last executing test programs: 51.329584831s ago: executing program 0 (id=153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'bridge0\x00', 0x8000}) 50.808905145s ago: executing program 0 (id=159): r0 = gettid() ioprio_get$pid(0x1, r0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) (async, rerun: 64) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 64) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) (rerun: 64) read$char_usb(r2, &(0x7f00000002c0)=""/151, 0x97) (async, rerun: 64) close(r2) (async, rerun: 64) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) (async, rerun: 64) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) (rerun: 64) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x7}) (async, rerun: 32) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x81, 0xfffffffffffffff9, 0x0, 0x0, 0x3}) (rerun: 32) capset(0x0, 0x0) (async) r5 = syz_io_uring_setup(0x1c8d, &(0x7f0000000180)={0x0, 0x1775, 0x40, 0x2, 0x27}, &(0x7f0000000300), &(0x7f0000000240), &(0x7f0000000000)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x0) (async, rerun: 64) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f00000000c0)) (rerun: 64) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000040)=[@ioring_restriction_sqe_flags_required={0x3, 0x18}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async, rerun: 32) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f00000009c0)={&(0x7f0000000580)={{@host, 0x2}, {@local, 0x4}, 0x400, "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"}, 0x418, 0xf}) (async, rerun: 32) lseek(r1, 0x2004, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000004000000061498800"/32], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) 50.520430037s ago: executing program 0 (id=161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000013c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x740, 0x1a8, 0x440, 0x0, 0x1a8, 0x288, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x180, 0x1a8, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x5e, 0x0, 0x0, 0x0, 0x0, @local, @ipv4={'\x00', '\xff\xff', @remote}, @private2, [], [0x0, 0x0, 0xffffffff]}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x4e20, 0x2f, 0x6, 0x4e22, 0x20, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @empty, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @loopback, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x9, 0x5, 0x2, 0x8000, 0xc, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@rt={{0x138}, {0x0, [0x2], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 50.322911123s ago: executing program 0 (id=162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d93", 0xe6}], 0x1, &(0x7f00000008c0)=[@iv={0x50, 0x117, 0x2, 0x35, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf9325571"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x68, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df4", 0x9c}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000002c0)={0x1, 0x1, 0x5, r6, 0x8}, 0xc) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 49.622621648s ago: executing program 0 (id=164): r0 = fsopen(&(0x7f0000000000)='hfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 49.121178491s ago: executing program 0 (id=166): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$inet6(r0, 0x0, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={0x0}) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) 33.948048569s ago: executing program 32 (id=166): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$inet6(r0, 0x0, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={0x0}) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) 4.374420898s ago: executing program 4 (id=420): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$inet6(r0, 0x0, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={0x0}) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) 4.156690457s ago: executing program 4 (id=422): syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 3.530687353s ago: executing program 1 (id=424): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @multicast1}, &(0x7f0000000100)=0xc) r3 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000201, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', r2, r3, 0x0, 0x3, 0x4}, 0x50) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) r5 = syz_open_dev$sg(&(0x7f0000001500), 0xd44f, 0x80200) ioctl$SG_SET_KEEP_ORPHAN(r5, 0x2287, &(0x7f0000001540)=0x8) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x0, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x0, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x0, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x3}, 0x1, 0x0, 0x0, 0x8180}, 0x4000001) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) socket$nl_netfilter(0x10, 0x3, 0xc) setreuid(r6, 0x0) setresuid(r6, r6, 0xee01) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 3.099760321s ago: executing program 1 (id=426): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x6}}}, 0xa) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, &(0x7f0000000b80)) r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000040b7030000000000008500000006000000870000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0xd2, &(0x7f0000000140)=""/210}, 0x90) 3.074748476s ago: executing program 4 (id=427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000140700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a30000000001800038014000080080003400000000205"], 0xc8}}, 0x0) 2.788538285s ago: executing program 4 (id=429): r0 = syz_ublk_setup_io_uring(0x223c, &(0x7f0000000000)={0x0, 0x7442, 0x0, 0x0, 0x3c1}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000740)={0x5, 0x1, 0x1, '\x00', 0x1}, 0x1) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x1a7) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) io_setup(0x80000000, &(0x7f0000000640)) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/185, 0xb9}, {&(0x7f0000000340)=""/32, 0x20}, {&(0x7f0000000380)}, {&(0x7f0000000440)=""/78, 0x4e}, {&(0x7f00000004c0)=""/152, 0x98}], 0x5}, 0xb07b90f46fa4112b) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x21, 0x0, 0x5b) umount2(&(0x7f0000000180)='./file0\x00', 0xa) 2.588538611s ago: executing program 1 (id=431): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x6, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000480), 0xfffffffd, 0x404000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8002, 0x8, 0x101, 0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="1c000f000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x20000000000002e5, &(0x7f0000000c80)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffc413ffffb703000008000000b70400000000000000000071c68637524c9ebeff00c5348563e4de19796f27d15df16e451e7654be3dd658c7430017aa1e2a14c526fe785e2a54cdc58e5b70f89de88fe7cbda48ec50455c81ef8aad459904c88e18bfd89636d86ec999faee2a98397a36fc787e3e0531090117175081a763410347452b58e2f442668f21c4bbecefd1ed09b9c910057add5e4df2ca0859c348c8339d4c7b89285ec5d5352eecec142dacc8bdce1f0a4adaeace23cccbc812e3027793bb75c1debdc38e7f0f2689f8b6fb8b76c00ff92568ae0a67a82d2e8153a41dac60fac3cb154a740db930665b647a61345873bd9a1750a7df098538b635c1f0ff7dffffffffff3b4364e1afaa8dc3e65ede0c5dcfe6c54ceb484e26b604e8b59ecfc21e86b2b037be12f088ac873cd9665b05355a7e541799e8414209f61e6c91a74bae36be1268cbeba5bba081df74275ad586db281fad63d2620116202494cabb6c40f4e9d9dca03e07587fbce239b97f28ea27f87167e9857d3297505c519fb268e504964a", @ANYRES32=r1, @ANYRES64=r3], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0x8, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x4, 0xc}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf3}}, './file0\x00'}) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r6, 0x4008af75, &(0x7f0000000200)={0x1}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000580)=ANY=[], 0x54}}, 0x8001) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0xf4e) recvmsg(r7, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x2020) sendmsg$inet(r7, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x4004000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1000004, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) move_pages(0x0, 0x3, &(0x7f0000000380)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil], &(0x7f00000003c0)=[0x2], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000280)={0x1, 0x4, 0x0, 0x0, 0x3fd, 0x0, 0x1}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r9 = socket$rds(0x15, 0x5, 0x0) socket$kcm(0x2, 0x5, 0x106) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="2c5766646e7f3d5c08a341be0430071bad79fa183acbc92eb2c5e2ad39", @ANYRESHEX=r9, @ANYBLOB=',\x00']) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0900000018000000620c00004000000042000000", @ANYRES32=0x1, @ANYBLOB="00000000b8ceafbb0f2f4c3e68899b0f3c91e251c3fc1d6f63af9f92596758c0d7acd17038c02bc05622cdfc23fdaf97e28004d2878ec056122eb84c4ce294995808e182dfaef2d471a2fc0fa53d3b010410a8daec78192c0722cad514b6a1c5a92d2b00000000000000000000000000000000bd77e5c0cfb098ac078e9ea421823b669509379669bf9b70", @ANYRES32=0x0, @ANYRES8, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r10, &(0x7f0000000000), 0x0}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2.572341301s ago: executing program 3 (id=432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa, 0x61}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0x44c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x420, 0x2, [@TCA_BPF_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x8, 0xff, 0xc, 0x401, 0x4, 0x0, 0x800, 0x8, 0x3, 0x3, 0x24, 0xf64, 0x8001, 0x4, 0x2, 0x9, 0x6, 0x1, 0x10000, 0x10, 0x46, 0x2, 0x81, 0x2a0a, 0x9, 0x6, 0x9, 0x6, 0x9, 0xfffffff9, 0x4, 0x7f, 0x3, 0x4, 0x9, 0x6, 0x1f33, 0xf8, 0xbe3, 0x5, 0x8, 0x0, 0x4, 0x8, 0x80000000, 0xfffffff8, 0x5, 0xdcb, 0xd, 0x5, 0x8, 0xff, 0x24961286, 0x24, 0x0, 0x400, 0x9, 0xe, 0x0, 0xc01, 0x1, 0x7, 0x1, 0x7f, 0x200, 0x4, 0xf, 0x5, 0x6, 0x2, 0x9, 0x800, 0x200, 0x62fc, 0x2, 0xde2, 0x9, 0x7, 0xd54, 0x182d9c86, 0x6, 0x2, 0x6, 0xfff, 0x5, 0x5, 0xc, 0x4, 0x7, 0x0, 0x0, 0x7, 0x5, 0xfea, 0xd, 0x4, 0x7, 0x6, 0x5, 0xfff, 0x970a, 0x2, 0x3ff, 0x0, 0x29c7, 0x491, 0x1, 0x1000, 0x4000, 0x6, 0x2, 0xc, 0x6, 0x4, 0x7, 0x4, 0x3, 0x100, 0xe0f, 0x7, 0x81, 0x7, 0x7, 0x8, 0x8, 0x9, 0x5, 0x9, 0x7ff, 0x9, 0x7, 0x0, 0x9, 0x4, 0x5, 0x8, 0x7, 0x9, 0x3, 0x3, 0x2aa, 0xca9, 0x3, 0x1, 0xedd, 0x9, 0xb1, 0x3, 0x1, 0x80000001, 0xfffffff7, 0xfffffffc, 0x1, 0x3ff, 0x0, 0x20, 0x4, 0xfffffffa, 0xfffffffb, 0x9, 0x8, 0x5, 0x3ff, 0x8, 0x8, 0xffff, 0x7, 0x7, 0x8, 0x7a42, 0xff, 0x9, 0x1, 0x9, 0x7, 0x3, 0x5fa, 0x4, 0x8b02, 0xba2, 0xff, 0x9a, 0x1ff, 0x5, 0x1, 0x10001, 0x9, 0x7, 0x6, 0xc, 0xff, 0xbe8, 0x2c, 0xa, 0xfffffff8, 0xffff8001, 0x5, 0x83, 0x4000, 0x40, 0x2, 0x3ff, 0x2, 0xd, 0x401, 0x4, 0x101, 0x5, 0x2e, 0xffffffff, 0x9, 0x776, 0x2f, 0x4, 0x9, 0x2, 0x2, 0x6, 0xf, 0x7, 0x6, 0x1, 0x1, 0x1, 0x2b5c, 0xf, 0x7, 0x800, 0x7, 0x1, 0x6, 0x4, 0x101, 0xfffff441, 0xfffffffa, 0xff, 0x6, 0x7f, 0x2, 0x5, 0x81, 0x1, 0x5, 0x8, 0x5, 0x4554, 0x5d98, 0x5, 0x4, 0x7, 0xf8, 0x5, 0x79e, 0x0, 0x7ff]}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c0d0}, 0x448d4) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000240)={0x10b141, 0x2, 0x10}, 0x18) r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x6a83) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fe0900000000000000f8a0e91ddaaca7bd6447a4b4e00debb37df01b6aa73ee2b7fb0a0100000000000000000300000000e2ff00", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000007c0)={0x3, &(0x7f0000000780)=[{0x7fff, 0x10, 0x7}, {0xc5, 0x9, 0x7, 0x835}, {0x7fff, 0xf, 0xf6, 0x54f1}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000800)) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x300, 0x70bd27, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20044804}, 0x20004851) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="f00000000009030000000000000000000a00000a0c00048008000140000000000c00048008000140000009980900010073797a30000000000900010073797a31000000000c00046508000140000000f79400020006000340000200000600034000030000060003400004000006000340000300002c000180140003000000000000000000000000000000000114000400fe8800000000000000000000000000012c00018014000300fe88000000000000000000000000000114000400200100000000000000000000000000010c000280050001002f0000000c00028005000100880000000c0004800800014000000009"], 0xf0}, 0x1, 0x0, 0x0, 0x6}, 0x20048000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01040000000000000000020011000900020073797a32000000000900010073797a30000000000c000640"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 2.022888691s ago: executing program 2 (id=434): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="1f0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185000000ae00", @ANYRESHEX], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.02217179s ago: executing program 3 (id=435): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f00000001c0)={0x41, 0x4a, &(0x7f00000000c0)="dba9ef01ce316c8b2a336d74a9dfa5315606a3d71b2d3edf8665e5a2d481e804fd5ebbe2398edacd9467ea699b8b01b6feb04bc19f2bbb7b4d0319a2219f7ed7d83918f2014d4e98baf8220dd9e7b6e4886ca78b296be137b214cb5b055aca651d99de9d4be6ce12fa9a02047771fcedc6022b101e7925a44a46fa20fd7b617ef1ed9a154461595b46fffe1e01311b23598eb86959e98e3703de22799dfe4fe1b58ea250c3342b76b7ae7a2066fb4b1395d84f354a3a067d3ca64b0ca29934772b64318734e9edc8c53e86d68ce13cbb087d9a78453e15ed6dd3def686", {0x23ceac6a, 0x9b, 0x47504a4d, 0x6, 0x6, 0x2, 0xb, 0x8}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'pim6reg\x00', @broadcast}) 1.831783205s ago: executing program 2 (id=436): syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 1.646253455s ago: executing program 3 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid']) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x288, 0x288, 0x1b8, 0x0, 0x0, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) (async, rerun: 64) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x0, &(0x7f0000000400)) (rerun: 64) 1.645892799s ago: executing program 1 (id=438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000220700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a30000000001800038014000080080003400000000205"], 0xc8}}, 0x0) 1.631573154s ago: executing program 4 (id=439): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000800)=[@increfs], 0x0, 0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61", 0x72}], 0x1}], 0x1, 0x0) 1.443684636s ago: executing program 1 (id=440): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$inet6(r0, 0x0, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={0x0}) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) 1.262270533s ago: executing program 4 (id=441): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x1, 0x16b400) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f00000000c0)={0x4, {"dfa42cb98dc632375aa7ab3380423074", "5fa48dff6911db23b8612e1b1d5cc3ec", "2b6e34ea1bb045c2ed2afeeecc2aebca"}, 0xd, 0x7}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$DVB_DEMUX_DMX_STOP(r1, 0x6f2a) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000001c0)={0x1, 0x9}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x5ff, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x34}, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000030000a80390001800a00010071756575650000001c0002800600034000040000060001400000000006000240000400000900010073797a300000"], 0x84}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="900000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e6576650000600002800500"], 0x90}}, 0x4048084) ioctl$XFS_IOC_GETBMAP(r3, 0xc0205826, &(0x7f0000000080)={0xffffffff, 0x7, 0x3, 0x58, 0x607d7d2d}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000cb9aeee87910000000000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000001000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="000000004c24010030001280080001007674690024000280080004000a000000000005000a0101000800040064010102080005007f000001"], 0x50}}, 0x0) 1.261751954s ago: executing program 1 (id=442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000180)=[{0x18, '\x00', @st={0x4, [{0x0, @svalue=0x9}, {0x3, @svalue=0x7}, {0x0, @uvalue=0x44}, {0x0, @svalue=0xe}]}, 0xffffffff}]}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000140)={0x1, 0x92, 0x0, 