d/0x2d0 [ 108.333271][ T8713] ? do_getname+0x191/0x390 [ 108.335040][ T8713] __x64_sys_mkdirat+0x89/0xc0 [ 108.336931][ T8713] do_syscall_64+0x123/0x790 [ 108.338573][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.340647][ T8713] RIP: 0033:0x7f78cfd9fb19 [ 108.342404][ T8713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.349688][ T8713] RSP: 002b:00007f78d0c7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 108.352545][ T8713] RAX: ffffffffffffffda RBX: 00007f78d0025fa0 RCX: 00007f78cfd9fb19 [ 108.355641][ T8713] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 108.358686][ T8713] RBP: 00007f78cfe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 108.361725][ T8713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.364703][ T8713] R13: 00007f78d0026038 R14: 00007f78d0025fa0 R15: 00007ffe55f6bf28 [ 108.367456][ T8713] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 108.380455][ T8718] netlink: 9 bytes leftover after parsing attributes in process `syz.4.724'. [ 108.389454][ T8718] gretap0: entered promiscuous mode [ 108.527784][ T8718] tipc: Resetting bearer [ 108.530339][ T8718] tipc: Disabling bearer [ 108.556332][ T67] Bluetooth: hci1: command tx timeout [ 108.584832][ T5859] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.683989][ T5859] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.720157][ T5859] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.792989][ T5859] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.861831][ T5859] bridge_slave_0: left allmulticast mode [ 108.861858][ T5859] bridge_slave_0: left promiscuous mode [ 108.861987][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.933553][ T5859] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 108.940178][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.941575][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.942106][ T5859] bond0 (unregistering): Released all slaves [ 108.943273][ T5859] bond1 (unregistering): Released all slaves [ 108.949884][ T5859] bond2 (unregistering): (slave lo): Releasing backup interface [ 108.958039][ T5859] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 108.958224][ T5859] bond2 (unregistering): Released all slaves [ 108.960640][ T5859] bond3 (unregistering): Released all slaves [ 109.022500][ T5859] tipc: Left network mode [ 109.094639][ T5496] 8021q: adding VLAN 0 to HW filter on device eth12 [ 109.141982][ T5859] hsr_slave_0: left promiscuous mode [ 109.142426][ T5859] hsr_slave_1: left promiscuous mode [ 109.142806][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.142820][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.143312][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.143325][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.145004][ T5859] veth1_macvtap: left promiscuous mode [ 109.145019][ T5859] veth0_macvtap: left promiscuous mode [ 109.145055][ T5859] veth1_vlan: left promiscuous mode [ 109.145076][ T5859] veth0_vlan: left promiscuous mode [ 109.260552][ T5859] team_slave_1 (unregistering): left allmulticast mode [ 109.261085][ T5859] team0 (unregistering): Port device team_slave_1 removed [ 109.264120][ T5859] team_slave_0 (unregistering): left allmulticast mode [ 109.264513][ T5859] team0 (unregistering): Port device team_slave_0 removed [ 109.303875][ T5496] 8021q: adding VLAN 0 to HW filter on device eth13 [ 109.471550][ T5496] 8021q: adding VLAN 0 to HW filter on device eth14 [ 109.612825][ T5496] 8021q: adding VLAN 0 to HW filter on device eth15 [ 109.779657][ T5859] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.859770][ T5859] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.921459][ T5859] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.971185][ T5859] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.031517][ T5859] bridge_slave_1: left allmulticast mode [ 110.031541][ T5859] bridge_slave_1: left promiscuous mode [ 110.031697][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.033036][ T5859] bridge_slave_0: left allmulticast mode [ 110.033053][ T5859] bridge_slave_0: left promiscuous mode [ 110.033157][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.098453][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.099929][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.101297][ T5859] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 110.101840][ T5859] bond0 (unregistering): Released all slaves [ 110.148630][ T5859] tipc: Left network mode [ 110.217918][ T5496] 8021q: adding VLAN 0 to HW filter on device eth16 [ 110.328963][ T5496] 8021q: adding VLAN 0 to HW filter on device eth17 [ 110.377650][ T5859] hsr_slave_0: left promiscuous mode [ 110.378290][ T5859] hsr_slave_1: left promiscuous mode [ 110.378624][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.378636][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.379014][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.379024][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.380551][ T5859] veth1_macvtap: left promiscuous mode [ 110.380572][ T5859] veth0_macvtap: left