last executing test programs: 10.3288703s ago: executing program 0 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000001a00)='./security\x00', 0x1ed) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000080)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)='g', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x40000) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount(0x0, &(0x7f0000001a40)='./security\x00', &(0x7f0000001a80)='securityfs\x00', 0x0, 0x0) open$dir(&(0x7f0000001ac0)='./security/ima/policy\x00', 0x2000, 0x149) pread64(r3, &(0x7f0000000340)=""/259, 0x103, 0x8000001be8) 10.25952518s ago: executing program 0 (id=40): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000023c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000024c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050029bd7000000000084500000008000300", @ANYRES32=r2], 0x28}}, 0x0) 10.258976305s ago: executing program 0 (id=41): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) socket$inet6(0xa, 0x1, 0x84) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffb}}, 0x2e) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240), 0x4) connect$pppl2tp(r3, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x8) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000380)=0x2) (async) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000006c0)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000700)={r7, 0x3, 0x6, @broadcast}, 0x10) (async) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000740)={r7, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'vlan0\x00', 0x0}) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x34, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x28, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) recvfrom(r10, &(0x7f0000000080)=""/10, 0xa, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) 8.909709579s ago: executing program 0 (id=57): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000793009e800002860006000200000108009ed042"], 0x2a) 8.859624109s ago: executing program 0 (id=58): capset(0x0, &(0x7f0000000080)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r0, &(0x7f0000000380)=""/10, 0x5b) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x495, &(0x7f00000000c0)={0x0, 0x104c55, 0x100}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x28, 0x11, r1, 0x0, 0x0, 0x0, 0x2121, 0x1, {0xfffe}}) io_uring_enter(r0, 0x191, 0x0, 0x14, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60081, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 8.859413547s ago: executing program 0 (id=59): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000540)={0x0, 0x1f00, &(0x7f0000000580)={&(0x7f00000005c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 6.179988353s ago: executing program 3 (id=92): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r0, 0x24}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x0, 0x0}, 0x8) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x18) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x10}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000580)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r7, 0x0) r8 = accept(r7, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r9, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r8, 0x1}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000006c0)={0x365f, r1, 'id1\x00'}) r11 = syz_open_procfs(0x0, &(0x7f0000000740)='net/vlan/vlan0\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x3000003, 0x50, r11, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x700, 0x0, 0xffffffffffffffff, 0x58b3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50) r13 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x149000, 0x19a) ioctl$EXT4_IOC_GROUP_EXTEND(r13, 0x40086607, &(0x7f0000000840)=0x200000) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='devices.list\x00', 0x26e1, 0x0) close(r14) write$cgroup_pid(r14, &(0x7f00000008c0), 0x12) r15 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable\x00', 0x1, 0x0) write$cgroup_pid(r15, &(0x7f0000000940), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x17, 0x18, &(0x7f0000000240)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd8}}, @cb_func={0x18, 0x1}], &(0x7f0000000300)='GPL\x00', 0x2, 0x57, &(0x7f0000000340)=""/87, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, r3, 0x8, &(0x7f0000000400)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, r4, r5, 0x9, &(0x7f0000000980)=[r6, r9, r10, r11, r12, r13, 0xffffffffffffffff, r14, r15], &(0x7f00000009c0)=[{0x2, 0x5, 0x2, 0x8}, {0x1, 0x4, 0x3, 0xe}, {0x0, 0x3, 0x9, 0x6}, {0x2, 0x4, 0x2, 0x4}, {0x4, 0x3, 0xc, 0x3}, {0x2, 0x3, 0x1, 0x3}, {0x4, 0x2, 0xf, 0x1}, {0x3, 0x2, 0x3, 0x9}, {0x3, 0x3, 0xd, 0x5}], 0x10, 0x2}, 0x94) 5.278942933s ago: executing program 3 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x10, 0xd}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xb130, 0x5, 0x0, 0xea}, 0x60}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000440), 0x56) sendmsg$kcm(r8, &(0x7f0000000480)={&(0x7f0000000580)=@xdp={0x2c, 0xdd86, r7, 0x42}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="27030200dc0f14000e0000000025c1020000ff84125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f0000000bc0)="02db0b9ef1cafdab", 0xdd86}], 0x2}, 0x4005) 5.199749519s ago: executing program 3 (id=103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0xc, 0x1, 0x6, 0x82}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000400), 0x56) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000580)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) (fail_nth: 8) 5.068662949s ago: executing program 3 (id=104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x10, 0xd}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xb130, 0x5, 0x0, 0xea}, 0x60}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x4, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) r9 = getpid() process_vm_readv(r9, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/54, 0x7ffff000}, {&(0x7f0000000600)=""/152, 0x98}], 0x2, &(0x7f0000000700)=[{&(0x7f0000000740)=""/95, 0x7ffff000}], 0x286, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000440), 0x56) sendmsg$kcm(r10, &(0x7f0000000480)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r7, 0x42}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="27030200dc0f14000e0000000025c1020000ff84125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f0000000bc0)="02db0b9ef1cafdab", 0xdd86}], 0x2}, 0x4005) 4.849742799s ago: executing program 3 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000840)='10', 0x2) utime(0x0, 0x0) pipe2(0x0, 0x800) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, 0x0, 0x0}, 0x20) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_TSC_KHZ_cpu(r6, 0xaea3) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000005c0), 0x20080, 0x0) preadv(r7, &(0x7f0000000600)=[{&(0x7f0000000640)=""/252, 0xfc}], 0x1, 0x9, 0x5) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000000)="1a00000002000000", 0x8) setsockopt(r8, 0x84, 0x80, &(0x7f0000000040)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000500)={@random="e90c630faca2", @local, @void, {@ipv4={0x6000, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "61c03d2d2548741ff5015767096e1cd263026dd8f0703d2e22e3916500fdb8ec", "615eee2cb3c51e06deb424010178396b2afe4378c81f63a9eefc66ef338492fd3b688b2b06e6f206e4e6b8d1174296cd", "d8dbed9defbb6502c2888b524721c5807f3b4eedba8966f8774437de", {"c5f2fb530587df89cc9aa18e60d1a66b", "0c9ec23f1b56eba488bfededb3c997ae"}}}}}}}, 0x0) sendto$inet6(r8, &(0x7f00000000c0)="b0", 0x1, 0x40811, &(0x7f0000000100)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f00000003c0)={0x1, [0x0]}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x84, &(0x7f0000000440)={r10, @in6={{0xa, 0x4e24, 0x7f, @empty, 0x6}}, 0x0, 0x83}, 0x90) setresuid(0x0, 0xee00, 0x0) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r11, 0x0) 4.779961794s ago: executing program 3 (id=106): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c00)={0x6, 0xf, &(0x7f0000001cc0)=ANY=[@ANYBLOB="180000000400000000000000a247c22218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000085b7030000000000008500000083000000bf0920000000000055090100000000009100000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001d40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4}, 0x94) 579.206695ms ago: executing program 1 (id=141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x90c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8d8, 0x2, [@TCA_MATCHALL_ACT={0x8d4, 0x2, [@m_police={0x8d0, 0x16, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x80, 0xfffffff8, 0x245a, 0x4097, 0x7e62, 0x200, 0x7, 0xd, 0xec7, 0x5, 0x0, 0x1f, 0x8, 0x80000000, 0xfffffff8, 0x4, 0x8, 0x9, 0x0, 0xc, 0x540b, 0x8001, 0x1, 0xf, 0x7ff, 0x5, 0x3, 0xd, 0x49, 0x7c8, 0x2, 0x2e, 0x84, 0x721a, 0xee2, 0xfffffff9, 0x97, 0x1, 0x8, 0x6, 0x5, 0x1, 0x2, 0x9, 0x83d, 0x7ff, 0xc, 0x5, 0x8, 0x0, 0x800, 0x404b, 0x6, 0x400, 0x5, 0x8000, 0x0, 0x4, 0x33c9, 0x6, 0xfffffff8, 0x800, 0x4, 0xfffffff8, 0x0, 0x400, 0x10000, 0x7, 0x4, 0x6, 0x3, 0xcd, 0xe46, 0x9, 0x3e4f, 0xffff, 0xac7, 0x1000, 0x0, 0x8, 0x4, 0x2, 0x1c0000, 0x0, 0x8, 0x5, 0x5, 0x7800, 0x3, 0x8, 0x256, 0x4, 0x8001, 0x81, 0x8, 0x8, 0x9, 0xe, 0x1, 0x96, 0x4, 0x5, 0x9, 0x5, 0x7, 0x4, 0x4, 0x9, 0x7fffffff, 0x7fe9e83f, 0xb, 0x0, 0x9, 0x9, 0x7, 0x7f, 0xe, 0x2, 0x9, 0x0, 0x8001, 0x80000000, 0x0, 0x800, 0x6, 0x7, 0x0, 0x5, 0x0, 0x0, 0x3, 0x9, 0x6, 0x9, 0x6, 0xf, 0x5, 0x2, 0x4, 0x10000, 0x8, 0x8, 0x0, 0x1, 0x8, 0x1, 0x1, 0x0, 0xa, 0xffff, 0x7, 0x7, 0x3, 0x2, 0x1, 0x0, 0x5, 0xfffffff6, 0xffffff91, 0x0, 0x0, 0x7fff00, 0xfff, 0x1, 0x5, 0x3, 0x4, 0x9, 0x4, 0x0, 0x5, 0x8000, 0x323a, 0xff, 0x0, 0x1, 0x101, 0x8, 0x1, 0x1, 0x3, 0x6, 0x100, 0xfffffffd, 0x1ff, 0x9, 0x1, 0xead, 0xfffffffe, 0x1bb7, 0x8, 0x3, 0x1, 0x7, 0x7, 0xfff, 0x200, 0x4, 0x647, 0x7, 0x8, 0x1, 0xe6a, 0x100, 0x4, 0xc788, 0x5, 0x189f, 0x5, 0x5, 0x5, 0xfffffc01, 0x7f800, 0x7fffffff, 0x5, 0x2, 0x3, 0x80000001, 0x7, 0x5, 0x4, 0x2f1161b5, 0x10001, 0x4, 0x9, 0x9, 0x3, 0x100, 0xff, 0x9, 0x0, 0x0, 0x9, 0x8001, 0xfffffff8, 0x3, 0x8, 0x0, 0x6, 0xfffffffe, 0x4, 0xfffff1d7, 0x7, 0x4, 0x5be, 0x7, 0xf5, 0x62, 0x6, 0x54aeffc6, 0x0, 0x5, 0x5, 0xfd1a, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x4, 0x6, 0x71, {0x1, 0x1, 0x0, 0x0, 0x2}, {0x9, 0x1, 0x6, 0x6, 0x9, 0xfffffae1}, 0x4, 0x7fffffff, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x64, 0x3, 0xd76, 0xfffffffd, 0xa9dc, 0x8, 0x40, 0x5, 0x4, 0x2f, 0x3, 0x2, 0x6, 0x6, 0x5, 0x7e4, 0x0, 0xfffffc01, 0x3, 0x6, 0x2, 0xa60, 0x3, 0x6, 0x575c, 0x40, 0x10000, 0x9, 0x7, 0xfffffffc, 0x2, 0x0, 0x3, 0x40, 0x3, 0x4, 0xfff, 0xe, 0x7dd7, 0xa, 0x1, 0x4, 0x0, 0x1, 0x5, 0x10001, 0x1ff, 0x200, 0x4a, 0x4, 0x0, 0x95e, 0xffffffe0, 0x9, 0x5, 0x46aa, 0x2, 0x52df, 0x9, 0x1, 0x3d9, 0xda, 0x4, 0xe4, 0x6af5, 0xda6, 0x9, 0x6, 0xb, 0x19d, 0x5, 0x2, 0xc12a, 0x80000000, 0x78, 0x9556, 0x100, 0x4, 0xc3, 0x6, 0x1, 0x2, 0x7f, 0x7, 0x200, 0xf95bca6a, 0x7, 0xfffffff7, 0x7, 0x8, 0x400, 0x2, 0x5, 0x7, 0xc, 0x5, 0x10, 0x8, 0x8, 0xfffffffc, 0x5, 0x1, 0x8fc1, 0x10, 0x0, 0x4e1, 0x80000001, 0x7, 0x7fff, 0x400, 0x2, 0x2, 0xfffffffb, 0xe, 0x3, 0x3, 0x1fe48d49, 0x101, 0x7, 0x6, 0xfffff000, 0x9, 0x10001, 0x81, 0x10001, 0x6, 0xfbb7, 0x6, 0x7ff, 0x9, 0x8, 0x7, 0x6, 0x10001, 0x8, 0x7, 0x2, 0xfffffff0, 0x4f2, 0x10001, 0x1, 0xffffffff, 0xd, 0x8, 0x7fffffff, 0x3, 0x1, 0x101, 0x1, 0x3, 0x3, 0x4, 0x1, 0xff, 0x7fffffff, 0xffffffff, 0x5, 0x5, 0x4, 0x543, 0x9, 0x8, 0xffffffff, 0x7, 0x6, 0x6, 0x1, 0x2, 0x8, 0x3ff, 0x8, 0x100, 0x5, 0x3, 0x0, 0x3, 0xd4, 0xc00, 0x4, 0x0, 0x7, 0x30d, 0x6, 0x6, 0x2, 0x6b08, 0x83, 0x5, 0x0, 0x7, 0x7fffffff, 0x2a7d, 0x5, 0x81, 0x7ff, 0x101, 0x6, 0x1, 0x3, 0x4, 0x3d, 0xc, 0xf, 0x1, 0xb, 0x4, 0x7, 0x7e29, 0x9, 0x4, 0x0, 0x5, 0xb7, 0xd6, 0x8, 0x3ff, 0xfffffff9, 0x3, 0x37, 0x9, 0x0, 0x9, 0x5, 0xfffffffd, 0x6, 0x418e8000, 0x6, 0x450, 0x9, 0x1, 0x8, 0x2, 0x401, 0x7, 0x3, 0x100, 0x1, 0x100, 0x8, 0x1, 0x1, 0x10001, 0xffffffff, 0x5, 0x7fff, 0xa000, 0xfffffffc, 0x4, 0x1, 0x6, 0xd, 0xb19, 0x5, 0x1, 0x3, 0x8]}]]}, {0x5e, 0x6, "5ef7dde6f73e4810cc0f3959292a1270db53829eb9fc120fbdefecd832276f8130208eb90d8f3bf58c724e973eaae55dca6dd8abc6cdea6f4a3ff1a5c1ea82bd03e495f73c6044e607ec436f6a5c9538cfd7fdc747555f2b0e4a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000093009e800002860006000200000108009ed042b10ab306"], 0x2a) 492.668664ms ago: executing program 1 (id=145): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x220000, 0x0) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000280)={0x1}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="800100001a000100feffff00000000020000000000ac14140f0000000000000000000000004e20071c4e2100b802000020730000000000040000000000000000fcca1c8398caba45876f96c9fe8279c0bf812ab16b47236852e790f6722a78c86e41229bef3a42b253ccd19afaafa60bc616fdbcc001b453f67906b422f20e3cc2b4f9cd280327aaed347dfaedf109f90e13fcbfa66de6e37219eab3e8fd2ffe20", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000004d46c000000ac1414aa000000000000000000000000f4f1ffffffffffff00000000000000000600000000000001fffbffffffffffff1c25080000000000a637fffffffffffff8ffffffffffffff000000000000000007000000000000000000000000000000ff01000000000000fefffffffffffffffefffffffd030000800000002cbd700005350000020001072200000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480002"], 0x180}}, 0x844) 439.636868ms ago: executing program 1 (id=146): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYBLOB="01fd0000f80001"]) 439.490132ms ago: executing program 1 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/sda1\x00', &(0x7f0000000340)='./mnt\x00', &(0x7f00000003c0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000400)='./mnt\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480), 0x208e24b) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="1e00000089000000070000008156d5e9b77e863d3498defc5640b7b8317b8c5f1c823f40fe000000000006e1b373f6b85575b967c041f2553714ab1548de55ad6cd1b1b9ad96b4e1d12422c24bf3227cea737888e4b3a5d47032ae2857bcd52ffabb9051e19e4025292f504ba7bfc7467571ff2b2eef07d5a01a9f59113ca14e7e4533877eb5b708f27b7d2aa03e9898658e6ae2d7a4de3d05d7e349c2b89ae2ace124360e7e418652affd1ea0eacb42"]) 184.898045ms ago: executing program 1 (id=152): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001ac0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0429bd7000fcffffff1300000008000300", @ANYRES32=r4, @ANYBLOB="040013000a0006000802110600b500c902000004001180000000000000000000aebc0c95cde57012a1a0f000000000"], 