0x0}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)=0xe0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000240)=@filename='./file0/../file0/file0\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$I2C_PEC(r0, 0x708, 0x5) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r5, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x10000}]}, 0x34}}, 0x4040004) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x88240, 0x0) ioctl$TIOCGPTPEER(r6, 0x5441, 0xb94) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000200)) sendmsg$can_raw(r7, &(0x7f0000000080)={&(0x7f0000000780)={0x1d, r8}, 0x10, &(0x7f0000000480)={&(0x7f0000000040)=@can={{0x3, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "11e97f5d0c1f526b"}, 0x10}, 0x1, 0x0, 0x900, 0x2}, 0x20044850) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x204001, 0x0) 1.073356939s ago: executing program 3 (id=443): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x2, @tid=r0}, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r1 = socket(0x2d, 0x2, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x11d, 0x1, 0x0, 0x4) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = epoll_create(0x10002e78) epoll_wait(r2, &(0x7f00000001c0)=[{}], 0x1, 0xb55) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async, rerun: 32) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040), 0x0) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000300)={'bond0\x00', @ifru_hwaddr=@multicast}) 770.200705ms ago: executing program 2 (id=444): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtfilter={0xf60, 0x2c, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x3, 0xffe0}, {0x9, 0x5}, {0xa, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x10001}, @filter_kind_options=@f_cgroup={{0xb}, {0xf28, 0x2, [@TCA_CGROUP_POLICE={0x478, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x8, 0x2, 0x4, 0x0, {0x6, 0x0, 0x1, 0x400, 0xcbd, 0xdd8}, {0x5, 0x0, 0x1, 0x7, 0x2, 0x3}, 0x401, 0x4, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x80000001, 0xdcfe, 0xf7, 0xf82c, 0x7, 0x100, 0x4, 0x6, 0x4, 0x3, 0x100, 0x0, 0x2, 0xb, 0x5, 0x1, 0x8, 0x4, 0x1, 0x7, 0x0, 0x4, 0x4, 0x80000001, 0x9, 0x9b, 0x1ff, 0x2, 0x5, 0x0, 0x9, 0x7fffffff, 0xf001, 0x2, 0x4, 0xffffffff, 0x3ff, 0x9, 0x2, 0x8, 0x6, 0x2, 0xffffffff, 0x8000, 0xda9d, 0x7, 0xfff, 0x80000000, 0xfffffffd, 0x0, 0x15, 0x8000, 0x9, 0x400, 0x7fffffff, 0x6, 0x8, 0x9, 0x7, 0x401, 0x0, 0x4, 0x5b, 0x4, 0x9, 0xdca, 0x8, 0x9, 0x0, 0x0, 0x1, 0x9, 0x1, 0x6, 0x7fffffff, 0xfffffff7, 0xfffffff7, 0x5, 0x5, 0xb, 0x0, 0xbf7b, 0x2, 0x0, 0x9, 0x6, 0xa863, 0x3, 0x9, 0x6, 0x5, 0x4, 0xfffffff1, 0x5, 0x8, 0x1, 0x9, 0xfffffffd, 0xce, 0x400, 0x1, 0xd63, 0xf0, 0x5, 0x2, 0x1ff, 0x2, 0x7, 0x4, 0x400, 0x6, 0x0, 0x0, 0xce5dc0e, 0x9, 0x4, 0x9, 0x9, 0x2, 0x401, 0x8, 0x6, 0x5, 0x0, 0x7ea1, 0x8, 0x6, 0x9, 0x5, 0x5, 0x9, 0x8, 0x4, 0x184, 0x2, 0xa759, 0x6, 0x81, 0xfffffffa, 0x9, 0xc, 0x6, 0x1000, 0xa50, 0xe, 0xd, 0x7f, 0x8001, 0x0, 0x5, 0x1ff, 0x1256ce45, 0xb9, 0x3ff, 0x2, 0x7ff, 0x9, 0x0, 0x6, 0x2, 0x5, 0x2, 0x3, 0x5, 0x7ff, 0x10, 0x7, 0x0, 0xb, 0x9, 0x7, 0xffffff76, 0x3, 0x200, 0x3, 0x525, 0x9, 0x5, 0x9, 0x100, 0x5, 0x7ff, 0x4, 0x5, 0x4, 0xffffffff, 0x2ea, 0x8, 0x8e, 0xb, 0xf5, 0x1, 0xea, 0x100, 0x5, 0xa445, 0x2, 0x7fffffff, 0x80, 0x4, 0x23, 0xd37, 0xd6, 0x7, 0x5, 0x9, 0x7, 0x2, 0x8, 0x7, 0x400, 0x80000000, 0xe, 0x3, 0x4, 0x1, 0x0, 0x5, 0x3, 0x2, 0xe0, 0x1, 0x8, 0x5, 0x10001, 0xfffffdf5, 0x8000, 0x200, 0x9, 0x3, 0x2, 0xff, 0x7, 0x4, 0x5, 0xffffffff, 0x7, 0x6, 0xa8b, 0x9, 0x2, 0x401, 0x2, 0x9, 0x6, 0xfffffffc, 0x0, 0x2, 0x25d, 0x2, 0xffffff82, 0x40, 0x7, 0x100]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x101}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000000}]}, @TCA_CGROUP_ACT={0x284, 0x1, [@m_gact={0x6c, 0x16, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x6, 0x1, 0x3}}]}, {0x27, 0x6, "0ab6a78c78150f162bfca9a4f5fbfcf6b7053cc9f2f257801ebb28cf54e7e861e274ae"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0xac, 0x19, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x7dbe0}, @TCA_MPLS_LABEL={0x8, 0x5, 0x85c17}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x66, 0x6, "479903086d01d8e93947701cf0ae4cb9cf7c8b81c9d3d2401fc5dd35a24ef8402e4fa4271da851c8c1a11459cdd38b23930442b66c5bebe0317131eab7316e0ad9a23b56e7292565b9bb76d0a3c9f4258ad7aa01ea60e07b0831451883eb604008b4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0xfffffc2c, 0x2, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x48b0, 0x10000000, 0xc, 0x4}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_TYPE={0x6, 0x5, 0xfff}]}, {0xd5, 0x6, "42ac92f4b6ab41bf3ba2f70d5777fa529d983e22c5903772f7f49121ea54e86ee966b7b0912cb65775c3305429acd7938f57509d4ded881eb0153db040e163bba17e885e21220af1ab16e54d591c7ab1f8a793bbbde27bae29bce853b16e2def443d034f5c37b44211da32a7eeaae66104c0a9a9db8b1d1d1b7d30c9368a8c509581b2d8f44174ec2c5db128475da4e4961c3e4f7bed4a5e5cb910c0b82bd9c92aa7a84035b29a82fba9fc3a100a1b21027ca2ee23c19dcb75e9535fe1e05673615de08dae34506eaa9472b73c7f005cef"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}, @TCA_CGROUP_ACT={0x5e8, 0x1, [@m_tunnel_key={0xfc, 0x5, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xff}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}]}, {0x86, 0x6, "e29c940a4657034795f21f831efa7f7cf50552979ed808a2232efaafb81710446e2114eae460d372d53e4e0e7fac11726a7c9f76eaee08535d3acd43bcf06d930965735ea35eccbc01ea99fbcbbf41a30837641b0126ad364a8fd5dab38a87244867f8b306e70a3c43c408693f0cb7acc9e6a1778c75877db294a7f585fb162e5348"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0xf0, 0xf, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1000}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xd}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xffe0}}]}, {0xa4, 0x6, "d63b95cd20c992dfd34307628c506c5e63d19b456a5b49291ad19eadff6757052653ea29910e3fc81281a072cb4516a9acc72e235bcfac3e655bbf8f45bd1b5c1c450c2c77498c30faf3f60b9ce3156fc8a17025798aad14b4fc1fadd1dd65cf4a5f5ff39a508b289f4835c0f66ec1444e8eb613571e7589ac25d87b9b91a25e7bff8584e58ed7ea795fa4787e1a18b7dae35bfda9098d388ef9e62a260c2ae9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x14c, 0x7, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}]}, {0xc2, 0x6, "6c5581db99183c59c086e1b9f4db0ad967f87e4f55b254cd37922eb8afae0a8bc6f58e8920fccf6e7a21f541765ac559413004a12054eb82d43f3725c2535b25f695a0dad3718b134d8c1c1ff9360eedd31442382a0c26d2c7312a4a1e9d7679d04118f8feba8c22db7004d71c8467e08c9c8d9f27373228fb480570e78d6a60ab64373538a5b93c5b200fd75deeabfc109cf8d582a12ce4cbdd70e326d88f4b59234bab4d641dc0cc2a606fac2ad8faa2d79a182182ead512db6156f472"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0xfc, 0x15, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x2c8c4}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8917}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x19cb4}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88e7}, @TCA_MPLS_LABEL={0x8, 0x5, 0x32b02}]}, {0x90, 0x6, "b24e536f85a1810c7c75f795439f422b77b16738b6ae2d38ff216e73870e7e40b6d399f6548619cadbdbd490d15db51916a867e89d7b21a8b561d483a82a833ca6faca6c6e7efa95a11f5dcb1108139e75049bba14aa28e8164b45455dee4343e57a7281f1c7019b613b71329fe63df0c398bf52ae46fe84155259474f18323a3ac4b96ed80a6082aa4d56ff"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x128, 0x5, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb86}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0xec, 0x6, "ba7e718498963187c2ca1388ead912ef00777c99111f741272d315b12ee23114676f8788bc3f8e5d0f718eda655d4e9590f4ae08863751e5bfcae9cb7870dcb87f84373849f1aa8a3812661aedc2dcc0d20eed66c7ae04342355a2d06219f159858891ca5c2914d5e602f692d824c87e6ebf7b3a019131d156bb98b4fda5e57a9eb2c390b8da0de137d6ea5f887e87fb6a16adab9ccb0f657714327d892a9da0c9129f09c429caca6564a1efe7e7774f6462350dbedec097cae356b18d352c9051046cc872ced048c292d86e9bec8158b526771030e43350ffffede81397448e0b5a1a4e060ba1c3"}, {0xc, 0x7, {0x1, 0x34d7f1b0bad2afd4}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x88, 0xa, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, '#*\x18\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1ff, 0x5, 0x8001, 0xffff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0xf, 0x6, 0x6, 0x8}}]}, {0x23, 0x6, "c87f07c58075b92f7aae4dc4a255a4f62c32a1b972341d0f7f9f4024691655"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_CGROUP_EMATCHES={0xac, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xa, 0x1, 0x6}, {0x2, 0xffffffff, 0x8001, 0x2, 0x0, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x8c, 0x2, 0x0, 0x0, {{0x8000, 0x0, 0x9}, "bdeff28faf42698f871623a4d5a1ae9fc5ef78806b3fa5ee26f541a1ec8971426808f6b59fd1a5d8b70edc6dea61550ffad3347a985de44676a78c7b518eb0281bb96b1f60049cf5569c6290263a93e88d452bdd2ff5b6bd137eb4eee147d0448f9d59059d73fea749e0c598231188d30737972a9dd5566894298962edf1"}}]}]}, @TCA_CGROUP_EMATCHES={0x174, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x170, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xbc, 0x1, 0x0, 0x0, {{0xfffa, 0x0, 0x3}, "bb153275765911496190da7372982e33ad0e3010d29e3fc7a810e77cc9e65801eafd2d8f4a6d5f9d53869adbebdc36c4105d5de4e4b8fa4a259a9f46f1aede96c7186f897ac222b0540a268d202879d02eee492da9846ba80031d80d94f76fc070594c7c98c7bfb23cbab7f75b8a5ff4f98f467daad80527f3d174eaa1642ab076652f80477c1a0f5bf0faf1aa8a8dc0b431f7cadbe9ada4e0e92b72b23992df3f59dc8fa890e0f226942cb5855f5352"}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x61cb, 0x2, 0xdf41}, {0x5, 0x8, 0x2, "9a3b17aced6e259e"}}}, @TCF_EM_CONTAINER={0x98, 0x2, 0x0, 0x0, {{0xd, 0x0, 0x81}, "ce64e015a3769756a769f8c7bf8783de31e8ef32e4379171ebf648e5d925b115b77e7a60b6c297855d58d147ea5cfcc3ff96dcafb8023896c42dc00a30dd85d5a854f59a1b38d88b8edd59aaea9fb0cea707e12adc5211c078551ee23a9836c29e5b331b080185bac2a4b6a98327326eca4702f1cb362eadbbd48cb629b95a53b69249e301f8e890548c57da"}}]}]}, @TCA_CGROUP_POLICE={0x20, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}]}}]}, 0xf60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') setreuid(0x0, 0xee01) fchdir(r3) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271d, 0x0, &(0x7f0000000040)) listen(r6, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x54}}, 0x24040084) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r13) recvmsg$unix(r12, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x24, &(0x7f0000000000)=r14, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x68, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x4, 0x8ae9, 0x4}]}}, @TCA_U32_INDEV={0x14, 0x8, 'rose0\x00'}]}}]}, 0x68}}, 0x24040084) 519.80744ms ago: executing program 2 (id=445): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="1f0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185000000ae00", @ANYRESHEX], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 437.227214ms ago: executing program 3 (id=446): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x51}}, 0x8) (async) listen(r1, 0x5) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) (async) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x210) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r2, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x64008000) 308.511355ms ago: executing program 2 (id=447): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket(0xa, 0x3, 0x72) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2021089, &(0x7f0000000280)) r0 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4) read(r2, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x31, @tick=0xfffff797, 0x0, {0xfd, 0x5}, 0x0, 0x0, 0x4}) tkill(r1, 0x7) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 261.416ms ago: executing program 3 (id=448): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="078a2bbd7000ffdbdf256300000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) r9 = memfd_secret(0x80000) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0x1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', 0x0, 0x8}, 0x18) r14 = signalfd4(r0, &(0x7f00000008c0)={[0x6]}, 0x8, 0x80000) (async) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x8}, 0x18) (async) r16 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r16, &(0x7f00000003c0)='pfn0.0', 0x6) (async, rerun: 64) r17 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async, rerun: 64) r18 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r18, 0xc0184800, &(0x7f0000000100)={0x5, r17, 0x1}) (async) r20 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r20}, 0x2c, {'wfdno', 0x3d, r19}}) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x26, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x2, 0x3, 0x2, 0x12, 0x5, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @generic={0x9, 0xd, 0x4, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x45}, @exit, @generic={0xc5, 0x5, 0x0, 0x5b7, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0xffffff37, 0x57, &(0x7f0000000680)=""/87, 0x0, 0x37, '\x00', r4, 0x0, r11, 0x8, &(0x7f0000000740)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[r12, 0xffffffffffffffff, r13, r14, r15, r16, r20], 0x0, 0x10, 0x4}, 0x94) (rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) (async) r21 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r21, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r22, {0x8, 0xd}, {0xfff3, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 0s ago: executing program 2 (id=449): timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500), 0x800000000ffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89df3b7fbebffe60080b8785d960001000000000000000000000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) kernel console output (not intermixed with test programs): [ 87.111499][ T1045] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:38270' (ED25519) to the list of known hosts. [ 372.659796][ T43] audit: type=1400 audit(1785360097.315:138): avc: denied { name_bind } for pid=5781 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 372.765208][ T43] audit: type=1400 audit(1785360097.425:139): avc: denied { execute } for pid=5782 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 372.772637][ T43] audit: type=1400 audit(1785360097.425:140): avc: denied { execute_no_trans } for pid=5782 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 378.738213][ T43] audit: type=1400 audit(1785360103.395:141): avc: denied { mounton } for pid=5782 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 378.774538][ T5782] cgroup: Unknown subsys name 'net' [ 378.775506][ T43] audit: type=1400 audit(1785360103.435:142): avc: denied { mount } for pid=5782 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 378.803599][ T43] audit: type=1400 audit(1785360103.445:143): avc: denied { unmount } for pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 378.984805][ T5782] cgroup: Unknown subsys name 'cpuset' [ 378.998538][ T5782] cgroup: Unknown subsys name 'rlimit' [ 379.263277][ T43] audit: type=1400 audit(1785360103.915:144): avc: denied { setattr } for pid=5782 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 379.304797][ T43] audit: type=1400 audit(1785360103.955:145): avc: denied { create } for pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.341390][ T43] audit: type=1400 audit(1785360103.955:146): avc: denied { write } for pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.351686][ T43] audit: type=1400 audit(1785360103.955:147): avc: denied { read } for pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.376192][ T43] audit: type=1400 audit(1785360103.995:148): avc: denied { read } for pid=5450 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 379.399866][ T43] audit: type=1400 audit(1785360104.045:149): avc: denied { read } for pid=5450 comm="dhcpcd" name="n31" dev="tmpfs" ino=1904 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 379.411370][ T43] audit: type=1400 audit(1785360104.045:150): avc: denied { open } for pid=5450 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1904 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 379.552019][ T5786] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 381.511534][ T5782] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 393.974398][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 393.974414][ T43] audit: type=1400 audit(1785360118.635:158): avc: denied { execmem } for pid=5787 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 394.869940][ T43] audit: type=1400 audit(1785360119.525:159): avc: denied { create } for pid=5791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 394.908974][ T43] audit: type=1400 audit(1785360119.525:160): avc: denied { read write } for pid=5791 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 394.952584][ T43] audit: type=1400 audit(1785360119.525:161): avc: denied { open } for pid=5791 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 394.969471][ T43] audit: type=1400 audit(1785360119.555:162): avc: denied { ioctl } for pid=5791 comm="syz-executor" path="socket:[5866]" dev="sockfs" ino=5866 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 395.006572][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 395.011706][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 395.021682][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 395.028546][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 395.037149][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 395.072970][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 395.073385][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 395.079457][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 395.081154][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 395.086070][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 395.094356][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 395.097122][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 395.097690][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 395.098452][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 395.099635][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 395.099948][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 395.102534][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 395.103786][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 395.119373][ T43] audit: type=1400 audit(1785360119.775:163): avc: denied { read } for pid=5795 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 395.182160][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 395.187029][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 395.198954][ T43] audit: type=1400 audit(1785360119.775:164): avc: denied { open } for pid=5795 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 395.209810][ T43] audit: type=1400 audit(1785360119.775:165): avc: denied { mounton } for pid=5795 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 395.241356][ T43] audit: type=1400 audit(1785360119.795:166): avc: denied { module_request } for pid=5802 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 395.277407][ T43] audit: type=1400 audit(1785360119.925:167): avc: denied { sys_module } for pid=5796 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 397.153242][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.157538][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.163684][ T5795] bridge_slave_0: entered allmulticast mode [ 397.171158][ T5795] bridge_slave_0: entered promiscuous mode [ 397.190654][ T5807] Bluetooth: hci1: command tx timeout [ 397.194871][ T5807] Bluetooth: hci2: command tx timeout [ 397.195668][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.205624][ T5098] Bluetooth: hci3: command tx timeout [ 397.213089][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.217395][ T5802] bridge_slave_0: entered allmulticast mode [ 397.223196][ T5802] bridge_slave_0: entered promiscuous mode [ 397.271846][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.275241][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.294155][ T5795] bridge_slave_1: entered allmulticast mode [ 397.300623][ T5795] bridge_slave_1: entered promiscuous mode [ 397.345161][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.350837][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.354538][ T5802] bridge_slave_1: entered allmulticast mode [ 397.359381][ T5807] Bluetooth: hci0: command tx timeout [ 397.366115][ T5802] bridge_slave_1: entered promiscuous mode [ 397.456193][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.463515][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.505935][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.521328][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.526976][ T5796] bridge_slave_0: entered allmulticast mode [ 397.534922][ T5796] bridge_slave_0: entered promiscuous mode [ 397.578653][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.584229][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.587108][ T5791] bridge_slave_0: entered allmulticast mode [ 397.605505][ T5791] bridge_slave_0: entered promiscuous mode [ 397.630112][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.632842][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.637808][ T5796] bridge_slave_1: entered allmulticast mode [ 397.643211][ T5796] bridge_slave_1: entered promiscuous mode [ 397.689167][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.703898][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.710516][ T5795] team0: Port device team_slave_0 added [ 397.717242][ T5795] team0: Port device team_slave_1 added [ 397.720943][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.739810][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.743290][ T5791] bridge_slave_1: entered allmulticast mode [ 397.748511][ T5791] bridge_slave_1: entered promiscuous mode [ 397.774401][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.883803][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.898535][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.901245][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.948454][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.958517][ T5802] team0: Port device team_slave_0 added [ 397.963774][ T5802] team0: Port device team_slave_1 added [ 398.019731][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.022460][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.036887][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.069518][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.075807][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.084880][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.088002][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.103206][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.112182][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.116025][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.138673][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.166882][ T5796] team0: Port device team_slave_0 added [ 398.172076][ T5796] team0: Port device team_slave_1 added [ 398.214753][ T5791] team0: Port device team_slave_0 added [ 398.262065][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.267491][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.283425][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.291272][ T5791] team0: Port device team_slave_1 added [ 398.383162][ T5795] hsr_slave_0: entered promiscuous mode [ 398.386720][ T5795] hsr_slave_1: entered promiscuous mode [ 398.394617][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.397964][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.410108][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.427806][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.430686][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.444406][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.482101][ T5802] hsr_slave_0: entered promiscuous mode [ 398.498529][ T5802] hsr_slave_1: entered promiscuous mode [ 398.505293][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 398.527418][ T5802] Cannot create hsr debugfs directory [ 398.543299][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.545950][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.568257][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.743227][ T5796] hsr_slave_0: entered promiscuous mode [ 398.747997][ T5796] hsr_slave_1: entered promiscuous mode [ 398.754649][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 398.759157][ T5796] Cannot create hsr debugfs directory [ 398.847131][ T5791] hsr_slave_0: entered promiscuous mode [ 398.856475][ T5791] hsr_slave_1: entered promiscuous mode [ 398.864848][ T5791] debugfs: 'hsr0' already exists in 'hsr' [ 398.867549][ T5791] Cannot create hsr debugfs directory [ 399.287931][ T5807] Bluetooth: hci3: command tx timeout [ 399.291776][ T5807] Bluetooth: hci1: command tx timeout [ 399.295286][ T5807] Bluetooth: hci2: command tx timeout [ 399.450255][ T5807] Bluetooth: hci0: command tx timeout [ 399.472286][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 399.485226][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.491763][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 399.510165][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.536861][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 399.551334][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.589824][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 399.604677][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 399.714677][ T5796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 399.731202][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.745532][ T5796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 399.765319][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.768840][ T5796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 399.791488][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.819105][ T5796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 399.826244][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 399.984871][ T5791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 399.998796][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.022112][ T5791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 400.035602][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.071936][ T5791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 400.080944][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.139765][ T5791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 400.148247][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.352134][ T5802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 400.365146][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.377837][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.392694][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.400429][ T5802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 400.428031][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.475958][ T5802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 400.482723][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.487072][ T5802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 400.501949][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.510792][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.581337][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.593714][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.650368][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.653370][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.663832][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.719568][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.724036][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.833331][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.847355][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.851979][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.955159][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.033042][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.081010][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.088726][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.108117][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.116160][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.202761][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.290601][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.340667][ T5791] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 401.358595][ T5807] Bluetooth: hci2: command tx timeout [ 401.359951][ T5798] Bluetooth: hci1: command tx timeout [ 401.363155][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.365531][ T5098] Bluetooth: hci3: command tx timeout [ 401.372934][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.373045][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.427217][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.430030][ T5815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.454543][ T5802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 401.467157][ T5802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.531859][ T5798] Bluetooth: hci0: command tx timeout [ 401.941479][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.948707][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.155246][ T5796] veth0_vlan: entered promiscuous mode [ 402.187490][ T5796] veth1_vlan: entered promiscuous mode [ 402.228602][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.329078][ T5795] veth0_vlan: entered promiscuous mode [ 402.362741][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.436172][ T5802] veth0_vlan: entered promiscuous mode [ 402.466683][ T5796] veth0_macvtap: entered promiscuous mode [ 402.478449][ T5795] veth1_vlan: entered promiscuous mode [ 402.508665][ T5802] veth1_vlan: entered promiscuous mode [ 402.535170][ T5796] veth1_macvtap: entered promiscuous mode [ 402.647793][ T5795] veth0_macvtap: entered promiscuous mode [ 402.658590][ T5802] veth0_macvtap: entered promiscuous mode [ 402.680073][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.689111][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.721219][ T5791] veth0_vlan: entered promiscuous mode [ 402.724477][ T5795] veth1_macvtap: entered promiscuous mode [ 402.735966][ T5791] veth1_vlan: entered promiscuous mode [ 402.747878][ T5802] veth1_macvtap: entered promiscuous mode [ 402.861931][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.882674][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.890065][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.928354][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.958049][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.968392][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.984368][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.010609][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.058072][ T5791] veth0_macvtap: entered promiscuous mode [ 403.080213][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.083584][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.087819][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.155109][ T5791] veth1_macvtap: entered promiscuous mode [ 403.195467][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.199404][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.287899][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.316750][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.320886][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.431858][ T5798] Bluetooth: hci2: command tx timeout [ 403.432131][ T5807] Bluetooth: hci3: command tx timeout [ 403.434525][ T5798] Bluetooth: hci1: command tx timeout [ 403.497383][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.527853][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.542289][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.580031][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.589897][ T5878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.603938][ T5798] Bluetooth: hci0: command tx timeout [ 403.642667][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.648151][ T5878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.662081][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.674212][ T5878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.674262][ T5878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.764868][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.768339][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.906818][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.943903][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.043536][ T43] audit: type=1400 audit(1785360128.705:168): avc: denied { mount } for pid=5796 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 404.059376][ T43] audit: type=1400 audit(1785360128.705:169): avc: