last executing test programs: 7.693148678s ago: executing program 3 (id=175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000500340000000000080026006c0900002800518024000080090007"], 0x58}, 0x1, 0x0, 0x0, 0xf040}, 0x20004080) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) getsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 7.692833125s ago: executing program 3 (id=176): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x70bd2c, 0x25dddbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010800feffffffffff769231620008000300", @ANYRES32=r8], 0x54}}, 0x0) r9 = dup(r5) syz_ublk_setup_queues(r9, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f00000002c0)=""/26, &(0x7f0000000300)=0x1a) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x404, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4) 7.532722644s ago: executing program 3 (id=177): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x8, 0x40, 0x0, 0xf9, @local}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 7.532323418s ago: executing program 3 (id=178): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000200)="76657468303a30000000000000000000020000000a") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x70bd27, 0x25dfdbfb, {0x2, 0x0, 0x4, 0x4, 0xfd, 0x0, 0xfe, 0x6, 0x100}, [@RTA_NH_ID={0x8, 0x1e, 0x87b}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x84, 0x0, 0x4, 0x0, 0xf8, 0x60, 0x2000}}}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r5 = signalfd(r4, &(0x7f0000000100)={[0xeec]}, 0x8) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r5, 0x400454a4, &(0x7f0000000140)=0x1) ioctl(r3, 0x8914, &(0x7f0000000080)='veth0:0') r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000000000002c0000000e0001006e657464657673696d0000000f0002006e6574646576739362696d300000"], 0x34}}, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r12, 0x6, 0x2c, 0x0, &(0x7f0000000080)) ptrace$getregs(0xe, r11, 0x0, &(0x7f0000000480)=""/114) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30d33, r10, 0x0, 0x0, 0x0, 0x10, 0x2}, 0xffd1) 7.267085344s ago: executing program 3 (id=179): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000080)) (async) syz_emit_ethernet(0x4e, &(0x7f0000002540)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x18, 0x0, 0xff, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, {[@dstopts={0x0, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x7000000}, @jumbo={0xc2, 0x4, 0x1}]}]}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x80000001, 0x4) (async) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0xed00, 0x0) r2 = userfaultfd(0x801) (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800, 0x0) (async) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000340)=@v2={0x5, 0x1, 0xc, 0x6}, 0x9, 0x3) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) r4 = fanotify_init(0x10, 0x1000) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x1, 0x8000013, r5, 0x0) (async) fanotify_mark(r4, 0x221, 0x103b, r5, 0x0) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') (async) close(r1) (async) fcntl$setownex(r1, 0xf, &(0x7f0000000380)={0x123ee057b80f1479}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) 6.993480556s ago: executing program 3 (id=185): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f00000002c0)) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) 6.968479357s ago: executing program 32 (id=185): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f00000002c0)) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) 3.012866304s ago: executing program 1 (id=252): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) 2.933575276s ago: executing program 1 (id=254): r0 = socket(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x100010, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="01154e0001000011221e445588fbca0100011606", 0x14, 0x4044015, &(0x7f0000000040)={0x11, 0x4, r1, 0x0, 0x0, 0x0, @remote}, 0x14) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00ffe300", "71a19060009f0000000000000000001aa241d3c6895c4100", 0x800200}) write$sndseq(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) (async) write$sndseq(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 2.841737236s ago: executing program 1 (id=257): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000100)={@val={0x0, 0x88f5}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @val={@val, {0x8100, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x20, 0x800, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c3, 0x9, 0x0, @gue={{0x1, 0x1, 0x2, 0x5, 0x100, @void}}}}}}}}, 0x3a) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fddbdf253800000008000300", @ANYRES32=r2, @ANYBLOB="0c00580001"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4040000) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000080)={0x0, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) 2.672935514s ago: executing program 1 (id=262): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='k\x9a\xf7\xdf`', 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000005c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x74, 0x0, r1, 0x0, 0x0, 0x0, 0x40000000}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xfe80, &(0x7f0000004a00)=[{&(0x7f0000000440)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4000000004c94215d121cd0c53e27eec317", 0xd8}], 0x1}, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000bc0)={&(0x7f0000000240)=@nfc_llcp={0x27, r8, 0x0, 0x7, 0x9, 0xf7, "6001dc0f076b7cb7b956731d7edd5f868fba786336629287d6527729efe8e009dc6164b261c1124d2a96a4a66ab1b47fb6d915b5f20e4ddc595554f88de5fb", 0x2f}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000002c0)="88d5877cc777f58299c39fd9b7d70a289d92cbc8ce516cd124f9fc47da4543cf57d13e36bd11c915168591358cbacce51f763ea858f60232fbc8e5f331497ddb3a7e7a13734d6eb3937e329f5741c972e96cff797db13b1e9335da2925b53172d1d83980665584f311b751d1a9c148e7f500623fdc61620ec922e68c616bd33acc33c3e5d5fa14b4e302cdaeabcd4df494c39547eb0d9af4e12ea18fa31191c3ab883e88e04d3c3164473ebb", 0xac}, {&(0x7f0000000380)="6f251ae83b4fea66cfba6d0d93acc71d35843a90498a68f57c0d8f07bce77bd9a05c47a5c83c3206f5212a61f7848127ecdbf04f13f22a3204c6a4e1a2326d596dffaded38b786c62ca7fbf1ececdd4f552ccac4d09f74270c1330541e026f6f939f1e2ed12f37735e032152350886e107e1b575d72032e60c3b3486050dfd86f577a3bd4c66a727a4f040c760eaedf1dd1135c22da8e8d76c9f37f5ec03fe906352b0b4bffbeb607621f757abf046c997fd64542c6aad05eac7307762d9ae6de1841201e445e5988190c4c54018d1a3b8d4", 0xd2}, {&(0x7f0000000500)="789a6a6e97021bc4514cee3c465bd169f7813e75e78c7f6be1a4fb1dc4f98a5aef99aaa05ce5f674e61f016039e9f102afc6a2b72edd0bfa77366de70f2001eca65bdddf2649e74500c0c3ae7b4d9482835eb970750b630d733e0f21e05d0e35b7716568c063a1565e3dbc68a796a4c219fbad3f4b0f03cece6b351e330b8866fc6f294fd7f234af784a06e5b0787025d27c832f778fe80d74768ded70ffa4bd8ca89baac095a9288880b0d0f0c2be513984e447ce4e81b09bb1a4f1a72b2373257b5c19b33d1d21b53fe57ec20c4da5537a4f9eac1246ff50e9ab1839d92c7c37f06ef939c1d00e82fb6e662ac82d227dd77f2ae3c47851", 0xf8}, {&(0x7f0000000600)="c4b3c248bef60efaae0722fa52fae5b7c22f138635ee7bcc65377df64d0ecf2828bbc06e44b66534d2f4192bd7acaa16e589c473070b2bb83ed5360e1c2a1891d3397369575834b9b46e7fafb5bcbf1d62e7725fdd4d096aa7020dd549b1d3fb8fe13e326a7c98139d7343ba0edbc132a4e475a5fa425266469661f34568", 0x7e}, {&(0x7f0000000680)="f0e51f8510562c128789cb0e8ca0da5b381b46d750623ee3bde485e07696808a1f41c2fa8dc7f891bf7e4cd0884e17ea3515c8e1f0929ebcd4218d2ea9af6c8cc040d6b07b6c88abebaff1b41ef41fa39e9463dafaeca70414a42a09fe0594124986dcec197b87", 0x67}, {&(0x7f0000000700)}, {&(0x7f0000000740)="c07d4a3667ab5cb3aa4e711b8cf7d99563034f1b9fa04d5563e3ba5e69c9854f2e12f568700faf661db3eaefce82e53febc2c8f8f2402e1ec6e76b9c2c69f94c9e337ad96f80692f17db56c94bc51c1d75411449def0deb511157f6e4d98e7cb97f915e53b57af3cf0b54a7834c0c8", 0x6f}, {&(0x7f00000007c0)="f240c46ad778b77801a91ed227959f0f41ebb2a82aebbb0dfa29f2ae9bb3d7dff79e6fd09494edf3c22b8dd6da646a513a51e2e8cf4bb20d5bf093834244f988ea7b3a07ed332e42652ca42a86a13a45fbd8b4c3455947386e9d228cbf0e986ff747444b7f5255fa5f207678ec6b661714226502efac29ac", 0x78}, {&(0x7f00000009c0)="7dbf1f541352ae27fa5f4a233b7ff64953a35405eb458abaabaf689cabfff2b70ea5bffdaeed4ada2537054f550f06c5b47f5a4533f311daf1dad239abb108e01a6437f31fba208be4342ac23666280def3824256a84d4459794a96d65947ee22cbae3f7b76c5406ebb75a9d1115179a5947188bdc6cdc76006db5343bf843e79f4004495cadd82efa4dbe379fbc6d7386baad3e22a805c7f95953441caf7ea06ce0f7bec8ca015af75f8f1f8d011455ca5a46cabc68bb1176dbbf4c2bc8f83aa901f2f53d8badbb39400305667cdb9f484002625c6f5cda1854f69dd5457302eedc599cca26390a1e40dd6ce4abb1", 0xef}], 0x9, &(0x7f0000000b80)=[@mark={{0x14, 0x1, 0x24, 0x7fff}}], 0x18}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sync_file_range(r9, 0x7, 0x4, 0x1) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r9, 0x400455c8, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r11) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r11, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000980)={0x54, r12, 0x1, 0x70bd2c, 0x25dfe000, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x100000000}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40810}, 0xa080) sendmsg$DEVLINK_CMD_RATE_DEL(r9, &(0x7f0000001740)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001700)={&(0x7f0000001600)={0xe4, r12, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0x85, 0xa8, @random="b302626a2293a6a6eefe9dec7f2d390e2928d3a14782b241495d25847bd1411937aebfab85ae1feb599c97b36121922e8f0f5db93a2187e90f9485434fffaab7d92fd9e96221540e6c17127a2d1c77726ebad9b8f38b2ee5c46cd1cd9110b8534247c6ed6d9eec94a9cf54ca42bee41bebafb672c022a63fdc8054b4c23cccc7c3"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8c}, 0x4050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000", @ANYRES32=r9, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r13, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005411979a48fcdf4062162715b05eec2cb380f6a113d31091018f8e354b24f05f802b607b7cfa7973ba2f210be3af16cee46c5afa22d115ccdf8a458e040f03f050222a33e4d9cf6874492b7b0b3546d3ef3"], 0x138}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) r14 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) sendmsg$OSF_MSG_REMOVE(r14, &(0x7f00000015c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001580)={&(0x7f0000000c00)={0x964, 0x1, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [{{0x254, 0x1, {{0x1, 0x4}, 0x1, 0xff, 0x7, 0x0, 0x1d, 'syz1\x00', "35fa3aeeab38172d28a53444737f096fc533407ce29168b7f9a26d6c8ca4b476", "fec37e2106593cc4f59cb298ff0660554b0b45d7a7fe85b01eb65fa1c873aba0", [{0x7, 0x8, {0x1, 0x9}}, {0x6a3, 0x9, {0x3}}, {0x0, 0x6, {0x2, 0x24a44b5a}}, {0x9, 0x1, {0x3, 0xc}}, {0x1, 0x37de, {0x0, 0x8}}, {0x1, 0x4, {0x1, 0x4e85}}, {0x8, 0x3, {0x0, 0x8}}, {0x74, 0x8001, {0x1, 0x5}}, {0x3, 0x3, {0x0, 0x725}}, {0x8, 0x0, {0x2, 0x4}}, {0x3, 0x8, {0x2, 0x400}}, {0x7dbe, 0x4}, {0xffff, 0x4, {0x2, 0x9}}, {0x4, 0x7, {0x1, 0xb}}, {0x2, 0xf, {0x1, 0x4}}, {0x6, 0xfdc, {0x2, 0x10001}}, {0x0, 0x8000, {0x1, 0x9}}, {0xb, 0x7f, {0x0, 0x5}}, {0x101, 0x9, {0xda0f608e66bcca38, 0x7fffffff}}, {0x5, 0x6, {0x1, 0x5}}, {0x7fff, 0x2, {0x2, 0x8}}, {0x401, 0xf4, {0x0, 0xb}}, {0x400, 0x1000, {0x3, 0x2}}, {0x0, 0x8, {0x2, 0x49}}, {0xa29d, 0x4, {0x2, 0x7f}}, {0x3, 0x401, {0x0, 0x10}}, {0x8001, 0x3, {0x1, 0x9}}, {0x101, 0x81, {0x3, 0x6}}, {0x9, 0x8, {0x0, 0xfffffffc}}, {0x8, 0x2, {0x2, 0x9}}, {0x0, 0x8a, {0x1, 0x7}}, {0x4, 0x3ff, {0x2, 0xfffffe00}}, {0x4, 0x3, {0x0, 0x1}}, {0x4, 0xffff, {0x2, 0xfff}}, {0x7fff, 0x6, {0x3, 0x6}}, {0x3ff, 0x5, {0x2, 0x1000}}, {0xf, 0x7}, {0xa638, 0x4f0, {0x1, 0x4}}, {0x2, 0x9, {0x1, 0x3}}, {0x0, 0x9, {0x3, 0xb}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x8, 0x0, 0x0, 0x6e, 0x25, 'syz1\x00', "e08cd56142247f3c263e64d2e3e321c6163b29f58078e102edd35da046cb0581", "2c914088c112cae1cc47ff04f660797faa8fbda4a01b6237d3d40e239c2cd1de", [{0x88cd, 0x7, {0x3, 0x2}}, {0x8, 0xb18d, {0x3, 0xff}}, {0x0, 0x7ff, {0x3, 0x200}}, {0x7f, 0x3, {0x1, 0x7ff}}, {0x8001, 0x6}, {0xc, 0x7, {0x1, 0x2fca}}, {0xb, 0x6, {0x0, 0x2d48a1af}}, {0x800, 0xf99f, {0x0, 0x40}}, {0x3, 0x6, {0x2, 0x401}}, {0x40, 0x3, {0x1, 0xdbf4}}, {0x8, 0x0, {0x3, 0xd2}}, {0x3, 0x6, {0x3}}, {0x9, 0x2, {0x0, 0x6}}, {0xcd, 0xfeff, {0x2, 0xfd2}}, {0xd, 0x8, {0x2, 0x7}}, {0x7, 0xc, {0x2, 0x6}}, {0x8000, 0x8, {0x2, 0x59d6}}, {0x6, 0x16, {0x3, 0x80000001}}, {0xc, 0xcd, {0x3, 0x6c}}, {0x1, 0x800, {0x2, 0x3}}, {0xffff, 0x4, {0x0, 0x3f}}, {0x10, 0x8, {0x0, 0xa}}, {0x6, 0xc000, {0x1, 0x7e6a}}, {0x3ff, 0x1ff, {0x3, 0x6}}, {0x2, 0x1, {0x3, 0x3ff}}, {0x9, 0x15f7, {0x0, 0x6}}, {0xd1, 0xfffc, {0x0, 0x80}}, {0x4, 0x8, {0x1, 0xc50c}}, {0x620, 0x2, {0x0, 0xfffffff4}}, {0x8, 0x81, {0x3, 0x7}}, {0xf, 0x0, {0x0, 0x400}}, {0xcc, 0x1, {0x2, 0x7}}, {0x2bf, 0x4, {0x1, 0x7}}, {0x1, 0x7, {0x1, 0xfff}}, {0xb, 0x6, {0x2, 0x81}}, {0x7, 0x2, {0x3, 0x7}}, {0x3, 0x1, {0x1, 0x3}}, {0x4, 0x8, {0x3, 0x10000}}, {0x9, 0x3, {0x3, 0x80}}, {0x0, 0x1, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0xa3bf}, 0x5, 0x60, 0x200, 0x5, 0x11, 'syz0\x00', "912ca68635f338d4d126efe6f04ba18982badbf65aec103066d6ff5d3efbb519", "482bdcb6c6611b585b09ff3d7356bca39eae1158eec9ebd0e9555d49c2453788", [{0xfffd, 0x0, {0x2, 0x3}}, {0x7, 0x100, {0x1, 0x7}}, {0x8, 0x5, {0x3, 0x538}}, {0x7, 0x0, {0x0, 0x2000000}}, {0x7, 0xfffc, {0x0, 0x5}}, {0x1ff, 0xd502}, {0xff, 0x0, {0x0, 0x80000001}}, {0x4034, 0x81, {0x1, 0x5}}, {0x2, 0xffff, {0x2, 0x4}}, {0x2, 0xc, {0x3, 0x2}}, {0x3, 0x1, {0x1, 0x56}}, {0x8, 0x400, {0x0, 0x5cc4}}, {0x4, 0xfffc, {0x0, 0x2}}, {0x200, 0x1, {0x3, 0x2}}, {0x6, 0x7, {0x1, 0x8000}}, {0x9, 0xc, {0x1, 0x7}}, {0x8, 0x0, {0x2, 0x2}}, {0x7, 0xcdab, {0x2, 0x8}}, {0xf, 0x1, {0x0, 0x3a}}, {0x80, 0x401, {0x1, 0x8000}}, {0x34d, 0x1, {0x2, 0xb243}}, {0x3, 0x86, {0x3, 0x3}}, {0xfbb9, 0x4, {0x2}}, {0xa0, 0xbfc, {0x1, 0x8531}}, {0x1000, 0x2, {0x2, 0x3}}, {0x0, 0x1, {0x2, 0x7}}, {0x800, 0x81, {0x2, 0x3}}, {0x1ff, 0x7, {0x1, 0x1}}, {0x9, 0x4, {0x2}}, {0x9, 0x1, {0x2, 0x5}}, {0xf73, 0x2, {0x1, 0x6}}, {0x9, 0x6, {0x2, 0x7}}, {0x8, 0x0, {0x1}}, {0x8, 0x0, {0x1}}, {0x9, 0x8f4a, {0x1, 0x5}}, {0xe, 0x3, {0x2, 0x40}}, {0xfff7, 0x653d, {0x3, 0x5890}}, {0xd9e1, 0x2, {0x3, 0x3}}, {0xfff7, 0x0, {0x2, 0x8e19}}, {0x0, 0x5, {0x3, 0x7fff}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0x77, 0x7, 0x5, 0x3, 0x3, 'syz1\x00', "0ac6487fe32bf91a19507b3fd66b8bd1855121e128b9730e0207875d3fac6915", "b7b6b34b02c4bdbd11c937c67decab081902721c4ae05921794c9e7bacbede1a", [{0xf7, 0x100, {0x3, 0xffffffff}}, {0xfbff, 0x0, {0x0, 0x9}}, {0x0, 0x4, {0x2, 0x2699}}, {0xa4, 0x8, {0x2, 0x7}}, {0x0, 0x2, {0x2, 0x10000}}, {0x9b76, 0x7, {0x3, 0x5}}, {0x7, 0x4, {0x1, 0x6}}, {0x9, 0x4, {0x3}}, {0x5, 0x2, {0x2, 0x5}}, {0x0, 0xfa5, {0x1, 0x4}}, {0x1, 0x0, {0x0, 0x5a}}, {0x8, 0xffff, {0x1, 0x2}}, {0xfff9, 0xff, {0x1, 0x7fffffff}}, {0xb50, 0x8, {0x1, 0x4}}, {0x5, 0x7, {0x2, 0x7}}, {0xc3e, 0x4, {0x2, 0x9}}, {0x7, 0x1ff, {0x0, 0xd4}}, {0x651, 0x371d, {0x1, 0x8}}, {0xfffe, 0xfff8, {0x1, 0x3}}, {0xa, 0x9, {0x1, 0xffffffff}}, {0x470, 0x80, {0x1, 0x3}}, {0x9, 0x5, {0x1, 0x5}}, {0x8, 0x55, {0x0, 0x1}}, {0x4, 0x44, {0x1, 0x7}}, {0x0, 0x7, {0x0, 0xfffffff7}}, {0x401, 0x4, {0x2, 0x6e}}, {0xe9, 0x7, {0x1, 0x3}}, {0x0, 0x7, {0x2, 0xcbde}}, {0x1, 0x5ec3, {0x2, 0x8}}, {0x13ad, 0x0, {0x1, 0x80000000}}, {0x9, 0x4, {0x0, 0x9}}, {0x3, 0x7, {0x1, 0xffffff00}}, {0x3f7c}, {0x5, 0x0, {0x0, 0x8}}, {0x6, 0x9, {0x0, 0x4c}}, {0x0, 0xfff7, {0x0, 0x7f}}, {0x0, 0x3, {0x1, 0xbdd0}}, {0x7, 0x0, {0x1}}, {0x1, 0x2, {0x2, 0x9}}, {0x81, 0x5, {0x0, 0xb44c}}]}}}]}, 0x964}}, 0x1) 1.25062771s ago: executing program 2 (id=286): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xa, 0x1a, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf714}, {}, {}, [@exit, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x0, 0x0, 0x2, 0x8, 0x5, 0x2}, @alu={0x7, 0x0, 0x1, 0x1, 0xa, 0xffffffffffffffc0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x80000000, 0x1000, &(0x7f0000000140)=""/4096, 0x41000, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001180)={0x2, 0x7, 0x80000001, 0x8000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000011c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r0, 0x0, 0xed, 0x31, &(0x7f00000012c0)="7d5d19dfd005cd47d662020ca07ccf7f3a02e31bf2560fd310440c3a7f2ccd996c0b253ee72b49c5f3814d1801997b79c0bfd9c59f5d5570bd6a377fe691d91519db0843f2d5ac5bc570eec32480886a84cd72dd25d2f43566fde4a9719e2f4d721cd8e18f35f646065f65544eb5a39c5000c6153286f0b74635725aa2a9a2bcf324baabec9a98de2fa9ba5303be59cdccabf6efb163e8971c79c9ce4381e179857f862f28320352979361e36098ee9a361194273ee3f695c6611acc33725f11f8a76aa69adafabf0041bdbc9569668fbe46323ead8e15795c931b052a3e7a8e141db3b9e662a307e0963c8536", &(0x7f00000013c0)=""/49, 