last executing test programs: 8.340135588s ago: executing program 1 (id=164): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x480, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000004001500090002000000035c3b61c1d67f6f94007134cfce1e090000001fb791643a5ee4ce1b14d6d930ede1d9d322fe7c9f8775730d165ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3f09ad809d5e1cace81ed0bffece0b42a9ecbee5dd6e4edef3d93452a92954b4337000000008af26c8b7b55f4d2cb1df0966736a1dfe444c65ac5b348eac7c2ea475327557ba566236ceb0000000000", 0xd8}], 0x1}, 0x4000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {}, {0x100000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x400000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x4000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000022f0414f670bc70e0180c200000286dd61000700001c2c00ff010000000000000000000000000001208737613498857dc40100000000010000000000000000012f00000000000000b961880b"], 0x56) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'dmm32at\x00', [0x140, 0x2, 0xfffffffd, 0x4000, 0x4, 0x5, 0x6, 0xd287, 0xa, 0x101, 0xffeffffa, 0x23, 0x4, 0x2, 0x7, 0xb, 0xf7fffffa, 0x1ff, 0x0, 0xffffffff, 0x1000000a, 0x927, 0x0, 0xff, 0x40b, 0xe69, 0x3, 0x10008, 0x2, 0x1cdc, 0x29]}) r6 = getpid() syz_pidfd_open(r6, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x101000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r7, 0xc1004110, &(0x7f00000001c0)={0x10, [0xfffffffe, 0x7, 0xffffffff], [{0x6, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x8, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x6, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x9, 0x101}, {0xf, 0x9, 0x1, 0x1, 0x1}, {0x7, 0x53a, 0x0, 0x0, 0x0, 0x1}, {0x401, 0x7fffffff, 0x0, 0x1, 0x1, 0x1}, {0x81, 0x5, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x6, 0x1}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1, 0x0, 0x1}], 0x4}) getpgrp(r6) 8.259451528s ago: executing program 1 (id=167): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040)=0x700, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000019c0)={r0, &(0x7f0000000080)="37111eb6c3013a", 0x0, 0x4}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.020031131s ago: executing program 1 (id=171): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a31000000000500010007"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0xf9ef, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 7.847433811s ago: executing program 1 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000300)='-:_est/event1 ./file0:', 0x16) pwritev2(r0, &(0x7f0000000280)=[{&(0x7f0000000500)="be", 0x1}, {&(0x7f0000000080)="9970846f89c5f2dc2b1a5d2be7374c48492c0b1e9ea8a31f0bfcc787f4ad35dda7a27e05f5053591bfa09b7b5aab2035df3121f8261f997c8cf84af830a0f44af6fc935bfee5c58723e94734", 0x4c}, {&(0x7f0000000140)="f07d660e513a409f8fd5d06232e38877e762401fb85ee9b1c8b919b5", 0x1c}, {&(0x7f0000000200)="f32ad203b14631d10d4037db619a2d24552fa3cf24e4852165394a448264e48a9c0e0bf3df13152e36d853857235f73d2dfb72f2373da05ee0d907a4fb5d5c1b5684f6f00c3bdc944b19623ad526d7125030", 0x52}], 0x4, 0x5, 0xa, 0x14) 7.694556414s ago: executing program 1 (id=179): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x3, 0x1, 0x2f57b51f, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="000400", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf253b00000008000300", @ANYBLOB="ed023300808c02000802110000000802110000005050505050505cc410000341d6f7000000000000640040100017f8d9c3537204b0b478308bf7aa17d3cb35af8f0b1ac7ef010303810304060806c60e0400060203003c040100060871070001000002f320dd6bccff396922e15cae25aef7da02fcbfdfdcbfdb1ff313dae170d604445f1aa40580eb457c61f5ff5a6a"], 0x314}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.187919498s ago: executing program 1 (id=193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0xa0, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x74, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0x8}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0xa}, {0x54, 0x5, [{0xd9, 0x7, 0xa, 0xff}, {0x3, 0x81, 0xa0, 0x1}, {0xb25a, 0xd4, 0x4, 0x7fff}, {0xea6, 0x76, 0x40, 0x7f}, {0x5, 0xfc, 0xb, 0x7f}, {0x4, 0x8, 0x8, 0x23}, {0xffc, 0xa, 0x8, 0xfffffff8}, {0x5, 0x7, 0x7a, 0x6}, {0x201, 0x7, 0x9, 0x6}, {0x0, 0x1, 0x2, 0x44}]}}]}}]}, 0xa0}}, 0x0) 7.050384722s ago: executing program 32 (id=193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0xa0, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x74, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0x8}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0xa}, {0x54, 0x5, [{0xd9, 0x7, 0xa, 0xff}, {0x3, 0x81, 0xa0, 0x1}, {0xb25a, 0xd4, 0x4, 0x7fff}, {0xea6, 0x76, 0x40, 0x7f}, {0x5, 0xfc, 0xb, 0x7f}, {0x4, 0x8, 0x8, 0x23}, {0xffc, 0xa, 0x8, 0xfffffff8}, {0x5, 0x7, 0x7a, 0x6}, {0x201, 0x7, 0x9, 0x6}, {0x0, 0x1, 0x2, 0x44}]}}]}}]}, 0xa0}}, 0x0) 1.720231317s ago: executing program 4 (id=277): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x10000) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000100)=0x7) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0x40104d05, &(0x7f0000000900)="0000010000000000000001") close_range(r2, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11"], 0x17) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000d80)=@v={0x93, 0x1, 0x90, 0xb, @MIDI_NOTEON=@note=0x9, 0x2, 0xec}) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x13000, 0x3, &(0x7f0000fed000/0x13000)=nil) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x36, 0x1, 0x4, 0x48, @mcast2, @remote, 0x40, 0x7, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x20, 0x10, 0xfffff987, 0x1, {{0x10, 0x4, 0x2, 0x1, 0x40, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0xa010100, @rand_addr=0x64010101, {[@generic={0x94, 0x11, "8c94d541f98053c69715a6389b8cf0"}, @timestamp={0x44, 0x18, 0x17, 0x0, 0x9, [0x0, 0xfff, 0x841, 0x40, 0x0]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd7000fcdbdf2517000000180001801400020070696d3672656730000000000000000020000180140002006272696467655f736c6176655f3000000800030002000000300001801400020070696d3672656730000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="b874b56ee82f928fb2cd9f574801420704401cc107145198811b306148d7c4942711bb8f0500c8259d338c0efbc015a97bba24a0616a407f2eed1d7131c20dfcb1a8a7"], 