denied { mounton } for pid=5796 comm="syz-executor" path="/syzkaller.PGSYzM/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 404.093989][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.106346][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.106721][ T43] audit: type=1400 audit(1785360128.705:170): avc: denied { mount } for pid=5796 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 404.137089][ T43] audit: type=1400 audit(1785360128.765:171): avc: denied { mounton } for pid=5796 comm="syz-executor" path="/syzkaller.PGSYzM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 404.161722][ T43] audit: type=1400 audit(1785360128.765:172): avc: denied { mounton } for pid=5796 comm="syz-executor" path="/syzkaller.PGSYzM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 404.197748][ T43] audit: type=1400 audit(1785360128.765:173): avc: denied { unmount } for pid=5796 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 404.216809][ T43] audit: type=1400 audit(1785360128.805:174): avc: denied { mounton } for pid=5796 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 404.253321][ T43] audit: type=1400 audit(1785360128.805:175): avc: denied { mount } for pid=5796 comm="syz-executor" name="/" dev="gadgetfs" ino=8617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 404.280336][ T43] audit: type=1400 audit(1785360128.825:176): avc: denied { mount } for pid=5796 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 404.290451][ T43] audit: type=1400 audit(1785360128.825:177): avc: denied { mounton } for pid=5796 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 404.329148][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.335091][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.348440][ T5795] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 404.361166][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.389019][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.495710][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.499042][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.012477][ T5963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5963 comm=syz.0.1 [ 405.024408][ T5964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 405.125952][ T5963] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 405.482694][ T5973] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1'. [ 406.133380][ T5965] loop3: detected capacity change from 0 to 7 [ 406.175384][ T5965] Dev loop3: unable to read RDB block 7 [ 406.227085][ T5965] loop3: AHDI p1 p2 p3 [ 406.231478][ T5965] loop3: partition table partially beyond EOD, truncated [ 406.237599][ T5965] loop3: p1 start 1601398130 is beyond EOD, truncated [ 406.241239][ T5965] loop3: p2 start 1702059890 is beyond EOD, truncated [ 406.541133][ T5987] can0: slcan on ttyS3. [ 407.468637][ T5987] can0 (unregistered): slcan off ttyS3. [ 408.025998][ T6005] netlink: 'syz.3.12': attribute type 1 has an invalid length. [ 408.465016][ T5798] Bluetooth: hci0: Malformed Event: 0x02 [ 408.900340][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19'. [ 409.110198][ T6023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16'. [ 409.146761][ T43] kauditd_printk_skb: 74 callbacks suppressed [ 409.146790][ T43] audit: type=1400 audit(1785360133.785:252): avc: denied { write } for pid=6038 comm="syz.0.20" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 409.450218][ T5901] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 409.580640][ T43] audit: type=1400 audit(1785360134.245:253): avc: denied { read write } for pid=6045 comm="syz.2.24" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 409.616603][ T43] audit: type=1400 audit(1785360134.245:254): avc: denied { open } for pid=6045 comm="syz.2.24" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 409.617009][ T5901] usb 5-1: too many endpoints for config 1 interface 0 altsetting 162: 205, using maximum allowed: 30 [ 409.630026][ T6046] binder: 6045:6046 ioctl c018620c 2000000001c0 returned -22 [ 409.661935][ T43] audit: type=1400 audit(1785360134.265:255): avc: denied { ioctl } for pid=6045 comm="syz.2.24" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 409.682909][ T5901] usb 5-1: config 1 interface 0 altsetting 162 has 0 endpoint descriptors, different from the interface descriptor's value: 205 [ 409.682944][ T5901] usb 5-1: config 1 interface 0 has no altsetting 0 [ 409.682972][ T5901] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 409.682991][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.755337][ T43] audit: type=1400 audit(1785360134.265:256): avc: denied { set_context_mgr } for pid=6045 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 409.821521][ T6049] netlink: 'syz.2.24': attribute type 3 has an invalid length. [ 409.832903][ T6049] netlink: 'syz.2.24': attribute type 1 has an invalid length. [ 409.849096][ T6049] netlink: 224 bytes leftover after parsing attributes in process `syz.2.24'. [ 409.857130][ T6049] NCSI netlink: No device for ifindex 0 [ 410.090239][ T43] audit: type=1400 audit(1785360134.735:257): avc: denied { ioctl } for pid=6053 comm="syz.3.26" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 410.104365][ T5901] usb 5-1: string descriptor 0 read error: -71 [ 410.125915][ T43] audit: type=1400 audit(1785360134.735:258): avc: denied { create } for pid=6053 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 410.125970][ T43] audit: type=1400 audit(1785360134.735:259): avc: denied { connect } for pid=6053 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 410.202638][ T5901] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 410.247412][ T5901] usb 5-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 410.264131][ T43] audit: type=1400 audit(1785360134.915:260): avc: denied { firmware_load } for pid=5901 comm="kworker/2:4" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 410.305412][ T5901] usb 5-1: Falling back to sysfs fallback for: emi26/loader.fw [ 410.327665][ T43] audit: type=1400 audit(1785360134.985:261): avc: denied { create } for pid=6045 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 410.640552][ T6060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.28'. [ 410.940489][ T6065] openvswitch: netlink: IP tunnel dst address not specified [ 410.966686][ T6065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.183645][ T6073] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 411.183645][ T6073] program syz.2.32 not setting count and/or reply_len properly [ 411.522592][ T5908] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 411.785319][ T6089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.36'. [ 411.862724][ T5908] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 412.057902][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.38'. [ 412.095163][ T6094] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 412.385406][ T5908] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 412.494224][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 412.556229][ T6078] ceph: No mds server is up or the cluster is laggy [ 412.618039][ T5807] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 412.622602][ T5807] Bluetooth: hci2: Injecting HCI hardware error event [ 412.627145][ T5807] Bluetooth: hci2: hardware error 0x00 [ 413.531291][ T6125] syzkaller0: entered promiscuous mode [ 413.536328][ T6125] syzkaller0: entered allmulticast mode [ 413.565679][ T6129] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop0": -EINTR [ 414.365459][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 414.384691][ T43] kauditd_printk_skb: 23 callbacks suppressed [ 414.384726][ T43] audit: type=1400 audit(1785360139.045:285): avc: denied { create } for pid=6160 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 414.400194][ T43] audit: type=1400 audit(1785360139.065:286): avc: denied { map } for pid=6160 comm="syz.2.55" path="socket:[10555]" dev="sockfs" ino=10555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 414.465355][ T43] audit: type=1400 audit(1785360139.065:287): avc: denied { firmware_load } for pid=6154 comm="syz.0.53" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 414.500705][ T43] audit: type=1400 audit(1785360139.095:288): avc: denied { read accept } for pid=6160 comm="syz.2.55" path="socket:[10555]" dev="sockfs" ino=10555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 414.548028][ T43] audit: type=1400 audit(1785360139.205:289): avc: denied { write } for pid=6160 comm="syz.2.55" name="/" dev="9p" ino=80216149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.604433][ T43] audit: type=1400 audit(1785360139.235:290): avc: denied { add_name } for pid=6160 comm="syz.2.55" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.629549][ T43] audit: type=1400 audit(1785360139.235:291): avc: denied { create } for pid=6160 comm="syz.2.55" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 414.683935][ T43] audit: type=1400 audit(1785360139.235:292): avc: denied { associate } for pid=6160 comm="syz.2.55" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 414.706563][ T43] audit: type=1400 audit(1785360139.325:293): avc: denied { read write } for pid=6160 comm="syz.2.55" name="file1" dev="9p" ino=80216153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 414.736230][ T43] audit: type=1400 audit(1785360139.325:294): avc: denied { open } for pid=6160 comm="syz.2.55" path="/13/file0/file1" dev="9p" ino=80216153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 415.040365][ T5807] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 415.494697][ C2] Illegal XDP return value 16128 on prog (id 10) dev bond_slave_0, expect packet loss! [ 416.055761][ T6211] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 416.102921][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 416.110134][ T6211] batman_adv: batadv0: Adding interface: gretap1 [ 416.159520][ T6211] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.171004][ T6211] batman_adv: batadv0: Interface activated: gretap1 [ 416.828128][ T6235] loop3: detected capacity change from 0 to 7 [ 416.856874][ T6235] Dev loop3: unable to read RDB block 7 [ 416.902769][ T6237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.76'. [ 416.962700][ T6237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.76'. [ 416.997662][ T6235] loop3: AHDI p1 p2 p3 [ 417.019367][ T6235] loop3: partition table partially beyond EOD, truncated [ 417.050522][ T6235] loop3: p1 start 1601398130 is beyond EOD, truncated [ 417.053213][ T6235] loop3: p2 start 1702059890 is beyond EOD, truncated [ 417.625347][ T5811] Bluetooth: (null): Invalid header checksum [ 417.733170][ T36] Bluetooth: (null): Invalid header checksum [ 417.874242][ T5943] Bluetooth: (null): Invalid header checksum [ 417.957624][ T5944] Bluetooth: (null): Invalid header checksum [ 418.021024][ T6264] xt_connbytes: Forcing CT accounting to be enabled [ 418.048821][ T6264] Cannot find set identified by id 0 to match [ 418.076509][ T36] Bluetooth: (null): Invalid header checksum [ 418.186390][ T5944] Bluetooth: (null): Invalid header checksum [ 418.431513][ T5960] udevd[5960]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 419.402090][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 419.402107][ T43] audit: type=1400 audit(1785360144.035:317): avc: denied { write } for pid=6289 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.455964][ T6293] netlink: 60 bytes leftover after parsing attributes in process `syz.0.94'. [ 419.471286][ T43] audit: type=1400 audit(1785360144.035:318): avc: denied { remove_name } for pid=6289 comm="rm" name="resolv.conf.syzkaller0.link" dev="tmpfs" ino=2359 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.688638][ T43] audit: type=1400 audit(1785360144.305:319): avc: denied { mount } for pid=6298 comm="syz.1.95" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 419.751010][ T43] audit: type=1400 audit(1785360144.395:320): avc: denied { mount } for pid=6301 comm="syz.0.96" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 419.823167][ T6273] loop3: detected capacity change from 0 to 7 [ 419.970892][ T6273] Dev loop3: unable to read RDB block 7 [ 419.973517][ T6273] loop3: AHDI p1 p2 p3 [ 420.012704][ T43] audit: type=1400 audit(1785360144.665:321): avc: denied { write } for pid=6303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.039935][ T6273] loop3: partition table partially beyond EOD, truncated [ 420.044207][ T6273] loop3: p1 start 1601398130 is beyond EOD, truncated [ 420.099770][ T6273] loop3: p2 start 1702059890 is beyond EOD, truncated [ 420.112624][ T43] audit: type=1400 audit(1785360144.765:322): avc: denied { allowed } for pid=6309 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 420.227207][ T43] audit: type=1400 audit(1785360144.885:323): avc: denied { map } for pid=6309 comm="syz.0.98" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 420.338338][ T43] audit: type=1400 audit(1785360144.885:324): avc: denied { read write } for pid=6309 comm="syz.0.98" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 420.405692][ T43] audit: type=1400 audit(1785360144.915:325): avc: denied { write } for pid=6312 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.466388][ T6314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.99'. [ 420.475240][ T6314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.99'. [ 420.510145][ T6314] netlink: 508 bytes leftover after parsing attributes in process `syz.1.99'. [ 420.646600][ T43] audit: type=1400 audit(1785360145.305:326): avc: denied { create } for pid=6318 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 421.020213][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 421.105163][ T6338] bond0: entered promiscuous mode [ 421.107266][ T6338] bond_slave_0: entered promiscuous mode [ 421.110128][ T6338] bond_slave_1: entered promiscuous mode [ 421.136069][ T6338] batadv0: entered promiscuous mode [ 421.154951][ T6341] netlink: 'syz.3.106': attribute type 10 has an invalid length. [ 421.192114][ T6341] syz_tun: entered promiscuous mode [ 421.217937][ T6341] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 421.428923][ T6346] ip6gretap0: entered promiscuous mode [ 421.574824][ T6351] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 422.131865][ T6365] loop3: detected capacity change from 0 to 7 [ 422.240949][ T6365] Dev loop3: unable to read RDB block 7 [ 422.242866][ T6365] loop3: AHDI p1 p2 p3 [ 422.245398][ T6365] loop3: partition table partially beyond EOD, truncated [ 422.248370][ T6365] loop3: p1 start 1601398130 is beyond EOD, truncated [ 422.296610][ T6365] loop3: p2 start 1702059890 is beyond EOD, truncated [ 422.376057][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 422.992755][ T6372] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 422.996271][ T6372] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 423.027946][ T6372] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 423.068828][ T6372] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 423.087119][ T6372] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 423.140593][ T6372] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 423.166092][ T6372] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 423.173954][ T6372] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 423.183526][ T6372] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 423.581756][ T6395] netlink: 'syz.1.121': attribute type 1 has an invalid length. [ 423.647294][ T6405] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 423.727283][ T6400] gretap1: entered allmulticast mode [ 423.921145][ T6400] bond1: (slave gretap1): making interface the new active one [ 424.226260][ T6400] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 424.258690][ T6415] netlink: 'syz.0.126': attribute type 63 has an invalid length. [ 424.444313][ T6413] evm: overlay not supported [ 424.549635][ T5807] Bluetooth: hci0: command 0x0c1a tx timeout [ 424.924613][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 424.924635][ T43] audit: type=1400 audit(1785360405.585:351): avc: denied { mount } for pid=6428 comm="syz.2.132" name="/" dev="autofs" ino=12723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 425.139672][ T5807] Bluetooth: hci1: command 0x0c1a tx timeout [ 425.172056][ T43] audit: type=1400 