last executing test programs: 3.701056279s ago: executing program 3 (id=183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x13, r1, 0x81000000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="1b000000080011aaaaaaaaaa0140", 0xe) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x28, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 3.653311446s ago: executing program 3 (id=184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x41f, 0x0, 0x2000000, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x6c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24008840) 3.65316911s ago: executing program 3 (id=185): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x2b, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) ioctl(r2, 0x4048aecb, &(0x7f0000000100)) 3.413595218s ago: executing program 3 (id=186): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x100, 0x25dfdbfd, {0x25, 0x0, 0x60}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 3.003539257s ago: executing program 3 (id=190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x10b, &(0x7f00000001c0)={@broadcast, @broadcast, @val={@val={0x88a8, 0x3, 0x1, 0x3}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "0700ea", 0xcd, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x0, 0x5a, '\x00', [@hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @local}]}], {0x0, 0x4e23, 0x9d, 0x0, @opaque="101f50da75a76b5abf58de66e52d976aad6934e1fa300cc624928b4c9d69d6d0468a537c4896f9dbca2d85af6e8eab5ec3dd0a2716d3983b25d7300e8d1fd14b23b849405a396969e15f0ec0be58c43ff9511fcd8f81f24b6741ea50dac176a83940e9241655be04a7ebe33a6cc0090848d81e80fa4b6bf1431fc04ab5a59493fa768ae821768d39245bb0d1e5bf14a78226b33c65"}}}}}}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x2b, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x2, {{0xa, 0x4e23, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @mcast1, 0xfffffffc}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/173, 0xad}], 0x1, 0x809, 0x401) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x4, r4, &(0x7f00000011c0), 0xfffffffffffffffe) ioctl(r2, 0x4048aecb, &(0x7f0000000100)) ioctl(r2, 0x4048aecb, &(0x7f0000000200)) 2.951380057s ago: executing program 1 (id=191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xaf) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x96, "25bbc0834ec51a41c20a4fe34f94ee68e8a02d31450b050da0de2cf8fb33290a33254201c2edebe6725757979253295aae50d41ca164d67cd0b0e95767d50854775dffec166646fafb7241224d7cc33b6063b3d839605dcbd1b9b878f406504103fd7789bacce2575e1493e513fee1830e843e9927fe81d13f01e175a3c3b77ee3d6fc6d674883efcb12400cbeca1b29940feb1e666c"}, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, 0xffffffffffffffff, 0x913e0000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NFT_BATCH(r3, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x160, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x22, 0x7, 0x1, 0x0, "c40e0088386d01898d3ad045955bec5ebc7968ba7332a4a4a1af9bc500d3"}, @NFTA_RULE_USERDATA={0x4a, 0x7, 0x1, 0x0, "7a2644345e775a728dfccd74f36230f4254539322b5feb987b36337cf021170cb3a0a88d7cd2ac867b292390f694447165032d3fd3dd73eff92710d5d65341936a053b50ddeb"}, @NFTA_RULE_EXPRESSIONS={0xd4, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7ff}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}]}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x64, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_USERDATA={0x2d, 0xd, 0x1, 0x0, "7abb16055f8c5de3c4e332e9229fd057b869d369ad05b6bb255e7226cab04624d220bd43687a1ef0e0"}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x78, 0x8, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x67}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0xb4919a4f8987ba69, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x178, 0xb, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xffffffff}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x104, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xf8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8e62}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x430}, 0x1, 0x0, 0x0, 0x80}, 0x81) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01300134b1ff"}) 2.951219044s ago: executing program 1 (id=192): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a27f2000f2c00fe8000000000000000000000000000bbfe8000000000030000000000000000aa0000000e"], 0x0) 2.881342425s ago: executing program 3 (id=193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b0030003200060063000000004484ff"], 0x76) 2.881119274s ago: executing program 1 (id=194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x2b, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) ioctl(r2, 0x4048aecb, &(0x7f0000000100)) 2.6889219s ago: executing program 1 (id=196): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0xf7, 0xf6ffffff, 0x0}, &(0x7f00000000c0)="a109a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) 2.60346703s ago: executing program 1 (id=197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b003000320006006300000000443aff"], 0x76) 2.522514999s ago: executing program 1 (id=199): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b41889160001010203010902220002010080fa090400000003000000090401"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r2, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x802, 0x104) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x7, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbmon(&(0x7f0000000040), 0x7, 0x4400) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.064180547s ago: executing program 2 (id=219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x0, 0x2004, 0x39, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x80, 0x7, 0x3, 0x1}}) r2 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x48, &(0x7f00000000c0)={0x0, 0x0}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x4}, 0x4) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000006c0)) r3 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) setns(0xffffffffffffffff, 0x0) socket(0x2a, 0x2, 0x0) setns(0xc9, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x381a03, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x10f) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001575dc600296d2e5836a89d9670000000000000000"], 0x16) accept4$packet(r1, 0x0, 0x0, 0x80000) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x2}}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x80000001, 0x7fb, 0x8, 0x100201}, 0x0, &(0x7f0000000240)={0x1e, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x2000000a}, 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r0], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002f00090027a27000fbdbdf2504000000110016f6253a282d5e2f5b235c2ea54800000000"], 0x28}, 0x1, 0x0, 0x0, 0x42014}, 0xc000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="83000400cb1507110343e7800800014adc77698e000c00028006000f000300"/45], 0x38}, 0x1, 0x0, 0x0, 0x80d1}, 0x4084) r8 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x52a1, 0x18}) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000040), 0xc0443, 0x0) 563.724486ms ago: executing program 0 (id=225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x2b, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) ioctl(r2, 0x4048aecb, 0x0) 312.790841ms ago: executing program 0 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) mlockall(0x7) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xf}, 0x9, 0x2, 0x0, 0xf, 0x7, 0x6}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x30, r4, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x200005, 0x5d}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000200)={0x28, r5, 0x4, 0x70bd08, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x48, 0x3b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x9}) (async) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x9}) io_setup(0xffff, &(0x7f0000002400)) (async) io_setup(0xffff, &(0x7f0000002400)=0x0) setreuid(0xffffffffffffffff, 0xee00) (async) setreuid(0xffffffffffffffff, 0xee00) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff}, 0x4000) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xa, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r10, r11, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x10000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@ignoreqv}], [{@fsname={'fsname', 0x3d, '%\':+[:('}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@seclabel}, {@flag='async'}, {@uid_gt={'uid>', r10}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@subj_role={'subj_role', 0x3d, '-\xcb/('}}]}}) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x10000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@ignoreqv}], [{@fsname={'fsname', 0x3d, '%\':+[:('}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@seclabel}, {@flag='async'}, {@uid_gt={'uid>', r10}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@subj_role={'subj_role', 0x3d, '-\xcb/('}}]}}) mlockall(0x3) r12 = socket(0x10, 0x3, 0x0) sendto$inet6(r12, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c0015003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0x1, 0x1000000}, 0x50) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030db3fb83ef0400000000000000", @ANYRESHEX=r6, @ANYRESOCT=0x0, @ANYRESOCT=r6], 0x68}}, 0x8000) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030db3fb83ef0400000000000000", @ANYRESHEX=r6, @ANYRESOCT=0x0, @ANYRESOCT=r6], 0x68}}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xf, 0xfff1}, {0xd, 0x10}, {0x1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) 243.610376ms ago: executing program 0 (id=227): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty=0x147ae14, @multicast1=0x80ee3600}}}], 0x20}, 0x0) 243.403617ms ago: executing program 0 (id=228): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b003000320006006300000000443aff"], 0x76) 153.419623ms ago: executing program 2 (id=229): fsopen(&(0x7f0000000000)='ocfs2_dlmfs\x00', 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r3, @ANYBLOB="f60012000a0002"], 0x28}}, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000000c0)={0x1274, r1, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x11b4, 0x8, 0x0, 0x1, [{0x2a8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x270, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x5305}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xd}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8}]}, {0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x7, 0x6, @private0, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}]}, {0x444, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x178, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0xf0, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x14c, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @local, 0xfffff51d}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}]}, {0x538, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x101}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010101}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @mcast2, 