0x40}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000001980)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000019c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000001a00)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000001a40)=[{0x8, 0x0, [0x5a, 0x0, 0x80000, 0xf, 0x10000, 0x0, 0x4, 0x0, 0x7, 0x0, 0x2, 0x90, 0x5, 0xd4f8, 0x0, 0x7]}], r8, 0x1, 0x1, 0x48}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x200000000000015c, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000a3fb5d27b9a9cab427fc488f0000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b7050000080f0000850000006900000095", @ANYRES64=r6, @ANYRESDEC=r7, @ANYRESDEC=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000800, 0x0, &(0x7f0000000140)={0x803, 0x5, 0x7fffffff, 0x3, 0x1, 0x6, 0x6, 0x2, 0x3}) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000380)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r11 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f00000003c0)=@req={0x3fc}, 0x10) recvmmsg$unix(r10, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000008c0)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r10, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001940)=""/32, 0x30}], 0x1}, 0xb}], 0x1, 0x40000182, 0x0) close(r11) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 120.066864ms ago: executing program 2 (id=154): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006ec0)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x8, 0x7, 0x0, 0x9}, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 14) 119.489788ms ago: executing program 2 (id=155): r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) open_by_handle_at(r0, &(0x7f0000000040)=@raw={0x40, 0x61, {"8cdb0b475d4b8098d4826b45322e054afdeb8f72e57ccbbd695a74b2c4f66f049aef27c931590edcaf388839a8cc8a39464407634a7c2de19ddf1b05a4a1da"}}, 0x400) r1 = signalfd(r0, &(0x7f00000000c0)={[0x7]}, 0x8) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @rand_addr=0x64010102}, {0x2, 0x4e23, @local}, {0x2, 0x4e21, @broadcast}, 0x40, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000100)='veth1_vlan\x00', 0x400, 0x9, 0x400}) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f00000001c0)="5a9d61ece27b46e855b1ee7766f17d35aad01a2935ea5167acaf95373632c08538961fb230df8dd040977999e6be15f9408c85dd68ec7920afb69bd921230dab75949288053c2eeb846c74ac06d709413add8524bc448d5fcb8663d9955fc1e0aa9a95fccfa58b59bd5d6019867a8335093fd9d953678b07180036fb707558a4695ef0378d4bb9f3665f711cbe91fe6b93685c8067b845659efc36be5a7ec9a4e306e4a27f2cb3b8d1e22fa3f921b866322f9b3b006b2be52365837725e5d76aef4f0ef404fc78ae5223a8edb791adb54081ea5dba01497c8870416328a474da00e80105f17dbd009f5dd2b2fc89bf1370960c64321a0e3deee622aaa2c67be0af5c5b5706391b4b5781afbb1920c40f3b20194e94d59ab5597ca6cc02cad8f66c3356874f607ce31216bbb30193f3ca821c79dc663b0953ade3b2e2618ce892b876dfe765d17149e4c5a591f7e62ee2c3083cf823ade14242c4fbac762100cf8d2c9346765fbb1ed30ea6e9de25bc47982a313eb7ed54a2d68270ebb9b9b392f547533f6885461227a50bceddb96160bc65086dc9c62d6c5a88bd5e832cd2b7656dcd9f210135551b927cf4d0948fdf084fe24f69891c600cef2dede285fdc4ae8f7a1bd3d4ed972b569488c123d067ddd5ccd9b16e56ec61161a17f25180d57e72dbf839693ad1b5303ccc9d6fe87c3e4b652fe68e5dd90543feacc14ae04fadd7401525b9b55cbdaa441018de38de1930abd71c156d74953c8fe9ee0940385a13706b52cf59283f8ca613d5a807cb6ebce91c1833a0615b1d46865bf080e1d9291f635275a0ee093336472ddba879c319ac1fb6915de067eb5ab142eac0897f25f51f74699537f4313b629ef456aaa0a855c830c8c667ce6846dd1b9faaf4deb8dd621e44bd9439501c57aacfb3f41e7b24bb2ce2a5f6c9c37f2cf2eb64d7f54eee0ea9f8b1b1d8ce35c4358c6d0c94ea928ae3ae6001db7e6b1253917439799d4bb1f5f4e2dabd6d08b36866bb06038769ce825fdc0597625105fe1ac739c5cd0d5a256b61bd4cd332d8a9f0bc143ddaf242b17fcfd8ceecef964a6613cc8222eee45b9a462ebb34e7f8ce7ab0127f48124080509ed9c1412269f5f049282e2824b0d494c4bf983e29467a9cbe81b944702b6d9b4ce19881f0ceb8498208b370c1da9ad5333fbe2dd042101a03f077e68e517d60b28fd52cded90ea9bb57d51f71b259d2ddb56117a773d207fafcaa99738af40e1eeeb39bfd3d2c76eac3def730a529adabd97d8a1b47700f692c115794439e27986b78eb337ee393626c6afe63898d9d2b8abc6e55771320ce27df314711bb8b3bf475d47babe6355bfb38283008e99ecd34108268493710d90d63abdc029e4a97b85d2e59c26c1bf8b14e56c7d153c97104aaa3302fbe607b849fce3ad62052d7bc460931b5047ba821820b7a1443e7d5eb6b4be0c02bd9461b1b6472576e78fa531de821ca7ecb3e5ea2fa64e5156ee7ca2f55cae48cc65726fdfb02d61e2b8125d6b2561b98fb713df3943daa95a86d0112d54d8e3ea1c5c053189fa869f7af3883bdda928cf06ab0c8b8fcb30a33bd7039193df7b84687d58781f78dc7c64773f1f100967d1240540f1b05c65a4d365e7b5aaed2e633415980c71348d9c90e07f7c3107737f0f0435630bbe7b83e16a29faf3360598c0c2585171d1a1beb7e927616209761d3aa4d4cd550bb7a51c22f25b1361a9f3ce0fca38ef061d1b0069b9c565f84e8e105b7c5400efa475cdfd008798603921f0f172c7212f3b3f9bf3ac729d0221b233770d38ddde4cfd203b08b7bce664272883d0c14965dc3a4e8b06ad65d3452a013bfb96716684c5052b8c0269b893039d241e60bc8e745f1737f2d815ac8ff54001df30a55274180e9cdf8088aff0c5510af18e6d7ef2a64803bed016c97f4516d47e341fdfb42b0256a6d6ab5a80c3d02e9f9daf87d04a90c7eb15c8333e7016eb6fdac32cb228b86dfb11b387b323c94fa9980467361a62fcfdf6c29661c683bf5ca42a2ad1e0c09cd34c70621923ae1682ae48138486bcdebce7d89410914e3e245f6c976ecf8a1dfaa1d8af39f5cd055e7c06045c9993f76ca23ef62918a00bef3d3341a0e7d898325b89ecf93520d160f5a84ac22e0c858bc3cf86a97f48b7a158ffca091de837ba91ca1e343e94b17a21a9f996f0ac679840727b49c9e6dc1653d1d80fc90d8f932d22095442bad776a9669b5b2e309b0e719e807a529ea2098aedc1cb0b7f51e225db119287ad89fec2ee17679193c2fd72abe8f7bb57692ba92fa1ad6ff4fec87cec297703b6c89ac55996b733d0343538f3433734a9ca4e35dc00debeb743cd47c410ff93e286cb1008251f7a3b15c910837d077a37a878fd72adb1bcfa841a52cfa6707e1298f0e69ea0ba4cd458c8a0f599311fdeba92026988c6b05db07050b74418891ea6b643c84913d346b93d0aab30706dfb0df70ed86ba9200f8bbd078f6d596d3e48086061c0de41d8480473630d5c084956447ca413deb38826707f09c51f6a31a109233a9188c0f71fa91cab402b7ee3798ecf2d51aea313aec2bbb21c7f17d9a1150569fee30022b754f915609764ae372b87890b11191b4122a6d1d7a27b5411693aba1901570f1bc48f280cd3c5feaab2dc912b1487dcac7aba591010103f283a751f0bdbebfb0b9c3e502143884fa26f0c2bde5bcc5f5c469ee19656c458c82afac4405fe5e6aa1bd2f444064fa5b1c770627c4d1e071aa651c0843258753926e66c655409c0b964312c4efb875290cd10b652dbbca38b2f63fb765d013e6e48419a39c3578848d64883e5c42f747e8189708a71dc4131dae0825e6449ada4a5fb761e861c2d0d827f9df123ed1c8aec228b43b1aedeab8474d57c310a1edc048c90389a8b92450e59031a566da865f075baa96102def1c181cbd535e87431f584d389fb32aa7040f1a1db352f23b8de58470ad6cb986502eed61ea5b8460f3cc3c25b392daea714e22d7b46eb23057a6904b326f99eb9bd9e9d5c3b787778dc6cc6382bc0ff64fced35a2da06fc458c0c4d1ed4d96b8e28ce37a473fe5fb65bc5a7870c8c675ddde51f6be8e576625308cc8f5bcf47d8dff6f486dba3d9a474a597da0dd0d1048d524ab83f89c1a0d2469809c549088926405a9352a25fed5616a77d86abf0d8b412a732bb06cb8ca4244268f87a9b45809a598389a6b63f8e89ae8ff4bcf21a525e5d99c89be2269218a937cb70a0376042260e7f46760d618ad3459095f7974c8a0e168c0fc4b0de6e0556f8f84c0295c5ad1b9365046ea9c8cede8ca7bc0c0c6cb24c3330f66b40ddf08caa0ace6787d06f0b3863672c294019254cbf039cd875ec3216ff1e8a7be0e7910eb1441f161ea73cd5889c3c28a50a8d841e1937d668dec8cb2ee20647f9be64db3f6fb210aef9b4cab3b8014ae5fb301ef790b0774e2edf1912358b3de4d0b8a017dd89f4afbcc1e74cf6ef9d0d21dde65aeb1c57f7f3c85cda5e9c7115d0ac51da7d4bcee6626ad87eb1fc15f15273e5c044a4b776719e2b9254bee981f50339d6084777a5a90e0713cef6876874925edf24b72884ee6fd32f687dbff0f5fb9dfbc7a87c12d29fe24dc5090cfe8e0d319c2a04688c811195d1d7432e27ddaf023411170b47f06b17ca6e1cf268a7d8be7131225b29ab614b07e385e81a4330aadde996fc8ecb2685d0d5ac66b6ec8698c70840e715d182f854fe435eb483dad42b5a9811bde22d4c35cb13171c19822c9106526829390d9a7dee8cb1e35e6b80531fdab9924e14b14f50e79b1b83b9a785bfa0b3c28a3ed3ee6c865991f0d1fbb76ca3af5d6cd4975f11625ef03009e64ebee27c221b03bd0a42614891c058d77514a8aaf5543f30d4432af9474e0c7d514f7a28f4994c61c4b43e085300275d514e7d62ff1ae59c7b48a0848108f19f9133d62c971191e37d76120f53e7d061a6a804ae1d1bba13acc3ed2347cb03cc6ef054fac6db1229a3eea75f94f853464a254054b32fe3c3e5bf2d69c595544af31cd539a28abb61e347123134d1905359b6b1ccb4ad25080147720f96aa47ed9ce83be54a2893b2780767c51ffea7f7390e68930d2440c96e626fce21fa2460cbb2a7122fc47e2d00e6a9812c73027a78a39c180544dc72aeec985570b1db134c6f1c477bde7155a7aa91b58b982db465ed378122ddb2923b0a95d672c74d810f5435198b8f73c3b5e99d4336914ecb2a5dd4f1235ef08c49466b16431f4476e0bceb0179be2f5e22da8b24b7ac294bdd13501922a953f019c60f2403832f2eee11c5cb91ce23f7c20676955549b9196d2b3875e958f8deea5d032f3121ce2b5cb3000c91e56884623944f303f42cee49babf3b5d21b380dbaff4a8a208ee139aeeecc6c6414b7618a4a8bf5ec8df3a433a947ad2a081cf30e9de7aa5d7307f8800ef36ab148054707ef76305823833b535645ec7ea0ad187810466431d2044214d66e5242eba22a0b180879bd10c6881e2bdff129aec389b1de90238f52183ab9afeb5b3669fd45634c4b2a8b15ca8fcd35bab029264522b541158921230f4cca6c45d52b5c617807e694a6a4d9b68eb9765f2fba8dbb98ec900b96cb8cddfc17cc60e3a30f97e7ad6084e74beafa786cb768d4f9e6f6eaf1a6596a86153aefb7dd72293517d326ca02fa114d58ed68b81b1132866658319345576c55f2ff7d84fa76a90ed0603115ba5a4ef89f9433ff55df560d1264cc79d328c4100618e2db3e3b3c4a993784519a847a8c9664f621841dbe1bbedb6bec92929c85058707e29672b9c64940f3552f922627648d7278cbf0c4265282d185da24f3e094ea7340a302b39da03beb03ee0a96e96636a6971921a0507f2afd1de1b462ce02c0f85571c6089ce0cdf8fad5f2de3c9488b4a6d67b362e87e912bc8445b5ce0aef99138b8a5c39654dc59931931474a197a033539d181a37f3479e04c9b448ebe571b92b995c769d5dc90285a2d2c7f3336836d84cb4306a3985b032b89004fc1ec069302f25bc0e4171940cff13ed625b99c32fef9f055f3b84cf286926852668e2ac09b4ca2ac2a1b7cb6879c18142a5a55ad40dab991794f598c71e8b433f0e9f02b06d7b3802f592752c1ea386a4c4e918ddd166d2899bd4e543dbbdad7e8445127e3d3aa05b3bfbd355e7e737169b5aba69f407485438e6c48822a5420a1958a278940f1baf99a666d40a6436af79851f3359d5ced6aef6eb4e782b25cba0e495638686b507e0b548a8d6a1f0c2a7f3a19d1ef111b9d3db95e1804f51438c08c29a402c7e33cef00233b49dd8514543ef587808fde67ec6d6e095c4e778e3ac76a2a5df04bc61fe60a77d86c40e73039d981cc20a3a260fa893a83124df2ded182234831d2db09dd1fc5c43a6cf8bebf623e0594c0231f6b2aa962136fdaf260509051afb66d7436b63ce0e003cb521590b396f57e55b8e47d7fe454d5f3ebc71bbb7b0bb30fe42551dae6a753db77a576a8466612eede639cf97a5b8c1947bc78a06067ea5af65d7df5529169be73d6123b1c4a1f98cce412bc23dda37932054301303d7a9854da01ed71b45d73e18ae82cea121807c13798e991b6b4f9155c35b70a36e065aff9170c805c189c1c269b321a1449173cc47db455ba777c9898a1356e53b51ad290b2808a8b3dfb604d4b35f677f010553cb26279532c2c586e6f10c15a939d282b4e0767f2b1e1f7bc59843f55f2eba7fdf15094c888406c97463a0b9a2d73221e49a72") mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000011c0)=0xffff, 0x8000000000000000, 0x5) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000001200)={0x1, 'ip_vti0\x00', 0x2}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000001240), 0x60000, 0x0) pipe2(&(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000012c0), 0xa8000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000001340)={&(0x7f0000001300)=[0x0], 0x1}) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001380), 0x20c2, 0x0) r6 = syz_open_dev$rtc(&(0x7f00000013c0), 0xf, 0x236040) ioctl$RTC_AIE_OFF(r6, 0x7002) r7 = socket$inet_icmp(0x2, 0x2, 0x1) close_range(r7, r0, 0x2) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) r8 = socket$inet_icmp(0x2, 0x2, 0x1) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r9, 0x2000000, 0x30, r2, 0x0) syz_create_resource$kvm_nested_state(&(0x7f0000001400)=@vmx={0x108, 0x0, 0x2080, {0xe000, 0x1000, {0x3}, 0x1, 0x7}, {"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", "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"}}) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f00000034c0)={0x5a86, 0x8, [0x1, 0xfffffffffffffffa, 0x400, 0xb], &(0x7f0000003480)=[0x0]}) ioctl$BLKIOMIN(r4, 0x1278, &(0x7f0000003500)) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003580), r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003640)={r4, 0x58, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000037c0)={'sit0\x00', &(0x7f0000003680)={'gre0\x00', 0x0, 0x1, 0x7800, 0x0, 0xfffffff7, {{0x45, 0x4, 0x0, 0x3d, 0x114, 0x66, 0x0, 0x5, 0x4, 0x0, @multicast1, @private=0xa010101, {[@end, @cipso={0x86, 0x18, 0x3, [{0x0, 0x6, "ca0c2e40"}, {0x7, 0x3, "bd"}, {0x1, 0x4, "0e19"}, {0x7, 0x5, "0fb533"}]}, @cipso={0x86, 0x75, 0x1, [{0x0, 0x7, "60e179722a"}, {0x2, 0x2}, {0x7, 0x12, "da25aec97bc22ce64451d8fda169799d"}, {0x2, 0xd, "f25afc37f813f63b125708"}, {0x6, 0x12, "a3922af81e612dc2ff70709d7c6b20d5"}, {0x5, 0xc, "77ae20a2ff6ad3597eaf"}, {0x1, 0x10, "abc5dbd771f9e4476ff5f1555a86"}, {0x7, 0x8, "3f9baa58aaba"}, {0x0, 0x11, "c93eff35f37f4dc29a82cd08ab8756"}]}, @noop, @timestamp_addr={0x44, 0x24, 0x55, 0x1, 0x1, [{@multicast2, 0x10001}, {@private=0xa010101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast2, 0x6}]}, @cipso={0x86, 0x4b, 0x3, [{0x6, 0x12, "8dcde8f8a292116750e3ef657bc2bc51"}, {0x6, 0x12, "68a9d3c8ca7d0d36416e679ed773c578"}, {0x7, 0x4, "bb0d"}, {0x5, 0xe, "508a888638ce59557b6ecbd1"}, {0x2, 0xf, "4dd551703f8151096560badc4d"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000003800)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000038c0)={'ip6_vti0\x00', &(0x7f0000003840)={'ip6tnl0\x00', 0x0, 0x4, 0x81, 0x7f, 0xc1, 0x19, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x80, 0x700, 0x2, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003900)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000003dc0)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003d80)={&(0x7f0000003c80)={0xf8, r10, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xf8}}, 0x20040080) 58.914638ms ago: executing program 2 (id=156): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x2001}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x8) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) close(0x3) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) 58.684982ms ago: executing program 1 (id=157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'nicvf0\x00'}]}}]}, 0x44}}, 0x0) (fail_nth: 8) 57.530376ms ago: executing program 2 (id=158): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000200)={0x5, 0xfe25}, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000200)={0x5, 0xfe25}, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000a00)={0x4, 0x0, 0x0, 0x208, 0x138, 0x1, 0x0, 0x71f17c35bc64209b, 0x0, 0x0, @by_dev, [@verity={0x0, 0x40, 0x0, 0xd0, 'verity\x00', {'1', 0x20, @ram_num={'1:', 0x1}, 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, '512', 