audit(1785360405.825:352): avc: denied { write } for pid=6430 comm="syz.3.131" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 425.189424][ T5807] Bluetooth: hci3: command 0x0c1a tx timeout [ 425.214562][ T43] audit: type=1400 audit(1785360405.875:353): avc: denied { open } for pid=6430 comm="syz.3.131" path="/37/file0/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 425.320403][ T43] audit: type=1400 audit(1785360405.905:354): avc: denied { read write } for pid=5795 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 425.362185][ T43] audit: type=1400 audit(1785360405.905:355): avc: denied { open } for pid=5795 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 425.372353][ T43] audit: type=1400 audit(1785360405.905:356): avc: denied { ioctl } for pid=5795 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 425.437929][ T43] audit: type=1400 audit(1785360405.985:357): avc: denied { ioctl } for pid=6430 comm="syz.3.131" path="/37/file0/file0" dev="fuse" ino=2 ioctlcmd=0x542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 425.524734][ T43] audit: type=1400 audit(1785360406.095:358): avc: denied { mounton } for pid=6438 comm="syz.0.133" path="/31/config" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 425.528643][ T6440] syz.0.133 uses obsolete (PF_INET,SOCK_PACKET) [ 425.579419][ T43] audit: type=1400 audit(1785360406.095:359): avc: denied { mount } for pid=6438 comm="syz.0.133" name="/" dev="configfs" ino=2078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 425.579468][ T43] audit: type=1400 audit(1785360406.095:360): avc: denied { search } for pid=6438 comm="syz.0.133" name="/" dev="configfs" ino=2078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 426.648626][ T5807] Bluetooth: hci0: command 0x0c1a tx timeout [ 426.710302][ T6469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.142'. [ 426.900190][ T6470] xt_hashlimit: size too large, truncated to 1048576 [ 426.903472][ T6469] xt_hashlimit: size too large, truncated to 1048576 [ 427.069486][ T56] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 427.096299][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 427.209715][ T5807] Bluetooth: hci1: command 0x0c1a tx timeout [ 427.219285][ T56] usb 6-1: Using ep0 maxpacket: 32 [ 427.257056][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 427.262733][ T56] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9B, changing to 0x8B [ 427.267432][ T6481] netlink: 32 bytes leftover after parsing attributes in process `syz.2.146'. [ 427.280754][ T5807] Bluetooth: hci3: command 0x0c1a tx timeout [ 427.303494][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 427.312446][ T56] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 427.327696][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.330926][ T56] usb 6-1: Product: syz [ 427.332514][ T56] usb 6-1: Manufacturer: syz [ 427.334283][ T56] usb 6-1: SerialNumber: syz [ 427.387057][ T56] usb 6-1: config 0 descriptor?? [ 427.403988][ T56] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input5 [ 427.735557][ C3] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 428.100379][ T6491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.148'. [ 428.228565][ T6494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.445884][ T6499] /dev/sg0: Can't lookup blockdev [ 428.634253][ T6505] FAULT_INJECTION: forcing a failure. [ 428.634253][ T6505] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 428.660980][ T6505] CPU: 0 UID: 0 PID: 6505 Comm: syz.2.155 Not tainted syzkaller #0 PREEMPT(full) [ 428.661006][ T6505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 428.661037][ T6505] Call Trace: [ 428.661043][ T6505] [ 428.661052][ T6505] dump_stack_lvl+0x100/0x190 [ 428.661216][ T6505] should_fail_ex.cold+0x5/0xa [ 428.661237][ T6505] _copy_from_user+0x2e/0xd0 [ 428.661295][ T6505] copy_msghdr_from_user+0x9f/0x4c0 [ 428.661377][ T6505] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 428.661406][ T6505] ? __lock_acquire+0x49f/0x1a40 [ 428.661434][ T6505] ? __lock_acquire+0x49f/0x1a40 [ 428.661455][ T6505] ___sys_recvmsg+0xdd/0x1a0 [ 428.661479][ T6505] ? __pfx____sys_recvmsg+0x10/0x10 [ 428.661505][ T6505] ? find_held_lock+0x2b/0x80 [ 428.661541][ T6505] do_recvmmsg+0x2f3/0x740 [ 428.661569][ T6505] ? __pfx_do_recvmmsg+0x10/0x10 [ 428.661598][ T6505] ? __mutex_unlock_slowpath+0x35d/0x930 [ 428.661648][ T6505] ? __fget_files+0x21f/0x3d0 [ 428.661677][ T6505] __x64_sys_recvmmsg+0x22a/0x280 [ 428.661699][ T6505] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 428.661726][ T6505] do_syscall_64+0x115/0x870 [ 428.661744][ T6505] ? clear_bhb_loop+0x40/0x90 [ 428.661763][ T6505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.661779][ T6505] RIP: 0033:0x7f3a8d59df99 [ 428.661794][ T6505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.661807][ T6505] RSP: 002b:00007f3a8e4d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 428.661836][ T6505] RAX: ffffffffffffffda RBX: 00007f3a8d825fa0 RCX: 00007f3a8d59df99 [ 428.661844][ T6505] RDX: 0000000000000001 RSI: 0000200000002d40 RDI: 0000000000000004 [ 428.661852][ T6505] RBP: 00007f3a8e4d4090 R08: 0000000000000000 R09: 0000000000000000 [ 428.661861][ T6505] R10: 0000000000000140 R11: 0000000000000246 R12: 0000000000000001 [ 428.661869][ T6505] R13: 00007f3a8d826038 R14: 00007f3a8d825fa0 R15: 00007ffe4883c348 [ 428.661889][ T6505] [ 428.894652][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'. [ 428.916184][ T5807] Bluetooth: hci0: command 0x0c1a tx timeout [ 428.959350][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'. [ 428.987356][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'. [ 428.994753][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'. [ 429.280614][ T5807] Bluetooth: hci1: command 0x0c1a tx timeout [ 429.364793][ T5807] Bluetooth: hci3: command 0x0c1a tx timeout [ 429.397605][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 429.465059][ T6525] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 429.472900][ T6525] Cannot find add_set index 0 as target [ 429.514443][ T6525] ip6gretap0: entered promiscuous mode [ 430.299361][ C3] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 430.378142][ T5908] usb 6-1: USB disconnect, device number 2 [ 430.381394][ C3] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 430.462959][ T43] kauditd_printk_skb: 35 callbacks suppressed [ 430.462974][ T43] audit: type=1400 audit(1785360411.125:396): avc: denied { mounton } for pid=6552 comm="syz.0.164" path="/38/file1/file0" dev="autofs" ino=13510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 430.576986][ T43] audit: type=1400 audit(1785360411.235:397): avc: denied { setopt } for pid=6552 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 430.608039][ T43] audit: type=1400 audit(1785360411.265:398): avc: denied { connect } for pid=6552 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 430.714512][ T43] audit: type=1400 audit(1785360411.355:399): avc: denied { write } for pid=6555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.862250][ T43] audit: type=1400 audit(1785360411.505:400): avc: denied { unmount } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 430.890951][ T43] audit: type=1400 audit(1785360411.555:401): avc: denied { write } for pid=6558 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.054744][ T43] audit: type=1400 audit(1785360411.705:402): avc: denied { write } for pid=6562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.305251][ T43] audit: type=1400 audit(1785360411.965:403): avc: denied { write } for pid=6572 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.531289][ T6579] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 431.546666][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 431.710616][ T43] audit: type=1400 audit(1785360412.365:404): avc: denied { create } for pid=6580 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 431.739031][ T43] audit: type=1400 audit(1785360412.395:405): avc: denied { setopt } for pid=6580 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 431.764545][ T6581] netlink: 'syz.3.173': attribute type 58 has an invalid length. [ 431.868118][ T6577] loop3: detected capacity change from 0 to 7 [ 431.874527][ T6577] Dev loop3: unable to read RDB block 7 [ 431.898207][ T6577] loop3: AHDI p1 p2 p3 [ 431.901911][ T6577] loop3: partition table partially beyond EOD, truncated [ 431.918982][ T6577] loop3: p1 start 1601398130 is beyond EOD, truncated [ 431.951831][ T6577] loop3: p2 start 1702059890 is beyond EOD, truncated [ 432.691085][ T6607] block device autoloading is deprecated and will be removed. [ 432.765548][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 432.939175][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 433.611047][ T6629] loop3: detected capacity change from 0 to 7 [ 433.628087][ T6629] Dev loop3: unable to read RDB block 7 [ 433.651833][ T6629] loop3: AHDI p1 p2 p3 [ 433.653574][ T6629] loop3: partition table partially beyond EOD, truncated [ 433.657728][ T6629] loop3: p1 start 1601398130 is beyond EOD, truncated [ 433.661802][ T6629] loop3: p2 start 1702059890 is beyond EOD, truncated [ 434.024904][ T6633] input: syz1 as /devices/virtual/input/input6 [ 434.269853][ T6641] fuse: Unknown parameter 'rootmod00000040020' [ 434.353892][ T6643] fuse: Unknown parameter 'rootmod00000040020' [ 434.965134][ T5803] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 435.201445][ T5803] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 435.218899][ T5803] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 435.223256][ T5803] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 435.229448][ T5803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.264981][ T6661] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 435.300248][ T5803] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.735961][ T6676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.202'. [ 435.736007][ T6675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.202'. [ 435.743103][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 435.743117][ T43] audit: type=1400 audit(1785360416.405:421): avc: denied { create } for pid=6674 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 435.764277][ T6675] loop5: detected capacity change from 0 to 7 [ 435.858451][ T6675] Dev loop5: unable to read RDB block 7 [ 435.881503][ T6675] loop5: AHDI p1 p2 p3 [ 435.889325][ T6675] loop5: partition table partially beyond EOD, truncated [ 435.895682][ T6675] loop5: p1 start 1818582900 is beyond EOD, truncated [ 435.903700][ T6675] loop5: p3 start 335544320 is beyond EOD, truncated [ 436.360295][ T6681] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 436.379559][ T43] audit: type=1400 audit(1785360417.015:422): avc: denied { append } for pid=6680 comm="syz.3.204" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 436.397144][ T43] audit: type=1400 audit(1785360417.025:423): avc: denied { map } for pid=6680 comm="syz.3.204" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 436.406746][ T43] audit: type=1400 audit(1785360417.025:424): avc: denied { execute } for pid=6680 comm="syz.3.204" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 436.429638][ T43] audit: type=1400 audit(1785360417.065:425): avc: denied { setopt } for pid=6682 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 436.959723][ T43] audit: type=1400 audit(1785360417.615:426): avc: denied { write } for pid=6689 comm="syz.2.208" name="usb_gadget" dev="configfs" ino=3544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 437.037113][ T43] audit: type=1400 audit(1785360417.625:427): avc: denied { write } for pid=6689 comm="syz.2.208" name="functions" dev="configfs" ino=13642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 437.044836][ T43] audit: type=1400 audit(1785360417.705:428): avc: denied { write } for pid=6689 comm="syz.2.208" name="functions" dev="configfs" ino=13642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 437.057724][ T43] audit: type=1400 audit(1785360417.705:429): avc: denied { remove_name } for pid=6689 comm="syz.2.208" name="phonet.usb0" dev="configfs" ino=13648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 437.088374][ T43] audit: type=1400 audit(1785360417.705:430): avc: denied { rmdir } for pid=6689 comm="syz.2.208" name="phonet.usb0" dev="configfs" ino=13648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 437.141025][ T6691] syzkaller0: entered promiscuous mode [ 437.146262][ T6691] syzkaller0: entered allmulticast mode [ 437.588657][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 437.724503][ T5803] usb 6-1: USB disconnect, device number 3 [ 437.922469][ T6704] trusted_key: syz.1.213 sent an empty control message without MSG_MORE. [ 438.200955][ T6706] syzkaller0: entered promiscuous mode [ 438.204358][ T6706] syzkaller0: entered allmulticast mode [ 438.545906][ T6716] overlayfs: workdir and upperdir must reside under the same mount [ 438.641515][ T5958] udevd[5958]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 439.432749][ T6727] overlayfs: failed lookup in lower (newroot/61, name='file1', err=-40): overlapping layers [ 439.594255][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 439.641847][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 440.403476][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.408284][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.437696][ T6748] Cannot find set identified by id 65534 to match [ 440.661876][ T6755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.230'. [ 440.696101][ T6755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.230'. [ 440.912302][ T6760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.232'. [ 441.227865][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 441.276565][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 441.276582][ T43] audit: type=1400 audit(1785360421.925:440): avc: denied { create } for pid=6767 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 441.309337][ T43] audit: type=1400 audit(1785360421.965:441): avc: denied { setopt } for pid=6767 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 441.388565][ T6771] gadgetfs: bound to dummy_udc driver [ 441.435224][ T6771] process 'syz.3.235' launched '/dev/fd/3' with NULL argv: empty string added [ 441.453661][ T43] audit: type=1400 audit(1785360422.115:442): avc: denied { execute_no_trans } for pid=6767 comm="syz.3.235" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 441.564327][ T43] audit: type=1400 audit(1785360422.225:443): avc: denied { read } for pid=6769 comm="syz.1.236" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 441.574016][ T43] audit: type=1400 audit(1785360422.225:444): avc: denied { open } for pid=6769 comm="syz.1.236" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 441.756468][ T43] audit: type=1400 audit(1785360422.415:445): avc: denied { setopt } for pid=6783 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 441.818082][ T6784] team0 (unregistering): Port device team_slave_0 removed [ 441.830598][ T6784] team0 (unregistering): Port device team_slave_1 removed [ 442.162860][ T6786] XFS (nullb0): Invalid superblock magic number [ 442.191016][ T43] audit: type=1400 audit(1785360422.855:446): avc: denied { unmount } for pid=5796 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 442.310260][ T43] audit: type=1400 audit(1785360422.975:447): avc: denied { connect } for pid=6792 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 442.360441][ T43] audit: type=1400 audit(1785360422.975:448): avc: denied { read write } for pid=6792 comm="syz.3.240" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 442.374672][ T43] audit: type=1400 audit(1785360422.975:449): avc: denied { open } for pid=6792 comm="syz.3.240" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 442.430453][ T6800] netlink: 'syz.2.242': attribute type 2 has an invalid length. [ 442.461393][ T6800] netlink: 'syz.2.242': attribute type 1 has an invalid length. [ 442.609671][ T6805] pim6reg: entered allmulticast mode [ 442.666248][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 442.701633][ T6805] cgroup: fork rejected by pids controller in /syz3 [ 442.793943][ T6804] pim6reg: left allmulticast mode [ 443.195209][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 