0x7c}, 0x1, 0x0, 0x0, 0x4000811}, 0x8011) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000300)={0x28, 0x1, r10, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000140)={0x8, r9}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r11, &(0x7f0000000000)="74a0d8bfb197a2e5fa97a28ea5c9861551b1a18ac0b30fd6b60b3e4bc847546ed3b10de77fe402d4fe794110987de4e24dcf83bc10af6973b9eff7ecdf07421489610d16580f34f76f6057cb5dd695398c20987ecc009ec0d9446f14f531a16acc030beed8b8e6d245a73650dcbec05a3f2c4a5ac27c659c321456eaf11bf0bdb598ed9554c0347dda84da55564932da32c16ce1a348d9c66496d385aa3519fc8b4c76f88bca539631c6ef068547cd93", 0xb0) 1.637436255s ago: executing program 4 (id=279): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x0, 0x4, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x84, @loopback, 0x4e22, 0x3, 'sh\x00', 0x30, 0x80006, 0x6f}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0xc, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0}, 0x0) 1.569751501s ago: executing program 4 (id=281): r0 = socket$inet6(0xa, 0x1, 0x25) syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x4100) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@private0, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) 1.467517174s ago: executing program 4 (id=282): r0 = syz_io_uring_setup(0x12c2, &(0x7f0000000080)={0x0, 0x0, 0x400, 0x0, 0xfffffffc}, &(0x7f00000001c0), &(0x7f00000005c0), &(0x7f0000000000)) r1 = semget$private(0x0, 0x3, 0x17) semop(r1, &(0x7f0000000300)=[{0x1, 0xff00, 0x3000}, {0x0, 0x7, 0x800}], 0x2) semctl$GETNCNT(r1, 0x1, 0xe, 0x0) syz_io_uring_setup(0x751a, &(0x7f0000000b00)={0x0, 0x285b, 0x27, 0x801, 0x800, 0x0, r0}, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r3, r2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x80002, 0x0, 0x18, 0x1, 0x31}, @fda={0x66646185, 0x6, 0x1, 0x5}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_mnt\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_mnt/bus/virtio/devices/virtio0/vendor\x00', 0x0, 0x0) read(r8, &(0x7f0000000700), 0x100) ioctl$KVM_GET_MP_STATE(r7, 0x8004ae98, &(0x7f0000000040)) 1.379426274s ago: executing program 3 (id=283): r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xc08, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=@newlink={0x3c, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x3c}}, 0x8000) 1.180078194s ago: executing program 3 (id=284): rmdir(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a03000000000000f5ff000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a3100000000090003"], 0x15c}}, 0x0) 1.17987981s ago: executing program 3 (id=285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42400, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff}, 0x48) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x8008743f, &(0x7f0000000180)) 989.364587ms ago: executing program 3 (id=287): r0 = socket(0x2, 0x3, 0xff) close_range(r0, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x40014) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) 849.371163ms ago: executing program 2 (id=289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000008e80)=ANY=[@ANYBLOB="140000001000010000000000600000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000001c08000640ffffff00f43b00000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001400038010000080080003400000000204000280b43b0380ec03008054000a804e00010019d1d87b73b1f888777e7694b6407e83e23c116497d7e15d28dbd916dd83f5a795e46458e6160d6b66628b6946c2657c7fb851508899bbbbd97d89ae13f401a84847ab2cd4952bdef8b600000800034000000001400001"], 0x3c88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) 709.92695ms ago: executing program 2 (id=291): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f00000000c0)=""/55, 0x37) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) (async) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) r1 = socket$netlink(0x10, 0x3, 0xa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6, 0x5c}}, './file0\x00'}) socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x9, 0x1, 0x1, 0x1, 0x6, @broadcast}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x6) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x6) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) syz_io_uring_complete(0x0, r3) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000240)='zonefs\x00', 0xa412, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)=[0xc], 0x0, 0x0, 0x1, 0x1}}, 0xfffffffffffffe9f) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x8004587d, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4001, 0x0, @loopback, 0x1}, 0x1c) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) (async) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 709.702097ms ago: executing program 2 (id=292): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0xfc, 0x1, 0x7fff8000}]}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c637cab2c7b9ca5fa07558139ff07dc06270ee04200", 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r2}], 0x1, 0x0, 0x0, 0x0) fanotify_init(0x4c, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) modify_ldt$read(0x1100, 0x0, 0xfffffffffffffe5e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r4, 0x1, 0x0, 0x0, {0x2d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x68, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="1c3513000000", 0x0, 0x10000, 0x30520cf7f25d0c74, 0x0, 0x0}) 629.719063ms ago: executing program 0 (id=297): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8000) r4 = socket(0x11, 0x80a, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) syz_extract_tcp_res(&(0x7f0000000280)={0x41424344}, 0x52, 0xa) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r6, &(0x7f0000000380)={@val={0x0, 0x8808}, @void, @ipv4=@tcp={{0x1e, 0x4, 0x2, 0x0, 0x1a4, 0x66, 0x0, 0x3, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @loopback, {[@cipso={0x86, 0x35, 0x3, [{0x7, 0x3, 'W'}, {0x0, 0xc, "7c79d797110d58ed5308"}, {0x1, 0xc, "7403be66fbaae8f95dd9"}, {0x0, 0x8, "2e73e0f8968d"}, {0x2, 