0x20, '512', 0x20, 0x34b, 0x20, 0x3ee, 0x20, 'blake2b-256', 0x20, @hex16=[0x54, 0x64, 0x35, 0x34, 0x66, 0x34, 0x62, 0x35, 0x36, 0x30, 0x64, 0x61, 0x31, 0x39, 0x38, 0x66, 0x64, 0xf1, 0x30, 0x61, 0x3a, 0x66, 0x30, 0x66, 0x34, 0x64, 0x31, 0x39, 0x56, 0x3, 0x35, 0x32], 0x20, @none, ' 1 try_verify_in_tasklet'}}]}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000340), &(0x7f0000000380)={0x0, 0xfb, 0x76, 0x4, 0x4, "465eb1624805d4eadd2998accc3aa75b", "53f1e8f6cff7e204a20abb9a1f8067bd97644f4321678a27b8f532bcbaf6377d1f58b4be2b0d649a1f5d5b59f26f03f8674fe9252d055d8eb613917bcd36941639636d437288df2f1a1ba5eeba4872118baa68cadffebb077d8e4209995a6a4c1f"}, 0x76, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000400)=0x27b, 0x4) connect$inet6(r6, &(0x7f0000000440)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000840)={0x2}) (async) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000840)={0x2}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='6'], 0x1c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x9) (async) getsockname$packet(r8, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x9) sendmsg$nl_route(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r9, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r9, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r10, 0x0, 0x43, 0x0, &(0x7f0000000500)=0x1e) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e24, 0xf, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) write(r6, &(0x7f00000004c0)="89", 0xffe3) (async) write(r6, &(0x7f00000004c0)="89", 0xffe3) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, r5, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, r5, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x1, 0x0, 0x0, 0x3}]}}, 0x0, 0x26}, 0x20) prlimit64(0x0, 0x6, &(0x7f0000000040)={0x3, 0x6}, &(0x7f0000000080)) (async) prlimit64(0x0, 0x6, &(0x7f0000000040)={0x3, 0x6}, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}]}}, 0x0, 0x26}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}]}}, 0x0, 0x26}, 0x28) 155.793µs ago: executing program 2 (id=159): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffff0200000040024305000f32000000000102000000000202000000000200ff00140101001097cf6d7040"], 0x0) 0s ago: executing program 2 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/sda1\x00', &(0x7f0000000340)='./mnt\x00', &(0x7f00000003c0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000400)='./mnt\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480), 0x208e24b) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="1e00000089000000070000008156d5e9b77e863d3498defc5640b7b8317b8c5f1c823f40fe000000000006e1b373f6b85575b967c041f2553714ab1548de55ad6cd1b1b9ad96b4e1d12422c24bf3227cea737888e4b3a5d47032ae2857bcd52ffabb9051e19e4025292f504ba7bfc7467571ff2b2eef07d5a01a9f59113ca14e7e4533877eb5b708f27b7d2aa03e9898658e6ae2d7a4de3d05d7e349c2b89ae2ace124360e7e418652affd1ea0eacb42"]) 0s ago: executing program 1 (id=161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffff0200000000024305000f32000000000102000000000202000000000200ff00140101001097cf6d7040"], 0x0) (fail_nth: 13) kernel console output (not intermixed with test programs): [ 28.957032][ T42] audit: type=1400 audit(1793680549.237:113): avc: denied { write } for pid=5688 comm="sh" path="pipe:[1795]" dev="pipefs" ino=1795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 28.957200][ T42] audit: type=1400 audit(1793680549.237:114): avc: denied { rlimitinh } for pid=5688 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 28.957392][ T42] audit: type=1400 audit(1793680549.237:115): avc: denied { siginh } for pid=5688 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:2732' (ED25519) to the list of known hosts. [ 31.138770][ T42] audit: type=1400 audit(1793680551.417:116): avc: denied { name_bind } for pid=5695 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.182340][ T42] audit: type=1400 audit(1793680551.457:117): avc: denied { execute } for pid=5696 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 31.182821][ T42] audit: type=1400 audit(1793680551.457:118): avc: denied { execute_no_trans } for pid=5696 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 32.476859][ T42] audit: type=1400 audit(1793680552.757:119): avc: denied { write } for pid=5697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.541121][ T42] audit: type=1400 audit(1793680552.817:120): avc: denied { write } for pid=5700 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.730379][ T42] audit: type=1400 audit(1793680553.007:121): avc: denied { write } for pid=5703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.767966][ T42] audit: type=1400 audit(1793680553.047:122): avc: denied { write } for pid=5706 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.001556][ T42] audit: type=1400 audit(1793680553.277:123): avc: denied { write } for pid=5709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.066054][ T42] audit: type=1400 audit(1793680553.347:124): avc: denied { write } for pid=5712 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.154150][ T42] audit: type=1400 audit(1793680553.427:125): avc: denied { write } for pid=5715 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.698358][ T5696] cgroup: Unknown subsys name 'net' [ 33.817056][ T5696] cgroup: Unknown subsys name 'cpuset' [ 33.822166][ T5696] cgroup: Unknown subsys name 'rlimit' [ 34.021875][ T5754] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.831370][ T5696] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.626132][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 38.626155][ T42] audit: type=1400 audit(1793680558.897:154): avc: denied { execmem } for pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.849282][ T42] audit: type=1400 audit(1793680559.127:155): avc: denied { create } for pid=5780 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.849656][ T42] audit: type=1400 audit(1793680559.127:156): avc: denied { read write } for pid=5780 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.850005][ T42] audit: type=1400 audit(1793680559.127:157): avc: denied { open } for pid=5780 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.850085][ T42] audit: type=1400 audit(1793680559.127:158): avc: denied { read write } for pid=5781 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.856608][ T42] audit: type=1400 audit(1793680559.137:159): avc: denied { ioctl } for pid=5780 comm="syz-executor" path="socket:[3984]" dev="sockfs" ino=3984 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.889425][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.892053][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.893472][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.894574][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.898961][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.906109][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.906380][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.906988][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.908412][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.909442][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.910322][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.910391][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.910436][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.910869][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.910957][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.911904][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.912737][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.914394][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.914919][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.917845][ T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.922386][ T42] audit: type=1400 audit(1793680559.197:160): avc: denied { read } for pid=5781 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.922413][ T42] audit: type=1400 audit(1793680559.197:161): avc: denied { open } for pid=5781 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.924134][ T42] audit: type=1400 audit(1793680559.197:162): avc: denied { mounton } for pid=5790 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 38.933012][ T42] audit: type=1400 audit(1793680559.207:163): avc: denied { module_request } for pid=5781 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 39.129856][ T5790] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 39.131388][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.132088][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.133212][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.164927][ T5788] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 39.165037][ T5780] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 39.282252][ T5781] infiniband rxe0: set active [ 39.282831][ T5781] infiniband rxe0: added rxe_eth0 [ 39.287777][ T78] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.293450][ T5781] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 39.293481][ T5781] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 39.293517][ T5781] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 39.312418][ T5781] RDS/IB: rxe0: added [ 39.312651][ T5781] smc: adding ib device rxe0 with port count 1 [ 39.312689][ T5781] smc: ib device rxe0 port 1 has no pnetid [ 39.342046][ T2405] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.370075][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.387487][ T61] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.396125][ T64] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.503126][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.513413][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.513886][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.513950][ T5788] bridge_slave_0: entered allmulticast mode [ 39.514857][ T5788] bridge_slave_0: entered promiscuous mode [ 39.527641][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.527734][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.527796][ T5788] bridge_slave_1: entered allmulticast mode [ 39.528906][ T5788] bridge_slave_1: entered promiscuous mode [ 39.550229][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.550278][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.550343][ T5790] bridge_slave_0: entered allmulticast mode [ 39.551259][ T5790] bridge_slave_0: entered promiscuous mode [ 39.552822][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.552884][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.552939][ T5790] bridge_slave_1: entered allmulticast mode [ 39.553621][ T5790] bridge_slave_1: entered promiscuous mode [ 39.587130][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.589631][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.597163][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.597241][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.597389][ T5780] bridge_slave_0: entered allmulticast mode [ 39.598118][ T5780] bridge_slave_0: entered promiscuous mode [ 39.601259][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.607581][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.607639][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.607691][ T5780] bridge_slave_1: entered allmulticast mode [ 39.608635][ T5780] bridge_slave_1: entered promiscuous mode [ 39.617100][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.651282][ T5788] team0: Port device team_slave_0 added [ 39.652866][ T5790] team0: Port device team_slave_0 added [ 39.652904][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.655566][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.658306][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.659959][ T5788] team0: Port device team_slave_1 added [ 39.672377][ T5790] team0: Port device team_slave_1 added [ 39.707775][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.707787][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.707801][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.717674][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.717689][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.717710][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.719312][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.719323][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.719350][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.720292][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.720303][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.720323][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.730957][ T5780] team0: Port device team_slave_0 added [ 39.746297][ T5780] team0: Port device team_slave_1 added [ 39.755083][ T5788] hsr_slave_0: entered promiscuous mode [ 39.755534][ T5788] hsr_slave_1: entered promiscuous mode [ 39.815838][ T5790] hsr_slave_0: entered promiscuous mode [ 39.816599][ T5790] hsr_slave_1: entered promiscuous mode [ 39.817262][ T5790] debugfs: 'hsr0' already exists in 'hsr' [ 39.817276][ T5790] Cannot create hsr debugfs directory [ 39.823558][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.823568][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.823583][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.824879][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.843701][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.843712][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.843727][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.911226][ T5780] hsr_slave_0: entered promiscuous mode [ 39.911852][ T5780] hsr_slave_1: entered promiscuous mode [ 39.912289][ T5780] debugfs: 'hsr0' already exists in 'hsr' [ 39.912303][ T5780] Cannot create hsr debugfs directory [ 40.171313][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.177223][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.181536][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.185955][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.186461][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.192397][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.202099][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.206132][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.259417][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.262064][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.272482][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.276508][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.277259][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.282724][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.290753][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.290831][ T5790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.291140][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.291187][ T5790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.299367][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.303258][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.349273][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.349351][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.349448][ T5781] bridge_slave_0: entered allmulticast mode [ 40.350584][ T5781] bridge_slave_0: entered promiscuous mode [ 40.360946][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.360989][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.361049][ T5781] bridge_slave_1: entered allmulticast mode [ 40.362420][ T5781] bridge_slave_1: entered promiscuous mode [ 40.386367][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.398760][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.399023][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.402232][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.403306][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.409040][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.419343][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.420288][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.438263][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.440037][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.440664][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.443674][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.456398][ T5781] team0: Port device team_slave_0 added [ 40.458755][ T5781] team0: Port device team_slave_1 added [ 40.485734][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.485747][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.485761][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.489621][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.489631][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.489645][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.532895][ T5781] hsr_slave_0: entered promiscuous mode [ 40.533663][ T5781] hsr_slave_1: entered promiscuous mode [ 40.534612][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 40.534627][ T5781] Cannot create hsr debugfs directory [ 40.602556][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.672313][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.677701][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.677967][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.693156][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.695504][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.695590][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.743885][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.745532][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.763879][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.763926][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.770567][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.787070][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.787130][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.788264][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.788306][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.795667][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.795753][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.797909][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.804039][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.810498][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.817930][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.819513][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.823604][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.833214][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.836726][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.965187][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.975335][ T5784] Bluetooth: hci3: command tx timeout [ 40.975468][ T5784] Bluetooth: hci2: command tx timeout [ 40.977672][ T5784] Bluetooth: hci0: command tx timeout [ 40.977756][ T5784] Bluetooth: hci1: command tx timeout [ 40.988457][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.998761][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.998864][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.008903][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.008988][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.191201][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.201073][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.242125][ T5790] veth0_vlan: entered promiscuous mode [ 41.247449][ T5788] veth0_vlan: entered promiscuous mode [ 41.252954][ T5790] veth1_vlan: entered promiscuous mode [ 41.254560][ T5788] veth1_vlan: entered promiscuous mode [ 41.263411][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.281174][ T5790] veth0_macvtap: entered promiscuous mode [ 41.288132][ T5788] veth0_macvtap: entered promiscuous mode [ 41.291414][ T5790] veth1_macvtap: entered promiscuous mode [ 41.295898][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.304237][ T5788] veth1_macvtap: entered promiscuous mode [ 41.316981][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.331563][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.345395][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.360299][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.362445][ T5781] veth0_vlan: entered promiscuous mode [ 41.365691][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.382703][ T5781] veth1_vlan: entered promiscuous mode [ 41.409643][ T5780] veth0_vlan: entered promiscuous mode [ 41.419418][ T5780] veth1_vlan: entered promiscuous mode [ 41.448491][ T5781] veth0_macvtap: entered promiscuous mode [ 41.470664][ T5781] veth1_macvtap: entered promiscuous mode [ 41.473845][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.473867][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.477350][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.477367][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.494387][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.496222][ T5780] veth0_macvtap: entered promiscuous mode [ 41.526343][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.528333][ T5780] veth1_macvtap: entered promiscuous mode [ 41.530205][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.530216][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.531613][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.531628][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.555490][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.565135][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.605425][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.605521][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.605662][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.605725][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.605786][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.605850][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.650027][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.650040][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.653093][ T5788] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.687701][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.687719][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.707850][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.707876][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.736385][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.736404][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.748678][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.748718][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.748751][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.748781][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.748812][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.748842][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.748871][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.748902][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.748933][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.788639][ T5951] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 41.933065][ T5963] FAULT_INJECTION: forcing a failure. [ 41.933065][ T5963] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 41.933085][ T5963] CPU: 3 UID: 0 PID: 5963 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 41.933098][ T5963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.933104][ T5963] Call Trace: [ 41.933109][ T5963] [ 41.933113][ T5963] dump_stack_lvl+0x100/0x190 [ 41.933136][ T5963] should_fail_ex.cold+0x5/0xa [ 41.933154][ T5963] should_fail_alloc_page+0xeb/0x140 [ 41.933168][ T5963] prepare_alloc_pages+0x1f0/0x5b0 [ 41.933183][ T5963] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 41.933199][ T5963] ? __handle_mm_fault+0x4ec/0x2f60 [ 41.933214][ T5963] ? __lock_acquire+0x5c0/0x1f40 [ 41.933231][ T5963] ? __css_rstat_updated+0x1ce/0x590 [ 41.933242][ T5963] ? __pfx___handle_mm_fault+0x10/0x10 [ 41.933255][ T5963] ? __pfx___css_rstat_updated+0x10/0x10 [ 41.933270][ T5963] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 41.933285][ T5963] ? lock_acquire+0x1d1/0x380 [ 41.933322][ T5963] ? find_held_lock+0x2b/0x80 [ 41.933335][ T5963] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 41.933351][ T5963] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 41.933367][ T5963] ? rcu_is_watching+0x13/0xc0 [ 41.933380][ T5963] ? __up_read+0x333/0x980 [ 41.933391][ T5963] ? __pfx___up_read+0x10/0x10 [ 41.933400][ T5963] ? do_user_addr_fault+0x7d7/0x12f0 [ 41.933419][ T5963] ? do_user_addr_fault+0x7d7/0x12f0 [ 41.933441][ T5963] ? irqentry_exit+0x202/0xab0 [ 41.933452][ T5963] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 41.933473][ T5963] ? policy_nodemask+0xed/0x5e0 [ 41.933488][ T5963] alloc_pages_mpol+0x201/0x560 [ 41.933502][ T5963] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 41.933519][ T5963] alloc_pages_noprof+0x1a/0x160 [ 41.933539][ T5963] bpf_prog_test_run_skb+0x2773/0x3550 [ 41.933559][ T5963] ? __fget_files+0x1b1/0x3d0 [ 41.933577][ T5963] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 41.933592][ T5963] ? fput+0x7c/0x100 [ 41.933607][ T5963] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 41.933621][ T5963] __sys_bpf+0x1d13/0x4b60 [ 41.933635][ T5963] ? __pfx___sys_bpf+0x10/0x10 [ 41.933645][ T5963] ? find_held_lock+0x2b/0x80 [ 41.933657][ T5963] ? get_pid_task+0xfc/0x250 [ 41.933667][ T5963] ? get_pid_task+0xfc/0x250 [ 41.933682][ T5963] ? find_held_lock+0x2b/0x80 [ 41.933697][ T5963] ? rcu_read_lock_any_held+0x6a/0x90 [ 41.933711][ T5963] ? find_held_lock+0x2b/0x80 [ 41.933722][ T5963] ? ksys_write+0x190/0x250 [ 41.933732][ T5963] ? ksys_write+0x190/0x250 [ 41.933742][ T5963] ? lock_acquire+0x1d1/0x380 [ 41.933767][ T5963] ? fput+0x7c/0x100 [ 41.933781][ T5963] ? ksys_write+0x1ac/0x250 [ 41.933793][ T5963] ? __x64_sys_bpf+0xce/0x140 [ 41.933803][ T5963] __x64_sys_bpf+0xce/0x140 [ 41.933813][ T5963] ? do_syscall_64+0xae/0x790 [ 41.933825][ T5963] do_syscall_64+0x123/0x790 [ 41.933838][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.933850][ T5963] RIP: 0033:0x7f46f639fb19 [ 41.933859][ T5963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.933870][ T5963] RSP: 002b:00007f46f72c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 41.933895][ T5963] RAX: ffffffffffffffda RBX: 00007f46f6625fa0 RCX: 00007f46f639fb19 [ 41.933902][ T5963] RDX: 0000000000000050 RSI: 0000200000003580 RDI: 000000000000000a [ 41.933909][ T5963] RBP: 00007f46f72c7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.933915][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.933922][ T5963] R13: 00007f46f6626038 R14: 00007f46f6625fa0 R15: 00007ffe7fc50ce8 [ 41.933936][ T5963] [ 41.965816][ T5967] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET) [ 42.009299][ T5965] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 42.121544][ T5973] 0: reclassify loop, rule prio 0, protocol 03 [ 42.604688][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 42.607483][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.614085][ T6001] bridge_slave_1 (unregistering): left allmulticast mode [ 42.614108][ T6001] bridge_slave_1 (unregistering): left promiscuous mode [ 42.614324][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.701529][ T6006] CIFS: VFS: bad security option: krb5iý [ 42.861083][ T6013] FAULT_INJECTION: forcing a failure. [ 42.861083][ T6013] name failslab, interval 1, probability 0, space 0, times 1 [ 42.861102][ T6013] CPU: 3 UID: 0 PID: 6013 Comm: syz.3.24 Not tainted syzkaller #0 PREEMPT(full) [ 42.861116][ T6013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.861123][ T6013] Call Trace: [ 42.861127][ T6013] [ 42.861131][ T6013] dump_stack_lvl+0x100/0x190 [ 42.861154][ T6013] should_fail_ex.cold+0x5/0xa [ 42.861173][ T6013] should_failslab+0xc2/0x120 [ 42.861186][ T6013] __kmalloc_cache_noprof+0x91/0x6d0 [ 42.861202][ T6013] ? nft_netdev_hook_alloc+0x243/0x430 [ 42.861221][ T6013] nft_netdev_hook_alloc+0x243/0x430 [ 42.861238][ T6013] nft_chain_parse_hook+0x57d/0x1180 [ 42.861252][ T6013] ? __pfx_nft_chain_parse_hook+0x10/0x10 [ 42.861263][ T6013] ? arch_stack_walk+0xa6/0xf0 [ 42.861286][ T6013] nf_tables_addchain.constprop.0+0x23e/0x1ca0 [ 42.861302][ T6013] ? nft_trans_commit_list_add_tail+0x165/0x6c0 [ 42.861323][ T6013] ? nft_chain_lookup+0x59c/0xa60 [ 42.861341][ T6013] ? __kasan_kmalloc+0xaa/0xb0 [ 42.861351][ T6013] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 42.861368][ T6013] ? __lock_acquire+0x5c0/0x1f40 [ 42.861395][ T6013] ? nla_strcmp+0xff/0x130 [ 42.861408][ T6013] ? nft_table_lookup.part.0+0x1e3/0x230 [ 42.861426][ T6013] nf_tables_newchain+0x1824/0x2a50 [ 42.861440][ T6013] ? net_generic+0xb5/0x2a0 [ 42.861463][ T6013] ? __pfx_nf_tables_newchain+0x10/0x10 [ 42.861478][ T6013] ? __pfx___nla_validate_parse+0x10/0x10 [ 42.861491][ T6013] ? lock_acquire+0x1d1/0x380 [ 42.861507][ T6013] ? net_generic+0x25/0x2a0 [ 42.861526][ T6013] ? __nla_parse+0x40/0x60 [ 42.861540][ T6013] nfnetlink_rcv_batch+0x1410/0x2880 [ 42.861565][ T6013] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 42.861586][ T6013] ? lock_acquire+0x1d1/0x380 [ 42.861601][ T6013] ? avc_has_perm_noaudit+0x56/0x470 [ 42.861620][ T6013] ? avc_has_perm_noaudit+0x145/0x470 [ 42.861646][ T6013] ? __nla_parse+0x40/0x60 [ 42.861660][ T6013] nfnetlink_rcv+0x3bd/0x440 [ 42.861677][ T6013] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 42.861699][ T6013] netlink_unicast+0x668/0x950 [ 42.861715][ T6013] ? __pfx_netlink_unicast+0x10/0x10 [ 42.861733][ T6013] netlink_sendmsg+0x9ac/0x10c0 [ 42.861749][ T6013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 42.861766][ T6013] ? selinux_socket_sendmsg+0x198/0x2f0 [ 42.861784][ T6013] ? ____sys_sendmsg+0xa99/0xc30 [ 42.861799][ T6013] ____sys_sendmsg+0xa99/0xc30 [ 42.861814][ T6013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 42.861829][ T6013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 42.861849][ T6013] ? lock_acquire+0x1d1/0x380 [ 42.861864][ T6013] ? get_pid_task+0x2a/0x250 [ 42.861876][ T6013] ___sys_sendmsg+0x190/0x1e0 [ 42.861894][ T6013] ? __pfx____sys_sendmsg+0x10/0x10 [ 42.861910][ T6013] ? get_pid_task+0x106/0x250 [ 42.861926][ T6013] ? find_held_lock+0x2b/0x80 [ 42.861947][ T6013] __sys_sendmsg+0x160/0x210 [ 42.861960][ T6013] ? __pfx___sys_sendmsg+0x10/0x10 [ 42.861981][ T6013] do_syscall_64+0x123/0x790 [ 42.861994][ T6013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.862007][ T6013] RIP: 0033:0x7f7d9c19fb19 [ 42.862016][ T6013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.862031][ T6013] RSP: 002b:00007f7d9d03e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.862043][ T6013] RAX: ffffffffffffffda RBX: 00007f7d9c425fa0 RCX: 00007f7d9c19fb19 [ 42.862050][ T6013] RDX: 0000000004000010 RSI: 0000200000000300 RDI: 0000000000000003 [ 42.862057][ T6013] RBP: 00007f7d9d03e090 R08: 0000000000000000 R09: 0000000000000000 [ 42.862063][ T6013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.862070][ T6013] R13: 00007f7d9c426038 R14: 00007f7d9c425fa0 R15: 00007fffa63520e8 [ 42.862085][ T6013] [ 42.976659][ T6022] ip_tables: iptables: counters copy to user failed while replacing table [ 42.978741][ T6028] Zero length message leads to an empty skb [ 43.015545][ T6032] FAULT_INJECTION: forcing a failure. [ 43.015545][ T6032] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.015565][ T6032] CPU: 3 UID: 0 PID: 6032 Comm: syz.3.31 Not tainted syzkaller #0 PREEMPT(full) [ 43.015578][ T6032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.015585][ T6032] Call Trace: [ 43.015589][ T6032] [ 43.015594][ T6032] dump_stack_lvl+0x100/0x190 [ 43.015617][ T6032] should_fail_ex.cold+0x5/0xa [ 43.015634][ T6032] _copy_from_user+0x2e/0xd0 [ 43.015649][ T6032] kstrtouint_from_user+0xd6/0x1d0 [ 43.015666][ T6032] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 43.015686][ T6032] ? lock_acquire+0x1d1/0x380 [ 43.015705][ T6032] proc_fail_nth_write+0x83/0x220 [ 43.015722][ T6032] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 43.015741][ T6032] vfs_write+0x2aa/0x1050 [ 43.015752][ T6032] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 43.015767][ T6032] ? lock_acquire+0x1d1/0x380 [ 43.015783][ T6032] ? __fget_files+0x34/0x3d0 [ 43.015797][ T6032] ? __pfx_vfs_write+0x10/0x10 [ 43.015806][ T6032] ? find_held_lock+0x2b/0x80 [ 43.015819][ T6032] ? __fget_files+0x215/0x3d0 [ 43.015835][ T6032] ? __fget_files+0x21f/0x3d0 [ 43.015852][ T6032] ksys_write+0x12a/0x250 [ 43.015863][ T6032] ? __pfx_ksys_write+0x10/0x10 [ 43.015877][ T6032] do_syscall_64+0x123/0x790 [ 43.015891][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.015903][ T6032] RIP: 0033:0x7f7d9c16034e [ 43.015912][ T6032] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 43.015923][ T6032] RSP: 002b:00007f7d9d03dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.015935][ T6032] RAX: ffffffffffffffda RBX: 00007f7d9d03e6c0 RCX: 00007f7d9c16034e [ 43.015942][ T6032] RDX: 0000000000000001 RSI: 00007f7d9d03e0a0 RDI: 0000000000000004 [ 43.015949][ T6032] RBP: 00007f7d9d03e090 R08: 0000000000000000 R09: 0000000000000000 [ 43.015955][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 43.015962][ T6032] R13: 00007f7d9c426038 R14: 00007f7d9c425fa0 R15: 00007fffa63520e8 [ 43.015977][ T6032] [ 43.054458][ T5786] Bluetooth: hci1: command tx timeout [ 43.054485][ T5786] Bluetooth: hci0: command tx timeout [ 43.054546][ T5786] Bluetooth: hci2: command tx timeout [ 43.054567][ T5786] Bluetooth: hci3: command tx timeout [ 43.192935][ T6040] FAULT_INJECTION: forcing a failure. [ 43.192935][ T6040] name failslab, interval 1, probability 0, space 0, times 0 [ 43.192955][ T6040] CPU: 0 UID: 0 PID: 6040 Comm: syz.0.34 Not tainted syzkaller #0 PREEMPT(full) [ 43.192968][ T6040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.192975][ T6040] Call Trace: [ 43.192980][ T6040] [ 43.192985][ T6040] dump_stack_lvl+0x100/0x190 [ 43.193008][ T6040] should_fail_ex.cold+0x5/0xa [ 43.193028][ T6040] should_failslab+0xc2/0x120 [ 43.193042][ T6040] __kmalloc_cache_noprof+0x91/0x6d0 [ 43.193057][ T6040] ? fw_change+0xb75/0xfc0 [ 43.193073][ T6040] fw_change+0xb75/0xfc0 [ 43.193087][ T6040] ? __pfx_fw_change+0x10/0x10 [ 43.193104][ T6040] ? __pfx_fw_change+0x10/0x10 [ 43.193116][ T6040] tc_new_tfilter+0x9e2/0x24e0 [ 43.193135][ T6040] ? avc_has_perm_noaudit+0x11e/0x470 [ 43.193151][ T6040] ? __pfx_tc_new_tfilter+0x10/0x10 [ 43.193169][ T6040] ? __lock_acquire+0x5c0/0x1f40 [ 43.193191][ T6040] ? lock_acquire+0x1d1/0x380 [ 43.193206][ T6040] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 43.193222][ T6040] ? find_held_lock+0x2b/0x80 [ 43.193235][ T6040] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 43.193251][ T6040] ? __pfx_tc_new_tfilter+0x10/0x10 [ 43.193264][ T6040] rtnetlink_rcv_msg+0x95e/0xe90 [ 43.193281][ T6040] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 43.193303][ T6040] netlink_rcv_skb+0x159/0x420 [ 43.193317][ T6040] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 43.193333][ T6040] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 43.193346][ T6040] ? __asan_memcpy+0x3c/0x60 [ 43.193367][ T6040] ? netlink_deliver_tap+0x1ae/0xb50 [ 43.193383][ T6040] netlink_unicast+0x668/0x950 [ 43.193398][ T6040] ? __pfx_netlink_unicast+0x10/0x10 [ 43.193416][ T6040] netlink_sendmsg+0x9ac/0x10c0 [ 43.193432][ T6040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.193449][ T6040] ? selinux_socket_sendmsg+0x198/0x2f0 [ 43.193467][ T6040] ? ____sys_sendmsg+0xa99/0xc30 [ 43.193482][ T6040] ____sys_sendmsg+0xa99/0xc30 [ 43.193497][ T6040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.193512][ T6040] ? __pfx_____sys_sendmsg+0x10/0x10 [ 43.193536][ T6040] ? lock_acquire+0x1d1/0x380 [ 43.193552][ T6040] ? get_pid_task+0x2a/0x250 [ 43.193564][ T6040] ___sys_sendmsg+0x190/0x1e0 [ 43.193582][ T6040] ? __pfx____sys_sendmsg+0x10/0x10 [ 43.193598][ T6040] ? get_pid_task+0x106/0x250 [ 43.193614][ T6040] ? find_held_lock+0x2b/0x80 [ 43.193635][ T6040] __sys_sendmsg+0x160/0x210 [ 43.193648][ T6040] ? __pfx___sys_sendmsg+0x10/0x10 [ 43.193669][ T6040] do_syscall_64+0x123/0x790 [ 43.193682][ T6040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.193694][ T6040] RIP: 0033:0x7fa1c879fb19 [ 43.193704][ T6040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.193714][ T6040] RSP: 002b:00007fa1c9753028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.193726][ T6040] RAX: ffffffffffffffda RBX: 00007fa1c8a25fa0 RCX: 00007fa1c879fb19 [ 43.193734][ T6040] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 43.193740][ T6040] RBP: 00007fa1c9753090 R08: 0000000000000000 R09: 0000000000000000 [ 43.193747][ T6040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.193753][ T6040] R13: 00007fa1c8a26038 R14: 00007fa1c8a25fa0 R15: 00007ffc8a041d38 [ 43.193768][ T6040] [ 43.293315][ T6045] batman_adv: batadv0: Adding interface: syz_tun [ 43.293325][ T6045] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.293341][ T6045] batman_adv: batadv0: Interface activated: syz_tun [ 43.331328][ T6049] batman_adv: batadv0: Adding interface: syz_tun [ 43.331339][ T6049] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.331362][ T6049] batman_adv: batadv0: Interface activated: syz_tun [ 43.363728][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40'. [ 43.615450][ C3] vcan0: j1939_tp_rxtimer: 0xffff888039dc1400: rx timeout, send abort [ 43.658448][ T42] kauditd_printk_skb: 113 callbacks suppressed [ 43.658461][ T42] audit: type=1400 audit(1793680563.937:277): avc: denied { write } for pid=6067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.701575][ T42] audit: type=1400 audit(1793680563.977:278): avc: denied { write } for pid=6070 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.872238][ T42] audit: type=1400 audit(1793680564.147:279): avc: denied { write } for pid=6075 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.950676][ T42] audit: type=1400 audit(1793680564.227:280): avc: denied { write } for pid=6078 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.961027][ T42] audit: type=1400 audit(1793680564.237:281): avc: denied { write } for pid=6079 comm="syz.3.45" name="core" dev="configfs" ino=6743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.962103][ T42] audit: type=1400 audit(1793680564.237:282): avc: denied { create } for pid=6079 comm="syz.3.45" name="rd_mcp_0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 43.977054][ T42] audit: type=1400 audit(1793680564.257:283): avc: denied { unmount } for pid=5790 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 44.049688][ T42] audit: type=1400 audit(1793680564.327:284): avc: denied { mount } for pid=6087 comm="syz.3.47" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 44.050304][ T42] audit: type=1400 audit(1793680564.327:285): avc: denied { search } for pid=6087 comm="syz.3.47" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.050548][ T42] audit: type=1400 audit(1793680564.327:286): avc: denied { write } for pid=6087 comm="syz.3.47" name="free_buffer" dev="tracefs" ino=3587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 44.057730][ T6088] ip_tables: iptables: counters copy to user failed while replacing table [ 44.058345][ T6088] x_tables: duplicate underflow at hook 3 [ 44.059814][ T6088] ip_tables: iptables: counters copy to user failed while replacing table [ 44.061695][ T6088] ip_tables: iptables: counters copy to user failed while replacing table [ 44.115142][ C3] vcan0: j1939_tp_rxtimer: 0xffff888039dc1800: rx timeout, send abort [ 44.115927][ C3] vcan0: j1939_tp_rxtimer: 0xffff888039dc1400: abort rx timeout. Force session deactivation [ 44.255737][ T6098] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 44.261510][ T6098] tmpfs: Bad value for 'mpol' [ 44.523451][ T79] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 44.526149][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.526161][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.526235][ T6107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.55'. [ 44.615209][ C3] vcan0: j1939_tp_rxtimer: 0xffff888039dc1800: abort rx timeout. Force session deactivation [ 44.805679][ T6122] netlink: 'syz.2.61': attribute type 7 has an invalid length. [ 44.849192][ T6118] process 'syz.3.60' launched '/dev/fd/14' with NULL argv: empty string added [ 44.929904][ T6127] FAULT_INJECTION: forcing a failure. [ 44.929904][ T6127] name failslab, interval 1, probability 0, space 0, times 0 [ 44.929925][ T6127] CPU: 0 UID: 0 PID: 6127 Comm: syz.3.62 Not tainted syzkaller #0 PREEMPT(full) [ 44.929939][ T6127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 44.929946][ T6127] Call Trace: [ 44.929950][ T6127] [ 44.929954][ T6127] dump_stack_lvl+0x100/0x190 [ 44.929977][ T6127] should_fail_ex.cold+0x5/0xa [ 44.929996][ T6127] should_failslab+0xc2/0x120 [ 44.930010][ T6127] kmem_cache_alloc_noprof+0x92/0x6a0 [ 44.930028][ T6127] ? netlink_deliver_tap+0x103/0xb50 [ 44.930042][ T6127] ? skb_clone+0x187/0x3f0 [ 44.930057][ T6127] skb_clone+0x187/0x3f0 [ 44.930071][ T6127] netlink_deliver_tap+0x82f/0xb50 [ 44.930086][ T6127] netlink_unicast+0x708/0x950 [ 44.930120][ T6127] ? __pfx_netlink_unicast+0x10/0x10 [ 44.930139][ T6127] netlink_sendmsg+0x9ac/0x10c0 [ 44.930155][ T6127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.930173][ T6127] ? selinux_socket_sendmsg+0x198/0x2f0 [ 44.930191][ T6127] ? ____sys_sendmsg+0xa99/0xc30 [ 44.930206][ T6127] ____sys_sendmsg+0xa99/0xc30 [ 44.930221][ T6127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.930236][ T6127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 44.930256][ T6127] ? lock_acquire+0x1d1/0x380 [ 44.930272][ T6127] ? get_pid_task+0x2a/0x250 [ 44.930284][ T6127] ___sys_sendmsg+0x190/0x1e0 [ 44.930302][ T6127] ? __pfx____sys_sendmsg+0x10/0x10 [ 44.930318][ T6127] ? get_pid_task+0x106/0x250 [ 44.930334][ T6127] ? find_held_lock+0x2b/0x80 [ 44.930356][ T6127] __sys_sendmsg+0x160/0x210 [ 44.930369][ T6127] ? __pfx___sys_sendmsg+0x10/0x10 [ 44.930390][ T6127] do_syscall_64+0x123/0x790 [ 44.930403][ T6127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.930415][ T6127] RIP: 0033:0x7f7d9c19fb19 [ 44.930424][ T6127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.930435][ T6127] RSP: 002b:00007f7d9d03e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.930446][ T6127] RAX: ffffffffffffffda RBX: 00007f7d9c425fa0 RCX: 00007f7d9c19fb19 [ 44.930453][ T6127] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 44.930460][ T6127] RBP: 00007f7d9d03e090 R08: 0000000000000000 R09: 0000000000000000 [ 44.930466][ T6127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.930474][ T6127] R13: 00007f7d9c426038 R14: 00007f7d9c425fa0 R15: 00007fffa63520e8 [ 44.930491][ T6127] [ 45.144373][ T5784] Bluetooth: hci2: command tx timeout [ 45.144428][ T5796] Bluetooth: hci0: command tx timeout [ 45.144502][ T5784] Bluetooth: hci1: command tx timeout [ 45.355074][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.368279][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.368309][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.368329][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.423727][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 45.455668][ T5945] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 45.934641][ T5945] usb 8-1: Using ep0 