0xffffffff, 0x0, 0x67, 0x12, &(0x7f0000001400)="6db0d2eb95cd6fab6e2c7f4ec27206b8626b2882f15f1d6d48de054ac0c023def67099cb88d5ef160221a78757e956e5e892a4efea1e7af33b2a9b0ad63c738a5b04cf8b83e98f9ef2116d7140246771b2f96765f8a2ee72a7d5f468693c5d78818dd74b5ea89e", &(0x7f0000001480)="29254508cad385aadeeb66e81c006b53a8e7", 0x0, 0x0, 0x8c}, 0x50) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001540)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000001940)={0x3, 0x7, @start={r1, 0x0, "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", "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"}, [0x3, 0xb, 0x57, 0x8, 0x68213114, 0x0, 0x7, 0x1, 0x9, 0x800f, 0x4, 0x6, 0x81, 0x4, 0x224a, 0x2, 0x0, 0xfffffffffffff958, 0x3, 0x0, 0xdbdb, 0x9, 0x0, 0x1, 0x3, 0x7, 0x9, 0x7, 0x6, 0x0, 0x3, 0x83b, 0x5, 0x6, 0x0, 0x5, 0x9, 0x7, 0x2, 0x4, 0x0, 0x2, 0x2, 0x380, 0x4, 0x7fff, 0x4, 0xb, 0x3, 0x57, 0x80000000, 0xff, 0x1000, 0x4, 0x9, 0x1ff, 0x8, 0x2, 0xfffffffffffffffe, 0x7, 0x3, 0x2, 0xf, 0x7]}) (async) r2 = syz_ublk_setup_io_uring(0xf2, &(0x7f0000002380)={0x0, 0x639d, 0x2, 0x0, 0x26f}, &(0x7f0000002400)=0x0, &(0x7f0000002440), &(0x7f0000002480)) r4 = syz_io_uring_complete(r3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002500), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000002600)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x54, r6, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x40) (async) sendmsg$unix(r4, &(0x7f00000037c0)={&(0x7f0000002640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003780)=[{&(0x7f00000026c0)="36fdefdcc1f988aa7876e818f68df38b400506f9c2598f58cd53ab6d6afbdf0b9f5eafdff8532ad17fed700824c594f9703415d60e40121908c9ede5d53fee225ab465c6771142f63b33a0dbe14e4079a3e0e2fc7570dfcb63fa5fa8bb8a608c4a9845d5714fc09e18b3536ca8ee69175b8cdcae823a2b43545fca13181ff519864c5b2e542b97eae11130645069c2ee69a492afc4660543ff075d880bdf9fad93d716a3", 0xa4}, {&(0x7f0000002780)="211c4919371e7f50e83991dd8d659b7cc47dddd0baa4edd16eece2ebe74ed593a4558986015038c46b8b56d2759e400992055119eb9fe6828ceb69998b0ae239e65d24047589042b314bca805ad114779a7f55ba9fc6990749a25ee39218a6bbe49911e69e4f3a7c6afbc594b6e7e854f6700fc97ea396ea66251fc51829d5cc312d26ca00812578b99a7a273c1cf5cf45ad0ccc66b510c7dec7d211f28a022dba189411320ccb7e26ee3a6081ec733859350dc919d30f528893c2f2006739825f672bf1c95df9a8604358ed6a8b3a6de488e3a42bcb1f81394d3a399dde9373adc4100f434168535c8ba088901fd3f9882c54eedcebe0ca419b70f842554b6bd039cc4203cc24630da7087282d4e3ba43f3c21e60a3a6574c3c6119993eb7fcac4715a0e7b55209681aed20cbdbed5605401f0f1963cb906aaeb051ce9053ec93af32957f2a77bef39fd938a38ac3fbe260ff764823fbdd62e2be667852f214cb64d2666e6800d3b27ffc4a61f27e776cf400399356cadc6e39d9d3b3c36154eeed1134c2882900ce04e392ef61c5ad1aa6fdea545e6f9b973c0178232aec25357cc5024ba2361b0eb0284f5a4dbddaae654796664d0470b523de16217a751eb0d01d26bfa7c69b928e9abbb559f69150b213995bc43c0547bff337e5beb60becd1f9ebc8f06019f16d631147def1ad7b77b1f6e4832f8bae11f16600a161ca35bbcd30cf2a2b596e217e6c6eb33517cfca9875fe8e2cb1ada6eddee4d29482d2f7462fc74e0cbdb3d8180f9bd369fb510b1228b807ab6c90b4751b74f672d738167183608325b9f90f406015359596eb9a0cbba05eca2452cbb57dcd3991e5172b793695c873e317f4c04bcc14cfb692a8348d0b5c3a6fbf956ae399368622cdf67a018acb1b3667c50c4f71f4cdf3593f07fcd4a90bb5ec389e6f9cd29aac0b3eaa73745989a1e761bd5b4938a186a48a3665c8e5aa7fbe6c93bb670108a173bf4ce5e6a0ca6f6b7bb894fe0acf6b8ec0999cca56922cc0b153b2e48b2527bf767c131a813cf6a0c1e72f54db8dfcb8f89d60a1d9b83fe0c47f559b4a0bacc61088e402b001567ae971725373d9bbff4284e703df7db4ec30147ed3a735947efabc61d2f8368df5069357691e3f780ab69b72fbe6d0460bed12b6ee2f4617bf611b566a215b07f7303d053b47f0fa038c044d6e404d6754690782b561a066d0b8dd1087c5c2d7cc5a3e3852b1f3d5d8da4adad93b1fbf20780e598a84107bfea7491c425e66a38aadb535bf868d8b63ec069464555c85e41716dadfc4e160a38cd586274b67fe54c67141fa60cd7d0c0ab5f2976f36ec83a5c835ad3b4d6dea77f0a5cdc9b95cfebbb7f4aee679759674f9df3cb07c39a8454e6b585f5ebe59a0f55c25f3576131a4444213aa3840cdbd60d171891dd433a13a0b594001c3787efae803d7f5c6ef0914daa35924b9120da6ef320720b77958ff93edc8918a8b1d69448ec97a104286ecc9d8ca398547919317260efd7e4ce83e7916202a2b4a04a264625b00c2b46efe5994dfddc28e7157ffd99aac0919e8973da79c1225b6d1bcd4789999bc88d3d67535eb786f30692ddb9eb477707db938220ae733c6cd1f091129e6f9d3983888aa2df480618711d00123edcaf65800c8292c315ec5a2d47066178a0f559424772b0f755bcdfaaf4776e5f170bac90a433f7a8c45e5a886414abb0a534de143f195497cf2df161f05fc02083978f1689e502a3408476b107684aa58e6e3feb595c0602553b8fe609dc90530a94399cf14e015ae56437e7731d42afb2b0436f0fc8443fbc7a54dafe4c3cead56b33382c47cdbabfb98795ef38c8ffc768c3231ecfe9dbd34204b25ba339b20f63ac19539d054fef1f8fcc4a4ae9863059e4034189254a31ce324e765433d1b9ae18733c49aa3a08ca3d216555ab0daf026f28a5beab1815812673bb8c0b3f64d86ed9c51aa1d6b7ff66aeccb00d4d5416d761111a241495f3e7c699104f8f92c05c1aaef77da740b3fc3a2673a237ff5c127950603711c2c6252a721dea665f164bf9ca72d8cafdb2c85d8c0cf3ba7c93c14074396f06e621ebff2601a86dbca73c6f09d7b1a5af7f1865f3b485a68abc325a69e5dd7b8c06b3471a4dbd907ddcbfb148f74854186f645d3e7c4156d2efe0a0b110e41e22c634e336ac84461e7aea9fe25aabf9069b21d3e55b28d870a546eea7672625521910c723d303d0c351fd2819d455dfc7b8ec04081df27f28127de05d84d7b8c3ebfb65d951538b537383f7a3f72d3556695611fd0681a32e189ea9b0e68f4c85a9eb179058761d092697ff21e48b3430be32fd18046892d06900dd9662a7456f1c788fe04f10fd2538e56b58a27c26c75aa421ecdf460f9bce074c0048457b73699b11ba140d4cf890eaabfd2ada08441e3330f7b9a783f217a379611dd18051f0c95b3b45e83b31747f64d2a4d7d24342f3dc9048a0080ae63ac4f9aca6f9abb7e0257615f36245f03c3eed0cb8f357d6240a4d8bc65e95d72f073409eeae00e81a68d49cdb58527f8094e4a8c9a86c8d4e98f7e25d397afc9f29b946f26b2707fd1223a57bac600fbbd0d3aa1a76b9c8ca283f6e88823f033d46741fd6bb0b47aef5d0a870fd0361bf7f2e6edfcd1d0bc37e732c01063ba6d283bfe836d9afbb44446e39e1671e6140cae17e914ef61d3fca4069584d85dc49b6cf0bb05e8635608e9041b677f68c72546aaba28664fee8b2dac9d54147093c26e48dfcadf4f9a91a7610b0ffada4314395aa824e35b09b00775521bc4f67b9905aa832ef896a91febcf2f90c6c50e1789402e4998fb89f960b48833c5208e5807ef6c97dd62b098cecefd842d856f0d9bc6743e7bd97f21699184de2be68798c9f242e7bc97d00962827e21574d1c0e97a0cd4ec50d9459665c85747ec23cff4ce43afafca587c74aaa04009e0a76b99017aec91ea3f7df0d6a94bf658a26a25b6a115a67d7d0fe475ed0ef65efeb4864dcc63ff1a7f94dd6211ff43ecf4026080128d028341ef0a2b07621f812646c4ee5be13d74d18f29af8702520c555fe83217a3f35816d4639d443a1b9f7304538b14eb7817623978ac82b0ee8a747cdfe9325466626054b2043e4538b4daf0e01e01b353174b1b961107c3ef084c4de22a14f707f810c82b58ed623ad2e766eb74e5dc63adcc57a9f32595d9656d2e87db3b5853a608488fe51c35a87537643e32eb2d80c87a5cf66c32ef6400dfa2f12201e2c75148b9ac3aa6654673a90466b7793c629a0cadf85fcfbbe43d184b31f75b9d26ed2a2470dc4e0388cc6b9892a99615e2f2ce251ccd4aa84af01b7c5545a8748859da64e406da0b91f694e157227fa47d8ca1775d603c3b94cd7df5f8802c6a74d724d8697a3d7a51c36d88e70949baf98fc1ead6fc8830ed0c205ff00bd0c7184561e3b2df1b237261b83633925c9e5dbc124f13c215c6792edcc9786361cff6bfb6581a111d8fc44049e3ab4ec8ff717235ded7de054470df975eb0d844eb630e5b9f79c0026ee25059173f60cb53fd1527eb1884a13af8072c9e25f7354452a90e5af7fba99d8c55e7c199237db1bd429ebb1349ba6d8cb1a15e58bc2f99127a6184d3172d228d08321338aba4501877ec4920f15c62a4be3d496f0eea68c5cd3bfb6aeb48dc18452e80df44ebe52cef8cc03fc95f8a5591a1ec07896313ec1e0c5b11fc959d80a1e0f538cc999022204be0fe0c54bcc9fa6011707b50eb6dea8d379f854251a0769e676ff55518cb4e1cbb3e31d18566858362473ab8f985420c4685773c92118467b9517af872b147b362ca5c1b118c14cbddfcd4b7f31bdacc06b4f0d11c2567e3530744c750ea665493ba3c00616cb852aa63bdcbcb82c3514009ef4024d597265c4d1cb98250349d853ef0d2546b47a031495704beac13f99b785cceccca6b1b70293ad2ad5bc4d276f78aac982800c2c7badb87e4242da740bf518ef31257a2917c5a7f72a06d9607a5daeb0c3ad956244d5d92bc48394017a21e6387359c1528ce44eb5e068224d5ee807112318573a65c1a9d4f9b25280ca54bff07ff8d05e01ef2b6e3ec667af2b744dbf99e5044e2173aaf60e17ad9e81ba461ab3072fec6c8f9b7b3856a9875876f31268ec8b1c06ecb928bf5e5629d978c355a41c21e160bed40abec43671903d02f87823d00cd0f09ef70cc8bac97699467bd0810f613006c89257fbd421966f13c75d9a35ddbd333af3c380f3ebe1df7a66224da4149b3ad78b55b54ae283c82102d20f5e716681dd3c1d7c22840545a2454c6237dd3d3a5e5626ace530d5d9e2337eb973493e38b0ac96d121cfc98151a70d861e46e1673daf9565a0c8f2ec4960fd2a9a66369c145e2810c0d0fd7a849cd5c83e0859508b19fc1701458ac53495b8e622a3b1ff3894df714ed2cd1981e0d6829470cc9d9cc5a9229d04b466fa97bb9a0eb5e9c4e8bd96e5deb4e09d46768f1d0738d8dcb8ac7d8ddc3fae9780716597dcc5dd5b3527d80b1560350d03b496bbd4991054aa0bf6b72a5a256e7069afbf3be25af7f013cc9e8ae7915a96da02973323999989a11a1087caa93ce5131a76832769e5147e71ffcf4d19eb952dcec680acdc1384c6a8a54ca7cffef8d1ce7b83c98747c970df7579b33af691431b198bf3891508095198b24f2ac7f6bb06982016ab88b98f13d36c507fe3eaa489fceea3bd8baebe53fc1b5d728987677293b1c482bd23f5dbca79a066e7ee96b96f905e3702343a6171e814c00ba0ca5050cc539dca9b75da3cb0b9cb56b1003c6a9d25375f2a0e502d98be4a77e20460e3ae0f1d841bde078397a9f9cd552cbc36c3257b91bc13c36f4558128e4e0a2325804b0eb2077d2f128f566094cff4ca27ea68aa2c111590fb5974483c1e27cceef53a5aba29a4be4938f5aee55ff062801d3dd185652ed9334db55cde1930c007e55596448f98b8c7ae0985f056991a4a63f0b704614dd51b8728c40cfefd1a5ae38698963b4425ffcf251f92549ceef05de4885c51883516e70af03cee0a67eb255be4270c15d10c6129e87042c63d16f9501c731b118ae8f402c093ab483fbfd9acd7f77f713f47e7fc3dedf0a9b517a74cff594979aa26adfc6888eac1a518e1f6e0153f51b684f6ee596350ec2d872e098dfc21c222bf6d8692ad8a30bab0b3dc5ee80cc1e072fc623f9c1ff08a7e2a8f765a34b144a74c8a96432d5357579dfac190efe423844043d3962a23d2612dda9c99cb049531571a1b942a88daedcb9c67e2c0f087dfcd268eca1df5a9615ec2d7f77fd2c65b4eec5ba97c1b8a70360701b942fc13b8e72e53a254a94dc840bd314ff00d2695075da00661bc31f610404cec2c3958eb7bbc35c7c195b9eff4f4db43a231fc4f59f59490fb035c29d2b7db78701e26bffe78648716f1a19a0fbef56dc9262559d70b65cd835c3dc13e623631f28c1159360dee55c0790fbf6bb6bf5bbe27178beeb6fa35bebf2538e02f94c9c929ef24d9e7f3facc05da300c6a0be91e90ea69d320b54f1e56844d9eda92478b34958e10ed6a7c52142da95370680ca75fbdfbcf6febc60391833c43ad4d9a500f7bbd47b37185d9e7c2e7b6d4fcf6ca51560c98004e73617b739eb5cba4370fa54045ea2270cd9567f2781303fb92f1111d209d189e70ce7dd958717c46f3d686565e0547b9b1d639524e95b298bdcc066b5911fabda1ac77cece134e6f39cd201fb5eb68f16ffa2ce31b5fba6c5d02bc35b160c3", 0x1000}], 0x2, 0x0, 0x0, 0x4}, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000003840), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000003900)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r8, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0xa3f1133ca326a98) (async) r9 = io_uring_setup(0x941, &(0x7f0000003940)={0x0, 0xb2b1, 0x2285cf3bc2f0cbc9, 0x3, 0x24e, 0x0, r4}) syz_ublk_setup_io_uring(0x500d, &(0x7f00000039c0)={0x0, 0xfa11, 0x0, 0x3, 0x224, 0x0, r9}, &(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000003b00), r4) (async) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000003c00)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x38, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x8010) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003c40)={'batadv0\x00', 0x0}) (async) connect$inet(r4, &(0x7f0000003c80)={0x2, 0x4e24, @remote}, 0x10) (async) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000003d00)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, &(0x7f0000003cc0), {[{{@ip={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 'hsr0\x00', 'erspan0\x00', {0xff}, {}, 0x2f}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x4, 0x0, 0xfffff517, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@ip={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0xffffff00, 0xff0000ff, 'veth1_to_hsr\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x0, 0x1, 0x44}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xc, 0x0, 0xa00, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x1f258}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004040), r4) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000004140)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004100)={&(0x7f0000004080)={0x60, r12, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x4005) (async) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000004180)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x13) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000042c0)={'gre0\x00', &(0x7f0000004240)={'tunl0\x00', r10, 0x8, 0x80, 0x6518, 0x5, {{0xb, 0x4, 0x3, 0x1, 0x2c, 0x64, 0x0, 0x4b, 0x2f, 0x0, @empty, @private=0xa010100, {[@lsrr={0x83, 0x17, 0xa5, [@private=0xa010100, @private=0xa010100, @multicast1, @rand_addr=0x64010100, @multicast2]}]}}}}}) (async) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000004300)=0x1) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000004340)={r4, 0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r13, 0x8008f512, &(0x7f0000004380)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000043c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r10, r4, 0x5, 0x5, 0x5}, 0x50) (async) getsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000004440), &(0x7f0000004480)=0x4) 1.250388468s ago: executing program 4 (id=287): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e22}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x80) 1.19280849s ago: executing program 4 (id=288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x401}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x40]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="81d0f8ffb800008ee8baf80c66b8e5bd8f8d66efbafc0cb06cee66b8000000000f23c00f21f86635020006000f23f866b9800000c00f326635001000000f300f01032e0fc72a660ff509c1e1000f0118", 0x50}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000280)={0xcc, 0x0, 0x1}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x40}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x71}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xb}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x854) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000840)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)={0x290, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1d0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "5a73921573ea691c80822e71c50c68d516daed36b1"}, @ETHTOOL_A_BITSET_MASK={0xe7, 0x5, "2f5165b49f1471c643b761dc7160738d88520740c8cf045510b079fb9d34af744ba2f109651007e4031af2930eb27a23647f3043b7a973bd8f40104b9976c6bef3f68aeed0a4e03efa315c55525279775c64040ddadbbe194228d2449db36ad3173b6fe720eaf42f28bf8383e22f6a7fd482fcc15abe78ad8a7fca93017e6ca2e6c2b80a0cb7c40211de9f82da6b9d57c4e02a08d9c92345bd2ce405d4a1e76736a47912b328dedab7e228f0833c0e88365c3e3af4de8c1134bd29b830e4bc9273079c6168312fe479fa14aafb6364ed86b5150b84a6bf1071d6000d916d1b365e3c58"}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7bcb}]}, {0x4}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x98a}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1b, 0x2, 'C\'--+P+@**,*,(!!