0x81}}, @WGPEER_A_ALLOWEDIPS={0x200, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x34}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x4d4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x1f4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5, 0x3, 0x2}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x2bc, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0xf571a39cfcd5170d}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PEERS={0x9c, 0x8, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x90f, @private1, 0x80000001}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fb03531495fb3d1b04dc9ad8e3f5caf36a8d5d12dc25a07249ab75353452342c"}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9f5d}]}, 0x1274}, 0x1, 0x0, 0x0, 0x800}, 0x15) 152.711104ms ago: executing program 2 (id=230): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000200)={0x100, r3}, 0x0) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x100, r4}, 0x0) (async, rerun: 32) preadv(r1, &(0x7f0000002bc0)=[{&(0x7f0000002a40)=""/172, 0xac}], 0x1, 0x9d, 0x80) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 92.501157ms ago: executing program 2 (id=231): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 92.340536ms ago: executing program 0 (id=232): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e142002ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) 91.607789ms ago: executing program 2 (id=233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800001b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$can_bcm(0x1d, 0x2, 0x2) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000008000000400000000500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\n\x00'/28], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r4) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fcffffff000000000100000008000100", @ANYRES32=r7, @ANYBLOB="3c00020001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040008000000"], 0x58}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', r7, 0x2f, 0xfc, 0xa, 0x9, 0x40, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, 0x7, 0x40, 0x7, 0x10001}}) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001080)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000780)={0x83c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x95be}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'mcast_rejoin_interval\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdfb}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3c00000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x819}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@^@+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x92, 0x5, "b244be0983d53bf319c8e75c0d9556c966da2e3198f8e08814a312c808007cd4f10250a592bb833035ae5cdb0f2f1610694fbbab5a49b8f612ac72057b63673b333b6b5e30b7a61a1c1524e4011fa8d4e70702e9b63084fa3d3dd4b5c93d13c0ad9bc1481ba6bf3c12e2c988e74a3c9b8385db4573b23a5606fbf406e97fe6975d016b3a01030282d3ed6a9f4327"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x15c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/cdrom\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.*\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/v4l-subdev#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x38, 0x4, "789c974b731d0730df7f2b3628fbbf23fbabc1cf009c6f538e9da65e58c668b1f95672a46551fd3c1267a5ec4184818261dacbc0"}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf91}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x40c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffb}, @ETHTOOL_A_BITSET_MASK={0x5, 0x5, 'W'}, @ETHTOOL_A_BITSET_BITS={0xfc, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-+-@@[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'mcast_rejoin_interval\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfc37}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x37a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'team\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/v4l-subdev#\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ']\b:!^-+)[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa00000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x845a}]}]}, @ETHTOOL_A_BITSET_MASK={0xa7, 0x5, "204ef1d8184e900fe3dafb6b4f75f44a809c25400de9c8a0c3be06c55cccae06b323bf986377878969be3c072773bf24a67b28ac72ffb647deb4b2a3d1a318d7a3f5246023f39a281dba9fbb93f95ebf9fa8a52ea15a56da789ef7643b4aef9f4d3be75a514d54591d6d7b67f9c1b3f4c58d69b60a802f28717b0ab10381de362ddb5a0811562b684348d44a9d259223b408af5ff50f167c7f440e40dfca377e3204f7"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xee, 0x4, "8ca228dbd0edfae948a711a93d0b5cae143382ff5b6ac22f83879ee23951385665f08e0313dae1cd7c0d7c7402e5abdc6b1e71dcb62f8b3b4a630fd5a7143fd95158112d75c429b83a0df5120aa4ab28c8de34c3c9a7fb68e1c04df3b15b2c6c32879cb94827d265666872662f57e8f13c634bb631eafeff7453a3a3f6d31ec8af5e7523673fba08f03e3c02826980e5f35b0292fee128269639a1278a3a9fc1fce9eb449a2ea69b14d39d15b4b0db9decd270955ffb7259b07405232805d9f08be025cb208d7406d0a717ff9aa50681615bcf94dcb91846f579b6bd0898de0d5beb3612fd25445f064a"}, @ETHTOOL_A_BITSET_VALUE={0xa9, 0x4, "26a6b469a157e88294a31860e601e30d32fd121224b28da22286967707fd9d20ce73951bc8de1ddde5f5a7fd05238d0a36bf15c063c5a7e8af0831c31399ba0d8c2db9639d3d0928aa47b4b1816d861a0aa8a653fa33ccb7d364b8114176568c6b1c02a14641fdfd755b784ecea6d7c2bd996411c4c47aac0f72a37dc3730d96f74a61edc11e124a348c9eb012d3f9960a6a3c926e681f00bb54ba40c8f1bf5c643c061fe6"}, @ETHTOOL_A_BITSET_MASK={0xb2, 0x5, "2eda64318558ff16f9dda5899ad276d06cabb43543e14adbc35de9bfb67eefcf09642aa5251d89f8b0a249c3131d6f7bca80f4b3e0a4afa0bd2e9714fd708ee31f260e652a28dc847b07dc6f6024aa2c598facb0b6b1510f9636f0bf6c7dc0e98133f6846344cf4ce30afcadc3fb339b7d9b31f1835b6de56d647107e7c09002fe70c9b192e65cdc4c26490d454e610058018701c33811191dd1b9f00f2bf8dc7c61392cddc294dc1858ad5385a8"}]}]}, 0x83c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r14 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$CDROMRESET(r14, 0x5312) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000022c0)=ANY=[@ANYBLOB="00190099", @ANYRES16=r15, @ANYBLOB="010003000000920300002c0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) 33.506824ms ago: executing program 2 (id=234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x2b, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) ioctl(r2, 0x4048aecb, 0x0) 0s ago: executing program 0 (id=235): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000300)) clock_adjtime(0x0, &(0x7f00000002c0)={0x19b1, 0xc1bdf10000000003, 0x100000000, 0x0, 0x0, 0x2, 0x1, 0x200, 0x7, 0x300, 0x1, 0x2, 0x0, 0x0, 0x0, 0x282, 0x2, 0x0, 0x9, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x6, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x40100, 0x23) rmdir(&(0x7f0000000100)='./config/usb_gadget/g1/functions/hid.usb0\x00') r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r5, @ANYRESDEC=r2], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = fcntl$getown(0xffffffffffffffff, 0x9) capset(&(0x7f0000000080)={0x20080522, r6}, &(0x7f0000000140)={0x9, 0x10, 0x0, 0x5, 0x6, 0x401}) setns(0xc9, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700000001000010025bd7004fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="00000000034a04000a0001"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) kernel console output (not intermixed with test programs): [ 38.016934][ T43] audit: type=1400 audit(1791272392.222:136): avc: denied { rlimitinh } for pid=5705 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.017091][ T43] audit: type=1400 audit(1791272392.222:137): avc: denied { siginh } for pid=5705 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:48088' (ED25519) to the list of known hosts. [ 39.858655][ T43] audit: type=1400 audit(1791272394.062:138): avc: denied { name_bind } for pid=5712 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.900786][ T43] audit: type=1400 audit(1791272394.102:139): avc: denied { execute } for pid=5713 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.904409][ T43] audit: type=1400 audit(1791272394.102:140): avc: denied { execute_no_trans } for pid=5713 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.178589][ T43] audit: type=1400 audit(1791272396.382:141): avc: denied { mounton } for pid=5713 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.180823][ T43] audit: type=1400 audit(1791272396.382:142): avc: denied { mount } for pid=5713 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.183508][ T5713] cgroup: Unknown subsys name 'net' [ 42.354500][ T5713] cgroup: Unknown subsys name 'cpuset' [ 42.356769][ T5713] cgroup: Unknown subsys name 'rlimit' [ 42.531248][ T5717] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.267461][ T5713] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.607636][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 46.607649][ T43] audit: type=1400 audit(1791272400.812:158): avc: denied { execmem } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.859020][ T43] audit: type=1400 audit(1791272401.062:159): avc: denied { create } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.859050][ T43] audit: type=1400 audit(1791272401.062:160): avc: denied { create } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.859069][ T43] audit: type=1400 audit(1791272401.062:161): avc: denied { read write } for pid=5724 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.859311][ T43] audit: type=1400 audit(1791272401.062:162): avc: denied { open } for pid=5724 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.865666][ T43] audit: type=1400 audit(1791272401.072:163): avc: denied { ioctl } for pid=5724 comm="syz-executor" path="socket:[2798]" dev="sockfs" ino=2798 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.890371][ T5729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.893677][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.894105][ T5737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.895025][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.896082][ T5737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.896970][ T5737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.898464][ T5737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.899437][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.902569][ T5733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.903161][ T5733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.905587][ T5739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.906838][ T5738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.908539][ T5733] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.908917][ T5733] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.909204][ T5733] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.910282][ T5729] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.912175][ T43] audit: type=1400 audit(1791272401.122:164): avc: denied { read } for pid=5734 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.912518][ T43] audit: type=1400 audit(1791272401.122:165): avc: denied { open } for pid=5734 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.914627][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.914975][ T43] audit: type=1400 audit(1791272401.122:166): avc: denied { mounton } for pid=5734 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.915704][ T5737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.917797][ T43] audit: type=1400 audit(1791272401.122:167): avc: denied { module_request } for pid=5734 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.923998][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.927719][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.482653][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.482704][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.482760][ T5724] bridge_slave_0: entered allmulticast mode [ 47.483475][ T5724] bridge_slave_0: entered promiscuous mode [ 47.493201][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.493274][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.493367][ T5724] bridge_slave_1: entered allmulticast mode [ 47.494687][ T5724] bridge_slave_1: entered promiscuous mode [ 47.541841][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.541898][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.541958][ T5734] bridge_slave_0: entered allmulticast mode [ 47.542746][ T5734] bridge_slave_0: entered promiscuous mode [ 47.544475][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.544514][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.544568][ T5734] bridge_slave_1: entered allmulticast mode [ 47.545420][ T5734] bridge_slave_1: entered promiscuous mode [ 47.588422][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.595872][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.603836][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.617696][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.628614][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.628714][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.628779][ T5725] bridge_slave_0: entered allmulticast mode [ 47.629490][ T5725] bridge_slave_0: entered promiscuous mode [ 47.649704][ T5734] team0: Port device team_slave_0 added [ 47.649881][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.649944][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.650007][ T5730] bridge_slave_0: entered allmulticast mode [ 47.650838][ T5730] bridge_slave_0: entered promiscuous mode [ 47.652156][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.652196][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.652252][ T5725] bridge_slave_1: entered allmulticast mode [ 47.653023][ T5725] bridge_slave_1: entered promiscuous mode [ 47.667619][ T5724] team0: Port device team_slave_0 added [ 47.668512][ T5734] team0: Port device team_slave_1 added [ 47.676334][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.676377][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.676524][ T5730] bridge_slave_1: entered allmulticast mode [ 47.677258][ T5730] bridge_slave_1: entered promiscuous mode [ 47.701336][ T5724] team0: Port device team_slave_1 added [ 47.727465][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.732155][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.740134][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.740144][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.740157][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.740927][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.740934][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.740946][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.742042][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.742056][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.742074][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.743966][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.745048][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.751895][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.751904][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.751917][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.783735][ T5730] team0: Port device team_slave_0 added [ 47.795102][ T5725] team0: Port device team_slave_0 added [ 47.796535][ T5730] team0: Port device team_slave_1 added [ 47.810222][ T5725] team0: Port device team_slave_1 added [ 47.847899][ T5724] hsr_slave_0: entered promiscuous mode [ 47.848379][ T5724] hsr_slave_1: entered promiscuous mode [ 47.860636][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.860646][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.860659][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.861497][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.861504][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.861517][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.862048][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.862057][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.862069][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.873292][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.873303][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.873316][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.876917][ T5734] hsr_slave_0: entered promiscuous mode [ 47.877346][ T5734] hsr_slave_1: entered promiscuous mode [ 47.877751][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 47.877805][ T5734] Cannot create hsr debugfs directory [ 47.945158][ T5725] hsr_slave_0: entered promiscuous mode [ 47.945590][ T5725] hsr_slave_1: entered promiscuous mode [ 47.945882][ T5725] debugfs: 'hsr0' already exists in 'hsr' [ 47.945894][ T5725] Cannot create hsr debugfs directory [ 47.948799][ T5730] hsr_slave_0: entered promiscuous mode [ 47.949243][ T5730] hsr_slave_1: entered promiscuous mode [ 47.949535][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 47.949545][ T5730] Cannot create hsr debugfs directory [ 48.200751][ T5724] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.207254][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.207986][ T5724] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.210105][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.210601][ T5724] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.216077][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.217236][ T5724] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.220472][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.264525][ T5734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.268575][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.270238][ T5734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.275201][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.276455][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.276502][ T5724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.276753][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.276826][ T5724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.283156][ T5734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.287150][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.293690][ T5734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.297688][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.314903][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.316001][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.354116][ T5730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.357988][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.369860][ T5730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.373064][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.379804][ T5730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.381773][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.383028][ T5730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.385162][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.423084][ T5725] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.424974][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.425477][ T5725] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.428390][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.432398][ T5725] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.435979][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.436354][ T5725] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.438032][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.445955][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.475303][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.491431][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.491538][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.498713][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.506758][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.506801][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.530124][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.540047][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.540135][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.561088][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.561188][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.596250][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.622109][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.626266][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.626310][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.630009][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.630052][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.637146][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.652704][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.659748][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.659794][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.673211][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.673255][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.845803][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.859441][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.901883][ T5734] veth0_vlan: entered promiscuous mode [ 48.909748][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.913747][ T5734] veth1_vlan: entered promiscuous mode [ 48.917687][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.952483][ T5734] veth0_macvtap: entered promiscuous mode [ 48.952608][ T5086] Bluetooth: hci3: command tx timeout [ 48.955682][ T5724] veth0_vlan: entered promiscuous mode [ 48.959159][ T5734] veth1_macvtap: entered promiscuous mode [ 48.962181][ T5086] Bluetooth: hci0: command tx timeout [ 48.962549][ T5732] Bluetooth: hci1: command tx timeout [ 48.968575][ T5724] veth1_vlan: entered promiscuous mode [ 48.992494][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.014304][ T5724] veth0_macvtap: entered promiscuous mode [ 49.015632][ T5730] veth0_vlan: entered