maxpacket: 16 [ 45.938709][ T5945] usb 8-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 45.940403][ T5945] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 45.940465][ T5945] usb 8-1: config 0 has no interface number 0 [ 45.940495][ T5945] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 45.940519][ T5945] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 45.977907][ T5945] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 45.977932][ T5945] usb 8-1: Product: syz [ 45.977945][ T5945] usb 8-1: SerialNumber: syz [ 46.060215][ T5945] usb 8-1: config 0 descriptor?? [ 46.070485][ T5945] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 46.074839][ T5945] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input5 [ 46.335523][ T5784] Bluetooth: hci3: command tx timeout [ 46.416727][ T6169] FAULT_INJECTION: forcing a failure. [ 46.416727][ T6169] name failslab, interval 1, probability 0, space 0, times 0 [ 46.416746][ T6169] CPU: 1 UID: 0 PID: 6169 Comm: syz.2.74 Not tainted syzkaller #0 PREEMPT(full) [ 46.416759][ T6169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 46.416766][ T6169] Call Trace: [ 46.416770][ T6169] [ 46.416775][ T6169] dump_stack_lvl+0x100/0x190 [ 46.416798][ T6169] should_fail_ex.cold+0x5/0xa [ 46.416816][ T6169] should_failslab+0xc2/0x120 [ 46.416833][ T6169] kmem_cache_alloc_noprof+0x92/0x6a0 [ 46.416867][ T6169] ? skb_clone+0x187/0x3f0 [ 46.416883][ T6169] skb_clone+0x187/0x3f0 [ 46.416896][ T6169] bpf_clone_redirect+0x15d/0x4f0 [ 46.416915][ T6169] bpf_prog_57814e831e451a98+0x62/0x6b [ 46.416926][ T6169] ? unwind_get_return_address+0x59/0xa0 [ 46.416941][ T6169] ? __lock_acquire+0x5c0/0x1f40 [ 46.416960][ T6169] ? irqentry_exit+0x202/0xab0 [ 46.416972][ T6169] ? lockdep_hardirqs_on+0x7d/0x110 [ 46.416983][ T6169] ? irqentry_exit+0x202/0xab0 [ 46.417001][ T6169] ? __pfx___cant_migrate+0x10/0x10 [ 46.417012][ T6169] ? bpf_test_timer_continue+0x1cb/0x630 [ 46.417024][ T6169] ? lockdep_hardirqs_on+0x7d/0x110 [ 46.417036][ T6169] bpf_test_run+0x39c/0xa40 [ 46.417047][ T6169] ? bpf_test_run+0x1c6/0xa40 [ 46.417060][ T6169] ? __pfx_bpf_test_run+0x10/0x10 [ 46.417083][ T6169] ? __asan_memset+0x23/0x50 [ 46.417099][ T6169] ? eth_type_trans+0x35c/0x580 [ 46.417113][ T6169] bpf_prog_test_run_skb+0x15bc/0x3550 [ 46.417128][ T6169] ? lock_acquire+0x1d1/0x380 [ 46.417146][ T6169] ? __fget_files+0x1b1/0x3d0 [ 46.417163][ T6169] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 46.417178][ T6169] ? fput+0x7c/0x100 [ 46.417194][ T6169] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 46.417207][ T6169] __sys_bpf+0x1d13/0x4b60 [ 46.417222][ T6169] ? __pfx___sys_bpf+0x10/0x10 [ 46.417232][ T6169] ? find_held_lock+0x2b/0x80 [ 46.417244][ T6169] ? get_pid_task+0xfc/0x250 [ 46.417253][ T6169] ? get_pid_task+0xfc/0x250 [ 46.417268][ T6169] ? find_held_lock+0x2b/0x80 [ 46.417283][ T6169] ? rcu_read_lock_any_held+0x6a/0x90 [ 46.417297][ T6169] ? find_held_lock+0x2b/0x80 [ 46.417308][ T6169] ? ksys_write+0x190/0x250 [ 46.417323][ T6169] ? ksys_write+0x190/0x250 [ 46.417333][ T6169] ? lock_acquire+0x1d1/0x380 [ 46.417358][ T6169] ? fput+0x7c/0x100 [ 46.417372][ T6169] ? ksys_write+0x1ac/0x250 [ 46.417384][ T6169] ? __x64_sys_bpf+0xce/0x140 [ 46.417394][ T6169] __x64_sys_bpf+0xce/0x140 [ 46.417405][ T6169] ? do_syscall_64+0xae/0x790 [ 46.417417][ T6169] do_syscall_64+0x123/0x790 [ 46.417429][ T6169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.417441][ T6169] RIP: 0033:0x7f46f639fb19 [ 46.417450][ T6169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.417461][ T6169] RSP: 002b:00007f46f72c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.417473][ T6169] RAX: ffffffffffffffda RBX: 00007f46f6625fa0 RCX: 00007f46f639fb19 [ 46.417480][ T6169] RDX: 0000000000000050 RSI: 0000200000001640 RDI: 000000000000000a [ 46.417487][ T6169] RBP: 00007f46f72c7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.417493][ T6169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 46.417500][ T6169] R13: 00007f46f6626038 R14: 00007f46f6625fa0 R15: 00007ffe7fc50ce8 [ 46.417514][ T6169] [ 46.423632][ T6154] nvme nvme0: rdma connection establishment failed (-512) [ 46.454883][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 46.455872][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 46.456064][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 46.456243][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 46.456418][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 46.456593][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 46.456777][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 46.456787][ C1] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 46.456811][ T1722] usb 8-1: USB disconnect, device number 2 [ 46.469504][ T1722] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 46.650707][ T6185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 46.730985][ T6189] warning: `syz.2.82' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 46.740386][ T6189] device-mapper: ioctl: Target spec extends beyond end of parameters [ 46.740396][ T6189] device-mapper: ioctl: unable to find target [ 46.977815][ T6197] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 46.996315][ T6199] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 47.184845][ T6211] netlink: 104 bytes leftover after parsing attributes in process `syz.3.89'. [ 47.215626][ T5784] Bluetooth: hci1: command tx timeout [ 47.224293][ T5784] Bluetooth: hci0: command 0x0419 tx timeout [ 47.224963][ T5784] Bluetooth: hci2: command tx timeout [ 47.568992][ T6222] netlink: 'syz.2.93': attribute type 1 has an invalid length. [ 47.608097][ T6225] FAULT_INJECTION: forcing a failure. [ 47.608097][ T6225] name failslab, interval 1, probability 0, space 0, times 0 [ 47.608117][ T6225] CPU: 3 UID: 0 PID: 6225 Comm: syz.2.94 Not tainted syzkaller #0 PREEMPT(full) [ 47.608130][ T6225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.608137][ T6225] Call Trace: [ 47.608141][ T6225] [ 47.608161][ T6225] dump_stack_lvl+0x100/0x190 [ 47.608186][ T6225] should_fail_ex.cold+0x5/0xa [ 47.608204][ T6225] should_failslab+0xc2/0x120 [ 47.608218][ T6225] kmem_cache_alloc_noprof+0x92/0x6a0 [ 47.608236][ T6225] ? dev_queue_xmit_nit+0x38/0xa80 [ 47.608250][ T6225] ? skb_clone+0x187/0x3f0 [ 47.608265][ T6225] skb_clone+0x187/0x3f0 [ 47.608278][ T6225] dev_queue_xmit_nit+0x255/0xa80 [ 47.608296][ T6225] dev_hard_start_xmit+0x2f5/0x760 [ 47.608317][ T6225] __dev_queue_xmit+0x1bef/0x48d0 [ 47.608340][ T6225] ? rcu_is_watching+0x13/0xc0 [ 47.608353][ T6225] ? __pfx___dev_queue_xmit+0x10/0x10 [ 47.608371][ T6225] ? __kasan_kmalloc+0xaa/0xb0 [ 47.608384][ T6225] ? pskb_expand_head+0x225/0x1190 [ 47.608400][ T6225] ? skb_release_data+0x69d/0x860 [ 47.608417][ T6225] ? kmalloc_reserve+0xf9/0x350 [ 47.608434][ T6225] ? skb_headers_offset_update+0x132/0x260 [ 47.608450][ T6225] ? pskb_expand_head+0x598/0x1190 [ 47.608467][ T6225] ? __pfx_pskb_expand_head+0x10/0x10 [ 47.608481][ T6225] ? __asan_memcpy+0x3c/0x60 [ 47.608501][ T6225] __bpf_redirect+0x992/0xf80 [ 47.608521][ T6225] bpf_clone_redirect+0x369/0x4f0 [ 47.608540][ T6225] bpf_prog_bd919e7baf24f63c+0x5f/0x68 [ 47.608551][ T6225] ? unwind_get_return_address+0x59/0xa0 [ 47.608565][ T6225] ? __lock_acquire+0x5c0/0x1f40 [ 47.608582][ T6225] ? __lock_acquire+0x5c0/0x1f40 [ 47.608602][ T6225] ? lock_acquire+0x1d1/0x380 [ 47.608617][ T6225] ? bpf_test_timer_enter+0xf7/0x2c0 [ 47.608628][ T6225] ? find_held_lock+0x2b/0x80 [ 47.608640][ T6225] ? bpf_test_timer_enter+0xf7/0x2c0 [ 47.608652][ T6225] ? ktime_get+0x22c/0x320 [ 47.608670][ T6225] ? lockdep_hardirqs_on+0x7d/0x110 [ 47.608682][ T6225] ? ktime_get+0x23e/0x320 [ 47.608699][ T6225] ? __pfx___cant_migrate+0x10/0x10 [ 47.608710][ T6225] ? bpf_test_timer_enter+0xf7/0x2c0 [ 47.608722][ T6225] bpf_test_run+0x39c/0xa40 [ 47.608734][ T6225] ? bpf_test_run+0x1c6/0xa40 [ 47.608747][ T6225] ? __pfx_bpf_test_run+0x10/0x10 [ 47.608770][ T6225] ? __asan_memset+0x23/0x50 [ 47.608785][ T6225] ? eth_type_trans+0x35c/0x580 [ 47.608799][ T6225] bpf_prog_test_run_skb+0x15bc/0x3550 [ 47.608814][ T6225] ? lock_acquire+0x1d1/0x380 [ 47.608836][ T6225] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 47.608852][ T6225] ? fput+0x7c/0x100 [ 47.608868][ T6225] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 47.608881][ T6225] __sys_bpf+0x1d13/0x4b60 [ 47.608896][ T6225] ? __pfx___sys_bpf+0x10/0x10 [ 47.608905][ T6225] ? find_held_lock+0x2b/0x80 [ 47.608917][ T6225] ? get_pid_task+0xfc/0x250 [ 47.608927][ T6225] ? get_pid_task+0xfc/0x250 [ 47.608942][ T6225] ? find_held_lock+0x2b/0x80 [ 47.608957][ T6225] ? rcu_read_lock_any_held+0x6a/0x90 [ 47.608970][ T6225] ? find_held_lock+0x2b/0x80 [ 47.608982][ T6225] ? ksys_write+0x190/0x250 [ 47.608992][ T6225] ? ksys_write+0x190/0x250 [ 47.609002][ T6225] ? lock_acquire+0x1d1/0x380 [ 47.609027][ T6225] ? fput+0x7c/0x100 [ 47.609040][ T6225] ? ksys_write+0x1ac/0x250 [ 47.609052][ T6225] ? __x64_sys_bpf+0xce/0x140 [ 47.609062][ T6225] __x64_sys_bpf+0xce/0x140 [ 47.609073][ T6225] ? do_syscall_64+0xae/0x790 [ 47.609085][ T6225] do_syscall_64+0x123/0x790 [ 47.609097][ T6225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.609109][ T6225] RIP: 0033:0x7f46f639fb19 [ 47.609118][ T6225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.609129][ T6225] RSP: 002b:00007f46f72c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.609140][ T6225] RAX: ffffffffffffffda RBX: 00007f46f6625fa0 RCX: 00007f46f639fb19 [ 47.609147][ T6225] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 47.609154][ T6225] RBP: 00007f46f72c7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.609160][ T6225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.609167][ T6225] R13: 00007f46f6626038 R14: 00007f46f6625fa0 R15: 00007ffe7fc50ce8 [ 47.609181][ T6225] [ 47.776300][ T6230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 47.779871][ T6229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.438300][ T6249] syzkaller0: entered promiscuous mode [ 48.438314][ T6249] syzkaller0: entered allmulticast mode [ 48.440656][ T6249] 0: reclassify loop, rule prio 0, protocol 800 [ 48.440687][ T6249] FAULT_INJECTION: forcing a failure. [ 48.440687][ T6249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.440701][ T6249] CPU: 3 UID: 0 PID: 6249 Comm: syz.3.103 Not tainted syzkaller #0 PREEMPT(full) [ 48.440714][ T6249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.440720][ T6249] Call Trace: [ 48.440725][ T6249] [ 48.440729][ T6249] dump_stack_lvl+0x100/0x190 [ 48.440751][ T6249] should_fail_ex.cold+0x5/0xa [ 48.440771][ T6249] _copy_to_user+0x32/0xd0 [ 48.440786][ T6249] simple_read_from_buffer+0xcb/0x170 [ 48.440802][ T6249] proc_fail_nth_read+0x1af/0x230 [ 48.440818][ T6249] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 48.440854][ T6249] ? rw_verify_area+0xce/0x6d0 [ 48.440874][ T6249] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 48.440889][ T6249] vfs_read+0x1e4/0xb40 [ 48.440899][ T6249] ? lock_acquire+0x1d1/0x380 [ 48.440921][ T6249] ? __fget_files+0x34/0x3d0 [ 48.440934][ T6249] ? __pfx_vfs_read+0x10/0x10 [ 48.440944][ T6249] ? find_held_lock+0x2b/0x80 [ 48.440956][ T6249] ? __fget_files+0x215/0x3d0 [ 48.440972][ T6249] ? __fget_files+0x21f/0x3d0 [ 48.440989][ T6249] ksys_read+0x12a/0x250 [ 48.441000][ T6249] ? __pfx_ksys_read+0x10/0x10 [ 48.441014][ T6249] do_syscall_64+0x123/0x790 [ 48.441028][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.441040][ T6249] RIP: 0033:0x7f7d9c16034e [ 48.441050][ T6249] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 48.441061][ T6249] RSP: 002b:00007f7d9d03dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 48.441072][ T6249] RAX: ffffffffffffffda RBX: 00007f7d9d03e6c0 RCX: 00007f7d9c16034e [ 48.441079][ T6249] RDX: 000000000000000f RSI: 00007f7d9d03e0a0 RDI: 0000000000000009 [ 48.441086][ T6249] RBP: 00007f7d9d03e090 R08: 0000000000000000 R09: 0000000000000000 [ 48.441092][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.441099][ T6249] R13: 00007f7d9c426038 R14: 00007f7d9c425fa0 R15: 00007fffa63520e8 [ 48.441114][ T6249] [ 48.754310][ T64] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 48.774490][ T6257] FAULT_INJECTION: forcing a failure. [ 48.774490][ T6257] name failslab, interval 1, probability 0, space 0, times 0 [ 48.774516][ T6257] CPU: 3 UID: 0 PID: 6257 Comm: syz.3.105 Not tainted syzkaller #0 PREEMPT(full) [ 48.774536][ T6257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.774546][ T6257] Call Trace: [ 48.774552][ T6257] [ 48.774559][ T6257] dump_stack_lvl+0x100/0x190 [ 48.774582][ T6257] should_fail_ex.cold+0x5/0xa [ 48.774602][ T6257] should_failslab+0xc2/0x120 [ 48.774616][ T6257] __kmalloc_noprof+0xfc/0x840 [ 48.774634][ T6257] ? alloc_pipe_info+0x1e7/0x590 [ 48.774651][ T6257] alloc_pipe_info+0x1e7/0x590 [ 48.774666][ T6257] create_pipe_files+0x8c/0x930 [ 48.774682][ T6257] do_pipe2+0xbd/0x1e0 [ 48.774695][ T6257] ? __pfx_do_pipe2+0x10/0x10 [ 48.774709][ T6257] ? xfd_validate_state+0x129/0x190 [ 48.774729][ T6257] __x64_sys_pipe2+0x54/0x80 [ 48.774744][ T6257] do_syscall_64+0x123/0x790 [ 48.774758][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.774794][ T6257] RIP: 0033:0x7f7d9c19fb19 [ 48.774805][ T6257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.774817][ T6257] RSP: 002b:00007f7d9d03e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 48.774829][ T6257] RAX: ffffffffffffffda RBX: 00007f7d9c425fa0 RCX: 00007f7d9c19fb19 [ 48.774838][ T6257] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 48.774846][ T6257] RBP: 00007f7d9c237b70 R08: 0000000000000000 R09: 0000000000000000 [ 48.774853][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.774861][ T6257] R13: 00007f7d9c426038 R14: 00007f7d9c425fa0 R15: 00007fffa63520e8 [ 48.774876][ T6257] [ 48.908187][ T64] usb 6-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=0.00 [ 48.911049][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.137635][ T42] kauditd_printk_skb: 91 callbacks suppressed [ 49.137697][ T42] audit: type=1400 audit(1793680569.417:378): avc: denied { unmount } for pid=5780 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 49.197621][ T42] audit: type=1400 audit(1793680569.477:379): avc: denied { allowed } for pid=6262 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 49.294304][ T5786] Bluetooth: hci0: command 0x0419 tx timeout [ 49.848790][ T6280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.112'. [ 49.854390][ T42] audit: type=1400 audit(1793680570.127:380): avc: denied { read } for pid=6279 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.919946][ T64] usb 6-1: ATUSB: AT86RF231 version 3 [ 50.043317][ T42] audit: type=1400 audit(1793680570.317:381): avc: denied { getopt } for pid=6283 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.105528][ T42] audit: type=1400 audit(1793680570.387:382): avc: denied { listen } for pid=6287 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.121506][ T64] usb 6-1: Firmware: major: 185, minor: 12, hardware type: HULUSB (4) [ 50.248987][ T42] audit: type=1400 audit(1793680570.527:383): avc: denied { create } for pid=6294 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 50.249835][ T42] audit: type=1400 audit(1793680570.527:384): avc: denied { ioctl } for pid=6294 comm="syz.2.118" path="socket:[13334]" dev="sockfs" ino=13334 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 50.252115][ T42] audit: type=1400 audit(1793680570.527:385): avc: denied { bind } for pid=6294 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 50.277223][ T42] audit: type=1400 audit(1793680570.557:386): avc: denied { mounton } for pid=6294 comm="syz.2.118" path="/43/sys_mnt" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 50.324588][ T64] usb 6-1: failed to fetch extended address, random address set [ 50.595404][ T42] audit: type=1400 audit(1793680570.877:387): avc: denied { read } for pid=6250 comm="syz.1.102" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.772749][ T6316] FAULT_INJECTION: forcing a failure. [ 50.772749][ T6316] name failslab, interval 1, probability 0, space 0, times 0 [ 50.772777][ T6316] CPU: 0 UID: 0 PID: 6316 Comm: syz.2.120 Not tainted syzkaller #0 PREEMPT(full) [ 50.772798][ T6316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.772808][ T6316] Call Trace: [ 50.772815][ T6316] [ 50.772822][ T6316] dump_stack_lvl+0x100/0x190 [ 50.772857][ T6316] should_fail_ex.cold+0x5/0xa [ 50.772885][ T6316] should_failslab+0xc2/0x120 [ 50.772905][ T6316] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 50.772933][ T6316] ? __alloc_skb+0x5b7/0x710 [ 50.772953][ T6316] ? __alloc_skb+0x140/0x710 [ 50.772975][ T6316] __alloc_skb+0x140/0x710 [ 50.772993][ T6316] ? __alloc_skb+0x5b7/0x710 [ 50.773011][ T6316] ? __pfx___alloc_skb+0x10/0x10 [ 50.773037][ T6316] alloc_skb_with_frags+0xdb/0x750 [ 50.773059][ T6316] ? __might_fault+0xc5/0x140 [ 50.773080][ T6316] ? __might_fault+0xc5/0x140 [ 50.773106][ T6316] sock_alloc_send_pskb+0x86a/0x9e0 [ 50.773131][ T6316] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 50.773150][ T6316] ? find_held_lock+0x2b/0x80 [ 50.773170][ T6316] ? dev_get_by_index+0x180/0x380 [ 50.773191][ T6316] ? dev_get_by_index+0x180/0x380 [ 50.773218][ T6316] packet_sendmsg+0x1d94/0x4f80 [ 50.773247][ T6316] ? sock_has_perm+0x254/0x320 [ 50.773271][ T6316] ? __lock_acquire+0x560/0x1f40 [ 50.773308][ T6316] ? __pfx_sock_has_perm+0x10/0x10 [ 50.773341][ T6316] ? __pfx_packet_sendmsg+0x10/0x10 [ 50.773357][ T6316] ? iovec_from_user+0xda/0x140 [ 50.773386][ T6316] ? selinux_socket_sendmsg+0x198/0x2f0 [ 50.773414][ T6316] ____sys_sendmsg+0xa99/0xc30 [ 50.773439][ T6316] ? __pfx_packet_sendmsg+0x10/0x10 [ 50.773458][ T6316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.773490][ T6316] ? lock_acquire+0x1d1/0x380 [ 50.773514][ T6316] ? get_pid_task+0x2a/0x250 [ 50.773534][ T6316] ___sys_sendmsg+0x190/0x1e0 [ 50.773563][ T6316] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.773590][ T6316] ? get_pid_task+0x106/0x250 [ 50.773617][ T6316] ? find_held_lock+0x2b/0x80 [ 50.773653][ T6316] __sys_sendmsg+0x160/0x210 [ 50.773675][ T6316] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.773710][ T6316] do_syscall_64+0x123/0x790 [ 50.773731][ T6316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.773750][ T6316] RIP: 0033:0x7f46f639fb19 [ 50.773766][ T6316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.773783][ T6316] RSP: 002b:00007f46f7243028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.773802][ T6316] RAX: ffffffffffffffda RBX: 00007f46f6626360 RCX: 00007f46f639fb19 [ 50.773815][ T6316] RDX: 0000000000004005 RSI: 0000200000000480 RDI: 0000000000000006 [ 50.773827][ T6316] RBP: 00007f46f7243090 R08: 0000000000000000 R09: 0000000000000000 [ 50.773838][ T6316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.773849][ T6316] R13: 00007f46f66263f8 R14: 00007f46f6626360 R15: 00007ffe7fc50ce8 [ 50.773875][ T6316] [ 51.375671][ T5786] Bluetooth: hci0: command 0x0419 tx timeout [ 51.379486][ T34] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.419782][ T6324] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 52.276396][ T6348] smbdirect: ib_dev[rxe0] renamed to [syz2] [ 52.409042][ T1722] usb 6-1: USB disconnect, device number 2 [ 52.446600][ T6355] FAULT_INJECTION: forcing a failure. [ 52.446600][ T6355] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.446621][ T6355] CPU: 3 UID: 0 PID: 6355 Comm: syz.1.131 Not tainted syzkaller #0 PREEMPT(full) [ 52.446635][ T6355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.446642][ T6355] Call Trace: [ 52.446646][ T6355] [ 52.446650][ T6355] dump_stack_lvl+0x100/0x190 [ 52.446672][ T6355] should_fail_ex.cold+0x5/0xa [ 52.446691][ T6355] should_fail_alloc_page+0xeb/0x140 [ 52.446705][ T6355] prepare_alloc_pages+0x1f0/0x5b0 [ 52.446720][ T6355] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 52.446736][ T6355] ? __handle_mm_fault+0x4ec/0x2f60 [ 52.446770][ T6355] ? __lock_acquire+0x5c0/0x1f40 [ 52.446788][ T6355] ? __css_rstat_updated+0x1ce/0x590 [ 52.446801][ T6355] ? __pfx___handle_mm_fault+0x10/0x10 [ 52.446813][ T6355] ? __pfx___css_rstat_updated+0x10/0x10 [ 52.446828][ T6355] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 52.446844][ T6355] ? lock_acquire+0x1d1/0x380 [ 52.446860][ T6355] ? find_held_lock+0x2b/0x80 [ 52.446872][ T6355] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 52.446888][ T6355] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 52.446904][ T6355] ? rcu_is_watching+0x13/0xc0 [ 52.446917][ T6355] ? __up_read+0x333/0x980 [ 52.446927][ T6355] ? __pfx___up_read+0x10/0x10 [ 52.446936][ T6355] ? do_user_addr_fault+0x7d7/0x12f0 [ 52.446954][ T6355] ? do_user_addr_fault+0x7d7/0x12f0 [ 52.446977][ T6355] ? irqentry_exit+0x202/0xab0 [ 52.446988][ T6355] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.447008][ T6355] ? policy_nodemask+0xed/0x5e0 [ 52.447023][ T6355] alloc_pages_mpol+0x201/0x560 [ 52.447037][ T6355] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 52.447054][ T6355] alloc_pages_noprof+0x1a/0x160 [ 52.447069][ T6355] bpf_prog_test_run_skb+0x2773/0x3550 [ 52.447088][ T6355] ? __fget_files+0x1b1/0x3d0 [ 52.447105][ T6355] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 52.447121][ T6355] ? fput+0x7c/0x100 [ 52.447136][ T6355] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 52.447149][ T6355] __sys_bpf+0x1d13/0x4b60 [ 52.447164][ T6355] ? __pfx___sys_bpf+0x10/0x10 [ 52.447174][ T6355] ? find_held_lock+0x2b/0x80 [ 52.447186][ T6355] ? get_pid_task+0xfc/0x250 [ 52.447196][ T6355] ? get_pid_task+0xfc/0x250 [ 52.447210][ T6355] ? find_held_lock+0x2b/0x80 [ 52.447226][ T6355] ? rcu_read_lock_any_held+0x6a/0x90 [ 52.447239][ T6355] ? find_held_lock+0x2b/0x80 [ 52.447251][ T6355] ? ksys_write+0x190/0x250 [ 52.447261][ T6355] ? ksys_write+0x190/0x250 [ 52.447271][ T6355] ? lock_acquire+0x1d1/0x380 [ 52.447296][ T6355] ? fput+0x7c/0x100 [ 52.447309][ T6355] ? ksys_write+0x1ac/0x250 [ 52.447321][ T6355] ? __x64_sys_bpf+0xce/0x140 [ 52.447335][ T6355] __x64_sys_bpf+0xce/0x140 [ 52.447346][ T6355] ? do_syscall_64+0xae/0x790 [ 52.447362][ T6355] do_syscall_64+0x123/0x790 [ 52.447380][ T6355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.447398][ T6355] RIP: 0033:0x7eff9cd9fb19 [ 52.447412][ T6355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.447431][ T6355] RSP: 002b:00007eff9dc7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.447451][ T6355] RAX: ffffffffffffffda RBX: 00007eff9d025fa0 RCX: 00007eff9cd9fb19 [ 52.447462][ T6355] RDX: 0000000000000050 RSI: 0000200000003580 RDI: 000000000000000a [ 52.447472][ T6355] RBP: 00007eff9dc7f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.447479][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.447485][ T6355] R13: 00007eff9d026038 R14: 00007eff9d025fa0 R15: 00007fff040629e8 [ 52.447500][ T6355] [ 52.941979][ T6377] jffs2: notice: (6377) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 52.955592][ T6377] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 52.962034][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 53.006860][ T6380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 53.021304][ T6380] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 53.149156][ T6392] netlink: 144 bytes leftover after parsing attributes in process `syz.1.145'. [ 53.222719][ T6399] netlink: 164 bytes leftover after parsing attributes in process `syz.2.148'. [ 53.222734][ T6399] openvswitch: netlink: Flow key attr not present in new flow. [ 53.291786][ T6405] FAULT_INJECTION: forcing a failure. [ 53.291786][ T6405] name failslab, interval 1, probability 0, space 0, times 0 [ 53.291821][ T6405] CPU: 3 UID: 0 PID: 6405 Comm: syz.2.150 Not tainted syzkaller #0 PREEMPT(full) [ 53.291834][ T6405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.291841][ T6405] Call Trace: [ 53.291849][ T6405] [ 53.291854][ T6405] dump_stack_lvl+0x100/0x190 [ 53.291886][ T6405] should_fail_ex.cold+0x5/0xa [ 53.291912][ T6405] should_failslab+0xc2/0x120 [ 53.291934][ T6405] __kmalloc_cache_noprof+0x91/0x6d0 [ 53.291957][ T6405] ? nf_tables_addchain.constprop.0+0x28e/0x1ca0 [ 53.291983][ T6405] nf_tables_addchain.constprop.0+0x28e/0x1ca0 [ 53.291999][ T6405] ? nft_trans_commit_list_add_tail+0x165/0x6c0 [ 53.292020][ T6405] ? nft_chain_lookup+0x59c/0xa60 [ 53.292038][ T6405] ? __kasan_kmalloc+0xaa/0xb0 [ 53.292049][ T6405] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 53.292066][ T6405] ? __lock_acquire+0x5c0/0x1f40 [ 53.292099][ T6405] ? nla_strcmp+0xff/0x130 [ 53.292120][ T6405] ? nft_table_lookup.part.0+0x1e3/0x230 [ 53.292138][ T6405] nf_tables_newchain+0x1824/0x2a50 [ 53.292170][ T6405] ? net_generic+0xb5/0x2a0 [ 53.292195][ T6405] ? __pfx_nf_tables_newchain+0x10/0x10 [ 53.292211][ T6405] ? __pfx___nla_validate_parse+0x10/0x10 [ 53.292224][ T6405] ? lock_acquire+0x1d1/0x380 [ 53.292239][ T6405] ? net_generic+0x25/0x2a0 [ 53.292260][ T6405] ? __nla_parse+0x40/0x60 [ 53.292273][ T6405] nfnetlink_rcv_batch+0x1410/0x2880 [ 53.292299][ T6405] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 53.292319][ T6405] ? lock_acquire+0x1d1/0x380 [ 53.292335][ T6405] ? avc_has_perm_noaudit+0x56/0x470 [ 53.292364][ T6405] ? avc_has_perm_noaudit+0x145/0x470 [ 53.292391][ T6405] ? __nla_parse+0x40/0x60 [ 53.292405][ T6405] nfnetlink_rcv+0x3bd/0x440 [ 53.292422][ T6405] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 53.292444][ T6405] netlink_unicast+0x668/0x950 [ 53.292467][ T6405] ? __pfx_netlink_unicast+0x10/0x10 [ 53.292485][ T6405] netlink_sendmsg+0x9ac/0x10c0 [ 53.292501][ T6405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.292518][ T6405] ? selinux_socket_sendmsg+0x198/0x2f0 [ 53.292536][ T6405] ? ____sys_sendmsg+0xa99/0xc30 [ 53.292559][ T6405] ____sys_sendmsg+0xa99/0xc30 [ 53.292574][ T6405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.292589][ T6405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.292609][ T6405] ? lock_acquire+0x1d1/0x380 [ 53.292624][ T6405] ? get_pid_task+0x2a/0x250 [ 53.292644][ T6405] ___sys_sendmsg+0x190/0x1e0 [ 53.292661][ T6405] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.292678][ T6405] ? get_pid_task+0x106/0x250 [ 53.292694][ T6405] ? find_held_lock+0x2b/0x80 [ 53.292715][ T6405] __sys_sendmsg+0x160/0x210 [ 53.292728][ T6405] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.292749][ T6405] do_syscall_64+0x123/0x790 [ 53.292766][ T6405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.292778][ T6405] RIP: 0033:0x7f46f639fb19 [ 53.292787][ T6405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.292798][ T6405] RSP: 002b:00007f46f72c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.292817][ T6405] RAX: ffffffffffffffda RBX: 00007f46f6625fa0 RCX: 00007f46f639fb19 [ 53.292825][ T6405] RDX: 0000000004000010 RSI: 0000200000000300 RDI: 0000000000000003 [ 53.292831][ T6405] RBP: 00007f46f72c7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.292838][ T6405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.292844][ T6405] R13: 00007f46f6626038 R14: 00007f46f6625fa0 R15: 00007ffe7fc50ce8 [ 53.292860][ T6405] [ 53.383544][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.151'. [ 53.391796][ T6409] xfrm1: entered promiscuous mode [ 53.391811][ T6409] xfrm1: entered allmulticast mode [ 53.489946][ T6416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.152'. [ 53.559748][ T6423] veth0_vlan: entered allmulticast mode [ 53.560008][ T6422] veth0_vlan: left allmulticast mode [ 53.580468][ T6425] FAULT_INJECTION: forcing a failure. [ 53.580468][ T6425] name failslab, interval 1, probability 0, space 0, times 0 [ 53.580489][ T6425] CPU: 2 UID: 0 PID: 6425 Comm: syz.1.157 Not tainted syzkaller #0 PREEMPT(full) [ 53.580503][ T6425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.580510][ T6425] Call Trace: [ 53.580514][ T6425] [ 53.580518][ T6425] dump_stack_lvl+0x100/0x190 [ 53.580541][ T6425] should_fail_ex.cold+0x5/0xa [ 53.580559][ T6425] should_failslab+0xc2/0x120 [ 53.580573][ T6425] __kmalloc_cache_noprof+0x91/0x6d0 [ 53.580589][ T6425] ? fw_change+0x75d/0xfc0 [ 53.580603][ T6425] fw_change+0x75d/0xfc0 [ 53.580617][ T6425] ? __pfx_fw_change+0x10/0x10 [ 53.580635][ T6425] ? __pfx_fw_change+0x10/0x10 [ 53.580646][ T6425] tc_new_tfilter+0x9e2/0x24e0 [ 53.580679][ T6425] ? avc_has_perm_noaudit+0x11e/0x470 [ 53.580695][ T6425] ? __pfx_tc_new_tfilter+0x10/0x10 [ 53.580712][ T6425] ? __lock_acquire+0x5c0/0x1f40 [ 53.580734][ T6425] ? lock_acquire+0x1d1/0x380 [ 53.580750][ T6425] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 53.580773][ T6425] ? find_held_lock+0x2b/0x80 [ 53.580786][ T6425] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 53.580802][ T6425] ? __pfx_tc_new_tfilter+0x10/0x10 [ 53.580815][ T6425] rtnetlink_rcv_msg+0x95e/0xe90 [ 53.580832][ T6425] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 53.580854][ T6425] netlink_rcv_skb+0x159/0x420 [ 53.580868][ T6425] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 53.580884][ T6425] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 53.580897][ T6425] ? __asan_memcpy+0x3c/0x60 [ 53.580918][ T6425] ? netlink_deliver_tap+0x1ae/0xb50 [ 53.580934][ T6425] netlink_unicast+0x668/0x950 [ 53.580949][ T6425] ? __pfx_netlink_unicast+0x10/0x10 [ 53.580967][ T6425] netlink_sendmsg+0x9ac/0x10c0 [ 53.580983][ T6425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.581000][ T6425] ? selinux_socket_sendmsg+0x198/0x2f0 [ 53.581018][ T6425] ? ____sys_sendmsg+0xa99/0xc30 [ 53.581033][ T6425] ____sys_sendmsg+0xa99/0xc30 [ 53.581048][ T6425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.581064][ T6425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.581083][ T6425] ? lock_acquire+0x1d1/0x380 [ 53.581098][ T6425] ? get_pid_task+0x2a/0x250 [ 53.581110][ T6425] ___sys_sendmsg+0x190/0x1e0 [ 53.581128][ T6425] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.581145][ T6425] ? get_pid_task+0x106/0x250 [ 53.581160][ T6425] ? find_held_lock+0x2b/0x80 [ 53.581181][ T6425] __sys_sendmsg+0x160/0x210 [ 53.581194][ T6425] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.581215][ T6425] do_syscall_64+0x123/0x790 [ 53.581228][ T6425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.581241][ T6425] RIP: 0033:0x7eff9cd9fb19 [ 53.581250][ T6425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.581261][ T6425] RSP: 002b:00007eff9dc7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.581273][ T6425] RAX: ffffffffffffffda RBX: 00007eff9d025fa0 RCX: 00007eff9cd9fb19 [ 53.581280][ T6425] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 53.581286][ T6425] RBP: 00007eff9dc7f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.581297][ T6425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.581303][ T6425] R13: 00007eff9d026038 R14: 00007eff9d025fa0 R15: 00007fff040629e8 [ 53.581318][ T6425] [ 53.736667][ T6435] batman_adv: batadv0: Adding interface: syz_tun [ 53.736679][ T6435] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.736694][ T6435] batman_adv: batadv0: Interface activated: syz_tun [ 53.737951][ T6435] FAULT_INJECTION: forcing a failure. [ 53.737951][ T6435] name failslab, interval 1, probability 0, space 0, times 0 [ 53.737968][ T6435] CPU: 2 UID: 0 PID: 6435 Comm: syz.1.161 Not tainted syzkaller #0 PREEMPT(full) [ 53.737981][ T6435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.737988][ T6435] Call Trace: [ 53.737992][ T6435] [ 53.737996][ T6435] dump_stack_lvl+0x100/0x190 [ 53.738019][ T6435] should_fail_ex.cold+0x5/0xa [ 53.738038][ T6435] should_failslab+0xc2/0x120 [ 53.738051][ T6435] __kmalloc_cache_noprof+0x91/0x6d0 [ 53.738067][ T6435] ? batadv_orig_ifinfo_new+0x94/0x420 [ 53.738088][ T6435] batadv_orig_ifinfo_new+0x94/0x420 [ 53.738108][ T6435] batadv_iv_ogm_process_per_outif+0x274/0x3980 [ 53.738135][ T6435] ? lock_acquire+0x1d1/0x380 [ 53.738151][ T6435] ? batadv_iv_ogm_receive+0x1060/0x1ae0 [ 53.738162][ T6435] ? __pfx_batadv_iv_ogm_process_per_outif+0x10/0x10 [ 53.738186][ T6435] batadv_iv_ogm_receive+0x129e/0x1ae0 [ 53.738203][ T6435] ? __pfx_batadv_iv_ogm_receive+0x10/0x10 [ 53.738224][ T6435] ? __pfx___skb_flow_dissect+0x10/0x10 [ 53.738245][ T6435] batadv_batman_skb_recv+0x5d7/0x850 [ 53.738258][ T6435] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 53.738274][ T6435] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 53.738287][ T6435] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 53.738317][ T6435] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 53.738330][ T6435] ? lock_acquire+0x1d1/0x380 [ 53.738350][ T6435] __netif_receive_skb+0x1f/0x120 [ 53.738361][ T6435] netif_receive_skb+0x139/0x7d0 [ 53.738373][ T6435] ? __pfx_netif_receive_skb+0x10/0x10 [ 53.738389][ T6435] tun_rx_batched.isra.0+0x3f6/0x750 [ 53.738415][ T6435] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 53.738433][ T6435] ? tun_get_user+0x1dcd/0x3ee0 [ 53.738451][ T6435] tun_get_user+0x1f62/0x3ee0 [ 53.738472][ T6435] ? __lock_acquire+0x5c0/0x1f40 [ 53.738488][ T6435] ? __pfx_tun_get_user+0x10/0x10 [ 53.738504][ T6435] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 53.738527][ T6435] ? find_held_lock+0x2b/0x80 [ 53.738539][ T6435] ? tun_get+0x191/0x370 [ 53.738552][ T6435] ? tun_get+0x191/0x370 [ 53.738569][ T6435] tun_chr_write_iter+0xdc/0x200 [ 53.738586][ T6435] vfs_write+0x6af/0x1050 [ 53.738607][ T6435] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 53.738625][ T6435] ? __pfx_vfs_write+0x10/0x10 [ 53.738634][ T6435] ? find_held_lock+0x2b/0x80 [ 53.738655][ T6435] ksys_write+0x12a/0x250 [ 53.738665][ T6435] ? __pfx_ksys_write+0x10/0x10 [ 53.738680][ T6435] do_syscall_64+0x123/0x790 [ 53.738693][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.738705][ T6435] RIP: 0033:0x7eff9cd6034e [ 53.738715][ T6435] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 53.738726][ T6435] RSP: 002b:00007eff9dc7efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 53.738738][ T6435] RAX: ffffffffffffffda RBX: 00007eff9dc7f6c0 RCX: 00007eff9cd6034e [ 53.738765][ T6435] RDX: 000000000000003a RSI: 00002000000006c0 RDI: 00000000000000c8 [ 53.738772][ T6435] RBP: 00007eff9dc7f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.738778][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.738785][ T6435] R13: 00007eff9d026038 R14: 00007eff9d025fa0 R15: 00007fff040629e8 [ 53.738812][ T6435] [ 53.739514][ T6435] ------------[ cut here ]------------ [ 53.739521][ T6435] !orig_ifinfo [ 53.739525][ T6435] WARNING: net/batman-adv/bat_iv_ogm.c:1413 at batadv_iv_ogm_process_per_outif+0x2d62/0x3980, CPU#2: syz.1.161/6435 [ 53.860515][ T6435] Modules linked in: [ 53.861952][ T6435] CPU: 2 UID: 0 PID: 6435 Comm: syz.1.161 Not tainted syzkaller #0 PREEMPT(full) [ 53.864864][ T6435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.868019][ T6435] RIP: 0010:batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 53.870222][ T6435] Code: 48 83 7c 24 68 00 48 c7 44 24 78 00 00 00 00 0f 85 7d da ff ff e9 df da ff ff e8 49 63 d3 f6 e9 ae d3 ff ff e8 3f 82 59 f6 90 <0f> 0b 90 49 8d 9d 20 02 00 00 be 04 00 00 00 bd ff ff ff ff 48 89 [ 53.876259][ T6435] RSP: 0018:ffffc90005d6f470 EFLAGS: 00010293 [ 53.878171][ T6435] RAX: 0000000000000000 RBX: 0000000001000000 RCX: 0000000000000200 [ 53.880682][ T6435] RDX: ffff888026b20000 RSI: ffffffff8bb4c3a1 RDI: ffffffff8c835380 [ 53.883140][ T6435] RBP: ffff88802c8a5a40 R08: 0000000000000001 R09: 0000000000000000 [ 53.885642][ T6435] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 53.888130][ T6435] R13: ffff888035c7c000 R14: ffff88803f610f00 R15: ffff8880377b4000 [ 53.890589][ T6435] FS: 00007eff9dc7f6c0(0000) GS:ffff8880d467d000(0000) knlGS:0000000000000000 [ 53.893338][ T6435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.895477][ T6435] CR2: 0000200000000200 CR3: 0000000034960000 CR4: 0000000000352ef0 [ 53.897964][ T6435] Call Trace: [ 53.899034][ T6435] [ 53.899988][ T6435] ? lock_acquire+0x1d1/0x380 [ 53.901414][ T6435] ? batadv_iv_ogm_receive+0x1060/0x1ae0 [ 53.903238][ T6435] ? __pfx_batadv_iv_ogm_process_per_outif+0x10/0x10 [ 53.905404][ T6435] batadv_iv_ogm_receive+0x129e/0x1ae0 [ 53.907138][ T6435] ? __pfx_batadv_iv_ogm_receive+0x10/0x10 [ 53.908990][ T6435] ? __pfx___skb_flow_dissect+0x10/0x10 [ 53.910734][ T6435] batadv_batman_skb_recv+0x5d7/0x850 [ 53.912433][ T6435] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 53.914360][ T6435] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 53.916219][ T6435] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 53.918084][ T6435] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 53.920085][ T6435] ? lock_acquire+0x1d1/0x380 [ 53.921578][ T6435] __netif_receive_skb+0x1f/0x120 [ 53.923192][ T6435] netif_receive_skb+0x139/0x7d0 [ 53.924820][ T6435] ? __pfx_netif_receive_skb+0x10/0x10 [ 53.926546][ T6435] tun_rx_batched.isra.0+0x3f6/0x750 [ 53.928294][ T6435] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 53.930138][ T6435] ? tun_get_user+0x1dcd/0x3ee0 [ 53.931679][ T6435] tun_get_user+0x1f62/0x3ee0 [ 53.933200][ T6435] ? __lock_acquire+0x5c0/0x1f40 [ 53.934829][ T6435] ? __pfx_tun_get_user+0x10/0x10 [ 53.936415][ T6435] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 53.938147][ T6435] ? find_held_lock+0x2b/0x80 [ 53.939652][ T6435] ? tun_get+0x191/0x370 [ 53.940999][ T6435] ? tun_get+0x191/0x370 [ 53.942341][ T6435] tun_chr_write_iter+0xdc/0x200 [ 53.943942][ T6435] vfs_write+0x6af/0x1050 [ 53.945364][ T6435] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 53.947117][ T6435] ? __pfx_vfs_write+0x10/0x10 [ 53.948635][ T6435] ? find_held_lock+0x2b/0x80 [ 53.950126][ T6435] ksys_write+0x12a/0x250 [ 53.951501][ T6435] ? __pfx_ksys_write+0x10/0x10 [ 53.953030][ T6435] do_syscall_64+0x123/0x790 [ 53.954572][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.956429][ T6435] RIP: 0033:0x7eff9cd6034e [ 53.957842][ T6435] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 53.963785][ T6435] RSP: 002b:00007eff9dc7efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 53.966582][ T6435] RAX: ffffffffffffffda RBX: 00007eff9dc7f6c0 RCX: 00007eff9cd6034e [ 53.969050][ T6435] RDX: 000000000000003a RSI: 00002000000006c0 RDI: 00000000000000c8 [ 53.971508][ T6435] RBP: 00007eff9dc7f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.974177][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.976690][ T6435] R13: 00007eff9d026038 R14: 00007eff9d025fa0 R15: 00007fff040629e8 [ 53.979163][ T6435] [ 53.980151][ T6435] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 53.982405][ T6435] CPU: 2 UID: 0 PID: 6435 Comm: syz.1.161 Not tainted syzkaller #0 PREEMPT(full) [ 53.985298][ T6435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.988427][ T6435] Call Trace: [ 53.989484][ T6435] [ 53.990418][ T6435] dump_stack_lvl+0x100/0x190 [ 53.991903][ T6435] vpanic+0x2dc/0x6f8 [ 53.993159][ T6435] panic+0xd1/0xe0 [ 53.994342][ T6435] ? __pfx_panic+0x10/0x10 [ 53.995750][ T6435] check_panic_on_warn.cold+0x19/0x34 [ 53.997422][ T6435] ? batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 53.999454][ T6435] __warn.cold+0x191/0x321 [ 54.000857][ T6435] __report_bug+0x30f/0x440 [ 54.002282][ T6435] ? batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 54.004334][ T6435] ? __pfx___report_bug+0x10/0x10 [ 54.005906][ T6435] ? dump_stack_lvl+0x176/0x190 [ 54.007451][ T6435] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 54.009364][ T6435] ? batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 54.011392][ T6435] report_bug+0xb3/0x220 [ 54.012721][ T6435] ? batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 54.014795][ T6435] handle_bug+0x16a/0x2a0 [ 54.016147][ T6435] exc_invalid_op+0x17/0x50 [ 54.017577][ T6435] asm_exc_invalid_op+0x1a/0x20 [ 54.019112][ T6435] RIP: 0010:batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 54.021300][ T6435] Code: 48 83 7c 24 68 00 48 c7 44 24 78 00 00 00 00 0f 85 7d da ff ff e9 df da ff ff e8 49 63 d3 f6 e9 ae d3 ff ff e8 3f 82 59 f6 90 <0f> 0b 90 49 8d 9d 20 02 00 00 be 04 00 00 00 bd ff ff ff ff 48 89 [ 54.027227][ T6435] RSP: 0018:ffffc90005d6f470 EFLAGS: 00010293 [ 54.029139][ T6435] RAX: 0000000000000000 RBX: 0000000001000000 RCX: 0000000000000200 [ 54.031588][ T6435] RDX: ffff888026b20000 RSI: ffffffff8bb4c3a1 RDI: ffffffff8c835380 [ 54.034035][ T6435] RBP: ffff88802c8a5a40 R08: 0000000000000001 R09: 0000000000000000 [ 54.036487][ T6435] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 54.038942][ T6435] R13: ffff888035c7c000 R14: ffff88803f610f00 R15: ffff8880377b4000 [ 54.041379][ T6435] ? batadv_iv_ogm_process_per_outif+0x2d61/0x3980 [ 54.043411][ T6435] ? lock_acquire+0x1d1/0x380 [ 54.044906][ T6435] ? batadv_iv_ogm_receive+0x1060/0x1ae0 [ 54.046685][ T6435] ? __pfx_batadv_iv_ogm_process_per_outif+0x10/0x10 [ 54.048793][ T6435] batadv_iv_ogm_receive+0x129e/0x1ae0 [ 54.050491][ T6435] ? __pfx_batadv_iv_ogm_receive+0x10/0x10 [ 54.052314][ T6435] ? __pfx___skb_flow_dissect+0x10/0x10 [ 54.054088][ T6435] batadv_batman_skb_recv+0x5d7/0x850 [ 54.055772][ T6435] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 54.057637][ T6435] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 54.059489][ T6435] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 54.061330][ T6435] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 54.063333][ T6435] ? lock_acquire+0x1d1/0x380 [ 54.064844][ T6435] __netif_receive_skb+0x1f/0x120 [ 54.066434][ T6435] netif_receive_skb+0x139/0x7d0 [ 54.067995][ T6435] ? __pfx_netif_receive_skb+0x10/0x10 [ 54.069679][ T6435] tun_rx_batched.isra.0+0x3f6/0x750 [ 54.071354][ T6435] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 54.073155][ T6435] ? tun_get_user+0x1dcd/0x3ee0 [ 54.074704][ T6435] tun_get_user+0x1f62/0x3ee0 [ 54.076187][ T6435] ? __lock_acquire+0x5c0/0x1f40 [ 54.077744][ T6435] ? __pfx_tun_get_user+0x10/0x10 [ 54.079363][ T6435] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 54.081062][ T6435] ? find_held_lock+0x2b/0x80 [ 54.082527][ T6435] ? tun_get+0x191/0x370 [ 54.083891][ T6435] ? tun_get+0x191/0x370 [ 54.085222][ T6435] tun_chr_write_iter+0xdc/0x200 [ 54.086789][ T6435] vfs_write+0x6af/0x1050 [ 54.088195][ T6435] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 54.089917][ T6435] ? __pfx_vfs_write+0x10/0x10 [ 54.091426][ T6435] ? find_held_lock+0x2b/0x80 [ 54.092889][ T6435] ksys_write+0x12a/0x250 [ 54.094228][ T6435] ? __pfx_ksys_write+0x10/0x10 [ 54.095750][ T6435] do_syscall_64+0x123/0x790 [ 54.097184][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.099078][ T6435] RIP: 0033:0x7eff9cd6034e [ 54.100471][ T6435] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 54.106373][ T6435] RSP: 002b:00007eff9dc7efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.108988][ T6435] RAX: ffffffffffffffda RBX: 00007eff9dc7f6c0 RCX: 00007eff9cd6034e [ 54.111423][ T6435] RDX: 000000000000003a RSI: 00002000000006c0 RDI: 00000000000000c8 [ 54.113860][ T6435] RBP: 00007eff9dc7f090 R08: 0000000000000000 R09: 0000000000000000 [ 54.116286][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.118732][ T6435] R13: 00007eff9d026038 R14: 00007eff9d025fa0 R15: 00007fff040629e8 [ 54.121232][ T6435] [ 54.122784][ T6435] Kernel Offset: disabled [ 54.124145][ T6435] Rebooting in 86400 seconds..