443.198414][ T6811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'. [ 443.206098][ T6811] netlink: 'syz.2.247': attribute type 19 has an invalid length. [ 443.277726][ T5796] bond0: (slave syz_tun): Releasing backup interface [ 443.519451][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.524066][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.591857][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.599841][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.758335][ T5878] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.858929][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 443.881460][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 443.907179][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 443.987062][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 444.001188][ T5878] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.009994][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 444.335793][ T5878] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.795810][ T5878] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.990853][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.251'. [ 445.001129][ T6834] Zero length message leads to an empty skb [ 446.047175][ T5878] bridge_slave_1: left allmulticast mode [ 446.073859][ T5878] bridge_slave_1: left promiscuous mode [ 446.095565][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.203339][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 446.269553][ T5878] bridge_slave_0: left allmulticast mode [ 446.271919][ T5878] bridge_slave_0: left promiscuous mode [ 446.273873][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 446.322567][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.336365][ T5098] Bluetooth: hci2: command tx timeout [ 446.451603][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 446.516128][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 446.516160][ T43] audit: type=1400 audit(1785360427.175:455): avc: denied { write } for pid=6861 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.540374][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 446.705024][ T5878] batman_adv: batadv0: Interface deactivated: gretap1 [ 446.740387][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 447.456745][ T6871] xt_hashlimit: size too large, truncated to 1048576 [ 447.472505][ T5878] batman_adv: batadv0: Removing interface: gretap1 [ 447.635347][ T5878] bond0 (unregistering): left promiscuous mode [ 447.645040][ T5878] bond_slave_0: left promiscuous mode [ 447.665938][ T5878] bond_slave_1: left promiscuous mode [ 447.740784][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.839950][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.846137][ T5878] bond0 (unregistering): Released all slaves [ 447.881393][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 448.157991][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 448.405869][ T5798] Bluetooth: hci2: command tx timeout [ 448.715738][ T43] audit: type=1400 audit(1785360429.355:456): avc: denied { write } for pid=6881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.954955][ T5798] Bluetooth: hci4: command tx timeout [ 448.985271][ T43] audit: type=1400 audit(1785360429.625:457): avc: denied { write } for pid=6891 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.354230][ T43] audit: type=1400 audit(1785360429.985:458): avc: denied { mounton } for pid=6893 comm="syz.1.262" path="/65/file0" dev="tmpfs" ino=364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 449.414449][ T6894] fuse: Unknown parameter 'f' [ 449.421438][ T6819] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.425702][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.429525][ T6819] bridge_slave_0: entered allmulticast mode [ 449.436579][ T6819] bridge_slave_0: entered promiscuous mode [ 449.444295][ T6819] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.448412][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.463651][ T6819] bridge_slave_1: entered allmulticast mode [ 449.480437][ T6819] bridge_slave_1: entered promiscuous mode [ 449.497475][ T5450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 449.536298][ T43] audit: type=1400 audit(1785360430.205:459): avc: denied { setopt } for pid=6900 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 449.551357][ T6901] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 449.635587][ T6819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.678845][ T5878] batadv0: left promiscuous mode [ 449.725543][ T43] audit: type=1400 audit(1785360430.385:460): avc: denied { setopt } for pid=6902 comm="syz.1.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 449.734305][ T43] audit: type=1400 audit(1785360430.385:461): avc: denied { getopt } for pid=6902 comm="syz.1.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 449.760038][ T5878] hsr_slave_0: left promiscuous mode [ 449.763188][ T5878] hsr_slave_1: left promiscuous mode [ 449.766982][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.773976][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.780750][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.785474][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.841361][ T5878] veth1_macvtap: left promiscuous mode [ 449.844147][ T5878] veth0_macvtap: left promiscuous mode [ 449.858784][ T5878] veth1_vlan: left promiscuous mode [ 449.861334][ T5878] veth0_vlan: left promiscuous mode [ 450.474229][ T5798] Bluetooth: hci2: command tx timeout [ 450.520904][ T5878] team0 (unregistering): Port device team_slave_1 removed [ 450.542149][ T5878] team0 (unregistering): Port device team_slave_0 removed [ 450.825596][ T6819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.983929][ T6819] team0: Port device team_slave_0 added [ 450.991251][ T6819] team0: Port device team_slave_1 added [ 451.063781][ T5798] Bluetooth: hci4: command tx timeout [ 451.425182][ T43] audit: type=1400 audit(1785360432.075:462): avc: denied { mount } for pid=6925 comm="syz.2.269" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 451.437125][ T6819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.462262][ T43] audit: type=1400 audit(1785360432.075:463): avc: denied { search } for pid=6925 comm="syz.2.269" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 451.476692][ T6819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.484029][ T43] audit: type=1400 audit(1785360432.075:464): avc: denied { write } for pid=6925 comm="syz.2.269" name="versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 451.534020][ T6819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.537012][ T6819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.537031][ T6819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.537051][ T6819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.604391][ T43] audit: type=1400 audit(1785360432.075:465): avc: denied { open } for pid=6925 comm="syz.2.269" path="/81/nfsd/versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 451.613701][ T43] audit: type=1400 audit(1785360432.135:466): avc: denied { mounton } for pid=6925 comm="syz.2.269" path="/81/nfsd" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 451.678046][ T6926] /dev/sr0: Can't open blockdev [ 451.771052][ T6819] hsr_slave_0: entered promiscuous mode [ 451.774534][ T6819] hsr_slave_1: entered promiscuous mode [ 451.777882][ T6819] debugfs: 'hsr0' already exists in 'hsr' [ 451.782511][ T43] audit: type=1400 audit(1785360432.445:467): avc: denied { write } for pid=6931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.848902][ T43] audit: type=1400 audit(1785360432.455:468): avc: denied { unmount } for pid=5791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 451.859554][ T6819] Cannot create hsr debugfs directory [ 452.200634][ T43] audit: type=1400 audit(1785360432.845:469): avc: denied { create } for pid=6945 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 452.216810][ T43] audit: type=1400 audit(1785360432.845:470): avc: denied { write } for pid=6945 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 452.236012][ T43] audit: type=1400 audit(1785360432.875:471): avc: denied { write } for pid=6940 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.395856][ T5450] 8021q: adding VLAN 0 to HW filter on device eth4 [ 452.548418][ T6950] warning: `syz.2.273' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 452.607656][ T5798] Bluetooth: hci2: command tx timeout [ 452.810113][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 452.935907][ T43] audit: type=1400 audit(1785360433.545:472): avc: denied { write } for pid=6955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.119470][ T5798] Bluetooth: hci4: command tx timeout [ 453.243045][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.277753][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.278600][ T43] audit: type=1400 audit(1785360433.935:473): avc: denied { ioctl } for pid=6964 comm="syz.1.275" path="socket:[14063]" dev="sockfs" ino=14063 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 453.286262][ T6859] bridge_slave_0: entered allmulticast mode [ 453.289578][ T6859] bridge_slave_0: entered promiscuous mode [ 453.365703][ T43] audit: type=1400 audit(1785360433.965:474): avc: denied { write } for pid=6963 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.476091][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.479625][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.482514][ T6859] bridge_slave_1: entered allmulticast mode [ 453.486277][ T6859] bridge_slave_1: entered promiscuous mode [ 454.003258][ T6859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.072384][ T6859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.073329][ T6978] capability: warning: `syz.1.277' uses deprecated v2 capabilities in a way that may be insecure [ 454.142139][ T6978] Bluetooth: MGMT ver 1.23 [ 454.237365][ T6859] team0: Port device team_slave_0 added [ 454.242235][ T6982] netlink: 6 bytes leftover after parsing attributes in process `syz.2.278'. [ 454.256632][ T6859] team0: Port device team_slave_1 added [ 454.375212][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.412051][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.490301][ T6859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.801872][ T6996] loop3: detected capacity change from 0 to 7 [ 454.841608][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.862849][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.922620][ T6859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.922896][ T6996] Dev loop3: unable to read RDB block 7 [ 454.989643][ T6996] loop3: AHDI p1 p2 p3 [ 454.991722][ T6996] loop3: partition table partially beyond EOD, truncated [ 454.995939][ T6996] loop3: p1 start 1601398130 is beyond EOD, truncated [ 454.998687][ T6996] loop3: p2 start 1702059890 is beyond EOD, truncated [ 455.196695][ T5798] Bluetooth: hci4: command tx timeout [ 455.333395][ T6859] hsr_slave_0: entered promiscuous mode [ 455.345074][ T6859] hsr_slave_1: entered promiscuous mode [ 455.346345][ T6859] debugfs: 'hsr0' already exists in 'hsr' [ 455.346402][ T6859] Cannot create hsr debugfs directory [ 455.687645][ T848] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 455.844450][ T848] usb 7-1: too many configurations: 42, using maximum allowed: 8 [ 455.993274][ T848] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 455.998757][ T848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.027797][ T848] usb 7-1: Product: syz [ 456.031065][ T848] usb 7-1: Manufacturer: syz [ 456.033319][ T848] usb 7-1: SerialNumber: syz [ 456.092813][ T6819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 456.118449][ T6819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 456.131196][ T6819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 456.158752][ T6819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 456.166281][ T6819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 456.194786][ T6819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 456.226689][ T6819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 456.272530][ T6819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 456.335501][ T848] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 456.408180][ T848] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 456.412711][ T848] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 456.567110][ T848] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 456.597745][ T848] usb 7-1: USB disconnect, device number 2 [ 456.682262][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 456.682279][ T43] audit: type=1400 audit(1785360437.345:488): avc: denied { write } for pid=7049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.719602][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 456.754983][ T6859] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 456.832990][ T6859] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 456.835800][ T7053] netlink: 60 bytes leftover after parsing attributes in process `syz.1.290'. [ 456.865734][ T6859] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 456.879767][ T43] audit: type=1400 audit(1785360437.535:489): avc: denied { write } for pid=7054 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.917085][ T6859] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 456.937048][ T6859] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 456.965830][ T6859] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 456.977368][ T6819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.986276][ T6859] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 457.032172][ T6859] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 457.079086][ T6819] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.141542][ T6539] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.144279][ T6539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.150885][ T6539] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.154295][ T6539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.269888][ T56] IPVS: starting estimator thread 0... [ 457.277991][ T7066] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 457.313948][ T6819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 457.318281][ T6819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 457.389104][ T7069] IPVS: using max 26 ests per chain, 62400 per kthread [ 457.412349][ T6859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.443052][ T7058] loop3: detected capacity change from 0 to 7 [ 457.478821][ T6859] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.486427][ T7058] Dev loop3: unable to read RDB block 7 [ 457.496060][ T7058] loop3: AHDI p1 p2 p3 [ 457.499005][ T7058] loop3: partition table partially beyond EOD, truncated [ 457.501351][ T7075] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 457.509498][ T5798] Bluetooth: hci0: unexpected event for opcode 0x5428 [ 457.509780][ T6539] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.509873][ T6539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.511634][ T6539] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.511719][ T6539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.517850][ T7058] loop3: p1 start 1601398130 is beyond EOD, truncated [ 457.567018][ T7058] loop3: p2 start 1702059890 is beyond EOD, truncated [ 457.767376][ T7083] ======================================================= [ 457.767376][ T7083] WARNING: The mand mount option has been deprecated and [ 457.767376][ T7083] and is ignored by this kernel. Remove the mand [ 457.767376][ T7083] option from the mount to silence this warning. [ 457.767376][ T7083] ======================================================= [ 457.805575][ T7083] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 458.015053][ T7089] netlink: 64 bytes leftover after parsing attributes in process `syz.1.295'. [ 458.129043][ T7094] syzkaller1: entered promiscuous mode [ 458.133899][ T7094] syzkaller1: entered allmulticast mode [ 458.310909][ T6819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.364933][ T43] audit: type=1400 audit(1785360439.005:490): avc: denied { read write } for pid=7088 comm="syz.1.295" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 458.379910][ T43] audit: type=1400 