promiscuous mode [ 49.016508][ T5724] veth1_macvtap: entered promiscuous mode [ 49.017705][ T5725] veth0_vlan: entered promiscuous mode [ 49.019919][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.024086][ T5730] veth1_vlan: entered promiscuous mode [ 49.028468][ T5725] veth1_vlan: entered promiscuous mode [ 49.033757][ T5732] Bluetooth: hci2: command tx timeout [ 49.052590][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.070496][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.083198][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.090979][ T5725] veth0_macvtap: entered promiscuous mode [ 49.096959][ T5730] veth0_macvtap: entered promiscuous mode [ 49.099458][ T5725] veth1_macvtap: entered promiscuous mode [ 49.115622][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.115635][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.118445][ T5730] veth1_macvtap: entered promiscuous mode [ 49.133693][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.147148][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.156816][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.156828][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.171877][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.171902][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.171926][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.171945][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.171962][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.171980][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.173975][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.202606][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.202619][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.234755][ T5734] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.254289][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.254302][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.260171][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.260183][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.288866][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.288877][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.320096][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.320110][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.325296][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.325312][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.352112][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.352300][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.352471][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.352593][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.352701][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.352838][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.371959][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.371984][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.372007][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.372024][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.498936][ T5893] FAULT_INJECTION: forcing a failure. [ 49.498936][ T5893] name failslab, interval 1, probability 0, space 0, times 1 [ 49.498956][ T5893] CPU: 3 UID: 0 PID: 5893 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 49.498969][ T5893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.498979][ T5893] Call Trace: [ 49.498983][ T5893] [ 49.498987][ T5893] dump_stack_lvl+0x100/0x190 [ 49.499013][ T5893] should_fail_ex.cold+0x5/0xa [ 49.499035][ T5893] ? __netlink_lookup+0x652/0x900 [ 49.499060][ T5893] should_failslab+0xc2/0x120 [ 49.499085][ T5893] kmem_cache_alloc_noprof+0x92/0x6a0 [ 49.499101][ T5893] ? skb_clone+0x190/0x400 [ 49.499118][ T5893] skb_clone+0x190/0x400 [ 49.499134][ T5893] netlink_deliver_tap+0xaed/0xcc0 [ 49.499151][ T5893] netlink_unicast+0x62b/0x850 [ 49.499167][ T5893] ? __pfx_netlink_unicast+0x10/0x10 [ 49.499185][ T5893] netlink_sendmsg+0x8b0/0xda0 [ 49.499201][ T5893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.499217][ T5893] ? selinux_socket_sendmsg+0x198/0x2f0 [ 49.499234][ T5893] ____sys_sendmsg+0xa4d/0xbe0 [ 49.499245][ T5893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.499260][ T5893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 49.499275][ T5893] ? lock_acquire+0x1d1/0x380 [ 49.499287][ T5893] ? get_pid_task+0x2a/0x250 [ 49.499304][ T5893] ___sys_sendmsg+0x190/0x1e0 [ 49.499317][ T5893] ? __pfx____sys_sendmsg+0x10/0x10 [ 49.499330][ T5893] ? get_pid_task+0x106/0x250 [ 49.499349][ T5893] ? find_held_lock+0x2b/0x80 [ 49.499374][ T5893] __sys_sendmsg+0x160/0x210 [ 49.499391][ T5893] ? __pfqemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. x___sys_sendmsg+0x10/0x10 [ 49.499414][ T5893] do_syscall_64+0x123/0x790 [ 49.499427][ T5893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.499439][ T5893] RIP: 0033:0x7fcd1d99e199 [ 49.499448][ T5893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.499459][ T5893] RSP: 002b:00007fcd1e870028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.499470][ T5893] RAX: ffffffffffffffda RBX: 00007fcd1dc26090 RCX: 00007fcd1d99e199 [ 49.499477][ T5893] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 49.499483][ T5893] RBP: 00007fcd1e870090 R08: 0000000000000000 R09: 0000000000000000 [ 49.499493][ T5893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.499499][ T5893] R13: 00007fcd1dc26128 R14: 00007fcd1dc26090 R15: 00007fff17cd4988 [ 49.499512][ T5893] [ 49.726419][ T5928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 49.727740][ T5928] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.18'. [ 49.727988][ T5928] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.18'. [ 49.750612][ T5080] hid-generic 0005:057E:0004.0002: hidraw1: BLUETOOTH HID v0.00 Gamepad [syz0] on syz1 [ 49.801305][ T5933] fido_id[5933]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.443951][ T5948] netlink: 'syz.2.23': attribute type 2 has an invalid length. [ 50.443965][ T5948] netlink: 48 bytes leftover after parsing attributes in process `syz.2.23'. [ 50.449097][ T5948] : entered promiscuous mode [ 50.684823][ T5968] Zero length message leads to an empty skb [ 50.984514][ T5976] ip_tables: iptables: counters copy to user failed while replacing table [ 51.031715][ T5086] Bluetooth: hci1: command tx timeout [ 51.031782][ T5732] Bluetooth: hci0: command tx timeout [ 51.044956][ T5980] syzkaller0: entered promiscuous mode [ 51.044970][ T5980] syzkaller0: entered allmulticast mode [ 51.051691][ T5909] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.121837][ T5732] Bluetooth: hci2: command tx timeout [ 51.221728][ T5909] usb 7-1: Using ep0 maxpacket: 32 [ 51.223492][ T5909] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 51.225181][ T5909] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 51.226668][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 51.226681][ T5909] usb 7-1: Product: syz [ 51.226688][ T5909] usb 7-1: Manufacturer: syz [ 51.226695][ T5909] usb 7-1: SerialNumber: syz [ 51.230604][ T5909] usb 7-1: config 0 descriptor?? [ 51.231786][ T5972] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 51.233437][ T5909] hub 7-1:0.0: bad descriptor, ignoring hub [ 51.233450][ T5909] hub 7-1:0.0: probe with driver hub failed with error -5 [ 51.484059][ T5984] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 51.589181][ T645] Bluetooth: hci4: Frame reassembly failed (-84) [ 51.751670][ T5086] Bluetooth: hci3: command tx timeout [ 51.831664][ T5907] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 51.993541][ T5907] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 51.994889][ T5907] usb 8-1: config index 0 descriptor too short (expected 47, got 46) [ 51.994903][ T5907] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.994923][ T5907] usb 8-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x81, skipping [ 51.994933][ T5907] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 51.994952][ T5907] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.000038][ T5907] cxacru 8-1:1.0: usbatm_usb_probe: bind failed: -19! [ 52.199750][ T43] kauditd_printk_skb: 92 callbacks suppressed [ 52.199762][ T43] audit: type=1400 audit(1791272406.402:260): avc: denied { create } for pid=5992 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.200185][ T43] audit: type=1400 audit(1791272406.402:261): avc: denied { connect } for pid=5992 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.204737][ T43] audit: type=1400 audit(1791272406.412:262): avc: denied { create } for pid=5992 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.205021][ T43] audit: type=1400 audit(1791272406.412:263): avc: denied { ioctl } for pid=5992 comm="syz.3.41" path="socket:[8087]" dev="sockfs" ino=8087 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.205757][ T43] audit: type=1400 audit(1791272406.412:264): avc: denied { ioctl } for pid=5992 comm="syz.3.41" path="socket:[8079]" dev="sockfs" ino=8079 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 52.205962][ T43] audit: type=1400 audit(1791272406.412:265): avc: denied { write } for pid=5992 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.275713][ T5824] usb 8-1: USB disconnect, device number 2 [ 52.504266][ T5909] usb 7-1: USB disconnect, device number 2 [ 52.715378][ T43] audit: type=1400 audit(1791272406.922:266): avc: denied { bind } for pid=6002 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.717324][ T43] audit: type=1400 audit(1791272406.922:267): avc: denied { write } for pid=6002 comm="syz.0.44" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.717351][ T43] audit: type=1400 audit(1791272406.922:268): avc: denied { mount } for pid=6004 comm="syz.1.45" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 52.719790][ T6005] IPv6: sit1: Disabled Multicast RS [ 52.720725][ T6005] sit1: entered allmulticast mode [ 52.770836][ T43] audit: type=1400 audit(1791272406.972:269): avc: denied { ioctl } for pid=6004 comm="syz.1.45" path="socket:[8145]" dev="sockfs" ino=8145 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.911788][ T6020] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 53.111900][ T5086] Bluetooth: hci0: command tx timeout [ 53.111922][ T5086] Bluetooth: hci1: command tx timeout [ 53.191864][ T5737] Bluetooth: hci2: command tx timeout [ 53.254083][ T6046] netlink: 'syz.2.59': attribute type 1 has an invalid length. [ 53.259811][ T6046] macvtap1: entered allmulticast mode [ 53.359720][ T6050] netlink: 'syz.2.60': attribute type 1 has an invalid length. [ 53.375125][ T6051] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 53.592121][ T5732] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 53.629483][ T6060] FAULT_INJECTION: forcing a failure. [ 53.629483][ T6060] name failslab, interval 1, probability 0, space 0, times 0 [ 53.629511][ T6060] CPU: 1 UID: 0 PID: 6060 Comm: syz.1.62 Not tainted syzkaller #0 PREEMPT(full) [ 53.629530][ T6060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.629540][ T6060] Call Trace: [ 53.629546][ T6060] [ 53.629553][ T6060] dump_stack_lvl+0x100/0x190 [ 53.629582][ T6060] should_fail_ex.cold+0x5/0xa [ 53.629607][ T6060] should_failslab+0xc2/0x120 [ 53.629631][ T6060] __kmalloc_cache_noprof+0x91/0x6d0 [ 53.629649][ T6060] ? apply_wqattrs_prepare+0x136/0xbb0 [ 53.629674][ T6060] apply_wqattrs_prepare+0x136/0xbb0 [ 53.629692][ T6060] ? __alloc_workqueue+0x8ca/0x1950 [ 53.629721][ T6060] apply_workqueue_attrs_locked+0x64/0xe0 [ 53.629741][ T6060] __alloc_workqueue+0xd7b/0x1950 [ 53.629770][ T6060] alloc_workqueue_noprof+0xc7/0x130 [ 53.629792][ T6060] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 53.629821][ T6060] ? __asan_memcpy+0x3c/0x60 [ 53.629843][ T6060] loop_configure+0xddc/0x1590 [ 53.629880][ T6060] ? lock_acquire+0x1d1/0x380 [ 53.629900][ T6060] ? unwind_next_frame+0xbd/0x2090 [ 53.629930][ T6060] ? __lock_acquire+0x5c0/0x1f40 [ 53.629949][ T6060] ? is_bpf_text_address+0x8a/0x1a0 [ 53.629973][ T6060] ? __pfx_loop_configure+0x10/0x10 [ 53.629991][ T6060] ? bpf_ksym_find+0x128/0x1c0 [ 53.630028][ T6060] lo_ioctl+0xe45/0x1df0 [ 53.630048][ T6060] ? stack_depot_save_flags+0x27/0x9f0 [ 53.630074][ T6060] ? __lock_acquire+0x5c0/0x1f40 [ 53.630095][ T6060] ? __lock_acquire+0x5c0/0x1f40 [ 53.630115][ T6060] ? __kasan_slab_free+0x5f/0x80 [ 53.630135][ T6060] ? kfree+0x22b/0x6d0 [ 53.630149][ T6060] ? tomoyo_path_number_perm+0x46d/0x580 [ 53.630169][ T6060] ? security_file_ioctl+0xd3/0x230 [ 53.630188][ T6060] ? __x64_sys_ioctl+0xb7/0x210 [ 53.630206][ T6060] ? do_syscall_64+0x123/0x790 [ 53.630224][ T6060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.630247][ T6060] ? __pfx_lo_ioctl+0x10/0x10 [ 53.630265][ T6060] ? avc_has_extended_perms+0x201/0x1080 [ 53.630292][ T6060] ? find_held_lock+0x2b/0x80 [ 53.630343][ T6060] ? avc_has_extended_perms+0x33a/0x1080 [ 53.630368][ T6060] ? avc_has_extended_perms+0x33a/0x1080 [ 53.630404][ T6060] ? avc_has_extended_perms+0x484/0x1080 [ 53.630435][ T6060] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 53.630464][ T6060] ? kasan_quarantine_put+0x104/0x240 [ 53.630482][ T6060] ? blk_get_meta_cap+0xd4/0x6c0 [ 53.630506][ T6060] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 53.630526][ T6060] ? tomoyo_path_number_perm+0x28f/0x580 [ 53.630552][ T6060] ? blkdev_common_ioctl+0x515/0x2b80 [ 53.630598][ T6060] ? __fget_files+0x34/0x3d0 [ 53.630624][ T6060] ? __pfx_lo_ioctl+0x10/0x10 [ 53.630644][ T6060] blkdev_ioctl+0x5ad/0x6f0 [ 53.630682][ T6060] ? __pfx_blkdev_ioctl+0x10/0x10 [ 53.630704][ T6060] ? selinux_file_ioctl+0x13b/0x290 [ 53.630724][ T6060] ? selinux_file_ioctl+0xb6/0x290 [ 53.630747][ T6060] ? __pfx_blkdev_ioctl+0x10/0x10 [ 53.630770][ T6060] __x64_sys_ioctl+0x18e/0x210 [ 53.630791][ T6060] do_syscall_64+0x123/0x790 [ 53.630812][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.630828][ T6060] RIP: 0033:0x7f052919e199 [ 53.630843][ T6060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.630859][ T6060] RSP: 002b:00007f0529ffb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.630875][ T6060] RAX: ffffffffffffffda RBX: 00007f0529425fa0 RCX: 00007f052919e199 [ 53.630886][ T6060] RDX: 0000200000001ac0 RSI: 0000000000004c0a RDI: 0000000000000005 [ 53.630896][ T6060] RBP: 00007f0529ffb090 R08: 0000000000000000 R09: 0000000000000000 [ 53.630906][ T6060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.630915][ T6060] R13: 00007f0529426038 R14: 00007f0529425fa0 R15: 00007ffe16e6f6e8 [ 53.630939][ T6060] [ 53.772839][ T6070] capability: warning: `syz.1.66' uses deprecated v2 capabilities in a way that may be insecure [ 53.775469][ T6070] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 53.775484][ T6070] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 53.831660][ T5732] Bluetooth: hci3: command tx timeout [ 53.855024][ T6076] Invalid logical block size (4194304) [ 53.920720][ T6080] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.921394][ T6080] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.959937][ T6083] use of bytesused == 0 is deprecated and will be removed in the future, [ 53.959947][ T6083] use the actual size instead. [ 54.289443][ T6110] netlink: 40 bytes leftover after parsing attributes in process `syz.2.81'. [ 54.294187][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 54.294263][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 54.294357][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 54.401705][ T5907] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 54.415926][ T5732] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 54.470364][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 54.563717][ T5907] usb 8-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 54.564613][ T5907] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.569500][ T5907] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.569513][ T5907] usb 8-1: Product: syz [ 54.569521][ T5907] usb 8-1: Manufacturer: syz [ 54.569528][ T5907] usb 8-1: SerialNumber: syz [ 54.578048][ T5907] usbhid 8-1:1.0: couldn't find an input interrupt endpoint [ 54.596222][ T6139] FAULT_INJECTION: forcing a failure. [ 54.596222][ T6139] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.596251][ T6139] CPU: 3 UID: 0 PID: 6139 Comm: syz.2.89 Not tainted syzkaller #0 PREEMPT(full) [ 54.596265][ T6139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.596272][ T6139] Call Trace: [ 54.596277][ T6139] [ 54.596281][ T6139] dump_stack_lvl+0x100/0x190 [ 54.596300][ T6139] should_fail_ex.cold+0x5/0xa [ 54.596316][ T6139] _copy_from_user+0x2e/0xd0 [ 54.596331][ T6139] video_usercopy+0xe71/0x1730 [ 54.596343][ T6139] ? __pfx___video_do_ioctl+0x10/0x10 [ 54.596362][ T6139] ? __pfx_video_usercopy+0x10/0x10 [ 54.596381][ T6139] v4l2_ioctl+0x1bd/0x250 [ 54.596392][ T6139] ? __pfx_v4l2_ioctl+0x10/0x10 [ 54.596404][ T6139] __x64_sys_ioctl+0x18e/0x210 [ 54.596418][ T6139] do_syscall_64+0x123/0x790 [ 54.596432][ T6139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.596444][ T6139] RIP: 0033:0x7fad8119e199 [ 54.596453][ T6139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.596464][ T6139] RSP: 002b:00007fad82110028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.596475][ T6139] RAX: ffffffffffffffda RBX: 00007fad81425fa0 RCX: 00007fad8119e199 [ 54.596482][ T6139] RDX: 0000200000000200 RSI: 00000000c0205647 RDI: 0000000000000003 [ 54.596488][ T6139] RBP: 00007fad82110090 R08: 0000000000000000 R09: 0000000000000000 [ 54.596495][ T6139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.596501][ T6139] R13: 00007fad81426038 R14: 00007fad81425fa0 R15: 00007ffca9cbe568 [ 54.596515][ T6139] [ 54.787567][ T6103] gadgetfs: bound to dummy_udc driver [ 54.799708][ T5907] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 54.803993][ T5907] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 54.804160][ T5907] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 54.804184][ T5907] usb 8-1: media controller created [ 54.810476][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 55.007656][ T5907] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 55.021707][ T5909] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 55.022193][ C2] gadgetfs: connected [ 55.022677][ T5909] gadgetfs: disconnected [ 55.172466][ C2] gadgetfs: connected [ 55.173256][ T5909] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 55.173493][ T5909] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 55.173512][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.175663][ C2] gadgetfs: configuration #1 [ 55.201644][ T5732] Bluetooth: hci1: command tx timeout [ 55.201667][ T5732] Bluetooth: hci0: command tx timeout [ 55.281719][ T5737] Bluetooth: hci2: command tx timeout [ 55.358405][ T6190] gadgetfs: suspended from state 3 [ 55.359876][ T5824] usb 5-1: USB disconnect, device number 2 [ 55.361458][ T6190] gadgetfs: disconnected [ 55.459915][ T6207] raw_sendmsg: syz.2.96 forgot to set AF_INET. Fix it! [ 55.508414][ T6213] loop6: detected capacity change from 0 to 2640 [ 55.516851][ T5731] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.517119][ T5731] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.517344][ T5731] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.517551][ T5731] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.517784][ T5731] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.547098][ T6217] netlink: 9 bytes leftover after parsing attributes in process `syz.2.99'. [ 55.548393][ T6217] gretap0: entered promiscuous mode [ 55.562988][ T6217] syz.2.99 (6217) used greatest stack depth: 19744 bytes left [ 55.595804][ T37] IPVS: starting estimator thread 0... [ 55.631147][ T6232] netlink: Setting conntrack mark requires 'commit' flag. [ 55.631164][ T6232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 55.681943][ T6226] IPVS: using max 43 ests per chain, 103200 per kthread [ 55.712249][ T6239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.106'. [ 55.712265][ T6239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.106'. [ 55.712275][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 55.741498][ T6239] warning: `syz.2.106' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.743178][ T6239] netlink: 284 bytes leftover after parsing attributes in process `syz.2.106'. [ 55.744217][ T6239] netlink: 228 bytes leftover after parsing attributes in process `syz.2.106'. [ 55.772955][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.108'. [ 56.066263][ T6280] Invalid auth_tok structure returned from key query [ 56.066278][ T6280] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 56.066324][ T6280] One or more global auth toks could not properly register; rc = [-22] [ 56.066390][ T6280] Error validating options; rc = [-22] [ 56.680886][ T6264] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 56.680966][ T6264] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 56.688778][ T6264] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 56.695499][ T6264] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 56.695543][ T6264] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 56.697590][ T6264] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 56.699018][ T6264] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.699055][ T6264] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 56.700776][ T6264] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 56.702368][ T6264] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 56.702429][ T6264] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 56.703856][ T6264] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 56.822637][ T6328] netlink: 'syz.1.117': attribute type 2 has an invalid length. [ 56.849292][ T6335] Could not find key with description: [syz] [ 56.849301][ T6335] process_request_key_err: No key [ 56.849306][ T6335] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 56.849311][ T6335] One or more global auth toks could not properly register; rc = [-2] [ 56.849326][ T6335] Error validating options; rc = [-2] [ 56.849358][ T6334] Could not find key with description: [syz] [ 56.849370][ T6334] process_request_key_err: No key [ 56.849376][ T6334] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 56.849488][ T6334] One or more global auth toks could not properly register; rc = [-2] [ 56.849513][ T6334] Error validating options; rc = [-2] [ 56.961939][ T6348] FAULT_INJECTION: forcing a failure. [ 56.961939][ T6348] name fail_futex, interval 1, probability 0, space 0, times 1 [ 56.961960][ T6348] CPU: 2 UID: 0 PID: 6348 Comm: syz.0.124 Not tainted syzkaller #0 PREEMPT(full) [ 56.961973][ T6348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.961979][ T6348] Call Trace: [ 56.961983][ T6348] [ 56.961988][ T6348] dump_stack_lvl+0x100/0x190 [ 56.962009][ T6348] should_fail_ex.cold+0x5/0xa [ 56.962027][ T6348] get_futex_key+0x1d0/0x14f0 [ 56.962046][ T6348] ? __pfx_get_futex_key+0x10/0x10 [ 56.962063][ T6348] ? find_held_lock+0x2b/0x80 [ 56.962079][ T6348] ? do_mprotect_pkey+0x412/0xdd0 [ 56.962090][ T6348] ? do_mprotect_pkey+0x412/0xdd0 [ 56.962105][ T6348] futex_wake+0xf4/0x5e0 [ 56.962116][ T6348] ? up_write+0x2dc/0x5b0 [ 56.962131][ T6348] ? __pfx_futex_wake+0x10/0x10 [ 56.962148][ T6348] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 56.962162][ T6348] do_futex+0x2b2/0x440 [ 56.962179][ T6348] ? __pfx_do_futex+0x10/0x10 [ 56.962199][ T6348] __x64_sys_futex+0x34f/0x4d0 [ 56.962216][ T6348] ? __pfx___x64_sys_futex+0x10/0x10 [ 56.962237][ T6348] do_syscall_64+0x123/0x790 [ 56.962251][ T6348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.962263][ T6348] RIP: 0033:0x7fcd1d99e199 [ 56.962273][ T6348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.962310][ T6348] RSP: 002b:00007fcd1e8910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 56.962324][ T6348] RAX: ffffffffffffffda RBX: 00007fcd1dc25fa8 RCX: 00007fcd1d99e199 [ 56.962332][ T6348] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcd1dc25fac [ 56.962339][ T6348] RBP: 00007fcd1dc25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 56.962347][ T6348] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 56.962354][ T6348] R13: 00007fcd1dc26038 R14: 00007fff17cd48a0 R15: 00007fff17cd4988 [ 56.962369][ T6348] [ 57.042614][ T6352] openvswitch: netlink: Message has 4 unknown bytes. [ 57.072162][ T6348] netlink: 72 bytes leftover after parsing attributes in process `syz.0.124'. [ 57.132608][ T6361] sctp: [Deprecated]: syz.0.127 (pid 6361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 57.132608][ T6361] Use struct sctp_sack_info instead [ 57.161432][ T73] usb 8-1: USB disconnect, device number 3 [ 57.227847][ T6369] FAULT_INJECTION: forcing a failure. [ 57.227847][ T6369] name failslab, interval 1, probability 0, space 0, times 0 [ 57.227867][ T6369] CPU: 3 UID: 0 PID: 6369 Comm: syz.0.129 Not tainted syzkaller #0 PREEMPT(full) [ 57.227880][ T6369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.227886][ T6369] Call Trace: [ 57.227890][ T6369] [ 57.227895][ T6369] dump_stack_lvl+0x100/0x190 [ 57.227916][ T6369] should_fail_ex.cold+0x5/0xa [ 57.227932][ T6369] should_failslab+0xc2/0x120 [ 57.227948][ T6369] __kmalloc_noprof+0xfc/0x840 [ 57.227962][ T6369] ? lsm_blob_alloc+0x68/0x90 [ 57.227976][ T6369] lsm_blob_alloc+0x68/0x90 [ 57.227986][ T6369] security_task_alloc+0x2a/0x260 [ 57.228002][ T6369] copy_process+0x2c11/0x8380 [ 57.228023][ T6369] ? __pfx_copy_process+0x10/0x10 [ 57.228035][ T6369] ? kasan_save_track+0x14/0x30 [ 57.228049][ T6369] ? __kasan_kmalloc+0xaa/0xb0 [ 57.228063][ T6369] ? lockdep_init_map_type+0x5c/0x250 [ 57.228077][ T6369] ? lockdep_init_map_type+0x5c/0x250 [ 57.228091][ T6369] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 57.228109][ T6369] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 57.228125][ T6369] vhost_task_create+0x1db/0x370 [ 57.228136][ T6369] ? __pfx_vhost_task_create+0x10/0x10 [ 57.228150][ T6369] ? __pfx_vhost_task_fn+0x10/0x10 [ 57.228162][ T6369] ? register_lock_class+0x3f/0x7b0 [ 57.228174][ T6369] ? rcu_is_watching+0x13/0xc0 [ 57.228190][ T6369] ? trace_contention_end+0x126/0x160 [ 57.228206][ T6369] kvm_mmu_post_init_vm+0x1b3/0x360 [ 57.228221][ T6369] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 57.228236][ T6369] ? __pfx___mutex_lock+0x10/0x10 [ 57.228248][ T6369] ? kasan_quarantine_put+0x104/0x240 [ 57.228263][ T6369] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 57.228276][ T6369] ? lock_acquire+0x1d1/0x380 [ 57.228289][ T6369] ? do_raw_write_lock+0x11e/0x260 [ 57.228303][ T6369] ? find_held_lock+0x2b/0x80 [ 57.228318][ T6369] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 57.228333][ T6369] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 57.228351][ T6369] kvm_vcpu_ioctl+0x730/0x1700 [ 57.228367][ T6369] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 57.228382][ T6369] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.228397][ T6369] ? do_vfs_ioctl+0x226/0x13e0 [ 57.228414][ T6369] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 57.228426][ T6369] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 57.228442][ T6369] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 57.228459][ T6369] ? __fget_files+0x34/0x3d0 [ 57.228480][ T6369] ? selinux_file_ioctl+0x13b/0x290 [ 57.228493][ T6369] ? selinux_file_ioctl+0xb6/0x290 [ 57.228508][ T6369] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 57.228523][ T6369] __x64_sys_ioctl+0x18e/0x210 [ 57.228541][ T6369] do_syscall_64+0x123/0x790 [ 57.228561][ T6369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.228580][ T6369] RIP: 0033:0x7fcd1d99e199 [ 57.228595][ T6369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.228612][ T6369] RSP: 002b:00007fcd1e891028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.228632][ T6369] RAX: ffffffffffffffda RBX: 00007fcd1dc25fa0 RCX: 00007fcd1d99e199 [ 57.228645][ T6369] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 57.228655][ T6369] RBP: 00007fcd1e891090 R08: 0000000000000000 R09: 0000000000000000 [ 57.228663][ T6369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.228670][ T6369] R13: 00007fcd1dc26038 R14: 00007fcd1dc25fa0 R15: 00007fff17cd4988 [ 57.228684][ T6369] [ 57.244795][ T43] kauditd_printk_skb: 198 callbacks suppressed [ 57.244808][ T43] audit: type=1400 audit(1791272411.452:468): avc: denied { write } for pid=6372 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.285279][ T43] audit: type=1400 audit(1791272411.492:469): avc: denied { ioctl } for pid=6375 comm="syz.2.131" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13336 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.312606][ T43] audit: type=1400 audit(1791272411.522:470): avc: denied { append } for pid=6380 comm="syz.2.132" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 57.312789][ T43] audit: type=1400 audit(1791272411.522:471): avc: denied { open } for pid=6380 comm="syz.2.132" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 57.313073][ T43] audit: type=1400 audit(1791272411.522:472): avc: denied { ioctl } for pid=6380 comm="syz.2.132" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 57.314800][ T43] audit: type=1400 audit(1791272411.522:473): avc: denied { write } for pid=6378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.324322][ T6381] netlink: 32 bytes leftover after parsing attributes in process `syz.2.132'. [ 57.324336][ T6381] netlink: 32 bytes leftover after parsing attributes in process `syz.2.132'. [ 57.368163][ T43] audit: type=1400 audit(1791272411.572:474): avc: denied { write } for pid=6385 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.414668][ T6391] ======================================================= [ 57.414668][ T6391] WARNING: The mand mount option has been deprecated and [ 57.414668][ T6391] and is ignored by this kernel. Remove the mand [ 57.414668][ T6391] option from the mount to silence this warning. [ 57.414668][ T6391] ======================================================= [ 57.414895][ T6391] overlayfs: missing 'lowerdir' [ 57.437446][ T43] audit: type=1400 audit(1791272411.642:475): avc: denied { write } for pid=6390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.457235][ T43] audit: type=1400 audit(1791272411.662:476): avc: denied { map } for pid=6394 comm="syz.0.135" path="/dev/comedi4" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.481508][ T43] audit: type=1400 audit(1791272411.682:477): avc: denied { write } for pid=6397 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.542496][ T73] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 57.634930][ T6408] ima: policy update failed [ 57.667971][ T6412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 57.693594][ T73] usb 8-1: Using ep0 maxpacket: 8 [ 57.698785][ T73] usb 8-1: unable to get BOS descriptor or descriptor too short [ 57.698824][ T73] usb 8-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=1d.2e [ 57.710006][ T73] usb 8-1: config 1 interface 0 has no altsetting 0 [ 57.711521][ T73] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.711534][ T73] usb 8-1: Product: syz [ 57.712212][ T73] usb 8-1: Manufacturer: syz [ 57.712221][ T73] usb 8-1: SerialNumber: syz [ 57.868831][ T6419] FAULT_INJECTION: forcing a failure. [ 57.868831][ T6419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.868851][ T6419] CPU: 1 UID: 0 PID: 6419 Comm: syz.0.141 Not tainted syzkaller #0 PREEMPT(full) [ 57.868863][ T6419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.868870][ T6419] Call Trace: [ 57.868874][ T6419] [ 57.868878][ T6419] dump_stack_lvl+0x100/0x190 [ 57.868898][ T6419] should_fail_ex.cold+0x5/0xa [ 57.868914][ T6419] _copy_from_user+0x2e/0xd0 [ 57.868929][ T6419] memdup_user_nul+0x6c/0x120 [ 57.868941][ T6419] ima_write_policy+0x122/0x480 [ 57.868954][ T6419] ? __pfx_ima_write_policy+0x10/0x10 [ 57.868965][ T6419] ? ksys_write+0x12a/0x250 [ 57.868983][ T6419] vfs_write+0x2aa/0x1050 [ 57.868995][ T6419] ? __pfx_ima_write_policy+0x10/0x10 [ 57.869006][ T6419] ? lock_acquire+0x1d1/0x380 [ 57.869019][ T6419] ? __fget_files+0x34/0x3d0 [ 57.869034][ T6419] ? __pfx_vfs_write+0x10/0x10 [ 57.869054][ T6419] ? find_held_lock+0x2b/0x80 [ 57.869070][ T6419] ? __fget_files+0x215/0x3d0 [ 57.869087][ T6419] ? __fget_files+0x21f/0x3d0 [ 57.869105][ T6419] ksys_write+0x12a/0x250 [ 57.869118][ T6419] ? __pfx_ksys_write+0x10/0x10 [ 57.869134][ T6419] do_syscall_64+0x123/0x790 [ 57.869149][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.869160][ T6419] RIP: 0033:0x7fcd1d99e199 [ 57.869170][ T6419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.869180][ T6419] RSP: 002b:00007fcd1e891028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.869191][ T6419] RAX: ffffffffffffffda RBX: 00007fcd1dc25fa0 RCX: 00007fcd1d99e199 [ 57.869198][ T6419] RDX: 000000000000000e RSI: 0000200000000100 RDI: 0000000000000003 [ 57.869204][ T6419] RBP: 00007fcd1e891090 R08: 0000000000000000 R09: 0000000000000000 [ 