last executing test programs: 14.70331979s ago: executing program 1 (id=75): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r0) 13.613510537s ago: executing program 0 (id=77): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x29, &(0x7f00000005c0)=@string={0x29, 0x3, "ea118dd0c7fdd205b236a03e7b3dc312fa6428f354cfce6658d255da59c83a5a0966a3dbc5be40"}}]}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 12.330890281s ago: executing program 1 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff47ffffffffea000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x9, 0x0, 0x0, 0x7ffffff, &(0x7f0000000200), 0x10}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003) flock(r4, 0x1) 12.162049705s ago: executing program 4 (id=80): sendto(0xffffffffffffffff, 0x0, 0x0, 0x44c04, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 11.194103588s ago: executing program 1 (id=81): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000001200050928bd7000fedbdf2521090b004e224e27fcffffff23090000000000000600000001040000040000000300000002000000", @ANYRES32=0x0, @ANYBLOB="000001000520000031000000090000001900"], 0x68}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) 9.53960839s ago: executing program 0 (id=83): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e01020301"], 0x0) 8.666144565s ago: executing program 2 (id=86): openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x529c2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000240)={{0x101, @multicast2, 0x0, 0x4, 'fo\x00', 0x6, 0x1, 0x21}, {@loopback, 0xfffe, 0x2000, 0x7, 0x0, 0x3}}, 0x44) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000040)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) close(0x3) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344], 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000200)={&(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000084}, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000140)={0x7, 0x706e, 0xc, 0x3, 0x1a, "c326ea89b739c131"}) 8.206707649s ago: executing program 1 (id=88): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) unshare(0x6a040000) 8.188993734s ago: executing program 2 (id=89): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = syz_pidfd_open(r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x3, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x890}, 0x2000014) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000002000010000000000fbdbdf250a408000000000031a00030014000200fc0200000000000000000800000000001400010020010000"], 0x44}}, 0x40000) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000240)=@multiplanar_userptr={0x1, 0x1, 0x4, 0x4, 0x21, {}, {0x1, 0xc, 0xb, 0x1, 0x9, 0x4, "fe3a8c75"}, 0x2b1, 0x2, {0x0}, 0x8}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 6.347009746s ago: executing program 2 (id=90): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f00000000c0)="510003000000", 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x570, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x288, 0x2c0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) 6.215945982s ago: executing program 1 (id=91): syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x9}, {0x2, [{0xc9, 0xb918}, {0xc8, 0xff}]}}}, 0xc) 6.112437654s ago: executing program 3 (id=92): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'sed\x00', 0x10, 0x81, 0x40000077}, {@rand_addr=0x64010100, 0x4e21, 0x0, 0x6, 0x1002, 0x8}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 s', 0x35) 5.353309567s ago: executing program 4 (id=93): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYRES32=0x1000, @ANYRES32=0x0, @ANYBLOB="5002100090"], 0x0) 5.296159856s ago: executing program 0 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x0, 0x5002) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r4}, @ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0x2}]}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) getpgid(0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f00000000c0)=ANY=[@ANYRES16=r3], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5.209705337s ago: executing program 4 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 5.16823819s ago: executing program 2 (id=96): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f00000000c0)="510003000000", 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x570, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x288, 0x2c0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) 4.257388154s ago: executing program 0 (id=97): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c90010000c000500174208000000000200"], 0x15) 3.528526549s ago: executing program 4 (id=98): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00000d2000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e7b000/0x4000)=nil, &(0x7f00001a5000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) close(0x3) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x3b6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x6145, 0x7721, 0x17, 0x0, 0x0) 3.181009648s ago: executing program 3 (id=99): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x20000800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x5c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}]}]}], {0x14}}, 0x84}}, 0x24040884) 3.066934134s ago: executing program 2 (id=100): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x39) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x0, 0xc000, 0x4, r2, r3, 0x1, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xffffffffffffffff, {0x4, 0x3, 0x3, 0x4000000000804, 0xfffffffd, 0x6, {0x0, 0x0, 0x7, 0x120000000000, 0x2000000000000db6, 0x85, 0x200, 0x6, 0x200c, 0xa000, 0xe44, r2, r3, 0x40fe, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0xa, 0x6}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) r4 = syz_ublk_setup_io_uring(0x19, &(0x7f0000000040)={0x0, 0x2d72, 0x0, 0xfffffffd, 0x1ef}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x200007, 0x255}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2000, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8801, 0x2, 0x134}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x630, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) 3.006019312s ago: executing program 3 (id=101): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB='&'], 0x10) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) ftruncate(r2, 0x1000000) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x0) r5 = socket(0x1, 0x2, 0x0) sendmmsg$unix(r5, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 2.783681271s ago: executing program 0 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'sed\x00', 0x10, 0x81, 0x40000077}, {@rand_addr=0x64010100, 0x4e21, 0x0, 0x6, 0x1002, 0x8}}, 0x44) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") write(r4, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 s', 0x35) 2.713662532s ago: executing program 3 (id=103): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f00000000c0)="510003000000", 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x570, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x288, 0x2c0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) 1.62061532s ago: executing program 3 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x0, 0x5002) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r4}, @ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0x2}]}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) getpgid(0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f00000000c0)=ANY=[@ANYRES16=r3], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 1.356914177s ago: executing program 2 (id=105): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') (async) syz_emit_vhci(0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="00000080fe534d42400001000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000100000001000000010000000000000000000000000000000000000008000000000000000", 0x84, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c00100010001000000000000000100000000000000000000000000000001000000000000000000000000000000000000000000000009000000480030004e544c4d535350000200000000000000000000000002082000"/124, 