audit(1785360439.005:491): avc: denied { open } for pid=7088 comm="syz.1.295" path="/dev/mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 458.388862][ T6819] veth0_vlan: entered promiscuous mode [ 458.412634][ T43] audit: type=1400 audit(1785360439.005:492): avc: denied { ioctl } for pid=7088 comm="syz.1.295" path="/dev/mtd0" dev="devtmpfs" ino=716 ioctlcmd=0x4d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 458.446845][ T43] audit: type=1400 audit(1785360439.065:493): avc: denied { ioctl } for pid=7099 comm="syz.2.297" path="net:[4026533286]" dev="nsfs" ino=4026533286 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 458.951398][ T6819] veth1_vlan: entered promiscuous mode [ 458.955072][ T7105] netlink: 60 bytes leftover after parsing attributes in process `syz.2.298'. [ 459.061580][ T6819] veth0_macvtap: entered promiscuous mode [ 459.107604][ T6859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.128794][ T6819] veth1_macvtap: entered promiscuous mode [ 459.223224][ T6819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.321378][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'. [ 459.321854][ T6819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.380000][ T5878] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.389639][ T5878] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.476375][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'. [ 459.483484][ T5878] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.490995][ T5878] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.821237][ T43] audit: type=1400 audit(1785360440.485:494): avc: denied { write } for pid=7118 comm="syz.2.302" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 460.039875][ T6539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.044793][ T6539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.122929][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.126418][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.214332][ T43] audit: type=1400 audit(1785360440.875:495): avc: denied { mounton } for pid=6819 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 460.234393][ T6859] veth0_vlan: entered promiscuous mode [ 460.254069][ T6859] veth1_vlan: entered promiscuous mode [ 460.303968][ T6859] veth0_macvtap: entered promiscuous mode [ 460.318470][ T6859] veth1_macvtap: entered promiscuous mode [ 460.424154][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.444364][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.476308][ T7139] netlink: 60 bytes leftover after parsing attributes in process `syz.3.306'. [ 460.481302][ T5849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.511549][ T5849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.524414][ T5849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.533819][ T5849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.585017][ T5954] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 460.624752][ T43] audit: type=1400 audit(1785360441.285:496): avc: denied { mount } for pid=7141 comm="syz.2.307" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 460.652212][ T43] audit: type=1400 audit(1785360441.295:497): avc: denied { create } for pid=7141 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 460.750158][ T5954] usb 6-1: Using ep0 maxpacket: 8 [ 460.791733][ T5954] usb 6-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 460.856333][ T5954] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.859971][ T5954] usb 6-1: config 1 has no interface number 0 [ 460.875008][ T5954] usb 6-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 460.907226][ T5954] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 460.921901][ T5954] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 460.950941][ T5954] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 460.963331][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.996335][ T5954] usb 6-1: Product: syz [ 460.999045][ T5954] usb 6-1: Manufacturer: syz [ 461.003145][ T5954] usb 6-1: SerialNumber: syz [ 461.045733][ T7155] netlink: 'syz.2.310': attribute type 1 has an invalid length. [ 461.061822][ T7155] nbd: couldn't find device at index 131080 [ 461.066278][ T6543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.100687][ T6543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.204588][ T6539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.219067][ T6539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.546867][ T5798] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 461.550625][ T5798] Bluetooth: hci0: Injecting HCI hardware error event [ 461.564464][ T5798] Bluetooth: hci0: hardware error 0x00 [ 461.751772][ T5954] usb 6-1: USB disconnect, device number 4 [ 462.433887][ T7174] udevd[7174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.501460][ T7180] netlink: 60 bytes leftover after parsing attributes in process `syz.1.316'. [ 462.648766][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 462.648785][ T43] audit: type=1400 audit(1785360443.305:503): avc: denied { mount } for pid=7181 comm="syz.4.317" name="/" dev="ramfs" ino=17654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 462.720048][ T43] audit: type=1400 audit(1785360443.385:504): avc: denied { unmount } for pid=6859 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 462.984958][ T7194] netlink: 32 bytes leftover after parsing attributes in process `syz.4.321'. [ 463.005991][ T5807] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 463.409561][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'. [ 463.420397][ T7209] netlink: 60 bytes leftover after parsing attributes in process `syz.1.326'. [ 463.554707][ T7207] loop3: detected capacity change from 0 to 7 [ 463.560330][ T7207] Dev loop3: unable to read RDB block 7 [ 463.562844][ T7207] loop3: AHDI p1 p2 p3 [ 463.564705][ T7207] loop3: partition table partially beyond EOD, truncated [ 463.569656][ T7207] loop3: p1 start 1601398130 is beyond EOD, truncated [ 463.573110][ T7207] loop3: p2 start 1702059890 is beyond EOD, truncated [ 463.644992][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 463.787973][ T5798] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 463.807062][ T7221] tmpfs: Bad value for 'mpol' [ 463.863065][ T7221] netlink: 'syz.2.329': attribute type 1 has an invalid length. [ 463.878955][ T7226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.332'. [ 463.951101][ T7221] bond1: option mode: invalid value (12) [ 463.961274][ T43] audit: type=1400 audit(1785360444.625:505): avc: denied { read } for pid=7225 comm="syz.1.332" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 463.990499][ T7229] netlink: 'syz.2.329': attribute type 10 has an invalid length. [ 463.998421][ T7221] bond1 (unregistering): Released all slaves [ 464.003012][ T7229] netlink: 40 bytes leftover after parsing attributes in process `syz.2.329'. [ 464.006253][ T43] audit: type=1400 audit(1785360444.625:506): avc: denied { open } for pid=7225 comm="syz.1.332" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 464.045571][ T43] audit: type=1400 audit(1785360444.705:507): avc: denied { ioctl } for pid=7225 comm="syz.1.332" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x64c7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 464.101506][ T43] audit: type=1400 audit(1785360444.755:508): avc: denied { setopt } for pid=7231 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 464.156672][ T7229] dummy0: entered promiscuous mode [ 464.245561][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.301871][ T7235] bridge_slave_0 (unregistering): left allmulticast mode [ 464.313631][ T7235] bridge_slave_0 (unregistering): left promiscuous mode [ 464.321970][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.479377][ T7239] fuse: Unknown parameter 'e |EY*+jYR|xeX11{B+HNX!46{ұcϬs_'[}T[$' [ 464.942635][ T7253] loop3: detected capacity change from 0 to 7 [ 464.949999][ T5954] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 465.003573][ T7253] Dev loop3: unable to read RDB block 7 [ 465.015565][ T7253] loop3: AHDI p1 p2 p3 [ 465.017357][ T7253] loop3: partition table partially beyond EOD, truncated [ 465.058486][ T7253] loop3: p1 start 1601398130 is beyond EOD, truncated [ 465.062180][ T7253] loop3: p2 start 1702059890 is beyond EOD, truncated [ 465.165795][ T5954] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 465.266539][ T5954] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 465.273285][ T5954] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 465.277766][ T5954] usb 9-1: Product: syz [ 465.281303][ T5954] usb 9-1: Manufacturer: syz [ 465.285971][ T5954] usb 9-1: SerialNumber: syz [ 465.651927][ T5954] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 465.733446][ T7251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.761270][ T7251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.782165][ T5954] usb 9-1: USB disconnect, device number 2 [ 465.782311][ T43] audit: type=1400 audit(1785360446.435:509): avc: denied { append } for pid=7249 comm="syz.4.337" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 465.818077][ T5954] usblp0: removed [ 465.987360][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 466.119949][ T5803] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 466.295632][ T43] audit: type=1400 audit(1785360702.955:510): avc: denied { write } for pid=7266 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 466.325244][ T5803] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 466.334281][ T5803] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.342714][ T5803] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.349333][ T5803] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 466.368533][ T5803] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 466.375003][ T5803] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 466.382101][ T5803] usb 8-1: Manufacturer: syz [ 466.401737][ T5803] usb 8-1: config 0 descriptor?? [ 466.622394][ T7278] netlink: 60 bytes leftover after parsing attributes in process `syz.4.347'. [ 466.961465][ T5803] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 466.979495][ T7289] /dev/sg0: Can't lookup blockdev [ 467.003859][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 467.006316][ T7289] tun0: tun_chr_ioctl cmd 1074025675 [ 467.081986][ T5803] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 467.090778][ T7289] tun0: persist enabled [ 467.126402][ T7292] tun0: tun_chr_ioctl cmd 1074025675 [ 467.128756][ T7292] tun0: persist enabled [ 467.258571][ T7299] syzkaller1: entered promiscuous mode [ 467.309432][ T7299] syzkaller1: entered allmulticast mode [ 467.511642][ T43] audit: type=1400 audit(1785360704.165:511): avc: denied { watch } for pid=7302 comm="syz.1.355" path="/98" dev="tmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 467.609589][ T7306] tmpfs: Unknown parameter 'grpquota_blok_hardlimit-3ԉ[wY ĠGR(mqm׷h}x*iNdv*iTKrWjB' [ 467.778716][ T43] audit: type=1400 audit(1785360704.435:512): avc: denied { setopt } for pid=7308 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 467.932531][ T7313] netlink: 60 bytes leftover after parsing attributes in process `syz.4.358'. [ 467.959425][ T43] audit: type=1400 audit(1785360704.595:513): avc: denied { connect } for pid=7311 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 467.985802][ T43] audit: type=1400 audit(1785360704.615:514): avc: denied { write } for pid=7311 comm="syz.2.357" lport=18117 faddr=ff02::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 468.228174][ T43] audit: type=1400 audit(1785360704.885:515): avc: denied { connect } for pid=7319 comm="syz.4.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 468.365237][ T5803] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 468.404475][ T43] audit: type=1400 audit(1785360705.065:516): avc: denied { mounton } for pid=7324 comm="syz.2.362" path="/proc/370/task" dev="proc" ino=18968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 468.519289][ T5803] usb 8-1: device descriptor read/64, error -32 [ 468.682288][ T5873] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 468.780133][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'. [ 468.829481][ T5803] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 468.933081][ T5873] usb 9-1: Using ep0 maxpacket: 8 [ 468.958342][ T5873] usb 9-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 179, changing to 11 [ 468.966471][ T5873] usb 9-1: config 1 interface 0 has no altsetting 0 [ 468.978721][ T5873] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 468.983700][ T5803] usb 8-1: device descriptor read/64, error -32 [ 469.013271][ T5873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.030669][ T5873] usb 9-1: Product: syz [ 469.032640][ T5873] usb 9-1: Manufacturer: syz [ 469.036731][ T5873] usb 9-1: SerialNumber: syz [ 469.317513][ T5803] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 469.339723][ T5803] usb 8-1: device descriptor read/8, error -32 [ 469.350720][ T7339] netlink: 60 bytes leftover after parsing attributes in process `syz.1.367'. [ 469.359404][ T43] audit: type=1400 audit(1785360706.005:517): avc: denied { connect } for pid=7336 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 469.378721][ T43] audit: type=1400 audit(1785360706.025:518): avc: denied { name_connect } for pid=7336 comm="syz.2.366" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 469.689379][ T5803] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 469.719764][ T5803] usb 8-1: device descriptor read/8, error -32 [ 469.723086][ T7300] raw-gadget.0 gadget.3: failed to queue suspend event [ 469.775848][ T7300] raw-gadget.0 gadget.3: failed to queue disconnect event [ 469.849674][ T34] usb 8-1: USB disconnect, device number 2 [ 470.031026][ T5803] bridge0: entered promiscuous mode [ 470.121964][ T5873] usbhid 9-1:1.0: can't add hid device: -71 [ 470.125881][ T5873] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 470.179288][ T5873] usb 9-1: USB disconnect, device number 3 [ 470.422340][ T43] audit: type=1400 audit(1785360707.085:519): avc: denied { listen } for pid=7350 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 470.956540][ T7375] netlink: 60 bytes leftover after parsing attributes in process `syz.3.376'. [ 471.183127][ T43] audit: type=1400 audit(1785360707.805:520): avc: denied { append } for pid=7379 comm="syz.3.379" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 471.189046][ T5901] usb 5-1: emi26_load_firmware - request_firmware() failed [ 471.233587][ T5901] usb 5-1: emi26_load_firmware - error loading firmware: error = -110 [ 471.268142][ T5901] emi26 - firmware loader 5-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 471.275232][ T5901] usb 5-1: USB disconnect, device number 2 [ 471.649628][ T43] audit: type=1400 audit(1785360708.305:521): avc: denied { mount } for pid=7392 comm="syz.4.383" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 472.005106][ T7402] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 472.046964][ T7402] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 472.219025][ T7406] netlink: 60 bytes leftover after parsing attributes in process `syz.3.387'. [ 472.610416][ T7420] gtp0: entered promiscuous mode [ 472.612646][ T7420] gtp0: entered allmulticast mode [ 473.059973][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 473.059995][ T43] audit: type=1400 audit(1785360709.715:525): avc: denied { unmount } for pid=6819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 473.187051][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 473.209717][ T43] audit: type=1400 audit(1785360709.875:526): avc: denied { write } for pid=7429 comm="syz.1.396" path="socket:[19105]" dev="sockfs" ino=19105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 473.241070][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 473.292166][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 473.320626][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 473.350611][ T7430] 8021q: adding VLAN 0 to HW filter on device bond2 [ 473.513626][ T7440] netlink: 60 bytes leftover after parsing attributes in process `syz.2.399'. [ 473.563102][ T7426] loop3: detected capacity change from 0 to 7 [ 473.569088][ T7426] Dev loop3: unable to read RDB block 7 [ 473.574037][ T7426] loop3: AHDI p1 p2 p3 [ 473.588840][ T7426] loop3: partition table partially beyond EOD, truncated [ 473.599478][ T7426] loop3: p1 start 1601398130 is beyond EOD, truncated [ 473.604555][ T7426] loop3: p2 start 1702059890 is beyond EOD, truncated [ 473.680127][ T5148] Dev loop3: unable to read RDB block 7 [ 473.682612][ T5148] loop3: AHDI p1 p2 p3 [ 473.684491][ T5148] loop3: partition table partially beyond EOD, truncated [ 473.687789][ T5148] loop3: p1 start 1601398130 is beyond EOD, truncated [ 473.697595][ T5148] loop3: p2 start 1702059890 is beyond EOD, truncated [ 473.758498][ T7447] kAFS: unable to lookup cell '(,c' [ 473.773542][ T43] audit: type=1400 audit(1785360710.415:527): avc: denied { getopt } for pid=7445 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 473.886746][ T7450] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 473.893569][ T7443] usbip-vudc usbip-vudc.0: gadget not bound [ 473.940886][ T7455] netlink: 32 bytes leftover after parsing attributes in process `syz.4.404'. [ 474.294412][ T7464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.408'. [ 474.338039][ T43] audit: type=1400 audit(1785360710.995:528): avc: denied { read append } for pid=7463 comm="syz.4.408" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 474.357910][ T43] audit: type=1400 audit(1785360710.995:529): avc: denied { open } for pid=7463 comm="syz.4.408" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 474.387920][ T43] audit: type=1400 audit(1785360710.995:530): avc: denied { map } for pid=7463 comm="syz.4.408" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 474.407497][ T43] audit: type=1400 audit(1785360710.995:531): avc: denied { write execute } for pid=7463 comm="syz.4.408" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 474.501824][ T7471] netlink: 60 bytes leftover after parsing attributes in process `syz.2.411'. [ 474.502355][ T7467] netlink: 'syz.3.409': attribute type 1 has an invalid length. [ 474.630738][ T43] audit: type=1400 audit(1785360711.235:532): avc: denied { accept } for pid=7466 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 474.872810][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 475.137860][ T43] audit: type=1400 audit(1785360711.785:533): avc: denied { write } for pid=7487 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 476.139495][ T43] audit: type=1400 audit(1785360712.785:534): avc: denied { create } for pid=7514 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 476.810168][ T7526] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 476.875346][ T7526] CIFS: Attempting to mount //127.0.0.1/share [ 477.032741][ T7526] CIFS: VFS: cifs_mount failed w/return code = -512 [ 477.064291][ T7536] scsi_nl_rcv_msg: discarding partial skb [ 477.238586][ T7538] __nla_validate_parse: 3 callbacks suppressed [ 477.238605][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 477.243461][ T7540] netlink: 60 bytes leftover after parsing attributes in process `syz.3.430'. [ 477.652041][ T7557] 9pnet_fd: Insufficient options for proto=fd [ 478.446157][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 478.446176][ T43] audit: type=1400 audit(1785360715.105:538): avc: denied { mount } for pid=7566 comm="syz.3.437" name="/" dev="hugetlbfs" ino=20650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 478.461679][ T7573] binder: 7572:7573 ioctl c0306201 200000000080 returned -22 [ 478.491958][ T43] audit: type=1400 audit(1785360715.135:539): avc: denied { mounton } for pid=7566 comm="syz.3.437" path="/30/file1" dev="hugetlbfs" ino=20650 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 478.590686][ T7575] netlink: 60 bytes leftover after parsing attributes in process `syz.1.440'. [ 478.835121][ T43] audit: type=1400 audit(1785360715.495:540): avc: denied { unmount } for pid=6819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 478.919424][ T5919] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 479.010794][ T5873] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 479.109718][ T5919] usb 9-1: Using ep0 maxpacket: 16 [ 479.117936][ T5919] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 479.165117][ T5919] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.179759][ T5919] usb 9-1: Product: syz [ 479.181378][ T5919] usb 9-1: Manufacturer: syz [ 479.183037][ T5919] usb 9-1: SerialNumber: syz [ 479.217198][ T5873] usb 6-1: Using ep0 maxpacket: 8 [ 479.225883][ T5873] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.242832][ T5873] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.253869][ T43] audit: type=1400 audit(1785360715.915:541): avc: denied { bind } for pid=7580 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 479.261865][ T5873] usb 6-1: config 0 interface 0 has no altsetting 0 [ 479.261915][ T5873] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 479.261936][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.268112][ T5873] usb 6-1: config 0 descriptor?? [ 479.319356][ T43] audit: type=1400 audit(1785360715.975:542): avc: denied { listen } for pid=7580 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 479.335378][ T43] audit: type=1400 audit(1785360715.985:543): avc: denied { write } for pid=7580 comm="syz.2.444" path="socket:[20715]" dev="sockfs" ino=20715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 479.456297][ T43] audit: type=1400 audit(1785360716.115:544): avc: denied { create } for pid=7583 comm="syz.3.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 479.490866][ T5919] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 479.586442][ T5919] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 479.600816][ T5919] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 479.609308][ T5919] usb 9-1: media controller created [ 479.682002][ T7577] macvlan0: entered allmulticast mode [ 479.697333][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 479.702095][ T7577] veth1_vlan: entered allmulticast mode [ 479.752735][ T5873] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 479.764226][ T5873] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 479.786277][ T5873] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 479.790212][ T5873] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 479.813304][ T5873] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 479.813640][ T7577] netlink: 'syz.4.441': attribute type 1 has an invalid length. [ 479.830049][ T5873] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 479.850825][ T7577] netlink: 44 bytes leftover after parsing attributes in process `syz.4.441'. [ 479.901887][ T5919] zl10353_read_register: readreg error (reg=127, ret==-71) [ 480.060509][ T7579] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 480.064527][ T7579] ------------[ cut here ]------------ [ 480.073267][ T7579] usb 9-1: BOGUS control dir, pipe 80000480 doesn't match bRequestType c0 [ 480.080335][ T7579] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#1: syz.1.442/7579 [ 480.114438][ T7579] Modules linked in: [ 480.130573][ T7579] CPU: 1 UID: 0 PID: 7579 Comm: syz.1.442 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.138986][ T7579] Tainted: [L]=SOFTLOCKUP [ 480.141682][ T7579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 480.147647][ T7579] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 480.151389][ T7579] Code: 48 89 54 24 40 e8 73 72 89 fa 4c 89 e7 e8 bb e7 db fe 48 89 c6 48 8d 3d a1 e9 ae 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 44 72 89 fa 89 ee bf ff 00 00 00 [ 480.165668][ T7579] RSP: 0018:ffffc90003647610 EFLAGS: 00010283 [ 480.170322][ T7579] RAX: ffffffff8ca5ef40 RBX: ffff88801c305c00 RCX: 0000000080000480 [ 480.177625][ T7579] RDX: ffff88802d66ce60 RSI: ffffffff8ca5ef40 RDI: ffffffff912fd780 [ 480.183036][ T7579] RBP: ffff888055e52058 R08: 00000000000000c0 R09: 0000000000000000 [ 480.187404][ T7579] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888055e520b0 [ 480.191729][ T7579] R13: ffff88803409cb40 R14: ffff88803409cb46 R15: ffff88803409cb47 [ 480.196033][ T7579] FS: 00007f6f13d2b6c0(0000) GS:ffff8880d5edc000(0000) knlGS:0000000000000000 [ 480.203932][ T7579] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 480.208987][ T7579] CR2: 000000110c3b0e32 CR3: 000000003bcd7000 CR4: 0000000000352ef0 [ 480.254875][ T7579] Call Trace: [ 480.256305][ T7579] [ 480.257540][ T7579] ? __init_swait_queue_head+0xca/0x150 [ 480.259907][ T7579] usb_start_wait_urb+0x10e/0x580 [ 480.261980][ T7579] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 480.277500][ T7579] ? trace_kmalloc+0xeb/0x110 [ 480.296528][ T7579] ? __asan_memset+0x23/0x50 [ 480.312177][ T7579] usb_control_msg+0x328/0x4b0 [ 480.314233][ T7579] ? __pfx_usb_control_msg+0x10/0x10 [ 480.325125][ T7579] ? is_bpf_text_address+0x94/0x1a0 [ 480.327199][ T7579] ? kernel_text_address+0x8d/0x100 [ 480.329361][ T7579] ? __pfx_widen_string+0x10/0x10 [ 480.331394][ T7579] gl861_ctrl_msg+0x1a5/0x4a0 [ 480.348958][ T7579] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 480.356557][ T7579] ? tomoyo_condition+0x3630/0x3b60 [ 480.358750][ T7579] ? module_get_kallsym+0x480/0x7a0 [ 480.361057][ T7579] ? __pfx_stack_trace_save+0x10/0x10 [ 480.378367][ T7579] gl861_i2c_master_xfer+0x545/0x690 [ 480.380448][ T7579] __i2c_transfer+0x5d9/0x1740 [ 480.384299][ T7611] qnx6: unable to set blocksize [ 480.386438][ T7579] ? __pfx___i2c_transfer+0x10/0x10 [ 480.386523][ T7579] i2c_smbus_xfer_emulated+0x235/0x1110 [ 480.386552][ T7579] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 480.386580][ T7579] ? __ww_mutex_check_waiters+0x80/0x440 [ 480.386614][ T7579] ? kasan_quarantine_put+0x104/0x240 [ 480.386644][ T7579] __i2c_smbus_xfer+0x619/0x1100 [ 480.386667][ T7579] ? mark_held_locks+0x40/0x70 [ 480.386691][ T7579] ? lockdep_hardirqs_on+0x78/0x100 [ 480.386714][ T7579] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 480.386736][ T7579] ? rt_mutex_slowtrylock+0x93/0x100 [ 480.386765][ T7579] i2c_smbus_xfer+0x185/0x3c0 [ 480.386788][ T7579] i2cdev_ioctl_smbus+0x4b9/0xac0 [ 480.386817][ T7579] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 480.386842][ T7579] ? __might_fault+0xc5/0x140 [ 480.386859][ T7579] ? __might_fault+0xc5/0x140 [ 480.386885][ T7579] i2cdev_ioctl+0x3cf/0x830 [ 480.386912][ T7579] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 480.386940][ T7579] ? selinux_file_ioctl+0x13b/0x290 [ 480.386978][ T7579] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 480.387006][ T7579] __x64_sys_ioctl+0x18e/0x210 [ 480.387036][ T7579] do_syscall_64+0x115/0x870 [ 480.387056][ T7579] ? clear_bhb_loop+0x40/0x90 [ 480.387082][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.387106][ T7579] RIP: 0033:0x7f6f12d9df99 [ 480.387125][ T7579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.387178][ T7579] RSP: 002b:00007f6f13d2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.387204][ T7579] RAX: ffffffffffffffda RBX: 00007f6f13025fa0 RCX: 00007f6f12d9df99 [ 480.387218][ T7579] RDX: 0000200000000140 RSI: 0000000000000720 RDI: 0000000000000006 [ 480.387232][ T7579] RBP: 00007f6f12e34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 480.387246][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.387260][ T7579] R13: 00007f6f13026038 R14: 00007f6f13025fa0 R15: 00007ffe0cfd8d08 [ 480.387283][ T7579] [ 480.387294][ T7579] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 480.387311][ T7579] CPU: 1 UID: 0 PID: 7579 Comm: syz.1.442 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.387346][ T7579] Tainted: [L]=SOFTLOCKUP [ 480.387354][ T7579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 480.629424][ T7579] Call Trace: [ 480.630882][ T7579] [ 480.632328][ T7579] dump_stack_lvl+0x100/0x190 [ 480.636070][ T7579] vpanic+0x552/0x970 [ 480.642105][ T7579] ? __pfx_vpanic+0x10/0x10 [ 480.647972][ T7579] panic+0xd1/0xe0 [ 480.652206][ T7579] ? __pfx_panic+0x10/0x10 [ 480.656458][ T7579] check_panic_on_warn.cold+0x19/0x34 [ 480.666540][ T7579] ? usb_submit_urb+0x15ff/0x19b0 [ 480.674289][ T7579] __warn.cold+0x191/0x318 [ 480.680085][ T7579] __report_bug+0x30f/0x440 [ 480.686568][ T7579] ? usb_submit_urb+0x15ff/0x19b0 [ 480.690665][ T7579] ? __pfx___report_bug+0x10/0x10 [ 480.694789][ T7579] ? lockdep_hardirqs_on+0x78/0x100 [ 480.700614][ T7579] ? kasan_save_stack+0x3f/0x50 [ 480.703862][ T7579] ? kasan_save_stack+0x30/0x50 [ 480.706979][ T7579] report_bug_entry+0xe1/0x290 [ 480.709810][ T7579] ? usb_submit_urb+0x160d/0x19b0 [ 480.712136][ T7579] handle_bug+0x1cd/0x2a0 [ 480.714798][ T7579] exc_invalid_op+0x17/0x50 [ 480.717413][ T7579] asm_exc_invalid_op+0x1a/0x20 [ 480.719755][ T7579] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 480.722153][ T7579] Code: 48 89 54 24 40 e8 73 72 89 fa 4c 89 e7 e8 bb e7 db fe 48 89 c6 48 8d 3d a1 e9 ae 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 44 72 89 fa 89 ee bf ff 00 00 00 [ 480.729245][ T7579] RSP: 0018:ffffc90003647610 EFLAGS: 00010283 [ 480.731534][ T7579] RAX: ffffffff8ca5ef40 RBX: ffff88801c305c00 RCX: 0000000080000480 [ 480.734572][ T7579] RDX: ffff88802d66ce60 RSI: ffffffff8ca5ef40 RDI: ffffffff912fd780 [ 480.737548][ T7579] RBP: ffff888055e52058 R08: 00000000000000c0 R09: 0000000000000000 [ 480.741549][ T7579] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888055e520b0 [ 480.746679][ T7579] R13: ffff88803409cb40 R14: ffff88803409cb46 R15: ffff88803409cb47 [ 480.750931][ T7579] ? __init_swait_queue_head+0xca/0x150 [ 480.754090][ T7579] usb_start_wait_urb+0x10e/0x580 [ 480.756799][ T7579] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 480.759811][ T7579] ? trace_kmalloc+0xeb/0x110 [ 480.762888][ T7579] ? __asan_memset+0x23/0x50 [ 480.766202][ T7579] usb_control_msg+0x328/0x4b0 [ 480.769246][ T7579] ? __pfx_usb_control_msg+0x10/0x10 [ 480.772446][ T7579] ? is_bpf_text_address+0x94/0x1a0 [ 480.775931][ T7579] ? kernel_text_address+0x8d/0x100 [ 480.778706][ T7579] ? __pfx_widen_string+0x10/0x10 [ 480.782156][ T7579] gl861_ctrl_msg+0x1a5/0x4a0 [ 480.785676][ T7579] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 480.788872][ T7579] ? tomoyo_condition+0x3630/0x3b60 [ 480.791722][ T7579] ? module_get_kallsym+0x480/0x7a0 [ 480.794391][ T7579] ? __pfx_stack_trace_save+0x10/0x10 [ 480.796929][ T7579] gl861_i2c_master_xfer+0x545/0x690 [ 480.801854][ T7579] __i2c_transfer+0x5d9/0x1740 [ 480.804618][ T7579] ? __pfx___i2c_transfer+0x10/0x10 [ 480.813796][ T7579] i2c_smbus_xfer_emulated+0x235/0x1110 [ 480.816984][ T7579] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 480.820675][ T7579] ? __ww_mutex_check_waiters+0x80/0x440 [ 480.825224][ T7579] ? kasan_quarantine_put+0x104/0x240 [ 480.829240][ T7579] __i2c_smbus_xfer+0x619/0x1100 [ 480.833192][ T7579] ? mark_held_locks+0x40/0x70 [ 480.836809][ T7579] ? lockdep_hardirqs_on+0x78/0x100 [ 480.840089][ T7579] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 480.843869][ T7579] ? rt_mutex_slowtrylock+0x93/0x100 [ 480.848715][ T7579] i2c_smbus_xfer+0x185/0x3c0 [ 480.851329][ T7579] i2cdev_ioctl_smbus+0x4b9/0xac0 [ 480.854308][ T7579] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 480.857670][ T7579] ? __might_fault+0xc5/0x140 [ 480.860292][ T7579] ? __might_fault+0xc5/0x140 [ 480.863175][ T7579] i2cdev_ioctl+0x3cf/0x830 [ 480.867739][ T7579] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 480.870166][ T7579] ? selinux_file_ioctl+0x13b/0x290 [ 480.872578][ T7579] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 480.874622][ T7579] __x64_sys_ioctl+0x18e/0x210 [ 480.876732][ T7579] do_syscall_64+0x115/0x870 [ 480.878828][ T7579] ? clear_bhb_loop+0x40/0x90 [ 480.881150][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.883935][ T7579] RIP: 0033:0x7f6f12d9df99 [ 480.885958][ T7579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.902599][ T7579] RSP: 002b:00007f6f13d2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.907655][ T7579] RAX: ffffffffffffffda RBX: 00007f6f13025fa0 RCX: 00007f6f12d9df99 [ 480.912011][ T7579] RDX: 0000200000000140 RSI: 0000000000000720 RDI: 0000000000000006 [ 480.917691][ T7579] RBP: 00007f6f12e34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 480.921366][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.924529][ T7579] R13: 00007f6f13026038 R14: 00007f6f13025fa0 R15: 00007ffe0cfd8d08 [ 480.928514][ T7579] [ 480.951923][ T7579] Kernel Offset: disabled [ 480.954688][ T7579] Rebooting in 86400 seconds..