0x9, "b416daa03144fb"}, {0x1, 0x3, "be"}]}, @cipso={0x86, 0x14, 0x0, [{0x0, 0xe, "30e4f79e9f2f6f43ae467d19"}]}, @timestamp_prespec={0x44, 0x14, 0xf8, 0x3, 0x4, [{@rand_addr=0x64010102}, {@rand_addr=0x64010101, 0xd723}]}, @ra={0x94, 0x4, 0x1}, @noop]}}, {{0x4e21, 0x4e22, r7, r8, 0x0, 0x0, 0x11, 0x2, 0x0, 0x0, 0x7, {[@fastopen={0x22, 0xa, "76b86c1122471cc9"}, @fastopen={0x22, 0x10, "840d7afc926a7e234ede11480872"}, @mss={0x2, 0x4, 0x1}, @md5sig={0x13, 0x12, "ba90c325c5e161e7b7d613bdcd38bca3"}]}}, {"c68fbafc334bc77d2ed8d10daac8156111ad165869237e3792748e6f30b6b0480af5b40105986ec98f8a1d393439fcbb594c10c71863cb57eb71ed8bde51aefc859d2e8aa4d7f6b600989ea9963588728bd26a6039b262d0c1715e237a6483a56ba0a352285faf8a5f08663458fceefed246a9dafe41cef5f3123e04478ee580206a4404d46835ef4838dd980438e9902934eb288e8e09ec0c2ce557df5cbf45785c0d3db11a7a09cf249061aff1e4849db0d1259b87484f716553d13b29790c30563c11fa5fee08836db5cbef4b40a65e13091ada54109ad32955ac16b46b0e26b8f40026162a37"}}}}, 0x1a8) syz_emit_ethernet(0xd2, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fa0500", 0x9c, 0x11, 0x0, @local, @local, {[], {0x4e23, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "9167922218d8d8cc829b5011f3aae7f76594125f3ca136e54c15ce81323407e7", "93f4e66f7c22b74c282620aa6762ac19bc005a86fc63c76eeb3c2f169ed59955bd1122095b61de86ebca601638f17770", "29191f62beac52934d0d5911e518ac3dc4f2410f881e19619f469606", {"ad0bd09706ed564b3a07165f761b51d1", "a61ea8fe60d866390eacc4e3188504a5"}}}}}}}}, 0x0) 629.412892ms ago: executing program 4 (id=298): ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f00000002c0)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000001000005004e230000060001000200000008000300ac1414aa080006000100"/50], 0x38}}, 0x0) listen(r1, 0xd) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f0000000180)=""/236, 0xec) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfe}, 0x2) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYRES32, @ANYRES32=r7], 0x90}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008094"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 520.43794ms ago: executing program 0 (id=299): socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x805, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80900, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x28}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x6, 0x2000008, 0x10, r1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x800008, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000000)='7', 0x1) syz_io_uring_setup(0x26a8, &(0x7f0000000400)={0x0, 0x219a, 0x4000, 0x2, 0x146}, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000300)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r6, 0x80000) sendmmsg$unix(r6, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYRES64=r4, @ANYRES32=r5, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='./sys/block/md0/md/level\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) 520.108647ms ago: executing program 2 (id=300): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600006, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f00003c9000/0x3000)=nil, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5200000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)={0x6c, 0x42, 0x1, 0x70bd29, 0x25dfdbfd, {0x3, 0x1}, [@generic="0f000000", @typed={0x9e, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb08002c00001c0000000001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e8f67a6eae8c74bb6d88367cdb0c8571c"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003, 0x0, 0x1, [@nested={0x0, 0x6f, 0x0, 0x1, [@nested={0x0, 0x77, 0x0, 0x1, [@nested={0x0, 0xb}, @nested={0x0, 0x14d}, @nested={0x0, 0x11d}, @typed={0x0, 0x2c, 0x0, 0x0, @u64=0x1}, @nested={0x0, 0x99}]}, @nested={0x0, 0x110, 0x0, 0x1, [@nested={0x0, 0x85}, @typed={0x0, 0x7a, 0x0, 0x0, @u64=0x4}, @generic="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", @typed={0x0, 0xb2, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x0, 0xb3}]}, @generic="de4eff62a0bab7f13b89ab0fce459acaab371678f1f4d2a3f47aa9645b5a74b12c9ee84d9013db5499053f2a894976269b7c00ceb4e90b2a2e20db4b6b3429f233327b5d2301c70402cbba710639fdc9fe7d390c24570f2105f24f197011e336a8778bd01a0e00e0665d4ccb8e16e197b25cad2e3f61cda7c3601c1e96622d9cc8e71e2e6ab6da31eb35f94f3ea5"]}, @nested={0x0, 0xaf, 0x0, 0x1, [@generic="6d8a3b75794117875bb6a4ace80f0f5a4cd9b37448444710209dc72ee53f3c1ebafce0c093c8c95ddf6d7ae96c1462eda31698f70888db5e1a"]}, @generic="845d30c29d0c2f04c2fa9b5f2ad9ef52e9b6a221427cb920110da18f2520c1c8607dfed48bbd2066cdc37a9b6f9cbab9ffc6e0f87960a76ab536e26bc0042fa47564c79a32b5648b88f58f757ad0e2e0f6ef66b160d8c5cca072819d45a2fb66e85e4a9ef6d6ff6b6b84075c1ffe36676e4ec7ec73367800c51a3011d6aca4a27c4eded68494e466e4d6b897768ef72000793ddc6cde"]}]}, 0x6c}}, 0x0) 502.304439ms ago: executing program 0 (id=301): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0xffffffffffffffff, &(0x7f0000000300)) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r3, r4}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 300.067869ms ago: executing program 0 (id=302): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x0, 0x1000000, 0xffffffff, 0x280, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x84, 0x0, 0x28}, 0x0, 0x220, 0x280, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x338, 0x0, 0x7ffffffd, 0x3, 0x8000000}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0xf, 0x0, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x8, 0x7, 0x4, 0xb], 0x3, 0xdab9f66e79d89cfe}, {0x1, [0x0, 0x4, 0x2, 0x0, 0x5, 0x2], 0x1}}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x2, 0xc, 0x8, 'snmp\x00', 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x450) 299.629653ms ago: executing program 4 (id=303): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) (async) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwrite64(r2, &(0x7f0000000140)="b8", 0x1, 