0x7c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002200)="00000048fe534d424000010000000000010001000100000000000000020000000000000000000000000000000100000000000000000000000000000000000000000000000900000048000000", 0x4c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8c0) recvmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/198, 0xc6}, 0x5}], 0x1, 0x40010082, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) close(r1) 1.062835941s ago: executing program 1 (id=106): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xe8) socket(0x10, 0x3, 0x0) r4 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000400)={{0x2, r3, 0x0, r4, 0x0, 0x2, 0x409}, 0x4, 0x7, 0x800, 0x4, r0, r0, 0xf}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x14, 0x1e, 0x109, 0x70bd26, 0x25dfdc01}, 0x14}, 0x1, 0x2b1e}, 0x8058) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, r6, 0x0, 0x0}) 471.460779ms ago: executing program 0 (id=107): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) prlimit64(0x0, 0x3, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000019380)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 468.809063ms ago: executing program 4 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 156.882746ms ago: executing program 4 (id=109): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f00000000c0)="510003000000", 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x570, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x288, 0x2c0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) 0s ago: executing program 3 (id=110): openat$rfkill(0xffffffffffffff9c, 0x0, 0x121c02, 0x0) syz_io_uring_setup(0x3494, &(0x7f00000004c0)={0x0, 0xe889, 0x20000, 0x0, 0x161}, &(0x7f0000000380), 0x0, &(0x7f0000000400)) ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, &(0x7f0000000340)={0x30a32c0, 0x1, @ofdm={0x1, 0x13, 0x15, 0x4, 0x4, 0x2, 0x4}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_io_uring_setup(0x208e, &(0x7f0000000200)={0x0, 0xcb14, 0x10, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket(0x2b, 0x3, 0x1) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x87, 0x0, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f0000000100), 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20242e0000002e068307b530f0184b4f32f2d180569a374066cf8a507c201accebfae0b96488538fb103d392c712478f4607b7063ab7db2fdc96fa"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. [ 63.688988][ T31] audit: type=1400 audit(1790163147.202:129): avc: denied { mounton } for pid=5585 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.690215][ T31] audit: type=1400 audit(1790163147.202:130): avc: denied { mount } for pid=5585 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.692024][ T5585] cgroup: Unknown subsys name 'net' [ 63.693236][ T31] audit: type=1400 audit(1790163147.202:131): avc: denied { unmount } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.869313][ T5585] cgroup: Unknown subsys name 'cpuset' [ 63.871464][ T5585] cgroup: Unknown subsys name 'rlimit' [ 63.985585][ T31] audit: type=1400 audit(1790163147.492:132): avc: denied { setattr } for pid=5585 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.985957][ T31] audit: type=1400 audit(1790163147.492:133): avc: denied { create } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.986148][ T31] audit: type=1400 audit(1790163147.492:134): avc: denied { write } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.987972][ T31] audit: type=1400 audit(1790163147.502:135): avc: denied { read } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.998828][ T31] audit: type=1400 audit(1790163147.512:136): avc: denied { mounton } for pid=5585 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 63.999266][ T31] audit: type=1400 audit(1790163147.512:137): avc: denied { mount } for pid=5585 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 64.135935][ T5587] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 64.135940][ T31] audit: type=1400 audit(1790163147.642:138): avc: denied { mac_admin } for pid=5587 comm="mkswap" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 65.138905][ T5585] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.998939][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.998977][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.125630][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 69.125648][ T31] audit: type=1400 audit(1790163152.632:144): avc: denied { create } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.125694][ T31] audit: type=1400 audit(1790163152.632:145): avc: denied { read write } for pid=5596 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 69.128796][ T31] audit: type=1400 audit(1790163152.642:146): avc: denied { open } for pid=5596 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 69.191977][ T31] audit: type=1400 audit(1790163152.702:147): avc: denied { ioctl } for pid=5599 comm="syz-executor" path="socket:[4577]" dev="sockfs" ino=4577 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.240177][ T5601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.241611][ T5601] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.245174][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.248050][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.255425][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.255989][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.256390][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.257059][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.258239][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.259404][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.259795][ T5601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.260084][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.260468][ T5601] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.261054][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.261481][ T5601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.263446][ T5601] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.263670][ T5601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.263863][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.278594][ T31] audit: type=1400 audit(1790163152.782:148): avc: denied { read } for pid=5599 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 69.278756][ T5601] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.289831][ T31] audit: type=1400 audit(1790163152.792:149): avc: denied { open } for pid=5596 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 69.290325][ T4919] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.301182][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.302748][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.303259][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.304753][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.305660][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.319424][ T31] audit: type=1400 audit(1790163152.832:150): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 69.350403][ T31] audit: type=1400 audit(1790163152.862:151): avc: denied { module_request } for pid=5609 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 69.482289][ T31] audit: type=1400 audit(1790163152.992:152): avc: denied { sys_module } for pid=5609 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.745693][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.745765][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.745851][ T5609] bridge_slave_0: entered allmulticast mode [ 70.754455][ T5609] bridge_slave_0: entered promiscuous mode [ 70.791661][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.791733][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.791904][ T5609] bridge_slave_1: entered allmulticast mode [ 70.792593][ T5609] bridge_slave_1: entered promiscuous mode [ 70.817937][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.818011][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.818093][ T5600] bridge_slave_0: entered allmulticast mode [ 70.819237][ T5600] bridge_slave_0: entered promiscuous mode [ 70.870257][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.870358][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.870421][ T5600] bridge_slave_1: entered allmulticast mode [ 70.871151][ T5600] bridge_slave_1: entered promiscuous mode [ 70.932678][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.969963][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.970118][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.970214][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.970276][ T5613] bridge_slave_0: entered allmulticast mode [ 70.971041][ T5613] bridge_slave_0: entered promiscuous mode [ 70.980034][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.982641][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.982756][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.982819][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.982903][ T5599] bridge_slave_0: entered allmulticast mode [ 70.984186][ T5599] bridge_slave_0: entered promiscuous mode [ 70.986124][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.987292][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.987387][ T5596] bridge_slave_0: entered allmulticast mode [ 70.988901][ T5596] bridge_slave_0: entered promiscuous mode [ 70.990960][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.991054][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.991732][ T5596] bridge_slave_1: entered allmulticast mode [ 70.992860][ T5596] bridge_slave_1: entered promiscuous mode [ 71.024128][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.024197][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.024276][ T5613] bridge_slave_1: entered allmulticast mode [ 71.026670][ T5613] bridge_slave_1: entered promiscuous mode [ 71.054088][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.054317][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.054592][ T5599] bridge_slave_1: entered allmulticast mode [ 71.055855][ T5599] bridge_slave_1: entered promiscuous mode [ 71.069238][ T5609] team0: Port device team_slave_0 added [ 71.083488][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.116623][ T5609] team0: Port device team_slave_1 added [ 71.128682][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.140621][ T5600] team0: Port device team_slave_0 added [ 71.162716][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.168109][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.173296][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.197439][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.197454][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.197472][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.199881][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.199894][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.199912][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.225393][ T5600] team0: Port device team_slave_1 added [ 71.228742][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.242225][ T5613] team0: Port device team_slave_0 added [ 71.277085][ T5601] Bluetooth: hci3: command tx timeout [ 71.295247][ T5613] team0: Port device team_slave_1 added [ 71.328830][ T5596] team0: Port device team_slave_0 added [ 71.331478][ T5596] team0: Port device team_slave_1 added [ 71.332186][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.332196][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.332214][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.333775][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.333784][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.333802][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.356527][ T52] Bluetooth: hci2: command tx timeout [ 71.356761][ T52] Bluetooth: hci0: command tx timeout [ 71.356825][ T52] Bluetooth: hci1: command tx timeout [ 71.356978][ T5601] Bluetooth: hci4: command tx timeout [ 71.394391][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.394406][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.394424][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.399161][ T5599] team0: Port device team_slave_0 added [ 71.405311][ T5609] hsr_slave_0: entered promiscuous mode [ 71.406049][ T5609] hsr_slave_1: entered promiscuous mode [ 71.417865][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.417880][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.417898][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.430606][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.430620][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.430638][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.432649][ T5599] team0: Port device team_slave_1 added [ 71.434595][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.434613][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.434631][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.667203][ T5600] hsr_slave_0: entered promiscuous mode [ 71.667965][ T5600] hsr_slave_1: entered promiscuous mode [ 71.668257][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 71.668316][ T5600] Cannot create hsr debugfs directory [ 71.692327][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.692342][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.692359][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.693635][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.693645][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.693662][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.802651][ T5613] hsr_slave_0: entered promiscuous mode [ 71.803048][ T5613] hsr_slave_1: entered promiscuous mode [ 71.803402][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 71.803419][ T5613] Cannot create hsr debugfs directory [ 71.812454][ T5596] hsr_slave_0: entered promiscuous mode [ 71.812969][ T5596] hsr_slave_1: entered promiscuous mode [ 71.813463][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 71.813477][ T5596] Cannot create hsr debugfs directory [ 71.872198][ T5599] hsr_slave_0: entered promiscuous mode [ 71.872658][ T5599] hsr_slave_1: entered promiscuous mode [ 71.872979][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 71.872996][ T5599] Cannot create hsr debugfs directory [ 72.195208][ T5609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.205083][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.205726][ T5609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.217977][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.221561][ T5609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.231691][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.232353][ T5609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.244372][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.307392][ T5600] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.309840][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.310353][ T5600] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.312273][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.315404][ T5600] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.326040][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.327041][ T5600] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.341921][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.428687][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.431443][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.434899][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.443504][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.444124][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.453362][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.455456][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.460669][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.562248][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.565171][ T5599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.570916][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.596341][ T5599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.599486][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.600148][ T5599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.602281][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.627982][ T5599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.639995][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.670556][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.699414][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.699479][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.703902][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.703975][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.708307][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.785934][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.809811][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.812724][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.813310][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.814960][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.829663][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.829740][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.840497][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.854758][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.867552][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.869056][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.882919][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.892855][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.892931][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.942319][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.974029][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.974110][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.010075][ T31] audit: type=1400 audit(1790163156.522:153): avc: denied { sys_module } for pid=5609 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.013210][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.013294][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.041456][ T5596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.041480][ T5596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.103196][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.148814][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.200076][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.200159][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.248977][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.249066][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.356698][ T5601] Bluetooth: hci3: command tx timeout [ 73.392486][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.394230][ T5599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.436581][ T4919] Bluetooth: hci1: command tx timeout [ 73.436610][ T4919] Bluetooth: hci0: command tx timeout [ 73.436627][ T4919] Bluetooth: hci2: command tx timeout [ 73.436748][ T5601] Bluetooth: hci4: command tx timeout [ 73.480839][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.522288][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.522377][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.529961][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.530076][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.793359][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.929809][ T5609] veth0_vlan: entered promiscuous mode [ 73.971140][ T5609] veth1_vlan: entered promiscuous mode [ 74.095028][ T5609] veth0_macvtap: entered promiscuous mode [ 74.101761][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.118915][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.123206][ T5609] veth1_macvtap: entered promiscuous mode [ 74.181035][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.209718][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.283833][ T5596] veth0_vlan: entered promiscuous mode [ 74.323674][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.342273][ T5596] veth1_vlan: entered promiscuous mode [ 74.386504][ T316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.386625][ T316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.386656][ T316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.386687][ T316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.510847][ T5596] veth0_macvtap: entered promiscuous mode [ 74.512648][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.512669][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.553136][ T5599] veth0_vlan: entered promiscuous mode [ 74.561833][ T5596] veth1_macvtap: entered promiscuous mode [ 74.605263][ T5599] veth1_vlan: entered promiscuous mode [ 74.613797][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.613816][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.632789][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.646106][ T31] audit: type=1400 audit(1790163158.162:154): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.iccY3c/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 74.647292][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.666392][ T5600] veth0_vlan: entered promiscuous mode [ 74.672632][ T5600] veth1_vlan: entered promiscuous mode [ 74.698583][ T31] audit: type=1400 audit(1790163158.212:155): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.701835][ T31] audit: type=1400 audit(1790163158.212:156): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.iccY3c/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.708024][ T31] audit: type=1400 audit(1790163158.222:157): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.710805][ T31] audit: type=1400 audit(1790163158.222:158): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.iccY3c/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.712184][ T31] audit: type=1400 audit(1790163158.222:159): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.iccY3c/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.716658][ T31] audit: type=1400 audit(1790163158.222:160): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.721485][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.732777][ T31] audit: type=1400 audit(1790163158.242:161): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 74.745069][ T31] audit: type=1400 audit(1790163158.242:162): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="gadgetfs" ino=7776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 74.753041][ T31] audit: type=1400 audit(1790163158.242:163): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 74.789236][ T3287] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.823675][ T5599] veth0_macvtap: entered promiscuous mode [ 74.856538][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.857514][ T5600] veth0_macvtap: entered promiscuous mode [ 74.859370][ T5599] veth1_macvtap: entered promiscuous mode [ 74.868189][ T5609] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.892183][ T5600] veth1_macvtap: entered promiscuous mode [ 74.909610][ T5613] veth0_vlan: entered promiscuous mode [ 74.949671][ T1008] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.951245][ T3287] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.998774][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.014717][ T5613] veth1_vlan: entered promiscuous mode [ 75.032748][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.040551][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.063097][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.091761][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.091782][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.137338][ T1008] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.137475][ T1008] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.137586][ T1008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.137695][ T1008] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.227307][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.229573][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.229630][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.229674][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.230120][ T5613] veth0_macvtap: entered promiscuous mode [ 75.286351][ T5613] veth1_macvtap: entered promiscuous mode [ 75.322326][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.369493][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.369517][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.394627][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.394645][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.438026][ T5601] Bluetooth: hci3: command tx timeout [ 75.454431][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.572063][ T52] Bluetooth: hci2: command tx timeout [ 75.572100][ T52] Bluetooth: hci0: command tx timeout [ 75.572119][ T52] Bluetooth: hci1: command tx timeout [ 75.572237][ T5601] Bluetooth: hci4: command tx timeout [ 75.655772][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.655789][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.656951][ T1008] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.656984][ T1008] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.657010][ T1008] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.356860][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.502748][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.502763][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.648108][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.648129][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.755427][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.755448][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.837975][ T1214] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.881250][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.881271][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.061610][ T1214] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 77.084005][ T1214] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.084099][ T1214] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 77.084125][ T1214] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 77.084162][ T1214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.376137][ T5809] netlink: 1076 bytes leftover after parsing attributes in process `syz.4.5'. [ 77.516808][ T5601] Bluetooth: hci3: command tx timeout [ 77.597099][ T5601] Bluetooth: hci4: command tx timeout [ 77.597131][ T5601] Bluetooth: hci1: command tx timeout [ 77.597149][ T5601] Bluetooth: hci0: command tx timeout [ 77.597167][ T5601] Bluetooth: hci2: command tx timeout [ 77.679399][ T1214] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 77.679419][ T1214] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 77.723948][ T1214] cxacru 2-1:1.0: probe with driver cxacru failed with error -71 [ 78.601327][ T1214] usb 2-1: USB disconnect, device number 2 [ 79.849403][ T5825] netlink: 992 bytes leftover after parsing attributes in process `syz.1.11'. [ 81.407338][ T9] cfg80211: failed to load regulatory.db [ 81.440755][ T5696] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.742536][ T31] kauditd_printk_skb: 42 callbacks suppressed [ 81.742570][ T31] audit: type=1400 audit(1790163165.242:205): avc: denied { setopt } for pid=5840 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.203977][ T5852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 82.776298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 82.918721][ T5696] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 82.974775][ T5696] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.974819][ T5696] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.974839][ T5696] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 82.974860][ T5696] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.974896][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.030790][ T5850] ======================================================= [ 83.030790][ T5850] WARNING: The mand mount option has been deprecated and [ 83.030790][ T5850] and is ignored by this kernel. Remove the mand [ 83.030790][ T5850] option from the mount to silence this warning. [ 83.030790][ T5850] ======================================================= [ 83.332390][ T5696] usb 3-1: USB disconnect, device number 2 [ 83.500294][ T31] audit: type=1400 audit(1790163167.012:206): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.569025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 84.926290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.886491][ T5873] syzkaller0: entered promiscuous mode [ 85.886513][ T5873] syzkaller0: entered allmulticast mode [ 85.910966][ T31] audit: type=1400 audit(1790163169.422:207): avc: denied { write } for pid=5871 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.789856][ T31] audit: type=1400 audit(1790163170.302:208): avc: denied { allowed } for pid=5882 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.790926][ T31] audit: type=1400 audit(1790163170.302:209): avc: denied { create } for pid=5882 comm="syz.3.25" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 86.843105][ T31] audit: type=1400 audit(1790163170.352:210): avc: denied { map } for pid=5882 comm="syz.3.25" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 86.846492][ T31] audit: type=1400 audit(1790163170.352:211): avc: denied { read write } for pid=5882 comm="syz.3.25" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.197239][ T31] audit: type=1400 audit(1790163171.702:212): avc: denied { create } for pid=5890 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.198161][ T31] audit: type=1400 audit(1790163171.712:213): avc: denied { write } for pid=5890 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.203257][ T31] audit: type=1400 audit(1790163171.712:214): avc: denied { nlmsg_write } for pid=5890 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.348121][ T5892] Failed to get privilege flags for destination (handle=0x2:0x0) [ 88.371617][ T31] audit: type=1400 audit(1790163171.882:215): avc: denied { create } for pid=5890 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.390730][ T5897] Failed to get privilege flags for destination (handle=0x2:0x0) [ 89.551692][ T31] audit: type=1400 audit(1790163173.062:216): avc: denied { create } for pid=5898 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 89.852583][ T5900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 90.046395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 90.411405][ T31] audit: type=1400 audit(1790163173.882:217): avc: denied { sqpoll } for pid=5898 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.046406][ T5697] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.516999][ T5697] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 91.518314][ T5697] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.518352][ T5697] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 91.518364][ T5697] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 91.518377][ T5697] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.518398][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.482855][ T5697] gud 3-1:1.0: probe with driver gud failed with error -121 [ 92.978221][ T5918] Failed to get privilege flags for destination (handle=0x2:0x0) [ 93.139310][ T5697] usb 3-1: USB disconnect, device number 3 [ 93.924264][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'. [ 93.927977][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 93.927996][ T31] audit: type=1400 audit(1790163177.432:219): avc: denied { write } for pid=5920 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.987306][ T5940] Bluetooth: MGMT ver 1.23 [ 96.995864][ T31] audit: type=1400 audit(1790163180.442:220): avc: denied { bind } for pid=5936 comm="syz.0.39" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.996028][ T31] audit: type=1400 audit(1790163180.442:221): avc: denied { name_bind } for pid=5936 comm="syz.0.39" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 96.996148][ T31] audit: type=1400 audit(1790163180.452:222): avc: denied { node_bind } for pid=5936 