#{#}\'W\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x9e}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xc}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8001}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}]}, 0x290}, 0x1, 0x0, 0x0, 0x1}, 0x4000005) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000880)={r3, 0x9, 0x6, 0x6}) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x16cc}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200400d0}, 0x4000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x48085}, 0x40) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) setsockopt(r9, 0xff, 0x3, &(0x7f0000000b80)="22a988a365f5a43718db7eb6", 0xc) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc, 0x2e}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x94}, 0x20000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0xfe, 0x7fffffff, 0x2, @mcast2, @local, 0x8000, 0x20, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000ec0)={'ip_vti0\x00', &(0x7f0000000e00)={'syztnl2\x00', r5, 0x1, 0x7800, 0x1, 0x8000, {{0x1d, 0x4, 0x0, 0x3a, 0x74, 0x67, 0x0, 0x1, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xb}, {[@timestamp={0x44, 0x20, 0xdf, 0x0, 0x4, [0x0, 0x1, 0x1, 0x47, 0xf, 0xfffff6a1, 0x200]}, @end, @ssrr={0x89, 0x17, 0x78, [@local, @multicast1, @private=0xa010102, @remote, @broadcast]}, @generic={0x44, 0xe, "2660a7e177733f85883aa9db"}, @end, @ssrr={0x89, 0x17, 0x80, [@loopback, @empty, @multicast2, @multicast2, @multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r10, &(0x7f0000001040)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xf0, r11, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$nl_generic(r10, &(0x7f00000024c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002480)={&(0x7f00000010c0)={0x13a8, 0x32, 0x100, 0x70bd28, 0x25dfdbfb, {0x14}, [@nested={0x115f, 0xdc, 0x0, 0x1, [@typed={0x14, 0xc3, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="8862e754dd0dce56099defe6b89c0425132a9b2b66b4d9f2dfeff305d59685fe5f6bb73d1718e075d22fdaf9792f996fc6f4f78ffefa5e2b0328c064cc3d3838a8fc394fe7ece21cd0ff8399558b75443e95e2758de726f64e607af0541da54b5053c47a038ef9ce5c9300cbc7009fb07298145cdfee771b91e8265cb063590b8b53bde85bbe008568283c71f47c32325f933d9b4abad6fa4c09be2905a869f4444aa56d83ddf457c3c4c8", @generic="848f77b92c49f33f0a4978248397cbadeaf6f147a86ea7fdfcdead0fce5324f91a2f096bd1881c4f11fcb2eaeccf146c26eb88e310d9e6a29b1324f925f3251d1b2783d04db0b50f8a8e9749971b78ff5b8b22c4baa54211611cab8bf72b0bd195c4bf91148655403d3d28f99b1b3ba7be4a16228bf98cee7e60b9a25de3b307d718f157001840bdfdaedf83", @nested={0x4, 0xcb}, @typed={0x8, 0x2c, 0x0, 0x0, @fd=r10}, @nested={0x4, 0xfb}, @generic="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"]}, @generic="af9937898490feb9cc6b4a184b397c4e2c8dd8a1376a312f34345e9fbb1fb18a19fae80c961b4e5563c8db9ddd014ab3bf9a326fd35ae716e1c6357cd9a4f88e59b31c6af345f3e4c1bb3b969662605825a1fb0b1dc4b4de474df5ad2ed5766745a5791ece691edfcc8b46a2b93198adcf8ee87600ef9679fc6b1beebf0c2ff7f3ac46ac621e22c237363e04c8c91bc692", @nested={0xb4, 0x162, 0x0, 0x1, [@generic="a4bb742c927d32ccd7c7fc57d72f26c20319cfaafb8b979604cb29b3bcf863d390e7415615f40f1f42dced5b3cf00d795647df4e6575c89469bbce66b1ff97a103c56eb528c202c2f40312563bf1619eaadb9bc7615f4a390e1fe090d54f20c6e49e00c0a55a47c64f20a131491bad061bf43fc170b8f7de9e81957549dae038", @nested={0x4, 0xa7}, @nested={0x4, 0x156}, @nested={0x4, 0x15a}, @typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x4, 0x85}, @nested={0x4, 0x6c}, @typed={0x6, 0xec, 0x0, 0x0, @str='/\x00'}]}, @generic="5a407ba8e38fd0addf7639735cced8a48cf079de30f4d2c4224b09c751b10a062275c36f19d8d55c023f28aae2c73295ebf6b19954d1314f72907af473bd8ec4434a3c4e65416bcfc74c777446bb25d2e0c3f47a71cbc9b3d5fd14d3bff2df6b0f28263e8e4f81603e1ec823ad97f262647f1d3ec1183cd94a69a0b6340119e23e3c81273b90bcafc868fd3dfbc33b67daf5fa4d4f48334f947367ce91c2f186409c6b937bd27f8b80a6492ccd9ab8a78c2610402c65d3d83bac1fa40d2b451361c08b7144ff996c1ea6b692dea765c459eb2c5251bdedb43a4685e8956edf9e08e1e8c0b771f7f59f490a5ed042"]}, 0x13a8}, 0x1, 0x0, 0x0, 0x20}, 0x5) syz_kvm_setup_cpu$x86(r3, r9, &(0x7f0000fd1000/0x18000)=nil, &(0x7f0000002580)=[@text64={0x40, &(0x7f0000002500)="8f0978c24006440f017c16fa26430f01dfb9ff090000b83ff474dbba000000000f300f0766b8b4000f00d866baf80cb85d81e281ef66bafc0cec660f388096f3370000a800c744240023010000c7442402e7000000ff2c24", 0x58}], 0x1, 0x10, &(0x7f00000025c0)=[@cr0={0x0, 0x40024}], 0x1) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002600), 0x2, 0x0) read$FUSE(r9, &(0x7f0000002640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r14, &(0x7f0000004680)={0x60, 0x0, r15, {{0x0, 0x3, 0xcd76, 0x2, 0x9, 0x10, 0x3, 0x1}}}, 0x60) 1.191916647s ago: executing program 2 (id=289): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r1, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @loopback, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0xfffbfff7}}], 0x18}, 0x404c040) write$9p(r0, &(0x7f0000000100)="d5", 0x1) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="059a"], 0x8) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x9], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1.191591943s ago: executing program 4 (id=290): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000280), 0x4020000000100001, 0x2000) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0305602, &(0x7f0000000000)) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@l={0x92, 0x0, 0xd0, 0x18, 0x0, 0x0, 0x8000}) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000140)={0x0, 0x0, 0xfffffffb, '\x00', &(0x7f0000000100)=0x62}) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) sendto$l2tp(r2, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, 0x82004}, 0x10) (async) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f00000003c0)=0x8, 0x4) (async) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) (async) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x1, 0x100) ioctl$HIDIOCGNAME(r3, 0x80404806, &(0x7f00000000c0)) 1.133547839s ago: executing program 2 (id=291): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c0019"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x6932, @host}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB='&'], 0x10) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @local}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x23, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) 1.033534619s ago: executing program 2 (id=293): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c054) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x82a0}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x4}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x24048060) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1.031749823s ago: executing program 0 (id=294): ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) madvise(&(0x7f0000225000/0x2000)=nil, 0x2000, 0x2) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) (async) madvise(&(0x7f0000225000/0x2000)=nil, 0x2000, 0x2) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) (async) 1.021904881s ago: executing program 0 (id=295): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x22, &(0x7f00000000c0)=0x1, 0x4) fcntl$dupfd(r0, 0x406, r3) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x40000000015, 0x5, 0x0) mount(&(0x7f00000001c0)=@md0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x1800000, &(0x7f00000002c0)='##{3\x00') bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) getsockname$packet(r5, 0x0, &(0x7f0000000440)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x50, 0x30, 0x9, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x50}}, 0x0) 1.009484553s ago: executing program 2 (id=296): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x480000, 0x0) pread64(r0, &(0x7f00000005c0)=""/168, 0xa8, 0x3) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x47, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xe, 0x27, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffe01}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x0, 0x2, 0x1, 0x1, 0x0, 0x10, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) 932.994182ms ago: executing program 0 (id=297): syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@can_delroute={0x1c, 0x19, 0x11, 0x70bd27, 0x0, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0xc}]}, 0x1c}}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x40044160, 0x3) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@can_delroute={0x1c, 0x19, 0x11, 0x70bd27, 0x0, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0xc}]}, 0x1c}}, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x40044160, 0x3) (async) 932.630118ms ago: executing program 2 (id=298): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x18, 0x41, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, {@in=@local, 0x0, 0x33}, @in6=@private1, {0x4000000000, 0x0, 0x0, 0x4}, {0x0, 0x1}, {}, 0x0, 0x3502, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x1a00}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40000010}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020267b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff88500000071000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x88ce359bdb08143e, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$TCFLSH(r6, 0x800455ca, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='fuseblk\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000019dc0)=""/4090, 0xffa) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r7, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r9 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)="616c676f3d9473766420220104330f0b65b49b974742464e946f0235f46ca1380ff19da1f6a4b0ea65e36cac413ad3a2d49521e25a8b55d89073c8d2130438a805834f4ee7af010a9cb8e87bc996ebe5ab0fe4cee948c6dd924f896f3718ec3fadd8757a1c7fad568b4920b45fd086b0d46f6994b654cd8525da1dfb39a19bc78d8e2b644a696d847a8edee43b018f1efe708a43cbb10904331e82d07ad90b5ab81a856de0ad05d4180c555e87c76d95c55f683d98", 0xb5) 925.486038ms ago: executing program 0 (id=299): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xca8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x118, 0x8, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xf2, 0x7, 0x1, 0x0, "b73568481c322dcf5d29b2628cfa8ed9160f7cde080d6353adc77e4d9b640d5a570d8892ea676f07bbdb600912f01844151d410d9f1e20ae87207bb09536e22a69ae9b24bcc1790344164fa95230a387e1e74a57de484227d6e7b6fef9b3d7bab12a20a66b50f3813adbe74d5abac207ed0dfafb59fd8194c1efc32993d43164d8540bf68f90ea513e89d8e473da73dbba0fd872bb758616f01587113540fccc9a01b0145d046fd3af59344ed0bd0decb3f1984653e843720fda5baf00098ea3d957cb8b0731c9ff1a82112e1a5b657addd11184f73b16d7ba4d3ce627b8ef122eb860063949cbde458b896b9a47"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELOBJ={0x114, 0x14, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0xff, 0x8, "a8bfebd1aa588939454f7622fc49cd64eb06782a6efe4eec6ef1765f238e28e5b4341d0bd4676780f1b3a0c22420447cfcf0dd850e29c0ff3b73435141ebb7a23b839fe65e1fc60dbf73742adbbe106777551bdea88a6501150bc799872ec8bc1e10f3966ed1bc8cd5e61b01063012067b7e9a1e6381bf9d65704f54b4e85e4360afdfa55d8a3ad4577659f9ea34e8ab2e01866492d22806728e3c1af5cdec343a238d1302551108d14c2f48eb0767e28073433ed76fc1e9685fe5933dc9288218bab63f817c7fe54286d92ca9c4ee7ca726bea50e81453d11b2bb2f74e3864657aa6ace4a103545e427c4fa37e859f8fe11ed6656b38baf3f4a3d"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x284}, 0x1, 0x0, 0x0, 0x4011}, 0x4040080) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) 773.317548ms ago: executing program 0 (id=300): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) creat(&(0x7f0000000000)='./file3\x00', 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000580)={0x0}) r2 = dup(r0) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xf694, 0x7b, 0xaf, 0x81}]}) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 711.388072ms ago: executing program 0 (id=301): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000003c0)="0022041100ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77a62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a12", 0x98) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2200000, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=vi^tio,cache=fscache,permit_directio,mask=MAY_READ,appraise_type=imasig,\x00']) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x1, 0x0, 0x2, 0x0, 0x9}, 0x30, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000140)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000f80902"], 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f00001b4000/0x3000)=nil) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) lsm_get_self_attr(0x2, 0x0, &(0x7f0000001280), 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20, 0xfffe, 0x832}) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 272.723565ms ago: executing program 4 (id=302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syz_tun\x00', @link_local}) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000001680)=0x8) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000800010000194f92890000004600004007000000ffffffac1414aa00000000f9e1a77c68b27c3279866658cbca32ffd0e65b3dd68dd3bb8c7eac55e3e8f9c4425a3bb45580b4b641d0277cfb504aca436a1b9a30736d12c6642eb4cdfe62b0241ecf022f711cff6fcf33dc802ab0f1605561d18c14d9f9e74f365131fa3d70c7ba1c1b61ab70be22063fe059edecf6304849eebf8ec55afb55", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4000000907800040a0300050200000000000000000002d58838068b91000000"], 0x4e) 172.015643ms ago: executing program 4 (id=303): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x800000000000, 0x4, 0x6, 0xfffffffffffffffd}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) (async) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000000)=0xf5f, 0x4) (async) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 53.573917ms ago: executing program 1 (id=304): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000200)) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) 53.241858ms ago: executing program 4 (id=305): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="e7ffffffffff"}) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000040)={0x0, "d29f678264346556779840f700"}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000a40)='./file0\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="e5f342bd309ed9716468686e772f0201ae6ae02a279b4e25a4f33a994e6d185d5fe595b06414819127a6196c9c10d33e34b73cf4482cc98b4356821ae32927ebd46b69439a41215ba2047cd64ff999deeb7c471c01d4d8f05fc2cc23", 0x5c, 0x4000000, &(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10) 0s ago: executing program 1 (id=306): msgsnd(0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x1000, 0xa8900) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x7) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) (async) read(r0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) (async) r2 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$inet6(r2, &(0x7f0000000000)="55996f41ba4d2a07df7b75252a9057a68fa03063d17896fc3a019d489b29eba88593cc175e5404650d9fbe6e1c5c520bdebaf0", 0x33, 0x20000000, &(0x7f0000000080)={0xa, 0x4, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6e}, 0x1c) (async, rerun: 64) sendto$packet(r2, &(0x7f0000000140)='\x00'/14, 0xe, 0x4044015, &(0x7f0000000040)={0x11, 0x0, r3, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) (rerun: 64) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:48179' (ED25519) to the list of known hosts. [ 41.950193][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 41.950207][ T43] audit: type=1400 audit(1789202371.250:141): avc: denied { mounton } for pid=5715 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.954278][ T43] audit: type=1400 audit(1789202371.260:142): avc: denied { mount } for pid=5715 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.957252][ T5715] cgroup: Unknown subsys name 'net' [ 41.958741][ T43] audit: type=1400 audit(1789202371.260:143): avc: denied { unmount } for pid=5715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.096128][ T5715] cgroup: Unknown subsys name 'cpuset' [ 42.100598][ T5715] cgroup: Unknown subsys name 'rlimit' [ 42.314960][ T43] audit: type=1400 audit(1789202371.620:144): avc: denied { setattr } for pid=5715 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.315467][ T43] audit: type=1400 audit(1789202371.620:145): avc: denied { create } for pid=5715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.315756][ T43] audit: type=1400 audit(1789202371.620:146): avc: denied { write } for pid=5715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.316096][ T43] audit: type=1400 audit(1789202371.620:147): avc: denied { read } for pid=5715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.333156][ T43] audit: type=1400 audit(1789202371.630:148): avc: denied { mounton } for pid=5715 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.333184][ T43] audit: type=1400 audit(1789202371.630:149): avc: denied { mount } for pid=5715 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 42.341898][ T43] audit: type=1400 audit(1789202371.650:150): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 42.388235][ T5722] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.238554][ T5715] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.971878][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 46.971896][ T43] audit: type=1400 audit(1789202376.280:158): avc: denied { execmem } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.171896][ T43] audit: type=1400 audit(1789202376.480:159): avc: denied { create } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.175193][ T43] audit: type=1400 audit(1789202376.480:160): avc: denied { read write } for pid=5728 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.175747][ T43] audit: type=1400 audit(1789202376.480:161): avc: denied { open } for pid=5728 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.195300][ T43] audit: type=1400 audit(1789202376.500:162): avc: denied { ioctl } for pid=5728 comm="syz-executor" path="socket:[3009]" dev="sockfs" ino=3009 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.211272][ T5737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.218474][ T5739] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.220017][ T5739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.222707][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.223000][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.223443][ T5740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.225101][ T5739] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.225784][ T5739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.226289][ T5739] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.226886][ T5739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.227305][ T5739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.228035][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.232029][ T5739] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.232496][ T5739] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.235285][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.237461][ T5740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.239320][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.242558][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.248107][ T43] audit: type=1400 audit(1789202376.550:163): avc: denied { read } for pid=5728 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.248343][ T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.250841][ T5744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.253380][ T43] audit: type=1400 audit(1789202376.560:164): avc: denied { open } for pid=5729 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.257629][ T43] audit: type=1400 audit(1789202376.560:165): avc: denied { mounton } for pid=5729 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.265009][ T43] audit: type=1400 audit(1789202376.570:166): avc: denied { module_request } for pid=5729 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.289353][ T43] audit: type=1400 audit(1789202376.590:167): avc: denied { sys_module } for pid=5731 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.043649][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.043726][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.043824][ T5729] bridge_slave_0: entered allmulticast mode [ 48.046489][ T5729] bridge_slave_0: entered promiscuous mode [ 48.067353][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.067469][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.067761][ T5730] bridge_slave_0: entered allmulticast mode [ 48.069164][ T5730] bridge_slave_0: entered promiscuous mode [ 48.090485][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.090568][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.090833][ T5729] bridge_slave_1: entered allmulticast mode [ 48.092718][ T5729] bridge_slave_1: entered promiscuous mode [ 48.110099][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.110148][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.111667][ T5730] bridge_slave_1: entered allmulticast mode [ 48.112998][ T5730] bridge_slave_1: entered promiscuous mode [ 48.137936][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.164604][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.164684][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.164763][ T5728] bridge_slave_0: entered allmulticast mode [ 48.165799][ T5728] bridge_slave_0: entered promiscuous mode [ 48.168605][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.176949][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.176992][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.177059][ T5731] bridge_slave_0: entered allmulticast mode [ 48.177816][ T5731] bridge_slave_0: entered promiscuous mode [ 48.181082][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.184814][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.186015][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.186081][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.186283][ T5728] bridge_slave_1: entered allmulticast mode [ 48.187071][ T5728] bridge_slave_1: entered promiscuous mode [ 48.195363][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.195435][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.195491][ T5731] bridge_slave_1: entered allmulticast mode [ 48.196341][ T5731] bridge_slave_1: entered promiscuous mode [ 48.224376][ T5729] team0: Port device team_slave_0 added [ 48.243066][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.253996][ T5730] team0: Port device team_slave_0 added [ 48.256296][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.258240][ T5729] team0: Port device team_slave_1 added [ 48.261632][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.263882][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.265770][ T5730] team0: Port device team_slave_1 added [ 48.321119][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.321131][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.321144][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.334245][ T5731] team0: Port device team_slave_0 added [ 48.335887][ T5728] team0: Port device team_slave_0 added [ 48.346673][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.346688][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.346708][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.347368][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.347380][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.347406][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.355539][ T5728] team0: Port device team_slave_1 added [ 48.363757][ T5731] team0: Port device team_slave_1 added [ 48.370578][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.370595][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.370618][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.371382][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.371393][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.371407][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.372727][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.372734][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.372746][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.429163][ T5729] hsr_slave_0: entered promiscuous mode [ 48.429684][ T5729] hsr_slave_1: entered promiscuous mode [ 48.431717][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.431729][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.431749][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.448529][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.448546][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.448593][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.465693][ T5728] hsr_slave_0: entered promiscuous mode [ 48.466217][ T5728] hsr_slave_1: entered promiscuous mode [ 48.466561][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 48.466666][ T5728] Cannot create hsr debugfs directory [ 48.498089][ T5730] hsr_slave_0: entered promiscuous mode [ 48.498648][ T5730] hsr_slave_1: entered promiscuous mode [ 48.498976][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 48.498990][ T5730] Cannot create hsr debugfs directory [ 48.552121][ T5731] hsr_slave_0: entered promiscuous mode [ 48.552602][ T5731] hsr_slave_1: entered promiscuous mode [ 48.552914][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 48.552931][ T5731] Cannot create hsr debugfs directory [ 48.810715][ T5729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.817658][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.833297][ T5729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.837505][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.838031][ T5729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.841627][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.842154][ T5729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.847253][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.908145][ T5728] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.915175][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.916024][ T5728] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.919454][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.926124][ T5728] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.930349][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.931528][ T5728] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.935052][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.005999][ T5730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.009855][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.010357][ T5730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.015345][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.018433][ T5730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.024330][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.025035][ T5730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.030351][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.051149][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.092893][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.116939][ T5731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.119734][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.123528][ T1295] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.123601][ T1295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.128962][ T5731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.136631][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.138380][ T1295] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.138517][ T1295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.144587][ T5731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.148253][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.149490][ T5731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.153087][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.195478][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.225317][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.237943][ T1295] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.238025][ T1295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.247271][ T1295] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.247393][ T1295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.268178][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.301573][ T5744] Bluetooth: hci2: command tx timeout [ 49.301750][ T5737] Bluetooth: hci3: command tx timeout [ 49.301758][ T5744] Bluetooth: hci0: command tx timeout [ 49.303211][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.311780][ T5744] Bluetooth: hci1: command tx timeout [ 49.319548][ T1295] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.319636][ T1295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.324349][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.328668][ T1295] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.328711][ T1295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.356784][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.368891][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.368978][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.378220][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.378307][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.384078][ T5730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.572419][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.618420][ T5729] veth0_vlan: entered promiscuous mode [ 49.631826][ T5729] veth1_vlan: entered promiscuous mode [ 49.649692][ T5729] veth0_macvtap: entered promiscuous mode [ 49.653605][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.655857][ T5729] veth1_macvtap: entered promiscuous mode [ 49.671037][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.679915][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.685940][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.704686][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.768159][ T5731] veth0_vlan: entered promiscuous mode [ 49.785170][ T5728] veth0_vlan: entered promiscuous mode [ 49.803380][ T5731] veth1_vlan: entered promiscuous mode [ 49.821433][ T5728] veth1_vlan: entered promiscuous mode [ 49.826487][ T5730] veth0_vlan: entered promiscuous mode [ 49.827283][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.827544][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.832185][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.832946][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.838854][ T5730] veth1_vlan: entered promiscuous mode [ 49.857640][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.857658][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.878109][ T5731] veth0_macvtap: entered promiscuous mode [ 49.885218][ T5728] veth0_macvtap: entered promiscuous mode [ 49.890173][ T5731] veth1_macvtap: entered promiscuous mode [ 49.895781][ T5730] veth0_macvtap: entered promiscuous mode [ 49.900656][ T5728] veth1_macvtap: entered promiscuous mode [ 49.905742][ T5730] veth1_macvtap: entered promiscuous mode [ 49.912135][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.912497][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.924077][ T5729] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.928623][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.932707][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.945811][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.953942][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.956613][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.958194][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.041674][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.041741][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.041806][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.041866][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.042081][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.042226][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.042466][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.042632][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.070131][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.070144][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.114807][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.114826][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.120752][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.120769][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.141127][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.141458][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.142216][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.142232][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.158922][ T5885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5885 comm=syz.0.6 [ 50.167941][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.167955][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.193895][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.193909][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.195382][ T5885] Zero length message leads to an empty skb [ 50.201871][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.201896][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.267296][ T5889] batman_adv: batadv0: Adding interface: veth0 [ 50.267312][ T5889] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.267334][ T5889] batman_adv: batadv0: Interface activated: veth0 [ 50.275957][ T5889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7'. [ 50.276350][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.276361][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.282618][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.282639][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.288610][ T5889] batman_adv: batadv0: Interface deactivated: veth0 [ 50.288629][ T5889] batman_adv: batadv0: Removing interface: veth0 [ 50.320087][ T5892] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 50.577974][ T5918] netlink: 'syz.3.12': attribute type 3 has an invalid length. [ 50.578005][ T5918] netlink: 'syz.3.12': attribute type 3 has an invalid length. [ 50.578031][ T5918] netlink: 'syz.3.12': attribute type 3 has an invalid length. [ 50.578047][ T5918] netlink: 'syz.3.12': attribute type 3 has an invalid length. [ 50.578064][ T5918] netlink: 'syz.3.12': attribute type 3 has an invalid length. [ 50.578080][ T5918] netlink: 'syz.3.12': attribute type 3 has an invalid length. [ 50.578104][ T5918] netlink: 'syz.3.12': attribute type 3 has an invalid length. [ 