0xfff) (async) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) (async) syz_clone3(&(0x7f0000000080)={0x112845180, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0e0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000ae1939c2430efa0000000400000000002000"/35], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="c7a26bdcc556f183533fcb6164b116f5ee7f5617df8fa82d491913e06f43c5be697eb29024d0d3c89cfe767c4d1ed89116a871ac0400000000000000aebf0a0539c098077a2257f2ca1e1c4601de595933026868427189a53a00a916412695b0190780d09794c9d3b040b0ed9a390b222291603be71c75b27e7f054b07"], &(0x7f0000000340)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8ec6dc3f0adf33c9f7b986", 0x0, 0xe5e7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async, rerun: 32) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r6 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private2, @in=@remote, 0x4e28, 0x0, 0x4, 0xf000, 0x2}, {0xffffffffffffffff, 0x802, 0x913e, 0x0, 0xfffffffffffffffc, 0xfffffffffffff207, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x3, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@empty, 0x4d2, 0x33}, 0x0, @in6=@private0, 0x3507, 0x0, 0x2, 0x4, 0x4, 0xfffffffe, 0xfffffffd}}, 0xe8) (async) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e23, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x5, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0x0, 0x4}}}, @TCA_MIRRED_PARMS={0x84, 0x2, {{0x1, 0xfffffffe, 0x7, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x4000000) (async, rerun: 32) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='ncpfs\x00', 0x0, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x60000, 0x140) 299.299147ms ago: executing program 0 (id=304): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/250, 0xfa}], 0x1}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004f80)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x20e8086) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x308400a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r2 = accept(r1, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000002c0)='0', 0x1}], 0x2, 0x0, 0x0, 0x4000411}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x1, 0x7fff0000}]}) socket(0x2, 0xa, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0xff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 226.663527ms ago: executing program 2 (id=305): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x7000000, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) 170.037624ms ago: executing program 2 (id=306): mmap(&(0x7f0000435000/0x4000)=nil, 0x4000, 0x300000c, 0x10010, 0xffffffffffffffff, 0x3c09d000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000000200)={0x0, 0xfffffffe, 0xc0000, 0x6, 0xfffffff9, 0x0, 0x7fffffffffffffff, 0x7}) r0 = open(&(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x108843, 0x3a) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) truncate(&(0x7f0000000080)='./file0\x00', 0x4) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x30) pread64(r1, &(0x7f00000024c0)=""/209, 0xd1, 0x8) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x100000000000026d, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000800000004000000009000000000000000000000905000000070000000000000e0100000000000000000000000000000d02000000000000000000000d00000000000000000000000200000000000000000000005f00"], 0x0, 0x61}, 0x20) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r4, &(0x7f0000000000)='7', 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @loopback, 0x3ff}}}, 0x84) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x10002) 118.539547ms ago: executing program 3 (id=307): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1c, 0x40000009, @mcast1, 0x4}, 0x1c) r1 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) syz_pidfd_open(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0) 118.080367ms ago: executing program 0 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x29) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000034000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) memfd_secret(0x0) 0s ago: executing program 3 (id=309): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000440)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x29) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x4}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f00000000c0)='GPL\x00', 0x6}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:36589' (ED25519) to the list of known hosts. [ 42.798866][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 42.798981][ T43] audit: type=1400 audit(1788575890.208:141): avc: denied { mounton } for pid=5718 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.808793][ T43] audit: type=1400 audit(1788575890.218:142): avc: denied { mount } for pid=5718 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.811597][ T5718] cgroup: Unknown subsys name 'net' [ 42.813274][ T43] audit: type=1400 audit(1788575890.218:143): avc: denied { unmount } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.010155][ T5718] cgroup: Unknown subsys name 'cpuset' [ 43.014200][ T5718] cgroup: Unknown subsys name 'rlimit' [ 43.164699][ T43] audit: type=1400 audit(1788575890.568:144): avc: denied { setattr } for pid=5718 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.165173][ T43] audit: type=1400 audit(1788575890.568:145): avc: denied { create } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.165470][ T43] audit: type=1400 audit(1788575890.568:146): avc: denied { write } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.165830][ T43] audit: type=1400 audit(1788575890.568:147): avc: denied { read } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.204107][ T43] audit: type=1400 audit(1788575890.608:148): avc: denied { read } for pid=5442 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 43.211779][ T43] audit: type=1400 audit(1788575890.608:149): avc: denied { read } for pid=5442 comm="dhcpcd" name="n31" dev="tmpfs" ino=1887 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.212131][ T43] audit: type=1400 audit(1788575890.608:150): avc: denied { open } for pid=5442 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1887 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.245683][ T5725] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.109676][ T5718] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.137947][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 48.138028][ T43] audit: type=1400 audit(1788575895.548:156): avc: denied { execmem } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.363985][ T43] audit: type=1400 audit(1788575895.768:157): avc: denied { create } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.373747][ T43] audit: type=1400 audit(1788575895.778:158): avc: denied { read write } for pid=5732 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.374985][ T43] audit: type=1400 audit(1788575895.778:159): avc: denied { open } for pid=5733 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.386002][ T43] audit: type=1400 audit(1788575895.788:160): avc: denied { ioctl } for pid=5735 comm="syz-executor" path="socket:[7275]" dev="sockfs" ino=7275 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.408538][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.409548][ T5743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.410048][ T5743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.411242][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.413843][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.416273][ T5744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.416709][ T5744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.417319][ T5744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.417637][ T5744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.418836][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.419411][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.420404][ T5743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.421027][ T5743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.421271][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.424094][ T5744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.424182][ T5744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.424556][ T5745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.427931][ T5742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.430010][ T43] audit: type=1400 audit(1788575895.838:161): avc: denied { read } for pid=5734 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.430064][ T43] audit: type=1400 audit(1788575895.838:162): avc: denied { open } for pid=5734 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.430122][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.431707][ T43] audit: type=1400 audit(1788575895.838:163): avc: denied { mounton } for pid=5734 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.437921][ T43] audit: type=1400 audit(1788575895.848:164): avc: denied { module_request } for pid=5734 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.439665][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.500465][ T43] audit: type=1400 audit(1788575895.908:165): avc: denied { sys_module } for pid=5734 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.251116][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.251696][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.252017][ T5734] bridge_slave_0: entered allmulticast mode [ 49.253239][ T5734] bridge_slave_0: entered promiscuous mode [ 49.272136][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.272318][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.272475][ T5734] bridge_slave_1: entered allmulticast mode [ 49.273841][ T5734] bridge_slave_1: entered promiscuous mode [ 49.339437][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.339706][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.339766][ T5735] bridge_slave_0: entered allmulticast mode [ 49.340538][ T5735] bridge_slave_0: entered promiscuous mode [ 49.369193][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.369370][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.369692][ T5735] bridge_slave_1: entered allmulticast mode [ 49.371292][ T5735] bridge_slave_1: entered promiscuous mode [ 49.372307][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.372409][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.372688][ T5732] bridge_slave_0: entered allmulticast mode [ 49.373793][ T5732] bridge_slave_0: entered promiscuous mode [ 49.377052][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.377734][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.377823][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.377950][ T5732] bridge_slave_1: entered allmulticast mode [ 49.379605][ T5732] bridge_slave_1: entered promiscuous mode [ 49.402372][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.470733][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.470902][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.470974][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.471070][ T5733] bridge_slave_0: entered allmulticast mode [ 49.472681][ T5733] bridge_slave_0: entered promiscuous mode [ 49.475966][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.488479][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.494133][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.494227][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.494386][ T5733] bridge_slave_1: entered allmulticast mode [ 49.495094][ T5733] bridge_slave_1: entered promiscuous mode [ 49.508535][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.510543][ T5732] team0: Port device team_slave_0 added [ 49.512422][ T5734] team0: Port device team_slave_0 added [ 49.534869][ T5732] team0: Port device team_slave_1 added [ 49.542050][ T5734] team0: Port device team_slave_1 added [ 49.542986][ T5735] team0: Port device team_slave_0 added [ 49.546052][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.571312][ T5735] team0: Port device team_slave_1 added [ 49.571851][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.571861][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.571873][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.580991][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.587520][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.587533][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.587555][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.631458][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.631519][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.631570][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.635269][ T5733] team0: Port device team_slave_0 added [ 49.643929][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.643943][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.643962][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.645453][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.645464][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.645480][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.646964][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.646984][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.647005][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.656269][ T5733] team0: Port device team_slave_1 added [ 49.721341][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.721404][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.722035][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.740677][ T5732] hsr_slave_0: entered promiscuous mode [ 49.741497][ T5732] hsr_slave_1: entered promiscuous mode [ 49.745932][ T5734] hsr_slave_0: entered promiscuous mode [ 49.746500][ T5734] hsr_slave_1: entered promiscuous mode [ 49.746929][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 49.746998][ T5734] Cannot create hsr debugfs directory [ 49.748648][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.748660][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.748683][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.807744][ T5735] hsr_slave_0: entered promiscuous mode [ 49.808483][ T5735] hsr_slave_1: entered promiscuous mode [ 49.808840][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 49.808852][ T5735] Cannot create hsr debugfs directory [ 49.837234][ T5733] hsr_slave_0: entered promiscuous mode [ 49.838240][ T5733] hsr_slave_1: entered promiscuous mode [ 49.838686][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 49.838703][ T5733] Cannot create hsr debugfs directory [ 50.160213][ T5732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.169035][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.169880][ T5732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.175195][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.176218][ T5732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.180471][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.187649][ T5732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.194054][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.229186][ T5735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.236410][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.238326][ T5735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.243013][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.250950][ T5735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.257669][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.258546][ T5735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.264475][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.339025][ T5734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.344885][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.349306][ T5734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.355509][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.356157][ T5734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.360998][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.366509][ T5734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.372802][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.451042][ T5733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.457306][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.457970][ T5733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.458329][ T5089] Bluetooth: hci0: command tx timeout [ 50.458493][ T5089] Bluetooth: hci2: command tx timeout [ 50.458564][ T5089] Bluetooth: hci3: command tx timeout [ 50.458673][ T5089] Bluetooth: hci1: command tx timeout [ 50.463586][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.464869][ T5733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.472074][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.475969][ T5733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.479261][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.523161][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.540700][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.579369][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.597665][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.611181][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.611466][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.613837][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.613920][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.621036][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.630350][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.630435][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.631271][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.631316][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.652624][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.658458][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.684351][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.684458][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.698793][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.705726][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.706468][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.725228][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.725362][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.743170][ T5735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.749687][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.749857][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.012816][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.049873][ T5732] veth0_vlan: entered promiscuous mode [ 51.056272][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.061970][ T5732] veth1_vlan: entered promiscuous mode [ 51.081039][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.085555][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.107016][ T5732] veth0_macvtap: entered promiscuous mode [ 51.118865][ T5732] veth1_macvtap: entered promiscuous mode [ 51.135424][ T5734] veth0_vlan: entered promiscuous mode [ 51.142322][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.159451][ T5734] veth1_vlan: entered promiscuous mode [ 51.160697][ T5735] veth0_vlan: entered promiscuous mode [ 51.161705][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.182532][ T5735] veth1_vlan: entered promiscuous mode [ 51.186654][ T5733] veth0_vlan: entered promiscuous mode [ 51.198089][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.199553][ T5733] veth1_vlan: entered promiscuous mode [ 51.226331][ T5734] veth0_macvtap: entered promiscuous mode [ 51.233689][ T5734] veth1_macvtap: entered promiscuous mode [ 51.239555][ T5587] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.245218][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.270099][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.286931][ T5733] veth0_macvtap: entered promiscuous mode [ 51.288100][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.288116][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.293063][ T5735] veth0_macvtap: entered promiscuous mode [ 51.294501][ T5733] veth1_macvtap: entered promiscuous mode [ 51.305225][ T5735] veth1_macvtap: entered promiscuous mode [ 51.332178][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.333766][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.333787][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.343116][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.353493][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.367247][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.391858][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.391903][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.413656][ T5732] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.449232][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.449327][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.449391][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.449422][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.449451][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.449479][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.449508][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.449537][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.449567][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.449595][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.457670][ T5587] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.458162][ T5587] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.458466][ T5587] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.458727][ T5587] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.472969][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.472989][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.520065][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.520135][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.575751][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.575810][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.606445][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.606529][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.640502][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.640622][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.795968][ T5891] netlink: 'syz.0.1': attribute type 39 has an invalid length. [ 51.962717][ T5897] warning: `syz.2.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.969393][ T5897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7'. [ 52.049252][ T1165] IPVS: starting estimator thread 0... [ 52.108278][ T5903] xt_l2tp: unknown flags: 16 [ 52.139347][ T5901] IPVS: using max 25 ests per chain, 60000 per kthread [ 52.208459][ T42] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.538165][ T5742] Bluetooth: hci1: command tx timeout [ 52.538233][ T5742] Bluetooth: hci3: command tx timeout [ 52.538291][ T5742] Bluetooth: hci2: command tx timeout [ 52.538335][ T5742] Bluetooth: hci0: command tx timeout [ 52.764879][ T5920] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 52.858252][ T61] IPVS: starting estimator thread 0... [ 52.898857][ T5930] netlink: 'syz.0.18': attribute type 2 has an invalid length. [ 52.898944][ T5930] netlink: 'syz.0.18': attribute type 2 has an invalid length. [ 52.928683][ T5930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18'. [ 52.935681][ T5930] bond0: (slave bond_slave_0): Releasing backup interface [ 52.948138][ T5928] IPVS: using max 44 ests per chain, 105600 per kthread [ 53.005743][ T5930] bond_slave_0: entered promiscuous mode [ 53.005822][ T5930] bond_slave_0: entered allmulticast mode [ 53.152855][ T43] kauditd_printk_skb: 100 callbacks suppressed [ 53.152931][ T43] audit: type=1400 audit(1788576156.561:266): avc: denied { write } for pid=5944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.153002][ T43] audit: type=1400 audit(1788576156.561:267): avc: denied { create } for pid=5944 comm="dhcpcd-run-hook" name="resolv.conf.lapb7.