comm="syz.0.39" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 96.996372][ T31] audit: type=1400 audit(1790163180.472:223): avc: denied { setopt } for pid=5936 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.996491][ T31] audit: type=1400 audit(1790163180.472:224): avc: denied { shutdown } for pid=5936 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.996609][ T31] audit: type=1400 audit(1790163180.492:225): avc: denied { bind } for pid=5936 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.996714][ T31] audit: type=1400 audit(1790163180.492:226): avc: denied { write } for pid=5936 comm="syz.0.39" path="socket:[8758]" dev="sockfs" ino=8758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.488025][ T50] rpcbind: server 127.0.0.1 not responding, timed out [ 99.748600][ T31] audit: type=1400 audit(1790163183.262:227): avc: denied { bind } for pid=5950 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.792726][ T31] audit: type=1400 audit(1790163183.262:228): avc: denied { name_bind } for pid=5950 comm="syz.0.42" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 99.792827][ T31] audit: type=1400 audit(1790163183.262:229): avc: denied { node_bind } for pid=5950 comm="syz.0.42" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 99.792989][ T31] audit: type=1400 audit(1790163183.302:230): avc: denied { getopt } for pid=5950 comm="syz.0.42" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.821573][ T31] audit: type=1400 audit(1790163183.302:231): avc: denied { connect } for pid=5950 comm="syz.0.42" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.821732][ T31] audit: type=1400 audit(1790163183.302:232): avc: denied { name_connect } for pid=5950 comm="syz.0.42" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 101.467392][ T31] audit: type=1400 audit(1790163184.592:233): avc: denied { lock } for pid=5954 comm="syz.3.44" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 103.900731][ T31] audit: type=1400 audit(1790163187.412:234): avc: denied { read } for pid=5967 comm="syz.2.43" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 103.902515][ T31] audit: type=1400 audit(1790163187.412:235): avc: denied { open } for pid=5967 comm="syz.2.43" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 104.402267][ T31] audit: type=1400 audit(1790163187.912:236): avc: denied { ioctl } for pid=5967 comm="syz.2.43" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 104.856297][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 104.856331][ T31] audit: type=1400 audit(1790163188.292:239): avc: denied { read write } for pid=5975 comm="syz.4.47" name="radio0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 104.856533][ T31] audit: type=1400 audit(1790163188.292:240): avc: denied { open } for pid=5975 comm="syz.4.47" path="/dev/radio0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 104.856654][ T31] audit: type=1400 audit(1790163188.292:241): avc: denied { ioctl } for pid=5975 comm="syz.4.47" path="/dev/radio0" dev="devtmpfs" ino=951 ioctlcmd=0x5648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 105.155002][ T31] audit: type=1400 audit(1790163188.662:242): avc: denied { call } for pid=5967 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 107.052364][ T5993] xt_hashlimit: size too large, truncated to 1048576 [ 107.052470][ T5993] xt_hashlimit: max too large, truncated to 1048576 [ 108.291428][ T6002] Failed to get privilege flags for destination (handle=0x2:0x0) [ 108.993242][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.993261][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.077328][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.077916][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.201472][ T6012] 9p: Bad value for 'wfdno' [ 109.350456][ T31] audit: type=1400 audit(1790163192.862:243): avc: denied { write } for pid=6013 comm="syz.4.58" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 109.351290][ T31] audit: type=1400 audit(1790163192.862:244): avc: denied { open } for pid=6013 comm="syz.4.58" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 109.418697][ T6014] random: crng reseeded on system resumption [ 109.521765][ T6018] batman_adv: batadv0: Adding interface: dummy0 [ 109.521777][ T6018] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.521793][ T6018] batman_adv: batadv0: Interface activated: dummy0 [ 109.582380][ T31] audit: type=1400 audit(1790163193.092:245): avc: denied { create } for pid=6015 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.619856][ T31] audit: type=1400 audit(1790163193.132:246): avc: denied { ioctl } for pid=6015 comm="syz.0.59" path="socket:[9513]" dev="sockfs" ino=9513 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.709830][ T6018] batadv0: mtu less than device minimum [ 109.710363][ T6018] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.711493][ T6018] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.712000][ T6018] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.712503][ T6018] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.713006][ T6018] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.713506][ T6018] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.714002][ T6018] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.714496][ T6018] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.714991][ T6018] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.778522][ T31] audit: type=1400 audit(1790163193.282:247): avc: denied { write } for pid=6019 comm="syz.2.60" name="netlink" dev="proc" ino=4026533090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 110.474856][ T6028] Failed to get privilege flags for destination (handle=0x2:0x0) [ 111.750373][ T31] audit: type=1400 audit(1790163195.262:248): avc: denied { mmap_zero } for pid=6040 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 111.818413][ T31] audit: type=1400 audit(1790163195.332:249): avc: denied { map } for pid=6040 comm="syz.1.66" path="socket:[9542]" dev="sockfs" ino=9542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 113.371917][ T4919] Bluetooth: hci0: hcon ffff88807a4b4000 sent 1 < count 47384 [ 113.496379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.630055][ T6068] xt_hashlimit: size too large, truncated to 1048576 [ 115.630106][ T6068] xt_hashlimit: max too large, truncated to 1048576 [ 117.276277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 117.579479][ T31] audit: type=1400 audit(1790163201.092:250): avc: denied { read } for pid=6079 comm="syz.2.78" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 117.613235][ T31] audit: type=1400 audit(1790163201.092:251): avc: denied { open } for pid=6079 comm="syz.2.78" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 117.663793][ T31] audit: type=1400 audit(1790163201.172:252): avc: denied { ioctl } for pid=6079 comm="syz.2.78" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 117.776503][ T5696] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.206358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 118.797175][ T31] audit: type=1400 audit(1790163202.312:253): avc: denied { create } for pid=6079 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.799501][ T31] audit: type=1400 audit(1790163202.312:254): avc: denied { setopt } for pid=6079 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.855414][ T31] audit: type=1400 audit(1790163202.362:255): avc: denied { listen } for pid=6079 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.883766][ T5696] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 118.897431][ T5696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.897480][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.920510][ T5696] usb 1-1: config 0 descriptor?? [ 119.986332][ T31] audit: type=1400 audit(1790163203.442:256): avc: denied { create } for pid=6085 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 119.986603][ T31] audit: type=1400 audit(1790163203.462:257): avc: denied { mount } for pid=6085 comm="syz.2.82" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 119.986745][ T31] audit: type=1400 