50.578120][ T5918] netlink: 'syz.3.12': attribute type 3 has an invalid length. [ 50.578136][ T5918] netlink: 'syz.3.12': attribute type 3 has an invalid length. [ 50.578153][ T5918] netlink: 'syz.3.12': attribute type 3 has an invalid length. [ 50.617289][ T5921] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11'. [ 50.622131][ T5918] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 50.713081][ T5933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.713685][ T5933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.941211][ T62] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 51.101261][ T62] usb 8-1: Using ep0 maxpacket: 16 [ 51.102497][ T62] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 51.104348][ T62] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 51.104365][ T62] usb 8-1: config 0 has no interface number 0 [ 51.106991][ T62] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.107004][ T62] usb 8-1: Product: syz [ 51.107011][ T62] usb 8-1: Manufacturer: syz [ 51.107018][ T62] usb 8-1: SerialNumber: syz [ 51.110000][ T62] usb 8-1: config 0 descriptor?? [ 51.118384][ T62] hub 8-1:0.132: bad descriptor, ignoring hub [ 51.118404][ T62] hub 8-1:0.132: probe with driver hub failed with error -5 [ 51.122830][ T62] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.132/input/input5 [ 51.148523][ T62] input: failed to attach handler mousedev to device input5, error: -2 [ 51.272595][ T5951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18'. [ 51.275601][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 51.382877][ T5737] Bluetooth: hci2: command tx timeout [ 51.382945][ T5744] Bluetooth: hci3: command tx timeout [ 51.715980][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'. [ 51.716032][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'. [ 51.732846][ T5979] nfs4: Unknown parameter 'emory.events' [ 51.771895][ T5984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25'. [ 51.967453][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'. [ 51.990245][ T43] kauditd_printk_skb: 175 callbacks suppressed [ 51.990257][ T43] audit: type=1400 audit(1789202381.290:270): avc: denied { write } for pid=5999 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.022027][ T5744] Bluetooth: hci1: command tx timeout [ 52.056730][ T43] audit: type=1400 audit(1789202381.360:271): avc: denied { sys_module } for pid=6004 comm="syz.3.29" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 52.080108][ T43] audit: type=1400 audit(1789202381.380:272): avc: denied { write } for pid=6007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.109348][ T43] audit: type=1400 audit(1789202381.410:273): avc: denied { create } for pid=6012 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 52.126247][ T43] audit: type=1400 audit(1789202381.430:274): avc: denied { create } for pid=6012 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.133094][ T43] audit: type=1400 audit(1789202381.440:275): avc: denied { bind } for pid=6012 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.133491][ T43] audit: type=1400 audit(1789202381.440:276): avc: denied { write } for pid=6012 comm="syz.3.30" path="socket:[9740]" dev="sockfs" ino=9740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.135531][ T43] audit: type=1400 audit(1789202381.440:277): avc: denied { write } for pid=6014 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.141162][ T43] audit: type=1400 audit(1789202381.450:278): avc: denied { setopt } for pid=6012 comm="syz.3.30" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.160140][ T43] audit: type=1400 audit(1789202381.460:279): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 52.203551][ T62] usb 8-1: USB disconnect, device number 2 [ 52.387828][ T6038] warning: `syz.3.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 52.591019][ T5744] Bluetooth: hci0: command tx timeout [ 52.677798][ T6052] mmap: syz.0.37 (6052) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.246844][ T6042] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 53.334078][ T6062] xt_hashlimit: size too large, truncated to 1048576 [ 53.470994][ T5744] Bluetooth: hci3: command tx timeout [ 53.471029][ T5744] Bluetooth: hci2: command tx timeout [ 54.101052][ T5744] Bluetooth: hci1: command tx timeout [ 54.661310][ T5744] Bluetooth: hci0: command 0x0419 tx timeout [ 55.228140][ T6024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 55.378579][ T6085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6085 comm=syz.2.47 [ 55.390814][ T6088] syzkaller0: entered promiscuous mode [ 55.390828][ T6088] syzkaller0: entered allmulticast mode [ 55.393311][ T6090] sctp: [Deprecated]: syz.3.46 (pid 6090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 55.393311][ T6090] Use struct sctp_sack_info instead [ 55.393572][ T6090] sctp: [Deprecated]: syz.3.46 (pid 6090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 55.393572][ T6090] Use struct sctp_sack_info instead [ 55.393922][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 55.525183][ T6102] program syz.2.51 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.528563][ T6102] overlayfs: conflicting lowerdir path [ 55.541560][ T5744] Bluetooth: hci2: command tx timeout [ 55.541593][ T5744] Bluetooth: hci3: command tx timeout [ 55.601033][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 55.639250][ T6111] (syz.2.55,6111,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 55.639267][ T6111] (syz.2.55,6111,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 55.645591][ T6114] dvmrp0: entered allmulticast mode [ 55.682396][ T6119] ALSA: seq fatal error: cannot create timer (-16) [ 55.682586][ T6118] ALSA: seq fatal error: cannot create timer (-16) [ 55.901046][ T1752] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.981010][ T65] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.052357][ T1752] usb 7-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 56.053330][ T1752] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 56.055683][ T1752] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 56.055703][ T1752] usb 7-1: Product: syz [ 56.055715][ T1752] usb 7-1: Manufacturer: syz [ 56.061352][ T6116] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 56.063901][ T1752] iuu_phoenix 7-1:1.0: iuu_phoenix converter detected [ 56.069445][ T1752] usb 7-1: iuu_phoenix converter now attached to ttyUSB0 [ 56.131752][ T65] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 56.132830][ T65] usb 6-1: config 1 has an invalid descriptor of length 168, skipping remainder of the config [ 56.132866][ T65] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 56.132885][ T65] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 56.132903][ T65] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 56.132922][ T65] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 56.132940][ T65] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 56.132958][ T65] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 56.132976][ T65] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 56.132995][ T65] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 56.133014][ T65] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 56.133033][ T65] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 56.133058][ T65] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 56.133077][ T65] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 194, changing to 11 [ 56.133097][ T65] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 58790, setting to 1024 [ 56.133117][ T65] usb 6-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 56.135253][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.135272][ T65] usb 6-1: Product: syz [ 56.135284][ T65] usb 6-1: Manufacturer: syz [ 56.135296][ T65] usb 6-1: SerialNumber: syz [ 56.138239][ T6118] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 56.138359][ T6118] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 56.138491][ T6118] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 56.138617][ T6118] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 56.138709][ T6118] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 56.138843][ T6118] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 56.138999][ T6118] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 56.139150][ T6118] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 56.139293][ T6118] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 56.139369][ T6118] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 56.139528][ T6118] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 56.139648][ T6118] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 56.142888][ T65] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 56.145167][ T65] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 56.149547][ T65] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 56.151433][ T65] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 56.153775][ T65] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 56.295073][ T6124] netlink: 14 bytes leftover after parsing attributes in process `syz.0.59'. [ 56.308842][ T6098] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 56.317038][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.317357][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.373104][ T6136] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 56.392786][ T6120] dvmrp0: left allmulticast mode [ 56.419772][ T6139] ceph: No mds server is up or the cluster is laggy [ 56.448540][ T6139] validate_nla: 45 callbacks suppressed [ 56.448559][ T6139] netlink: 'syz.0.62': attribute type 7 has an invalid length. [ 56.448570][ T6139] netlink: 48 bytes leftover after parsing attributes in process `syz.0.62'. [ 56.453020][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 56.458282][ T6139] netlink: 'syz.0.62': attribute type 7 has an invalid length. [ 56.458318][ T6139] netlink: 48 bytes leftover after parsing attributes in process `syz.0.62'. [ 56.458343][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 56.647601][ T6169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=6169 comm=syz.3.70 [ 56.726108][ T6177] omfs: Invalid superblock (0) [ 56.855440][ T6186] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 56.903741][ T6190] /dev/sg0: Can't lookup blockdev [ 57.003821][ T43] kauditd_printk_skb: 123 callbacks suppressed [ 57.003838][ T43] audit: type=1400 audit(1789202386.310:387): avc: denied { shutdown } for pid=6197 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.004124][ T43] audit: type=1400 audit(1789202386.310:388): avc: denied { read } for pid=6197 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.018789][ T43] audit: type=1400 audit(1789202386.320:389): avc: denied { ioctl } for pid=6197 comm="syz.3.81" path="/dev/uinput" dev="devtmpfs" ino=941 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.318229][ T65] usb 6-1: USB disconnect, device number 2 [ 57.330385][ T5840] usb 7-1: USB disconnect, device number 2 [ 57.346802][ T43] audit: type=1400 audit(1789202386.650:390): avc: denied { mounton } for pid=6202 comm="syz.3.83" path="/33/debug" dev="tmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.347102][ T43] audit: type=1400 audit(1789202386.650:391): avc: denied { mount } for pid=6202 comm="syz.3.83" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 57.355805][ T5840] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 57.358883][ T5840] iuu_phoenix 7-1:1.0: device disconnected [ 57.364284][ T65] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 57.374414][ T65] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 57.379974][ T65] keyspan 6-1:1.0: device disconnected [ 57.525446][ T43] audit: type=1400 audit(1789202386.830:392): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 57.544864][ T43] audit: type=1400 audit(1789202386.850:393): avc: denied { allowed } for pid=6207 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 57.592164][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 57.592386][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 57.592616][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 57.643313][ T6216] netlink: 'syz.3.86': attribute type 2 has an invalid length. [ 57.643335][ T6216] netlink: 'syz.3.86': attribute type 2 has an invalid length. [ 57.644481][ T6216] netlink: 'syz.3.86': attribute type 8 has an invalid length. [ 57.667843][ T43] audit: type=1400 audit(1789202386.970:394): avc: denied { setattr } for pid=6215 comm="syz.3.86" name="/" dev="9p" ino=82051131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.673382][ T43] audit: type=1400 audit(1789202386.970:395): avc: denied { mounton } for pid=6215 comm="syz.3.86" path="/36/file0" dev="9p" ino=82051131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.678654][ T43] audit: type=1400 audit(1789202386.980:396): avc: denied { read } for pid=6215 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.934753][ T6230] lo: entered allmulticast mode [ 57.935121][ T6230] bond0: entered allmulticast mode [ 57.935587][ T6230] dummy0: entered allmulticast mode [ 57.936724][ T6230] eql: entered allmulticast mode [ 57.936865][ T6230] ifb0: entered allmulticast mode [ 57.937109][ T6230] ifb1: entered allmulticast mode [ 57.945470][ T6230] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 57.954694][ T6230] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 57.957981][ T6230] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 57.958687][ T6230] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 57.959299][ T6230] hwsim0: entered allmulticast mode [ 57.959488][ T6230] ieee802154 phy0 wpan0: entered allmulticast mode [ 57.959790][ T6230] ieee802154 phy1 wpan1: entered allmulticast mode [ 57.960099][ T6230] teql0: entered allmulticast mode [ 57.960310][ T6230] tunl0: entered allmulticast mode [ 57.960544][ T6230] gre0: entered allmulticast mode [ 57.960699][ T6230] gretap0: entered allmulticast mode [ 57.961374][ T6230] erspan0: entered allmulticast mode [ 57.961766][ T6230] ip_vti0: entered allmulticast mode [ 57.961949][ T6230] ip6_vti0: entered allmulticast mode [ 57.962100][ T6230] sit0: entered allmulticast mode [ 57.962249][ T6230] ip6tnl0: entered allmulticast mode [ 57.962460][ T6230] ip6gre0: entered allmulticast mode [ 57.962614][ T6230] lapb0: entered allmulticast mode [ 57.962926][ T6230] lapb1: entered allmulticast mode [ 57.963267][ T6230] lapb2: entered allmulticast mode [ 57.963564][ T6230] lapb3: entered allmulticast mode [ 57.963855][ T6230] lapb4: entered allmulticast mode [ 57.964152][ T6230] lapb5: entered allmulticast mode [ 57.964451][ T6230] lapb6: entered allmulticast mode [ 57.964946][ T6230] lowpan0: entered allmulticast mode [ 58.033042][ T6239] capability: warning: `syz.2.95' uses deprecated v2 capabilities in a way that may be insecure [ 58.064739][ T6237] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 58.064844][ T6237] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.073450][ T6237] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.079660][ T6237] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.079694][ T6237] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.081337][ T6237] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.088023][ T6237] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.088102][ T6237] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.089009][ T6245] type: 17119 invalid [ 58.092174][ T6237] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.123526][ T6241] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 58.146762][ T6242] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 58.195856][ T6254] binder: BINDER_SET_CONTEXT_MGR already set [ 58.195989][ T6254] binder: 6250:6254 ioctl 4018620d 200000000100 returned -16 [ 58.339912][ T6264] futex_wake_op: syz.0.100 tries to shift op by -1; fix this program [ 58.430550][ T6252] binder: BINDER_SET_CONTEXT_MGR already set [ 58.430559][ T6252] binder: 6250:6252 ioctl 4018620d 2000000002c0 returned -16 [ 59.090022][ T6289] mac80211_hwsim hwsim7 : renamed from wlan1 (while UP) [ 59.167847][ T6303] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 59.167877][ T6303] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 59.169094][ T6303] vhci_hcd vhci_hcd.0: Device attached [ 59.173359][ T6303] vhci_hcd vhci_hcd.0: port 0 already used [ 59.213553][ T6303] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 59.214560][ T6305] vhci_hcd: connection closed [ 59.218962][ T12] vhci_hcd vhci_hcd.2: stop threads [ 59.219170][ T12] vhci_hcd vhci_hcd.2: release socket [ 59.219186][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 59.824831][ T6324] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 59.861789][ T6326] process 'syz.2.116' launched '/dev/fd/7' with NULL argv: empty string added [ 59.924542][ T6331] netlink: 'syz.0.118': attribute type 3 has an invalid length. [ 59.924563][ T6331] netlink: 'syz.0.118': attribute type 3 has an invalid length. [ 59.964153][ T6335] netlink: 'syz.0.118': attribute type 3 has an invalid length. [ 59.964175][ T6335] netlink: 'syz.0.118': attribute type 3 has an invalid length. [ 60.101861][ T5737] Bluetooth: hci3: command 0x0c1a tx timeout [ 60.102003][ T5737] Bluetooth: hci2: command 0x0c1a tx timeout [ 60.102019][ T5737] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.287704][ T6382] evm: overlay not supported [ 60.314533][ T6385] pim6reg: entered allmulticast mode [ 60.314656][ T6383] pim6reg: left allmulticast mode [ 60.367086][ T6400] IPVS: set_ctl: invalid protocol: 30 100.1.1.2:20002 [ 60.451691][ T6414] program syz.0.136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.578692][ T5744] Bluetooth: hci1: unexpected event for opcode 0x204e [ 60.641005][ T5829] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 60.801385][ T5829] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 60.802176][ T5829] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.802200][ T5829] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 60.802211][ T5829] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 60.802222][ T5829] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.805351][ T5829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.805364][ T5829] usb 8-1: Product: syz [ 60.805371][ T5829] usb 8-1: Manufacturer: syz [ 60.805378][ T5829] usb 8-1: SerialNumber: syz [ 61.010234][ T5829] usb 8-1: usb_control_msg returned -71 [ 61.010287][ T5829] usbtmc 8-1:1.0: can't read capabilities [ 61.020309][ T5829] usb 8-1: USB disconnect, device number 3 [ 61.255236][ T6395] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 61.444599][ T6473] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 61.444615][ T6473] device-mapper: raid: Choosing default region size of 4MiB [ 61.461241][ T42] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 61.611496][ T42] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 61.612440][ T42] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.612475][ T42] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 61.612501][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 61.612513][ T42] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.614141][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.614152][ T42] usb 8-1: Product: syz [ 61.614159][ T42] usb 8-1: Manufacturer: syz [ 61.614167][ T42] usb 8-1: SerialNumber: syz [ 61.654353][ T6473] device-mapper: table: 248:0: raid: Component device(s) too small (-EINVAL) [ 61.654378][ T6473] device-mapper: ioctl: error adding target to table [ 61.789582][ T6499] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 61.819160][ T42] usb 8-1: usb_control_msg returned -32 [ 61.819202][ T42] usbtmc 8-1:1.0: can't read capabilities [ 62.145178][ T43] kauditd_printk_skb: 103 callbacks suppressed [ 62.145192][ T43] audit: type=1400 audit(1789202391.450:467): avc: denied { read } for pid=6525 comm="syz.0.145" name="msr" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.145450][ T43] audit: type=1400 audit(1789202391.450:468): avc: denied { open } for pid=6525 comm="syz.0.145" path="/dev/cpu/2/msr" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.145827][ T43] audit: type=1400 audit(1789202391.450:469): avc: denied { ioctl } for pid=6525 comm="syz.0.145" path="/dev/cpu/2/msr" dev="devtmpfs" ino=91 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.147810][ T43] audit: type=1400 audit(1789202391.450:470): avc: denied { setopt } for pid=6525 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.181113][ T5744] Bluetooth: hci2: command 0x0c1a tx timeout [ 62.181143][ T5744] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.206452][ T6407] usbtmc 8-1:1.0: INITIATE_ABORT_BULK_OUT returned 11 [ 62.235018][ T6536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6536 comm=syz.0.147 [ 62.236553][ T6536] __nla_validate_parse: 36 callbacks suppressed [ 62.236570][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'. [ 62.236593][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 62.264487][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.264514][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.264531][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.264548][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.339227][ T6548] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 62.340469][ T6548] CIFS: Attempting to mount //127.0.0.1/test [ 62.346168][ T6548] CIFS: VFS: Error connecting to socket. Aborting operation. [ 62.346242][ T6548] CIFS: VFS: cifs_mount failed w/return code = -111 [ 62.407707][ T5829] usb 8-1: USB disconnect, device number 4 [ 62.411077][ T43] audit: type=1400 audit(1789202391.710:471): avc: denied { setattr } for pid=6545 comm="syz.0.150" name="file0" dev="9p" ino=82051143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.766082][ T43] audit: type=1400 audit(1789202392.070:472): avc: denied { write } for pid=6565 comm="syz.2.155" name="netstat" dev="proc" ino=4026533092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 62.903156][ T43] audit: type=1326 audit(1789202392.210:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6571 comm="syz.0.153" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4779f9e159 code=0x0 [ 62.958346][ T6581] xt_ipcomp: unknown flags 1D [ 62.966818][ T43] audit: type=1400 audit(1789202392.270:474): avc: denied { write } for pid=6571 comm="syz.0.153" name="uprobe_events" dev="tracefs" ino=2070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 62.967766][ T6583] vxcan0: tx address claim with different name [ 63.340969][ T5828] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 63.481065][ T5828] usb 6-1: device descriptor read/64, error -71 [ 63.741228][ T5828] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 63.760219][ T43] audit: type=1400 audit(1789202393.060:475): avc: denied { setopt } for pid=6601 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.790691][ T43] audit: type=1400 audit(1789202393.090:476): avc: denied { mounton } for pid=6606 comm="syz.0.163" path="/" dev="ramfs" ino=12634 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 63.790768][ T6607] nfs4: Bad value for 'source' [ 63.815171][ T6609] netlink: 16 bytes leftover after parsing attributes in process `syz.2.164'. [ 63.815224][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'. [ 63.849904][ T5737] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 63.871263][ T5828] usb 6-1: device descriptor read/64, error -71 [ 63.962702][ T6630] device-mapper: ioctl: Invalid ioctl structure: name m, dev f801 [ 63.962983][ T6630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.170'. [ 63.992222][ T5828] usb usb6-port1: attempt power cycle [ 64.003982][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.172'. [ 64.271117][ T5744] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.271124][ T5734] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.331020][ T5828] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 64.351705][ T5828] usb 6-1: device descriptor read/8, error -71 [ 64.603190][ T5828] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 64.612824][ T6650] netlink: 'syz.3.175': attribute type 7 has an invalid length. [ 64.612843][ T6650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.175'. [ 64.621740][ T5828] usb 6-1: device descriptor read/8, error -71 [ 64.647450][ T6652] netlink: 44 bytes leftover after parsing attributes in process `syz.3.176'. [ 64.700722][ T6654] netlink: 104 bytes leftover after parsing attributes in process `syz.3.176'. [ 64.742403][ T5828] usb usb6-port1: unable to enumerate USB device [ 65.002564][ T6642] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 65.003816][ T6642] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 65.003952][ T6642] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 65.004817][ T6643] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 65.042631][ T6667] binder: BINDER_SET_CONTEXT_MGR already set [ 65.042642][ T6667] binder: 6665:6667 ioctl 4018620d 200000000000 returned -16 [ 65.042922][ T6666] binder: 6665:6666 ioctl c0306201 2000000003c0 returned -14 [ 65.153944][ T6675] IPVS: nq: FWM 3 0x00000003 - no destination available [ 65.154357][ T6675] IPVS: nq: FWM 3 0x00000003 - no destination available [ 65.154532][ T6675] IPVS: nq: FWM 3 0x00000003 - no destination available [ 65.154689][ T6675] IPVS: nq: FWM 3 0x00000003 - no destination available [ 65.154895][ T6675] IPVS: nq: FWM 3 0x00000003 - no destination available [ 65.155091][ T6675] IPVS: nq: FWM 3 0x00000003 - no destination available [ 65.155251][ T6675] IPVS: nq: FWM 3 0x00000003 - no destination available [ 65.155411][ T6675] IPVS: nq: FWM 3 0x00000003 - no destination available [ 65.155564][ T6675] IPVS: nq: FWM 3 0x00000003 - no destination available [ 65.155716][ T6675] IPVS: nq: FWM 3 0x00000003 - no destination available [ 65.160254][ T63] IPVS: starting estimator thread 0... [ 65.241138][ T6677] IPVS: using max 26 ests per chain, 62400 per kthread [ 65.282154][ T6680] IPVS: set_ctl: invalid protocol: 44 100.1.1.5:20002 [ 65.345023][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.431280][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.435498][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.436072][ T5734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.440146][ T5734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.447296][ T5734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.453177][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.513902][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.571842][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.677952][ T13] bridge_slave_1: left allmulticast mode [ 65.677976][ T13] bridge_slave_1: left promiscuous mode [ 65.679295][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.686962][ T13] bridge_slave_0: left allmulticast mode [ 65.686978][ T13] bridge_slave_0: left promiscuous mode [ 65.687082][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.816967][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.820337][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.830591][ T13] bond0 (unregistering): Released all slaves [ 66.010021][ T6699] can: request_module (can-proto-3) failed. [ 66.031112][ T5734] Bluetooth: hci4: command 0x1003 tx timeout [ 66.034762][ T5737] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 66.042420][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 66.056659][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 66.245393][ T13] hsr_slave_0: left promiscuous mode [ 66.245824][ T13] hsr_slave_1: left promiscuous mode [ 66.246210][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.246226][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.247670][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.247681][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.255818][ T13] veth1_macvtap: left promiscuous mode [ 66.255879][ T13] veth0_macvtap: left promiscuous mode [ 66.255927][ T13] veth1_vlan: left promiscuous mode [ 66.255966][ T13] veth0_vlan: left promiscuous mode [ 66.262577][ T5737] Bluetooth: hci1: command 0x0c1a tx timeout [ 66.437117][ T13] team0 (unregistering): Port device team_slave_1 removed [ 66.450602][ T13] team0 (unregistering): Port device team_slave_0 removed [ 66.578113][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3 [ 66.589443][ T6751] batadv_slave_0: entered promiscuous mode [ 66.604616][ T6682] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.604691][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.604776][ T6682] bridge_slave_0: entered allmulticast mode [ 66.605603][ T6682] bridge_slave_0: entered promiscuous mode [ 66.607908][ T6682] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.607978][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.608070][ T6682] bridge_slave_1: entered allmulticast mode [ 66.609421][ T6682] bridge_slave_1: entered promiscuous mode [ 66.614808][ T6728] batadv_slave_0: left promiscuous mode [ 66.647191][ T6682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.652991][ T6682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.686886][ T6682] team0: Port device team_slave_0 added [ 66.688209][ T6682] team0: Port device team_slave_1 added [ 66.738589][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.738607][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.738627][ T6682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.741874][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.741888][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.741907][ T6682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.778053][ T6768] __vm_enough_memory: pid: 6768, comm: syz.2.198, bytes: 4278190080 not enough memory for the allocation [ 66.795720][ T6682] hsr_slave_0: entered promiscuous mode [ 66.796149][ T6682] hsr_slave_1: entered promiscuous mode [ 66.796442][ T6682] debugfs: 'hsr0' already exists in 'hsr' [ 66.796453][ T6682] Cannot create hsr debugfs directory [ 66.830195][ T5443] 8021q: adding VLAN 0 to HW filter on device eth4 [ 66.981677][ T62] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 66.992094][ T6682] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.993877][ T6682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.994380][ T6682] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.994948][ T5737] Bluetooth: hci2: Dropping invalid advertising data [ 66.994973][ T5737] Bluetooth: hci2: Malformed LE Event: 0x02 [ 66.995791][ T6682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.996240][ T6682] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.997849][ T6682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.998321][ T6682] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.000433][ T6682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.045618][ T6682] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.045671][ T6682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.046952][ T6682] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.047000][ T6682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.062217][ T5737] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.062262][ T5737] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.073701][ T6795] batadv_slave_0: entered promiscuous mode [ 67.073859][ T6795] batadv_slave_0: left promiscuous mode [ 67.096590][ T6682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.104016][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.105217][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.109574][ T6682] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.118042][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.118086][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.122912][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.122953][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.132197][ T62] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 67.133233][ T62] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 67.133255][ T62] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 67.135067][ T62] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.135085][ T62] usb 6-1: Product: syz [ 67.135098][ T62] usb 6-1: Manufacturer: syz [ 67.135111][ T62] usb 6-1: SerialNumber: syz [ 67.165673][ T5443] 8021q: adding VLAN 0 to HW filter on device eth5 [ 67.207083][ T43] kauditd_printk_skb: 150 callbacks suppressed [ 67.207100][ T43] audit: type=1400 audit(1789202396.510:613): avc: denied { read write } for pid=6802 comm="syz.0.205" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 67.207578][ T43] audit: type=1400 audit(1789202396.510:614): avc: denied { open } for pid=6802 comm="syz.0.205" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 67.208598][ T6803] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 67.212833][ T43] audit: type=1400 audit(1789202396.520:615): avc: denied { mounton } for pid=6802 comm="syz.0.205" path="/56/file1" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.212953][ T6803] ======================================================= [ 67.212953][ T6803] WARNING: The mand mount option has been deprecated and [ 67.212953][ T6803] and is ignored by this kernel. Remove the mand [ 67.212953][ T6803] option from the mount to silence this warning. [ 67.212953][ T6803] ======================================================= [ 67.213300][ T6803] overlay: ./file1 is not a directory [ 67.294778][ T6813] hsr_slave_0: left promiscuous mode [ 67.297502][ T6813] hsr_slave_1: left promiscuous mode [ 67.297656][ T43] audit: type=1400 audit(1789202396.600:616): avc: denied { mount } for pid=6810 comm="syz.0.207" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 67.353452][ T62] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 67.368818][ T43] audit: type=1400 audit(1789202396.670:617): avc: denied { unmount } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 67.369817][ T6816] bond0: entered promiscuous mode [ 67.369829][ T6816] bond_slave_0: entered promiscuous mode [ 67.369925][ T6816] bond_slave_1: entered promiscuous mode [ 67.374380][ T6816] gretap0: entered promiscuous mode [ 67.375203][ T6816] dummy0: entered promiscuous mode [ 67.377976][ T6816] debugfs: 'hsr0' already exists in 'hsr' [ 67.377995][ T6816] Cannot create hsr debugfs directory [ 67.406117][ T43] audit: type=1400 audit(1789202396.710:618): avc: denied { connect } for pid=6820 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.456447][ T6682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.486730][ T6831] jffs2: notice: (6831) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 67.551652][ T5734] Bluetooth: hci0: command tx timeout [ 67.552147][ T6831] __nla_validate_parse: 2 callbacks suppressed [ 67.552160][ T6831] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.210'. [ 67.552760][ T6833] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.210'. [ 67.555750][ T43] audit: type=1400 audit(1789202396.860:619): avc: denied { read write } for pid=6762 comm="syz.1.197" name="lp0" dev="devtmpfs" ino=2880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 67.555826][ T43] audit: type=1400 audit(1789202396.860:620): avc: denied { open } for pid=6762 comm="syz.1.197" path="/dev/usb/lp0" dev="devtmpfs" ino=2880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 67.555924][ T6830] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.210'. [ 67.558295][ T43] audit: type=1400 audit(1789202396.860:621): avc: denied { ioctl } for pid=6762 comm="syz.1.197" path="/dev/usb/lp0" dev="devtmpfs" ino=2880 ioctlcmd=0x5b15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 67.559084][ T43] audit: type=1400 audit(1789202396.860:622): avc: denied { listen } for pid=6762 comm="syz.1.197" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.600596][ T6682] veth0_vlan: entered promiscuous mode [ 67.605715][ T6682] veth1_vlan: entered promiscuous mode [ 67.620603][ T6682] veth0_macvtap: entered promiscuous mode [ 67.620838][ T6475] usb 6-1: USB disconnect, device number 7 [ 67.624089][ T6682] veth1_macvtap: entered promiscuous mode [ 67.626368][ T6475] usblp0: removed [ 67.631146][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.635832][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.682558][ T5828] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 67.698850][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.698864][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.721324][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.721478][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.721596][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.721614][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.725091][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.725104][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.799999][ T5734] Bluetooth: hci2: ISO packet for unknown connection handle 201 [ 67.801026][ T6852] netlink: 48 bytes leftover after parsing attributes in process `syz.2.213'. [ 67.843198][ T5828] usb 5-1: not running at top speed; connect to a high speed hub [ 67.843229][ T5828] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 67.844146][ T5828] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 67.844181][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.851493][ T5828] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 67.859159][ T5828] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 68.007029][ T6865] FAULT_INJECTION: forcing a failure. [ 68.007029][ T6865] name failslab, interval 1, probability 0, space 0, times 1 [ 68.007059][ T6865] CPU: 3 UID: 0 PID: 6865 Comm: syz.4.217 Not tainted syzkaller #0 PREEMPT(full) [ 68.007079][ T6865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.007089][ T6865] Call Trace: [ 68.007095][ T6865] [ 68.007102][ T6865] dump_stack_lvl+0x100/0x190 [ 68.007132][ T6865] should_fail_ex.cold+0x5/0xa [ 68.007154][ T6865] ? __netlink_lookup+0x652/0x900 [ 68.007174][ T6865] should_failslab+0xc2/0x120 [ 68.007210][ T6865] kmem_cache_alloc_noprof+0x92/0x6a0 [ 68.007231][ T6865] ? skb_clone+0x190/0x400 [ 68.007256][ T6865] skb_clone+0x190/0x400 [ 68.007277][ T6865] netlink_deliver_tap+0xaed/0xcc0 [ 68.007310][ T6865] netlink_unicast+0x62b/0x850 [ 68.007332][ T6865] ? __pfx_netlink_unicast+0x10/0x10 [ 68.007357][ T6865] netlink_sendmsg+0x8b0/0xda0 [ 68.007379][ T6865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.007401][ T6865] ? selinux_socket_sendmsg+0x198/0x2f0 [ 68.007436][ T6865] ____sys_sendmsg+0xa4d/0xbe0 [ 68.007460][ T6865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.007480][ T6865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.007516][ T6865] ___sys_sendmsg+0x190/0x1e0 [ 68.007543][ T6865] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.007570][ T6865] ? futex_wait+0x11e/0x370 [ 68.007597][ T6865] ? find_held_lock+0x2b/0x80 [ 68.007638][ T6865] __sys_sendmsg+0x160/0x210 [ 68.007660][ T6865] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.007694][ T6865] do_syscall_64+0x123/0x790 [ 68.007720][ T6865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.007737][ T6865] RIP: 0033:0x7f4f4659e159 [ 68.007752][ T6865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.007769][ T6865] RSP: 002b:00007f4f47477028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.007785][ T6865] RAX: ffffffffffffffda RBX: 00007f4f46825fa0 RCX: 00007f4f4659e159 [ 68.007797][ T6865] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000009 [ 68.007807][ T6865] RBP: 00007f4f4663503b R08: 0000000000000000 R09: 0000000000000000 [ 68.007819][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.007830][ T6865] R13: 00007f4f46826038 R14: 00007f4f46825fa0 R15: 00007ffdbcac59d8 [ 68.007854][ T6865] [ 68.054742][ T6826] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 68.058072][ T6826] loop7: detected capacity change from 0 to 7 [ 68.118801][ T6826] Dev loop7: unable to read RDB block 7 [ 68.118822][ T6826] loop7: unable to read partition table [ 68.118955][ T6826] loop7: partition table beyond EOD, truncated [ 68.123737][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 68.123819][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 68.124221][ T6826] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 68.133753][ T6826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.133865][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 68.133958][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 68.134018][ T6826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.137065][ T5828] usb 5-1: USB disconnect, device number 2 [ 68.153653][ T6875] debugfs: Invalid uid '0x00000000ffffffff' [ 68.157427][ T6879] debugfs: Invalid uid '0x00000000ffffffff' [ 68.163786][ T6880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.219'. [ 68.177454][ T5828] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 68.177779][ T5828] cyberjack 5-1:1.0: device disconnected [ 68.209253][ T6880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.229506][ T6880] macvlan2: entered promiscuous mode [ 68.229527][ T6880] macvlan2: entered allmulticast mode [ 68.230802][ T6880] bond1: entered promiscuous mode [ 68.232886][ T6880] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 68.247952][ T6880] bond1: left promiscuous mode [ 68.274697][ T6886] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 68.303346][ T6886] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 68.350995][ T5734] Bluetooth: hci1: command 0x0c1a tx timeout [ 68.379350][ T6895] sg_write: data in/out 262108/8 bytes for SCSI command 0xd0-- guessing data in; [ 68.379350][ T6895] program syz.4.223 not setting count and/or reply_len properly [ 68.680272][ T6911] nfs4: Bad value for 'source' [ 68.832779][ T6926] FAULT_INJECTION: forcing a failure. [ 68.832779][ T6926] name failslab, interval 1, probability 0, space 0, times 0 [ 68.832799][ T6926] CPU: 3 UID: 0 PID: 6926 Comm: syz.4.235 Not tainted syzkaller #0 PREEMPT(full) [ 68.832812][ T6926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.832820][ T6926] Call Trace: [ 68.832825][ T6926] [ 68.832831][ T6926] dump_stack_lvl+0x100/0x190 [ 68.832850][ T6926] should_fail_ex.cold+0x5/0xa [ 68.832866][ T6926] should_failslab+0xc2/0x120 [ 68.832883][ T6926] __kmalloc_cache_noprof+0x91/0x6d0 [ 68.832900][ T6926] ? lockdep_init_map_type+0x5c/0x250 [ 68.832913][ T6926] ? nci_hci_allocate+0x45/0x330 [ 68.832930][ T6926] nci_hci_allocate+0x45/0x330 [ 68.832944][ T6926] nci_allocate_device+0x26f/0x410 [ 68.832956][ T6926] virtual_ncidev_open+0x6f/0x220 [ 68.832973][ T6926] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 68.832989][ T6926] misc_open+0x26d/0x450 [ 68.833001][ T6926] ? __pfx_misc_open+0x10/0x10 [ 68.833012][ T6926] chrdev_open+0x234/0x6a0 [ 68.833028][ T6926] ? __pfx_chrdev_open+0x10/0x10 [ 68.833041][ T6926] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 68.833061][ T6926] do_dentry_open+0x6ab/0x14d0 [ 68.833074][ T6926] ? __pfx_chrdev_open+0x10/0x10 [ 68.833090][ T6926] vfs_open+0x82/0x3f0 [ 68.833105][ T6926] path_openat+0x19fa/0x2440 [ 68.833122][ T6926] ? __pfx_path_openat+0x10/0x10 [ 68.833139][ T6926] do_file_open+0x20e/0x430 [ 68.833153][ T6926] ? __pfx_do_file_open+0x10/0x10 [ 68.833192][ T6926] ? _raw_spin_unlock+0x28/0x50 [ 68.833208][ T6926] ? alloc_fd+0x471/0x7a0 [ 68.833226][ T6926] do_sys_openat2+0x10f/0x1e0 [ 68.833243][ T6926] ? __pfx_do_sys_openat2+0x10/0x10 [ 68.833263][ T6926] __x64_sys_openat+0x12d/0x210 [ 68.833280][ T6926] ? __pfx___x64_sys_openat+0x10/0x10 [ 68.833295][ T6926] ? selinux_file_ioctl+0xb6/0x290 [ 68.833311][ T6926] do_syscall_64+0x123/0x790 [ 68.833333][ T6926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.833344][ T6926] RIP: 0033:0x7f4f4659e159 [ 68.833354][ T6926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.833365][ T6926] RSP: 002b:00007f4f47477028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 68.833378][ T6926] RAX: ffffffffffffffda RBX: 00007f4f46825fa0 RCX: 00007f4f4659e159 [ 68.833386][ T6926] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 68.833394][ T6926] RBP: 00007f4f4663503b R08: 0000000000000000 R09: 0000000000000000 [ 68.833401][ T6926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.833409][ T6926] R13: 00007f4f46826038 R14: 00007f4f46825fa0 R15: 00007ffdbcac59d8 [ 68.833423][ T6926] [ 68.910449][ T6932] IPVS: Unknown mcast interface: ip6erspan0 [ 69.068877][ T6960] scsi_dev_info_list_add_str: bad dev info string '00000000000000000000010 00000000000000000000004 00000000000000000174036' '' '' [ 69.125912][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'. [ 69.126106][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'. [ 69.130739][ T6971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.248'. [ 69.251233][ T6973] netlink: 'syz.1.249': attribute type 7 has an invalid length. [ 69.252051][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 69.510247][ T6998] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 69.630993][ T5734] Bluetooth: hci0: command tx timeout [ 69.633437][ T7007] netlink: 'syz.1.262': attribute type 4 has an invalid length. [ 69.633450][ T7007] netlink: 152 bytes leftover after parsing attributes in process `syz.1.262'. [ 69.666014][ T171] Bluetooth: hci4: Frame reassembly failed (-84) [ 69.666189][ T1162] Bluetooth: hci4: Frame reassembly failed (-84) [ 69.766201][ T7021] team0: No ports can be present during mode change [ 69.812350][ T7025] netlink: 'syz.2.267': attribute type 21 has an invalid length. [ 69.878111][ T7027] nvmet_tcp: address family 255 not supported [ 69.923832][ T7027] nvme nvme0: failed to connect socket: -111 [ 70.074500][ T5737] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 70.102826][ T7037] binder: 7036:7037 ioctl 4018620d 0 returned -22 [ 70.104907][ T7037] 8021q: VLANs not supported on ip_vti0 [ 70.241361][ T7049] netlink: 'syz.0.276': attribute type 2 has an invalid length. [ 70.270920][ T7051] netlink: 'syz.2.273': attribute type 1 has an invalid length. [ 70.556281][ T7053] overlayfs: upper fs does not support file handles, falling back to index=off. [ 70.619773][ T7057] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 70.624899][ T7057] bond1 (unregistering): Released all slaves [ 71.078885][ T7083] x_tables: duplicate underflow at hook 3 [ 71.079965][ T65] bridge0: entered promiscuous mode [ 71.232689][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.232789][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.247408][ T7101] ublk1: read batch cmd buffer failed [ 71.247458][ T7101] ublk1: read batch cmd buffer failed [ 71.255682][ T7101] ublk1: read batch cmd buffer failed [ 71.255732][ T7101] ublk1: read batch cmd buffer failed [ 71.291767][ T7105] gretap1: entered allmulticast mode [ 71.293692][ T7105] team0: Port device gretap1 added [ 71.295396][ T7106] bridge0: port 3(team0) entered blocking state [ 71.295480][ T7106] bridge0: port 3(team0) entered disabled state [ 71.295607][ T7106] team0: entered allmulticast mode [ 71.295616][ T7106] team_slave_0: entered allmulticast mode [ 71.295631][ T7106] team_slave_1: entered allmulticast mode [ 71.298144][ T7106] team0: entered promiscuous mode [ 71.298154][ T7106] team_slave_0: entered promiscuous mode [ 71.298268][ T7106] team_slave_1: entered promiscuous mode [ 71.298342][ T7106] gretap1: entered promiscuous mode [ 71.298800][ T7106] bridge0: port 3(team0) entered blocking state [ 71.298846][ T7106] bridge0: port 3(team0) entered forwarding state [ 71.365315][ T7117] net_ratelimit: 62 callbacks suppressed [ 71.365328][ T7117] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 71.383665][ T7117] overlayfs: overlapping lowerdir path [ 71.394320][ T853] Bluetooth: hci5: Frame reassembly failed (-84) [ 71.426758][ T7123] netlink: 'syz.0.299': attribute type 30 has an invalid length. [ 71.436202][ T7123] bond1: option arp_missed_max: invalid value (0) [ 71.436215][ T7123] bond1: option arp_missed_max: allowed values 1 - 255 [ 71.437978][ T7123] bond1 (unregistering): Released all slaves [ 71.625695][ T7128] 9p: Could not find request transport: vi^tio [ 71.711714][ T5744] Bluetooth: hci4: command 0x1003 tx timeout [ 71.712534][ T5740] Bluetooth: hci0: command tx timeout [ 71.712562][ T5734] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 71.940944][ T5828] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 72.091660][ T5828] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 72.091696][ T5828] usb 5-1: too many configurations: 248, using maximum allowed: 8 [ 72.092269][ T5828] usb 5-1: config 0 has no interfaces? [ 72.092712][ T5828] usb 5-1: config 0 has no interfaces? [ 72.093152][ T5828] usb 5-1: config 0 has no interfaces? [ 72.093659][ T5828] usb 5-1: config 0 has no interfaces? [ 72.094133][ T5828] usb 5-1: config 0 has no interfaces? [ 72.094579][ T5828] usb 5-1: config 0 has no interfaces? [ 72.095073][ T5828] usb 5-1: config 0 has no interfaces? [ 72.095515][ T5828] usb 5-1: config 0 has no interfaces? [ 72.095538][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.098494][ T5828] usb 5-1: config 0 descriptor?? [ 72.273598][ T43] kauditd_printk_skb: 126 callbacks suppressed [ 72.273614][ T43] audit: type=1400 audit(1789202401.580:747): avc: denied { execute_no_trans } for pid=7140 comm="syz.4.305" path="/30/file0" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.313841][ T43] audit: type=1400 audit(1789202401.620:748): avc: denied { write } for pid=7142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.324852][ T7148] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 72.325203][ T7148] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 72.325338][ T7148] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 72.325563][ T7148] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 72.325665][ T7148] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 72.326481][ T7148] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 72.326810][ T7148] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 72.326856][ T7148] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 72.327036][ T7148] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 72.349047][ T43] audit: type=1400 audit(1789202401.650:749): avc: denied { remount } for pid=7127 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.359307][ T43] audit: type=1400 audit(1789202401.660:750): avc: denied { write } for pid=7153 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.360023][ T5828] usb 5-1: string descriptor 0 read error: -71 [ 72.365097][ T5828] usb 5-1: USB disconnect, device number 3 [ 72.379390][ T7146] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.306/7146 [ 72.379409][ T7146] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 72.379437][ T7146] CPU: 3 UID: 0 PID: 7146 Comm: syz.1.306 Not tainted syzkaller #0 PREEMPT(full) [ 72.379454][ T7146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.379463][ T7146] Call Trace: [ 72.379468][ T7146] [ 72.379474][ T7146] dump_stack_lvl+0x100/0x190 [ 72.379498][ T7146] check_preemption_disabled+0xd2/0xe0 [ 72.379521][ T7146] ? skb_queue_purge_reason+0x2aa/0x420 [ 72.379540][ T7146] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 72.379562][ T7146] ? skb_queue_purge_reason+0x2aa/0x420 [ 72.379581][ T7146] trace_kfree_skb+0x18b/0x230 [ 72.379602][ T7146] sk_skb_reason_drop+0xb7/0x1b0 [ 72.379622][ T7146] skb_queue_purge_reason+0x2aa/0x420 [ 72.379640][ T7146] ? synchronize_rcu_expedited+0x3c3/0x450 [ 72.379660][ T7146] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 72.379689][ T7146] packet_release+0x839/0xd70 [ 72.379708][ T7146] ? __pfx_packet_release+0x10/0x10 [ 72.379724][ T7146] ? __pfx_down_write+0x10/0x10 [ 72.379748][ T7146] __sock_release+0xb3/0x260 [ 72.379765][ T7146] ? __pfx_sock_close+0x10/0x10 [ 72.379781][ T7146] sock_close+0x1c/0x30 [ 72.379796][ T7146] __fput+0x3ff/0xb50 [ 72.379816][ T7146] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.379833][ T7146] task_work_run+0x150/0x240 [ 72.379856][ T7146] ? __pfx_task_work_run+0x10/0x10 [ 72.379895][ T7146] exit_to_user_mode_loop+0x1d8/0x700 [ 72.379913][ T7146] ? rcu_is_watching+0x13/0xc0 [ 72.379937][ T7146] do_syscall_64+0x661/0x790 [ 72.379961][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.379976][ T7146] RIP: 0033:0x7f4d0299e159 [ 72.379989][ T7146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.380002][ T7146] RSP: 002b:00007ffc1cc19428 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 72.380018][ T7146] RAX: 0000000000000000 RBX: 00007f4d02c27da0 RCX: 00007f4d0299e159 [ 72.380027][ T7146] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 72.380035][ T7146] RBP: 00007f4d02c27da0 R08: 00007f4d02c26038 R09: 0000000000000000 [ 72.380044][ T7146] R10: 000000000003fd68 R11: 0000000000000246 R12: 0000000000011d4d [ 72.380053][ T7146] R13: 00007f4d02c25fac R14: 0000000000011a49 R15: 00007ffc1cc19530 [ 72.380072][ T7146] [ 72.380202][ T7146] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.306/7146 [ 72.380214][ T7146] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 72.380236][ T7146] CPU: 3 UID: 0 PID: 7146 Comm: syz.1.306 Not tainted syzkaller #0 PREEMPT(full) [ 72.380252][ T7146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.380260][ T7146] Call Trace: [ 72.380264][ T7146] [ 72.380294][ T7146] dump_stack_lvl+0x100/0x190 [ 72.380317][ T7146] check_preemption_disabled+0xd2/0xe0 [ 72.380339][ T7146] ? skb_queue_purge_reason+0x2aa/0x420 [ 72.380356][ T7146] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 72.380383][ T7146] ? skb_queue_purge_reason+0x2aa/0x420 [ 72.380401][ T7146] trace_kfree_skb+0x18b/0x230 [ 72.380421][ T7146] sk_skb_reason_drop+0xb7/0x1b0 [ 72.380439][ T7146] skb_queue_purge_reason+0x2aa/0x420 [ 72.380456][ T7146] ? synchronize_rcu_expedited+0x3c3/0x450 [ 72.380474][ T7146] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 72.380503][ T7146] packet_release+0x839/0xd70 [ 72.380522][ T7146] ? __pfx_packet_release+0x10/0x10 [ 72.380539][ T7146] ? __pfx_down_write+0x10/0x10 [ 72.380563][ T7146] __sock_release+0xb3/0x260 [ 72.380579][ T7146] ? __pfx_sock_close+0x10/0x10 [ 72.380595][ T7146] sock_close+0x1c/0x30 [ 72.380610][ T7146] __fput+0x3ff/0xb50 [ 72.380630][ T7146] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.380647][ T7146] task_work_run+0x150/0x240 [ 72.380669][ T7146] ? __pfx_task_work_run+0x10/0x10 [ 72.380695][ T7146] exit_to_user_mode_loop+0x1d8/0x700 [ 72.380712][ T7146] ? rcu_is_watching+0x13/0xc0 [ 72.380732][ T7146] do_syscall_64+0x661/0x790 [ 72.380752][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.380767][ T7146] RIP: 0033:0x7f4d0299e159 [ 72.380779][ T7146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.380791][ T7146] RSP: 002b:00007ffc1cc19428 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 72.380805][ T7146] RAX: 0000000000000000 RBX: 00007f4d02c27da0 RCX: 00007f4d0299e159 [ 72.380813][ T7146] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 72.380821][ T7146] RBP: 00007f4d02c27da0 R08: 00007f4d02c26038 R09: 0000000000000000 [ 72.380830][ T7146] R10: 000000000003fd68 R11: 0000000000000246 R12: 0000000000011d4d [ 72.380838][ T7146] R13: 00007f4d02c25fac R14: 0000000000011a49 R15: 00007ffc1cc19530 [ 72.380857][ T7146] [ 72.387597][ T7146] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.306/7146 [ 72.387615][ T7146] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 72.387640][ T7146] CPU: 3 UID: 0 PID: 7146 Comm: syz.1.306 Not tainted syzkaller #0 PREEMPT(full) [ 72.387655][ T7146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.387664][ T7146] Call Trace: [ 72.387669][ T7146] [ 72.387674][ T7146] dump_stack_lvl+0x100/0x190 [ 72.387695][ T7146] check_preemption_disabled+0xd2/0xe0 [ 72.387718][ T7146] ? skb_queue_purge_reason+0x2aa/0x420 [ 72.387735][ T7146] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 72.387755][ T7146] ? skb_queue_purge_reason+0x2aa/0x420 [ 72.387773][ T7146] trace_kfree_skb+0x18b/0x230 [ 72.387793][ T7146] sk_skb_reason_drop+0xb7/0x1b0 [ 72.387811][ T7146] skb_queue_purge_reason+0x2aa/0x420 [ 72.387828][ T7146] ? synchronize_rcu_expedited+0x3c3/0x450 [ 72.387846][ T7146] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 72.387875][ T7146] packet_release+0x839/0xd70 [ 72.387919][ T7146] ? __pfx_packet_release+0x10/0x10 [ 72.387937][ T7146] ? __pfx_down_write+0x10/0x10 [ 72.387961][ T7146] __sock_release+0xb3/0x260 [ 72.387977][ T7146] ? __pfx_sock_close+0x10/0x10 [ 72.387993][ T7146] sock_close+0x1c/0x30 [ 72.388007][ T7146] __fput+0x3ff/0xb50 [ 72.388027][ T7146] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.388044][ T7146] task_work_run+0x150/0x240 [ 72.388066][ T7146] ? __pfx_task_work_run+0x10/0x10 [ 72.388091][ T7146] exit_to_user_mode_loop+0x1d8/0x700 [ 72.388107][ T7146] ? rcu_is_watching+0x13/0xc0 [ 72.388128][ T7146] do_syscall_64+0x661/0x790 [ 72.388148][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.388162][ T7146] RIP: 0033:0x7f4d0299e159 [ 72.388175][ T7146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.388188][ T7146] RSP: 002b:00007ffc1cc19428 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 72.388202][ T7146] RAX: 0000000000000000 RBX: 00007f4d02c27da0 RCX: 00007f4d0299e159 [ 72.388211][ T7146] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 72.388219][ T7146] RBP: 00007f4d02c27da0 R08: 00007f4d02c26038 R09: 0000000000000000 [ 72.388227][ T7146] R10: 000000000003fd68 R11: 0000000000000246 R12: 0000000000011d4d [ 72.388236][ T7146] R13: 00007f4d02c25fac R14: 0000000000011a49 R15: 00007ffc1cc19530 [ 72.388254][ T7146] [ 72.395606][ T7146] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.306/7146 [ 72.395623][ T7146] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 72.395651][ T7146] CPU: 3 UID: 0 PID: 7146 Comm: syz.1.306 Not tainted syzkaller #0 PREEMPT(full) [ 72.395669][ T7146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.395679][ T7146] Call Trace: [ 72.395685][ T7146] [ 72.395691][ T7146] dump_stack_lvl+0x100/0x190 [ 72.395717][ T7146] check_preemption_disabled+0xd2/0xe0 [ 72.395742][ T7146] ? skb_queue_purge_reason+0x2aa/0x420 [ 72.395761][ T7146] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 72.395785][ T7146] ? skb_queue_purge_reason+0x2aa/0x420 [ 72.395807][ T7146] trace_kfree_skb+0x18b/0x230 [ 72.395854][ T7146] sk_skb_reason_drop+0xb7/0x1b0 [ 72.395876][ T7146] skb_queue_purge_reason+0x2aa/0x420 [ 72.395895][ T7146] ? synchronize_rcu_expedited+0x3c3/0x450 [ 72.395916][ T7146] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 72.395948][ T7146] packet_release+0x839/0xd70 [ 72.395970][ T7146] ? __pfx_packet_release+0x10/0x10 [ 72.395989][ T7146] ? __pfx_down_write+0x10/0x10 [ 72.396016][ T7146] __sock_release+0xb3/0x260 [ 72.396035][ T7146] ? __pfx_sock_close+0x10/0x10 [ 72.396052][ T7146] sock_close+0x1c/0x30 [ 72.396070][ T7146] __fput+0x3ff/0xb50 [ 72.396092][ T7146] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.396112][ T7146] task_work_run+0x150/0x240 [ 72.396137][ T7146] ? __pfx_task_work_run+0x10/0x10 [ 72.396165][ T7146] exit_to_user_mode_loop+0x1d8/0x700 [ 72.396182][ T7146] ? rcu_is_watching+0x13/0xc0 [ 72.396204][ T7146] do_syscall_64+0x661/0x790 [ 72.396225][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.396240][ T7146] RIP: 0033:0x7f4d0299e159 [ 72.396254][ T7146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.396267][ T7146] RSP: 002b:00007ffc1cc19428 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 72.396283][ T7146] RAX: 0000000000000000 RBX: 00007f4d02c27da0 RCX: 00007f4d0299e159 [ 72.396292][ T7146] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 72.396301][ T7146] RBP: 00007f4d02c27da0 R08: 00007f4d02c26038 R09: 0000000000000000 [ 72.396311][ T7146] R10: 000000000003fd68 R11: 0000000000000246 R12: 0000000000011d4d [ 72.396320][ T7146] R13: 00007f4d02c25fac R14: 0000000000011a49 R15: 00007ffc1cc19530 [ 72.396341][ T7146] [ 72.398874][ T7146] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.306/7146 [ 72.398891][ T7146] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 72.398918][ T7146] CPU: 3 UID: 0 PID: 7146 Comm: syz.1.306 Not tainted syzkaller #0 PREEMPT(full) [ 72.398937][ T7146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.398946][ T7146] Call Trace: [ 72.398952][ T7146] [ 72.398958][ T7146] dump_stack_lvl+0x100/0x190 [ 72.398983][ T7146] check_preemption_disabled+0xd2/0xe0 [ 72.399007][ T7146] ? skb_queue_purge_reason+0x2aa/0x420 [ 72.399027][ T7146] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 72.399050][ T7146] ? skb_queue_purge_reason+0x2aa/0x420 [ 72.399072][ T7146] trace_kfree_skb+0x18b/0x230 [ 72.399096][ T7146] sk_skb_reason_drop+0xb7/0x1b0 [ 72.399117][ T7146] skb_queue_purge_reason+0x2aa/0x420 [ 72.399137][ T7146] ? synchronize_rcu_expedited+0x3c3/0x450 [ 72.399159][ T7146] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 72.399195][ T7146] packet_release+0x839/0xd70 [ 72.399219][ T7146] ? __pfx_packet_release+0x10/0x10 [ 72.399239][ T7146] ? __pfx_down_write+0x10/0x10 [ 72.399267][ T7146] __sock_release+0xb3/0x260 [ 72.399287][ T7146] ? __pfx_sock_close+0x10/0x10 [ 72.399305][ T7146] sock_close+0x1c/0x30 [ 72.399323][ T7146] __fput+0x3ff/0xb50 [ 72.399347][ T7146] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.399374][ T7146] task_work_run+0x150/0x240 [ 72.399399][ T7146] ? __pfx_task_work_run+0x10/0x10 [ 72.399429][ T7146] exit_to_user_mode_loop+0x1d8/0x700 [ 72.399449][ T7146] ? rcu_is_watching+0x13/0xc0 [ 72.399472][ T7146] do_syscall_64+0x661/0x790 [ 72.399496][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.399513][ T7146] RIP: 0033:0x7f4d0299e159 [ 72.399527][ T7146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.399542][ T7146] RSP: 002b:00007ffc1cc19428 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 72.399559][ T7146] RAX: 0000000000000000 RBX: 00007f4d02c27da0 RCX: 00007f4d0299e159 [ 72.399570][ T7146] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 72.399580][ T7146] RBP: 00007f4d02c27da0 R08: 00007f4d02c26038 R09: 0000000000000000 [ 72.399591][ T7146] R10: 000000000003fd68 R11: 0000000000000246 R12: 0000000000011d4d [ 72.399602][ T7146] R13: 00007f4d02c25fac R14: 0000000000011a49 R15: 00007ffc1cc19530 [ 72.399626][ T7146] [ 72.402109][ T7146] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.306/7146 [ 72.402126][ T7146] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 72.402152][ T7146] CPU: 3 UID: 0 PID: 7146 Comm: syz.1.306 Not tainted syzkaller #0 PREEMPT(full) [ 72.402169][ T7146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.402178][ T7146] Call Trace: [ 72.402183][ T7146] [ 72.402188][ T7146] dump_stack_lvl+0x100/0x190 [ 72.402244][ T7146] check_preemption_disabled+0xd2/0xe0 [ 72.402268][ T7146] ? skb_queue_purge_reason+0x2aa/0x420 [ 72.402286][ T7146] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 72.402307][ T7146] ? skb_queue_purge_reason+0x2aa/0x420 [ 72.402327][ T7146] trace_kfree_skb+0x18b/0x230 [ 72.402349][ T7146] sk_skb_reason_drop+0xb7/0x1b0 [ 72.402377][ T7146] skb_queue_purge_reason+0x2aa/0x420 [ 72.402395][ T7146] ? synchronize_rcu_expedited+0x3c3/0x450 [ 72.402414][ T7146] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 72.402447][ T7146] packet_release+0x839/0xd70 [ 72.402468][ T7146] ? __pfx_packet_release+0x10/0x10 [ 72.402487][ T7146] ? __pfx_down_write+0x10/0x10 [ 72.402513][ T7146] __sock_release+0xb3/0x260 [ 72.402531][ T7146] ? __pfx_sock_close+0x10/0x10 [ 72.402549][ T7146] sock_close+0x1c/0x30 [ 72.402567][ T7146] __fput+0x3ff/0xb50 [ 72.402590][ T7146] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.402611][ T7146] task_work_run+0x150/0x240 [ 72.402637][ T7146] ? __pfx_task_work_run+0x10/0x10 [ 72.402668][ T7146] exit_to_user_mode_loop+0x1d8/0x700 [ 72.402688][ T7146] ? rcu_is_watching+0x13/0xc0 [ 72.402713][ T7146] do_syscall_64+0x661/0x790 [ 72.402736][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.402753][ T7146] RIP: 0033:0x7f4d0299e159 [ 72.402768][ T7146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.402783][ T7146] RSP: 002b:00007ffc1cc19428 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 72.402800][ T7146] RAX: 0000000000000000 RBX: 00007f4d02c27da0 RCX: 00007f4d0299e159 [ 72.402811][ T7146] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 72.402821][ T7146] RBP: 00007f4d02c27da0 R08: 00007f4d02c26038 R09: 0000000000000000 [ 72.402831][ T7146] R10: 000000000003fd68 R11: 0000000000000246 R12: 0000000000011d4d [ 72.402841][ T7146] R13: 00007f4d02c25fac R14: 0000000000011a49 R15: 00007ffc1cc19530 [ 72.402864][ T7146] [ 73.461256][ T5734] Bluetooth: hci5: command 0x1003 tx timeout [ 73.461271][ T5737] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 73.781129][ T5737] Bluetooth: hci0: command tx timeout [ 76.360723][ T1043] cfg80211: failed to load regulatory.db [ 77.431695][ T43] kauditd_printk_skb: 214 callbacks suppressed [ 77.431714][ T43] audit: type=1400 audit(1789202406.740:751): avc: denied { write } for pid=7163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.476245][ T43] audit: type=1400 audit(1789202406.780:752): avc: denied { write } for pid=7166 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.648344][ T43] audit: type=1400 audit(1789202406.950:753): avc: denied { write } for pid=7169 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.685493][ T43] audit: type=1400 audit(1789202406.990:754): avc: denied { write } for pid=7172 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.787271][ T43] audit: type=1400 audit(1789202407.090:755): avc: denied { write } for pid=7175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.838864][ T43] audit: type=1400 audit(1789202407.140:756): avc: denied { write } for pid=7178 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.303832][ T43] audit: type=1400 audit(1789202407.610:757): avc: denied { write } for pid=7181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.355291][ T43] audit: type=1400 audit(1789202407.660:758): avc: denied { write } for pid=7184 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1