promiscuous mode [ 110.380607][ T5859] veth1_vlan: left promiscuous mode [ 110.380628][ T5859] veth0_vlan: left promiscuous mode [ 110.451076][ T5859] team0 (unregistering): Port device team_slave_1 removed [ 110.453083][ T5859] team0 (unregistering): Port device team_slave_0 removed [ 110.491839][ T5496] 8021q: adding VLAN 0 to HW filter on device eth18 [ 110.564421][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 110.564443][ T42] audit: type=1400 audit(1793865357.715:775): avc: denied { write } for pid=8768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.604273][ T42] audit: type=1400 audit(1793865357.755:776): avc: denied { write } for pid=8771 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.632131][ T5496] 8021q: adding VLAN 0 to HW filter on device eth19 [ 110.829974][ T5859] IPVS: stop unused estimator thread 0... [ 110.890616][ T5859] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.941962][ T5859] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.980770][ T5859] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.041361][ T5859] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.126088][ T5859] bridge_slave_1: left allmulticast mode [ 111.126106][ T5859] bridge_slave_1: left promiscuous mode [ 111.126521][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.131234][ T5859] bridge_slave_0: left allmulticast mode [ 111.131252][ T5859] bridge_slave_0: left promiscuous mode [ 111.131361][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.182308][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.183846][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.184814][ T5859] bond0 (unregistering): Released all slaves [ 111.251100][ T42] audit: type=1400 audit(1793865358.405:777): avc: denied { write } for pid=8782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.299591][ T42] audit: type=1400 audit(1793865358.455:778): avc: denied { write } for pid=8785 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.327772][ T5496] 8021q: adding VLAN 0 to HW filter on device eth20 [ 111.416364][ T42] audit: type=1400 audit(1793865358.575:779): avc: denied { write } for pid=8789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.443693][ T5859] hsr_slave_0: left promiscuous mode [ 111.444192][ T5859] hsr_slave_1: left promiscuous mode [ 111.444586][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.444601][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.445161][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.445173][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.449119][ T5859] veth1_macvtap: left promiscuous mode [ 111.449153][ T5859] veth0_macvtap: left promiscuous mode [ 111.449205][ T5859] veth1_vlan: left promiscuous mode [ 111.449286][ T5859] veth0_vlan: left promiscuous mode [ 111.463875][ T42] audit: type=1400 audit(1793865358.615:780): avc: denied { write } for pid=8792 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.544221][ T5859] team0 (unregistering): Port device team_slave_1 removed [ 111.550411][ T5859] team0 (unregistering): Port device team_slave_0 removed [ 111.578952][ T5496] 8021q: adding VLAN 0 to HW filter on device eth21 [ 111.643530][ T42] audit: type=1400 audit(1793865358.795:781): avc: denied { write } for pid=8795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.687400][ T42] audit: type=1400 audit(1793865358.845:782): avc: denied { write } for pid=8798 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.710190][ T5496] 8021q: adding VLAN 0 to HW filter on device eth22 [ 111.771571][ T42] audit: type=1400 audit(1793865358.925:783): avc: denied { write } for pid=8801 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.798351][ T42] audit: type=1400 audit(1793865358.955:784): avc: denied { write } for pid=8804 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.828967][ T5496] 8021q: adding VLAN 0 to HW filter on device eth23 [ 116.190486][ T42] audit: type=1400 audit(1793865363.345:785): avc: denied { write } for pid=8827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.216671][ T42] audit: type=1400 audit(1793865363.375:786): avc: denied { write } for pid=8830 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.479770][ T42] audit: type=1400 audit(1793865363.635:787): avc: denied { write } for pid=8834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.513047][ T42] audit: type=1400 audit(1793865363.665:788): avc: denied { write } for pid=8837 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.302930][ T42] audit: type=1400 audit(1793865364.455:789): avc: denied { write } for pid=8841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.337270][ T42] audit: type=1400 audit(1793865364.495:790): avc: denied { write } for pid=8844 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.894880][ T42] audit: type=1400 audit(1793865365.045:791): avc: denied { write } for pid=8851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.935074][ T42] audit: type=1400 audit(1793865365.085:792): avc: denied { write } for pid=8854 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1