audit(1790163203.472:258): avc: denied { mounton } for pid=6085 comm="syz.2.82" path="/17/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 119.986890][ T31] audit: type=1400 audit(1790163203.482:259): avc: denied { mount } for pid=6085 comm="syz.2.82" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 120.422125][ T5696] usbhid 1-1:0.0: can't add hid device: -71 [ 120.422185][ T5696] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 120.456938][ T5696] usb 1-1: USB disconnect, device number 2 [ 121.369997][ T5696] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.441088][ T6101] random: crng reseeded on system resumption [ 121.516239][ T5696] usb 1-1: Using ep0 maxpacket: 32 [ 121.516991][ T5696] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 121.517911][ T5696] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 121.517933][ T5696] usb 1-1: config 0 has no interface number 0 [ 121.522978][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.523000][ T5696] usb 1-1: Product: syz [ 121.523013][ T5696] usb 1-1: Manufacturer: syz [ 121.523028][ T5696] usb 1-1: SerialNumber: syz [ 121.544250][ T5696] usb 1-1: config 0 descriptor?? [ 121.552884][ T5696] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 121.849546][ T5696] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 121.880029][ T5696] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 121.976212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 122.938267][ T6116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.938714][ T6116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.027284][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 123.032610][ T984] usb 1-1: USB disconnect, device number 3 [ 123.681728][ T984] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 123.687283][ T984] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 123.687803][ T984] quatech2 1-1:0.51: device disconnected [ 124.191739][ T6127] xt_hashlimit: size too large, truncated to 1048576 [ 124.191792][ T6127] xt_hashlimit: max too large, truncated to 1048576 [ 124.718596][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 124.718614][ T31] audit: type=1400 audit(1790163208.232:268): avc: denied { setopt } for pid=6130 comm="syz.4.93" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.720888][ T6132] net_ratelimit: 10 callbacks suppressed [ 124.720906][ T6132] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 125.424947][ T31] audit: type=1400 audit(1790163208.572:269): avc: denied { mount } for pid=6131 comm="syz.0.94" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 125.425139][ T31] audit: type=1400 audit(1790163208.582:270): avc: denied { mounton } for pid=6131 comm="syz.0.94" path="/16/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 126.417622][ T6144] xt_hashlimit: size too large, truncated to 1048576 [ 126.417671][ T6144] xt_hashlimit: max too large, truncated to 1048576 [ 126.849144][ T6148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.99'. [ 126.987234][ T31] audit: type=1400 audit(1790163210.502:271): avc: denied { read write } for pid=6149 comm="syz.2.100" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 126.987502][ T31] audit: type=1400 audit(1790163210.502:272): avc: denied { open } for pid=6149 comm="syz.2.100" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 127.057588][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.136699][ T31] audit: type=1400 audit(1790163210.652:273): avc: denied { execute } for pid=6152 comm="syz.3.101" dev="tmpfs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.138620][ T6156] process 'syz.3.101' launched '/dev/fd/6' with NULL argv: empty string added [ 127.145495][ T31] audit: type=1400 audit(1790163210.652:274): avc: denied { execute_no_trans } for pid=6152 comm="syz.3.101" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.226684][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 127.227187][ T25] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 127.228009][ T25] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 127.228030][ T25] usb 5-1: config 0 has no interface number 0 [ 127.228055][ T25] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 127.228069][ T25] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 127.228082][ T25] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 127.228098][ T25] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.228119][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.242090][ T25] usb 5-1: config 0 descriptor?? [ 127.275859][ T25] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 127.514563][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.514640][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.656753][ T6163] xt_hashlimit: size too large, truncated to 1048576 [ 127.656802][ T6163] xt_hashlimit: max too large, truncated to 1048576 [ 128.121730][ T4919] Bluetooth: hci0: hcon ffff88807a4b4000 sent 0 < count 47384 [ 128.145341][ T4919] Bluetooth: hci0: hcon ffff888079180000 sent 1 < count 255 [ 128.408788][ T9] usb 5-1: USB disconnect, device number 2 [ 128.408826][ C1] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 128.650425][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 128.759784][ T31] audit: type=1400 audit(1790163212.272:275): avc: denied { name_bind } for pid=6168 comm="syz.2.105" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 128.760620][ T31] audit: type=1400 audit(1790163212.272:276): avc: denied { node_bind } for pid=6168 comm="syz.2.105" saddr=127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 128.895145][ T6171] CIFS: Attempting to mount //127.0.0.1/share [ 129.353727][ T31] audit: type=1400 audit(1790163212.862:277): avc: denied { append } for pid=6168 comm="syz.2.105" name="cec0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.999031][ T6171] CIFS: VFS ** replaying previous printk message ** [ 129.999031][ T6171] CIFS: VFS: \\127.0.0.1 Error -104 sending data on socket to server [ 130.008785][ T6171] ------------[ cut here ]------------ [ 130.008797][ T6171] server->in_flight == 0 [ 130.008803][ T6171] WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x1213/0x1790, CPU#0: syz.2.105/6171 [ 130.042064][ T6171] Modules linked in: [ 130.045979][ T6171] CPU: 0 UID: 0 PID: 6171 Comm: syz.2.105 Not tainted syzkaller #0 PREEMPT(full) [ 130.055229][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 130.065451][ T6171] RIP: 0010:smb2_add_credits+0x1213/0x1790 [ 130.071329][ T6171] Code: c6 e8 c1 64 b0 fe 84 db 0f 85 0a fb ff ff e8 a4 6a b0 fe 48 8d 3d ed e4 f0 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 8e 6a b0 fe 90 <0f> 0b 90 0f b6 05 29 5e d1 0d 31 ff 89 c6 88 44 24 28 e8 86 64 b0 [ 130.091583][ T6171] RSP: 0018:ffffc900058af208 EFLAGS: 00010283 [ 130.097973][ T6171] RAX: 00000000000044b9 RBX: ffff88807cdc8300 RCX: ffffc90006609000 [ 130.105969][ T6171] RDX: 0000000000080000 RSI: ffffffff835bb802 RDI: ffff88807c804b00 [ 130.114332][ T6171] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 130.122451][ T6171] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900058af448 [ 130.130487][ T6171] R13: 0000000000000200 R14: 0000000000000002 R15: ffff88807cdc8000 [ 130.138524][ T6171] FS: 00007f7123e9a6c0(0000) GS:ffff888123b53000(0000) knlGS:0000000000000000 [ 130.147547][ T6171] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.154170][ T6171] CR2: 00007f22dbb2d380 CR3: 000000005b328000 CR4: 00000000003526f0 [ 130.162235][ T6171] Call Trace: [ 130.165520][ T6171] [ 130.168493][ T6171] ? compound_send_recv+0xe40/0x2a10 [ 130.173812][ T6171] compound_send_recv+0x1030/0x2a10 [ 130.179101][ T6171] ? __pfx_compound_send_recv+0x10/0x10 [ 130.184695][ T6171] ? __lock_acquire+0x5c0/0x1f40 [ 130.190038][ T6171] ? find_held_lock+0x2b/0x80 [ 130.194766][ T6171] ? __smb2_plain_req_init+0x45c/0x1140 [ 130.200614][ T6171] ? __smb2_plain_req_init+0x45c/0x1140 [ 130.206270][ T6171] cifs_send_recv+0x43/0x60 [ 130.210836][ T6171] SMB2_negotiate+0x15c4/0x5380 [ 130.215748][ T6171] ? check_prev_add+0x354/0xe60 [ 130.220676][ T6171] ? __pfx_SMB2_negotiate+0x10/0x10 [ 130.225918][ T6171] ? smb2_negotiate+0x57/0x80 [ 130.230665][ T6171] ? smb2_negotiate+0x57/0x80 [ 130.235394][ T6171] ? do_raw_spin_unlock+0x145/0x1e0 [ 130.240647][ T6171] ? cifs_negotiate_protocol+0x268/0x4c0 [ 130.246294][ T6171] cifs_negotiate_protocol+0x268/0x4c0 [ 130.251758][ T6171] cifs_get_smb_ses+0xfc9/0x2170 [ 130.256750][ T6171] cifs_mount_get_session+0xf8/0x460 [ 130.262038][ T6171] dfs_mount_share+0x200/0x1e20 [ 130.266890][ T6171] ? add_lock_to_list+0x9d/0x1d0 [ 130.271841][ T6171] ? check_prev_add+0x354/0xe60 [ 130.276762][ T6171] ? __pfx_dfs_mount_share+0x10/0x10 [ 130.282067][ T6171] ? __lock_acquire+0xe8b/0x1f40 [ 130.287063][ T6171] ? __debug_object_init+0x2de/0x3d0 [ 130.292708][ T6171] cifs_mount+0xc4/0xdb0 [ 130.297278][ T6171] ? find_held_lock+0x2b/0x80 [ 130.301990][ T6171] ? find_nls+0x125/0x170 [ 130.306371][ T6171] ? find_nls+0x125/0x170 [ 130.310800][ T6171] ? __pfx_cifs_mount+0x10/0x10 [ 130.315661][ T6171] ? do_raw_spin_unlock+0x145/0x1e0 [ 130.320940][ T6171] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 130.326158][ T6171] cifs_smb3_do_mount+0x2c0/0x1b10 [ 130.332188][ T6171] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 130.338534][ T6171] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 130.344118][ T6171] ? rcu_is_watching+0x13/0xc0 [ 130.348950][ T6171] smb3_get_tree+0x1fd/0x440 [ 130.353558][ T6171] vfs_get_tree+0x92/0x320 [ 130.358090][ T6171] path_mount+0x7d0/0x24c0 [ 130.362524][ T6171] ? __pfx_path_mount+0x10/0x10 [ 130.367411][ T6171] ? lockdep_hardirqs_on+0x7d/0x110 [ 130.372622][ T6171] ? putname+0xb1/0x110 [ 130.376813][ T6171] ? kmem_cache_free+0x127/0x6c0 [ 130.381771][ T6171] ? __x64_sys_mount+0x293/0x310 [ 130.386784][ T6171] __x64_sys_mount+0x293/0x310 [ 130.391872][ T6171] ? __pfx___x64_sys_mount+0x10/0x10 [ 130.397809][ T6171] do_syscall_64+0x123/0x790 [ 130.402420][ T6171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.408368][ T6171] RIP: 0033:0x7f7122f9e159 [ 130.412785][ T6171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.432493][ T6171] RSP: 002b:00007f7123e9a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 130.440944][ T6171] RAX: ffffffffffffffda RBX: 00007f7123225fa0 RCX: 00007f7122f9e159 [ 130.448965][ T6171] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000500 [ 130.456993][ T6171] RBP: 00007f712303506b R08: 0000200000000300 R09: 0000000000000000 [ 130.464962][ T6171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.472980][ T6171] R13: 00007f7123226038 R14: 00007f7123225fa0 R15: 00007ffce205ef88 [ 130.481011][ T6171] [ 130.484031][ T6171] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 130.491308][ T6171] CPU: 0 UID: 0 PID: 6171 Comm: syz.2.105 Not tainted syzkaller #0 PREEMPT(full) [ 130.500599][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 130.510655][ T6171] Call Trace: [ 130.513932][ T6171] [ 130.516867][ T6171] dump_stack_lvl+0x100/0x190 [ 130.521555][ T6171] vpanic+0x553/0x970 [ 130.525538][ T6171] ? __pfx_vpanic+0x10/0x10 [ 130.530047][ T6171] panic+0xd1/0xe0 [ 130.533768][ T6171] ? __pfx_panic+0x10/0x10 [ 130.538284][ T6171] check_panic_on_warn.cold+0x19/0x34 [ 130.543661][ T6171] ? smb2_add_credits+0x1213/0x1790 [ 130.548866][ T6171] __warn.cold+0x191/0x318 [ 130.553284][ T6171] __report_bug+0x30f/0x440 [ 130.557805][ T6171] ? smb2_add_credits+0x1213/0x1790 [ 130.563032][ T6171] ? __pfx___report_bug+0x10/0x10 [ 130.568069][ T6171] ? lockdep_hardirqs_on+0x7d/0x110 [ 130.573282][ T6171] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 130.579110][ T6171] ? __lock_acquire+0x5c0/0x1f40 [ 130.584056][ T6171] ? smb2_add_credits+0x1213/0x1790 [ 130.589275][ T6171] report_bug+0xb3/0x220 [ 130.593529][ T6171] ? smb2_add_credits+0x1213/0x1790 [ 130.598738][ T6171] handle_bug+0x16a/0x2a0 [ 130.603076][ T6171] exc_invalid_op+0x17/0x50 [ 130.607587][ T6171] asm_exc_invalid_op+0x1a/0x20 [ 130.612441][ T6171] RIP: 0010:smb2_add_credits+0x1213/0x1790 [ 130.618258][ T6171] Code: c6 e8 c1 64 b0 fe 84 db 0f 85 0a fb ff ff e8 a4 6a b0 fe 48 8d 3d ed e4 f0 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 8e 6a b0 fe 90 <0f> 0b 90 0f b6 05 29 5e d1 0d 31 ff 89 c6 88 44 24 28 e8 86 64 b0 [ 130.637868][ T6171] RSP: 0018:ffffc900058af208 EFLAGS: 00010283 [ 130.643942][ T6171] RAX: 00000000000044b9 RBX: ffff88807cdc8300 RCX: ffffc90006609000 [ 130.651932][ T6171] RDX: 0000000000080000 RSI: ffffffff835bb802 RDI: ffff88807c804b00 [ 130.659904][ T6171] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 130.667872][ T6171] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900058af448 [ 130.675844][ T6171] R13: 0000000000000200 R14: 0000000000000002 R15: ffff88807cdc8000 [ 130.683923][ T6171] ? smb2_add_credits+0x1212/0x1790 [ 130.689152][ T6171] ? smb2_add_credits+0x1212/0x1790 [ 130.694358][ T6171] ? compound_send_recv+0xe40/0x2a10 [ 130.699690][ T6171] compound_send_recv+0x1030/0x2a10 [ 130.704920][ T6171] ? __pfx_compound_send_recv+0x10/0x10 [ 130.710490][ T6171] ? __lock_acquire+0x5c0/0x1f40 [ 130.715451][ T6171] ? find_held_lock+0x2b/0x80 [ 130.720138][ T6171] ? __smb2_plain_req_init+0x45c/0x1140 [ 130.725715][ T6171] ? __smb2_plain_req_init+0x45c/0x1140 [ 130.731272][ T6171] cifs_send_recv+0x43/0x60 [ 130.735793][ T6171] SMB2_negotiate+0x15c4/0x5380 [ 130.740652][ T6171] ? check_prev_add+0x354/0xe60 [ 130.745512][ T6171] ? __pfx_SMB2_negotiate+0x10/0x10 [ 130.750732][ T6171] ? smb2_negotiate+0x57/0x80 [ 130.755419][ T6171] ? smb2_negotiate+0x57/0x80 [ 130.760105][ T6171] ? do_raw_spin_unlock+0x145/0x1e0 [ 130.765322][ T6171] ? cifs_negotiate_protocol+0x268/0x4c0 [ 130.770968][ T6171] cifs_negotiate_protocol+0x268/0x4c0 [ 130.776444][ T6171] cifs_get_smb_ses+0xfc9/0x2170 [ 130.781399][ T6171] cifs_mount_get_session+0xf8/0x460 [ 130.786684][ T6171] dfs_mount_share+0x200/0x1e20 [ 130.791541][ T6171] ? add_lock_to_list+0x9d/0x1d0 [ 130.796568][ T6171] ? check_prev_add+0x354/0xe60 [ 130.801420][ T6171] ? __pfx_dfs_mount_share+0x10/0x10 [ 130.806713][ T6171] ? __lock_acquire+0xe8b/0x1f40 [ 130.811664][ T6171] ? __debug_object_init+0x2de/0x3d0 [ 130.816960][ T6171] cifs_mount+0xc4/0xdb0 [ 130.821213][ T6171] ? find_held_lock+0x2b/0x80 [ 130.825895][ T6171] ? find_nls+0x125/0x170 [ 130.830230][ T6171] ? find_nls+0x125/0x170 [ 130.834567][ T6171] ? __pfx_cifs_mount+0x10/0x10 [ 130.839428][ T6171] ? do_raw_spin_unlock+0x145/0x1e0 [ 130.844637][ T6171] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 130.849855][ T6171] cifs_smb3_do_mount+0x2c0/0x1b10 [ 130.854968][ T6171] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 130.861312][ T6171] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 130.866865][ T6171] ? rcu_is_watching+0x13/0xc0 [ 130.871642][ T6171] smb3_get_tree+0x1fd/0x440 [ 130.876243][ T6171] vfs_get_tree+0x92/0x320 [ 130.880669][ T6171] path_mount+0x7d0/0x24c0 [ 130.885113][ T6171] ? __pfx_path_mount+0x10/0x10 [ 130.889970][ T6171] ? lockdep_hardirqs_on+0x7d/0x110 [ 130.895180][ T6171] ? putname+0xb1/0x110 [ 130.899340][ T6171] ? kmem_cache_free+0x127/0x6c0 [ 130.904472][ T6171] ? __x64_sys_mount+0x293/0x310 [ 130.909426][ T6171] __x64_sys_mount+0x293/0x310 [ 130.914200][ T6171] ? __pfx___x64_sys_mount+0x10/0x10 [ 130.919503][ T6171] do_syscall_64+0x123/0x790 [ 130.924113][ T6171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.930016][ T6171] RIP: 0033:0x7f7122f9e159 [ 130.934430][ T6171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.954036][ T6171] RSP: 002b:00007f7123e9a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 130.962453][ T6171] RAX: ffffffffffffffda RBX: 00007f7123225fa0 RCX: 00007f7122f9e159 [ 130.970420][ T6171] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000500 [ 130.978393][ T6171] RBP: 00007f712303506b R08: 0000200000000300 R09: 0000000000000000 [ 130.986365][ T6171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.994336][ T6171] R13: 00007f7123226038 R14: 00007f7123225fa0 R15: 00007ffce205ef88 [ 131.002406][ T6171] [ 131.005619][ T6171] Kernel Offset: disabled [ 131.009924][ T6171] Rebooting in 86400 seconds..