57.869210][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.869217][ T6419] R13: 00007fcd1dc26038 R14: 00007fcd1dc25fa0 R15: 00007fff17cd4988 [ 57.869231][ T6419] [ 57.869344][ T6418] ima: policy update failed [ 57.930454][ T73] usb 8-1: USB disconnect, device number 4 [ 58.001754][ T5737] Bluetooth: hci0: command 0x0c1a tx timeout [ 58.011760][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.162091][ T10] usb 6-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 58.162944][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.164988][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.165007][ T10] usb 6-1: Product: syz [ 58.165019][ T10] usb 6-1: Manufacturer: syz [ 58.165032][ T10] usb 6-1: SerialNumber: syz [ 58.170895][ T10] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 58.171364][ T6431] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.171435][ T6431] ata1.00: non-matching transfer count (32/4096) [ 58.211039][ T6434] input: syz1 as /devices/virtual/input/input6 [ 58.377288][ T6414] gadgetfs: bound to dummy_udc driver [ 58.381945][ T10] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 58.385123][ T10] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 58.385247][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 58.385267][ T10] usb 6-1: media controller created [ 58.390023][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 58.503878][ T6444] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 58.587254][ T10] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 58.621738][ T5080] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 58.621971][ C0] gadgetfs: connected [ 58.622439][ T5080] gadgetfs: disconnected [ 58.711711][ T5737] Bluetooth: hci3: command 0x0c1a tx timeout [ 58.711756][ T5737] Bluetooth: hci1: command 0x0c1a tx timeout [ 58.711758][ T5732] Bluetooth: hci2: command 0x0c1a tx timeout [ 58.771905][ C0] gadgetfs: connected [ 58.772775][ T5080] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 58.773086][ T5080] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 58.773114][ T5080] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.777664][ C0] gadgetfs: configuration #1 [ 58.938615][ T6477] gadgetfs: suspended from state 3 [ 58.939037][ T6477] gadgetfs: disconnected [ 58.940838][ T50] usb 5-1: USB disconnect, device number 3 [ 59.047566][ T6485] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 59.047675][ T6485] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 59.047770][ T6485] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 59.047869][ T6485] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 59.047963][ T6485] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 59.048056][ T6485] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 59.048150][ T6485] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 59.048243][ T6485] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 59.109886][ T6489] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 5 out of range (51000000..2150000000) [ 59.270683][ T6494] process 'syz.3.172' launched './file0' with NULL argv: empty string added [ 59.423434][ T6502] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 59.601286][ T6509] 0x000000000000-0x000000010000 : "" [ 59.609193][ T6509] ftl_cs: FTL header not found. [ 59.773127][ T6516] kvm [6515]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 60.071661][ T5732] Bluetooth: hci0: command 0x0c1a tx timeout [ 60.324130][ T6533] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.420595][ T6533] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.496191][ T6533] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.594261][ T6533] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.599734][ T6544] netlink: 152 bytes leftover after parsing attributes in process `syz.2.189'. [ 60.681703][ T5838] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.691865][ T5838] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.691941][ T5838] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.692344][ T5775] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.697726][ T5824] usb 6-1: USB disconnect, device number 2 [ 60.754117][ T6550] ±ÿ)”ëfl: renamed from lo (while UP) [ 60.802643][ T5732] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.802670][ T5732] Bluetooth: hci2: command 0x0c1a tx timeout [ 60.802684][ T5732] Bluetooth: hci3: command 0x0c1a tx timeout [ 61.041344][ T6560] netlink: 36 bytes leftover after parsing attributes in process `syz.0.195'. [ 61.083974][ T6560] syz.0.195 uses obsolete (PF_INET,SOCK_PACKET) [ 61.461772][ T5824] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.493595][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.201'. [ 61.614106][ T5824] usb 6-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 61.615042][ T5824] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.616615][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.616628][ T5824] usb 6-1: Product: syz [ 61.616635][ T5824] usb 6-1: Manufacturer: syz [ 61.616642][ T5824] usb 6-1: SerialNumber: syz [ 61.624454][ T5824] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 61.825776][ T6570] gadgetfs: bound to dummy_udc driver [ 61.827990][ T5824] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 61.831082][ T5824] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 61.831287][ T5824] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 61.831308][ T5824] usb 6-1: media controller created [ 61.836049][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 61.927703][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.206'. [ 61.941158][ T6609] vlan2: entered allmulticast mode [ 61.941172][ T6609] bridge1: entered allmulticast mode [ 62.032128][ T5824] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 62.071659][ T5835] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 62.071870][ C3] gadgetfs: connected [ 62.071942][ T5835] gadgetfs: disconnected [ 62.120646][ T6621] netlink: 412 bytes leftover after parsing attributes in process `syz.0.209'. [ 62.148599][ T6621] netlink: 412 bytes leftover after parsing attributes in process `syz.0.209'. [ 62.152841][ T5737] Bluetooth: hci0: command 0x0c1a tx timeout [ 62.221960][ C3] gadgetfs: connected [ 62.222859][ T5835] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 62.223158][ T5835] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 62.223188][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.225690][ C3] gadgetfs: configuration #1 [ 62.240600][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 62.245888][ T6619] netlink: 'syz.2.207': attribute type 1 has an invalid length. [ 62.245905][ T6619] netlink: 96 bytes leftover after parsing attributes in process `syz.2.207'. [ 62.382858][ T6634] gadgetfs: suspended from state 3 [ 62.383252][ T5995] usb 5-1: USB disconnect, device number 4 [ 62.384452][ T6634] gadgetfs: disconnected [ 62.494245][ T6637] syzkaller0: entered promiscuous mode [ 62.494289][ T6637] syzkaller0: entered allmulticast mode [ 62.495611][ T43] kauditd_printk_skb: 37 callbacks suppressed [ 62.495627][ T43] audit: type=1400 audit(1791272416.702:515): avc: denied { setopt } for pid=6636 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.495711][ T43] audit: type=1400 audit(1791272416.702:516): avc: denied { write } for pid=6636 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.585312][ T6645] syzkaller0: left promiscuous mode [ 62.585331][ T6645] syzkaller0: left allmulticast mode [ 62.591682][ T6640] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 62.623870][ T43] audit: type=1400 audit(1791272416.822:517): avc: denied { ioctl } for pid=6647 comm="syz.2.218" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.625058][ T43] audit: type=1400 audit(1791272416.832:518): avc: denied { set_context_mgr } for pid=6647 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 62.626359][ T43] audit: type=1400 audit(1791272416.832:519): avc: denied { write } for pid=6647 comm="syz.2.218" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.627801][ T43] audit: type=1400 audit(1791272416.832:520): avc: denied { map } for pid=6647 comm="syz.2.218" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.628838][ T43] audit: type=1400 audit(1791272416.832:521): avc: denied { call } for pid=6647 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 62.629316][ T6648] FAULT_INJECTION: forcing a failure. [ 62.629316][ T6648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.629334][ T6648] CPU: 3 UID: 0 PID: 6648 Comm: syz.2.218 Not tainted syzkaller #0 PREEMPT(full) [ 62.629346][ T6648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.629352][ T6648] Call Trace: [ 62.629356][ T6648] [ 62.629361][ T6648] dump_stack_lvl+0x100/0x190 [ 62.629391][ T6648] should_fail_ex.cold+0x5/0xa [ 62.629407][ T6648] _copy_to_user+0x32/0xd0 [ 62.629428][ T6648] simple_read_from_buffer+0xcb/0x170 [ 62.629452][ T6648] proc_fail_nth_read+0x1af/0x230 [ 62.629475][ T6648] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 62.629499][ T6648] ? rw_verify_area+0xce/0x6d0 [ 62.629518][ T6648] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 62.629540][ T6648] vfs_read+0x1e4/0xb40 [ 62.629559][ T6648] ? lock_acquire+0x1d1/0x380 [ 62.629578][ T6648] ? __fget_files+0x34/0x3d0 [ 62.629603][ T6648] ? __pfx_vfs_read+0x10/0x10 [ 62.629620][ T6648] ? find_held_lock+0x2b/0x80 [ 62.629643][ T6648] ? __fget_files+0x215/0x3d0 [ 62.629660][ T6648] ? __fget_files+0x21f/0x3d0 [ 62.629678][ T6648] ksys_read+0x12a/0x250 [ 62.629690][ T6648] ? __pfx_ksys_read+0x10/0x10 [ 62.629706][ T6648] do_syscall_64+0x123/0x790 [ 62.629725][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.629736][ T6648] RIP: 0033:0x7fad8115e9ce [ 62.629745][ T6648] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 62.629756][ T6648] RSP: 002b:00007fad8210ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.629767][ T6648] RAX: ffffffffffffffda RBX: 00007fad821106c0 RCX: 00007fad8115e9ce [ 62.629774][ T6648] RDX: 000000000000000f RSI: 00007fad821100a0 RDI: 0000000000000007 [ 62.629780][ T6648] RBP: 00007fad82110090 R08: 0000000000000000 R09: 0000000000000000 [ 62.629787][ T6648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.629793][ T6648] R13: 00007fad81426038 R14: 00007fad81425fa0 R15: 00007ffca9cbe568 [ 62.629807][ T6648] [ 62.684537][ T43] audit: type=1400 audit(1791272416.892:522): avc: denied { create } for pid=6651 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.701172][ T6655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.220'. [ 62.701206][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 62.740392][ T43] audit: type=1400 audit(1791272416.942:523): avc: denied { accept } for pid=6651 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.826640][ T43] audit: type=1400 audit(1791272417.032:524): avc: denied { append } for pid=6651 comm="syz.2.219" name="ptp1" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.884009][ T5737] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.884042][ T5737] Bluetooth: hci2: command 0x0c1a tx timeout [ 62.884060][ T5737] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.072938][ T6668] FAULT_INJECTION: forcing a failure. [ 63.072938][ T6668] name failslab, interval 1, probability 0, space 0, times 0 [ 63.072967][ T6668] CPU: 1 UID: 0 PID: 6668 Comm: syz.0.223 Not tainted syzkaller #0 PREEMPT(full) [ 63.072987][ T6668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.072998][ T6668] Call Trace: [ 63.073004][ T6668] [ 63.073011][ T6668] dump_stack_lvl+0x100/0x190 [ 63.073042][ T6668] should_fail_ex.cold+0x5/0xa [ 63.073068][ T6668] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 63.073097][ T6668] should_failslab+0xc2/0x120 [ 63.073123][ T6668] __kmalloc_cache_noprof+0x91/0x6d0 [ 63.073144][ T6668] ? __kthread_create_on_node+0xce/0x3f0 [ 63.073173][ T6668] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 63.073195][ T6668] __kthread_create_on_node+0xce/0x3f0 [ 63.073220][ T6668] ? __pfx___kthread_create_on_node+0x10/0x10 [ 63.073254][ T6668] ? lock_acquire+0x1d1/0x380 [ 63.073276][ T6668] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 63.073300][ T6668] kthread_create_on_node+0xc7/0x100 [ 63.073324][ T6668] ? __pfx_kthread_create_on_node+0x10/0x10 [ 63.073346][ T6668] ? find_held_lock+0x2b/0x80 [ 63.073374][ T6668] ? setup_udp_tunnel_sock+0x4fe/0x5f0 [ 63.073402][ T6668] ? setup_udp_tunnel_sock+0x4fe/0x5f0 [ 63.073432][ T6668] ? do_raw_spin_unlock+0x145/0x1e0 [ 63.073461][ T6668] rxrpc_open_socket+0x3f8/0x6e0 [ 63.073487][ T6668] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 63.073515][ T6668] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 63.073538][ T6668] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 63.073561][ T6668] ? net_generic+0x25/0x2a0 [ 63.073589][ T6668] ? rcu_is_watching+0x13/0xc0 [ 63.073618][ T6668] rxrpc_lookup_local+0xac7/0x1220 [ 63.073648][ T6668] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 63.073674][ T6668] ? __local_bh_enable_ip+0xa5/0x120 [ 63.073697][ T6668] rxrpc_sendmsg+0x34a/0x680 [ 63.073728][ T6668] ____sys_sendmsg+0xa4d/0xbe0 [ 63.073746][ T6668] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 63.073773][ T6668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.073797][ T6668] ? lock_acquire+0x1d1/0x380 [ 63.073816][ T6668] ? get_pid_task+0x2a/0x250 [ 63.073842][ T6668] ___sys_sendmsg+0x190/0x1e0 [ 63.073872][ T6668] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.073893][ T6668] ? get_pid_task+0x106/0x250 [ 63.073929][ T6668] ? find_held_lock+0x2b/0x80 [ 63.073972][ T6668] __sys_sendmsg+0x160/0x210 [ 63.073999][ T6668] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.074041][ T6668] do_syscall_64+0x123/0x790 [ 63.074065][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.074085][ T6668] RIP: 0033:0x7fcd1d99e199 [ 63.074101][ T6668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.074118][ T6668] RSP: 002b:00007fcd1e891028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.074138][ T6668] RAX: ffffffffffffffda RBX: 00007fcd1dc25fa0 RCX: 00007fcd1d99e199 [ 63.074150][ T6668] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 63.074161][ T6668] RBP: 00007fcd1e891090 R08: 0000000000000000 R09: 0000000000000000 [ 63.074173][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.074183][ T6668] R13: 00007fcd1dc26038 R14: 00007fcd1dc25fa0 R15: 00007fff17cd4988 [ 63.074209][ T6668] [ 63.396692][ T6675] capability: warning: `syz.0.226' uses 32-bit capabilities (legacy support in use) [ 63.635131][ T6696] netlink: 'syz.0.232': attribute type 10 has an invalid length. [ 63.646368][ T6696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.648390][ T6696] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 63.705302][ T6700] [ 63.706330][ T6700] ====================================================== [ 63.708751][ T6700] WARNING: possible circular locking dependency detected [ 63.711277][ T6700] syzkaller #0 Not tainted [ 63.713129][ T6700] ------------------------------------------------------ [ 63.715831][ T6700] syz.0.235/6700 is trying to acquire lock: [ 63.718134][ T6700] ffffffff903fec68 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 63.721832][ T6700] [ 63.721832][ T6700] but task is already holding lock: [ 63.724713][ T6700] ffff88805734d200 (&sb->s_type->i_mutex_key#29){+.+.}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 63.728521][ T6700] [ 63.728521][ T6700] which lock already depends on the new lock. [ 63.728521][ T6700] [ 63.732384][ T6700] [ 63.732384][ T6700] the existing dependency chain (in reverse order) is: [ 63.735568][ T6700] [ 63.735568][ T6700] -> #3 (&sb->s_type->i_mutex_key#29){+.+.}-{4:4}: [ 63.738933][ T6700] lock_acquire+0x1d1/0x380 [ 63.740758][ T6700] down_write+0x8b/0x1f0 [ 63.742689][ T6700] configfs_depend_item_unlocked+0xf3/0x6a0 [ 63.745166][ T6700] usbg_make_tpg+0x251/0x610 [ 63.747184][ T6700] target_fabric_make_tpg+0xab/0x8c0 [ 63.749465][ T6700] configfs_mkdir+0x525/0xd40 [ 63.751590][ T6700] vfs_mkdir+0x364/0x850 [ 63.753534][ T6700] filename_mkdirat+0x48b/0x5e0 [ 63.755564][ T6700] __x64_sys_mkdirat+0x89/0xc0 [ 63.757579][ T6700] do_syscall_64+0x123/0x790 [ 63.759669][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.762173][ T6700] [ 63.762173][ T6700] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 63.765238][ T6700] lock_acquire+0x1d1/0x380 [ 63.767221][ T6700] __mutex_lock+0x1a4/0x1bd0 [ 63.769264][ T6700] tcm_alloc_inst+0x5f/0x1e0 [ 63.771392][ T6700] try_get_usb_function_instance+0x136/0x1f0 [ 63.773969][ T6700] usb_get_function_instance+0x16/0x70 [ 63.776361][ T6700] function_make+0x18c/0x3f0 [ 63.778416][ T6700] configfs_mkdir+0x525/0xd40 [ 63.780286][ T6700] vfs_mkdir+0x364/0x850 [ 63.782181][ T6700] filename_mkdirat+0x48b/0x5e0 [ 63.784098][ T6700] __x64_sys_mkdirat+0x89/0xc0 [ 63.785959][ T6700] do_syscall_64+0x123/0x790 [ 63.787754][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.790026][ T6700] [ 63.790026][ T6700] -> #1 (func_lock){+.+.}-{4:4}: [ 63.792201][ T6700] lock_acquire+0x1d1/0x380 [ 63.793732][ T6700] __mutex_lock+0x1a4/0x1bd0 [ 63.795462][ T6700] try_get_usb_function_instance+0x26/0x1f0 [ 63.797481][ T6700] usb_get_function_instance+0x16/0x70 [ 63.799340][ T6700] function_make+0x18c/0x3f0 [ 63.800925][ T6700] configfs_mkdir+0x525/0xd40 [ 63.802578][ T6700] vfs_mkdir+0x364/0x850 [ 63.804026][ T6700] filename_mkdirat+0x48b/0x5e0 [ 63.805678][ T6700] __x64_sys_mkdirat+0x89/0xc0 [ 63.807315][ T6700] do_syscall_64+0x123/0x790 [ 63.808928][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.811326][ T6700] [ 63.811326][ T6700] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 63.814178][ T6700] check_prev_add+0xeb/0xe60 [ 63.816096][ T6700] __lock_acquire+0x1528/0x1f40 [ 63.817902][ T6700] lock_acquire+0x1d1/0x380 [ 63.819794][ T6700] __mutex_lock+0x1a4/0x1bd0 [ 63.821641][ T6700] configfs_rmdir+0x5ae/0x950 [ 63.823508][ T6700] vfs_rmdir+0x328/0x8a0 [ 63.825237][ T6700] filename_rmdir+0x31a/0x5c0 [ 63.827161][ T6700] __x64_sys_rmdir+0x46/0x70 [ 63.829011][ T6700] do_syscall_64+0x123/0x790 [ 63.830830][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.833096][ T6700] [ 63.833096][ T6700] other info that might help us debug this: [ 63.833096][ T6700] [ 63.836664][ T6700] Chain exists of: [ 63.836664][ T6700] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#29 [ 63.836664][ T6700] [ 63.841967][ T6700] Possible unsafe locking scenario: [ 63.841967][ T6700] [ 63.844391][ T6700] CPU0 CPU1 [ 63.846094][ T6700] ---- ---- [ 63.847960][ T6700] lock(&sb->s_type->i_mutex_key#29); [ 63.849812][ T6700] lock(tpg_instances_lock); [ 63.852402][ T6700] lock(&sb->s_type->i_mutex_key#29); [ 63.855875][ T6700] lock(gadget_subsys.su_mutex); [ 63.857557][ T6700] [ 63.857557][ T6700] *** DEADLOCK *** [ 63.857557][ T6700] [ 63.860494][ T6700] locks held by syz.0.235/6700: 3, last CPU#2: [ 63.862452][ T6700] #0: ffff888023f2a460 (sb_writers#16){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 63.865623][ T6700] #1: ffff88805700f800 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 63.869674][ T6700] #2: ffff88805734d200 (&sb->s_type->i_mutex_key#29){+.+.}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 63.873104][ T6700] [ 63.873104][ T6700] stack backtrace: [ 63.874938][ T6700] CPU: 2 UID: 0 PID: 6700 Comm: syz.0.235 Not tainted syzkaller #0 PREEMPT(full) [ 63.877751][ T6700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.880722][ T6700] Call Trace: [ 63.881879][ T6700] [ 63.883002][ T6700] dump_stack_lvl+0x100/0x190 [ 63.884741][ T6700] print_circular_bug.cold+0x178/0x1be [ 63.886794][ T6700] check_noncircular+0x146/0x160 [ 63.888658][ T6700] check_prev_add+0xeb/0xe60 [ 63.890278][ T6700] ? __bfs+0x150/0x2a0 [ 63.891681][ T6700] __lock_acquire+0x1528/0x1f40 [ 63.893553][ T6700] lock_acquire+0x1d1/0x380 [ 63.895203][ T6700] ? configfs_rmdir+0x5ae/0x950 [ 63.896845][ T6700] ? __pfx___might_resched+0x10/0x10 [ 63.898803][ T6700] ? __lock_acquire+0x5c0/0x1f40 [ 63.900515][ T6700] __mutex_lock+0x1a4/0x1bd0 [ 63.902176][ T6700] ? configfs_rmdir+0x5ae/0x950 [ 63.903973][ T6700] ? configfs_rmdir+0x5ae/0x950 [ 63.905655][ T6700] ? reacquire_held_locks+0xdd/0x1f0 [ 63.907638][ T6700] ? __pfx___mutex_lock+0x10/0x10 [ 63.909282][ T6700] ? do_raw_spin_lock+0x128/0x260 [ 63.910969][ T6700] ? find_held_lock+0x2b/0x80 [ 63.912772][ T6700] ? fast_dput+0x2fe/0x6f0 [ 63.914457][ T6700] ? do_raw_spin_unlock+0x145/0x1e0 [ 63.916203][ T6700] ? _raw_spin_unlock+0x28/0x50 [ 63.918048][ T6700] ? fast_dput+0x168/0x6f0 [ 63.919704][ T6700] ? configfs_rmdir+0x5ae/0x950 [ 63.921544][ T6700] configfs_rmdir+0x5ae/0x950 [ 63.923325][ T6700] ? __pfx_configfs_rmdir+0x10/0x10 [ 63.925133][ T6700] ? __pfx_down_write+0x10/0x10 [ 63.926917][ T6700] vfs_rmdir+0x328/0x8a0 [ 63.928491][ T6700] filename_rmdir+0x31a/0x5c0 [ 63.930202][ T6700] ? __pfx_filename_rmdir+0x10/0x10 [ 63.932114][ T6700] ? do_getname+0x191/0x390 [ 63.933740][ T6700] __x64_sys_rmdir+0x46/0x70 [ 63.935423][ T6700] do_syscall_64+0x123/0x790 [ 63.937090][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.939187][ T6700] RIP: 0033:0x7fcd1d99e199 [ 63.940805][ T6700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.947623][ T6700] RSP: 002b:00007fcd1e891028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 63.950637][ T6700] RAX: ffffffffffffffda RBX: 00007fcd1dc25fa0 RCX: 00007fcd1d99e199 [ 63.953490][ T6700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 63.956344][ T6700] RBP: 00007fcd1da358e0 R08: 0000000000000000 R09: 0000000000000000 [ 63.959203][ T6700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.962087][ T6700] R13: 00007fcd1dc26038 R14: 00007fcd1dc25fa0 R15: 00007fff17cd4988 [ 63.964654][ T6700] [ 64.213645][ T5995] usb 6-1: USB disconnect, device number 3 [ 71.192057][ T9] cfg80211: failed to load regulatory.db [ 71.192629][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.192722][ T1438] ieee802154 phy1 wpan1: encryption failed: -22