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.153023][ T43] audit: type=1400 audit(1788576156.561:268): avc: denied { write } for pid=5944 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb7.link" dev="tmpfs" ino=2018 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.153044][ T43] audit: type=1400 audit(1788576156.561:269): avc: denied { append } for pid=5944 comm="dhcpcd-run-hook" name="resolv.conf.lapb7.link" dev="tmpfs" ino=2018 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.157541][ T43] audit: type=1400 audit(1788576156.571:270): avc: denied { create } for pid=5946 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 53.159373][ T43] audit: type=1400 audit(1788576156.571:271): avc: denied { sys_admin } for pid=5946 comm="syz.0.23" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 53.222270][ T43] audit: type=1400 audit(1788576156.631:272): avc: denied { write } for pid=5955 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.222351][ T43] audit: type=1400 audit(1788576156.631:273): avc: denied { unlink } for pid=5955 comm="rm" name="resolv.conf.lapb7.link" dev="tmpfs" ino=2018 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.287655][ T5738] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.333597][ T43] audit: type=1400 audit(1788576156.741:274): avc: denied { create } for pid=5962 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.334243][ T43] audit: type=1400 audit(1788576156.741:275): avc: denied { setopt } for pid=5962 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.335689][ T666] IPVS: starting estimator thread 0... [ 53.418832][ T5964] IPVS: using max 42 ests per chain, 100800 per kthread [ 53.439665][ T5738] usb 8-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 53.445456][ T5738] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.511517][ T5972] < [ 53.514065][ T5972] nbd: must specify a size in bytes for the device [ 53.514746][ T5972] nbd: must specify an index to disconnect [ 53.558102][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 53.558217][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 53.718388][ T25] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 53.787316][ T5990] IPVS: sh: FWM 3 0x00000003 - no destination available [ 53.847546][ T25] usb 5-1: device descriptor read/64, error -71 [ 53.889398][ T5738] hid-sensor-hub 0003:8086:0000.0002: hiddev0,hidraw1: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.3-1/input0 [ 54.087478][ T25] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 54.218220][ T25] usb 5-1: device descriptor read/64, error -71 [ 54.266739][ T6016] IPVS: sh: FWM 3 0x00000003 - no destination available [ 54.327938][ T25] usb usb5-port1: attempt power cycle [ 54.420590][ T6025] netlink: 488 bytes leftover after parsing attributes in process `syz.1.49'. [ 54.466065][ T6027] netlink: 7 bytes leftover after parsing attributes in process `syz.1.50'. [ 54.618233][ T5742] Bluetooth: hci2: command tx timeout [ 54.618327][ T5742] Bluetooth: hci1: command tx timeout [ 54.618326][ T5749] Bluetooth: hci3: command tx timeout [ 54.618437][ T5089] Bluetooth: hci0: command tx timeout [ 54.629645][ T6033] process 'syz.1.52' launched './file0' with NULL argv: empty string added [ 54.667526][ T25] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 54.672525][ T6035] Zero length message leads to an empty skb [ 54.688141][ T25] usb 5-1: device descriptor read/8, error -71 [ 54.937496][ T25] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 54.970718][ T25] usb 5-1: device descriptor read/8, error -71 [ 55.034234][ T61] IPVS: starting estimator thread 0... [ 55.078128][ T25] usb usb5-port1: unable to enumerate USB device [ 55.117510][ T6041] IPVS: using max 37 ests per chain, 88800 per kthread [ 56.063112][ T42] usb 8-1: USB disconnect, device number 2 [ 56.181414][ T6062] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 56.181500][ T6062] syzkaller1: group set to 0 [ 56.205809][ T6062] capability: warning: `syz.3.60' uses 32-bit capabilities (legacy support in use) [ 56.207469][ T6063] ublk_ctrl_add_dev: dev id not match 4294967295 0 [ 56.697916][ T5749] Bluetooth: hci3: command tx timeout [ 56.698145][ T5089] Bluetooth: hci0: command tx timeout [ 56.708205][ T5089] Bluetooth: hci1: command tx timeout [ 56.708257][ T5749] Bluetooth: hci2: command tx timeout [ 57.119010][ T5749] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 57.171485][ T6090] IPVS: sh: FWM 3 0x00000003 - no destination available [ 57.230108][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.230985][ T6092] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.272110][ T6092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.277898][ T6092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.377623][ T5587] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.377732][ T5587] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.377780][ T5587] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.377817][ T5587] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.065024][ T6043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 58.130319][ T6103] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 58.192194][ T43] kauditd_printk_skb: 37 callbacks suppressed [ 58.193767][ T43] audit: type=1400 audit(1788576161.601:313): avc: denied { create } for pid=6111 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.193794][ T43] audit: type=1400 audit(1788576161.601:314): avc: denied { setopt } for pid=6111 comm="syz.3.73" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.193852][ T43] audit: type=1400 audit(1788576161.601:315): avc: denied { connect } for pid=6111 comm="syz.3.73" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.193872][ T43] audit: type=1400 audit(1788576161.601:316): avc: denied { write } for pid=6111 comm="syz.3.73" path="socket:[11409]" dev="sockfs" ino=11409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.201725][ T6112] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 58.245069][ T6115] IPVS: sh: FWM 3 0x00000003 - no destination available [ 58.250908][ T5749] Bluetooth: hci3: Malformed LE Event: 0x1b [ 58.253894][ T5749] Bluetooth: hci3: Malformed LE Event: 0x1b [ 58.320638][ T43] audit: type=1400 audit(1788576161.731:317): avc: denied { mount } for pid=6127 comm="syz.2.79" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 58.321488][ T43] audit: type=1400 audit(1788576161.731:318): avc: denied { search } for pid=6127 comm="syz.2.79" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 58.323125][ T43] audit: type=1400 audit(1788576161.731:319): avc: denied { read write } for pid=6127 comm="syz.2.79" name="filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 58.323168][ T43] audit: type=1400 audit(1788576161.731:320): avc: denied { open } for pid=6127 comm="syz.2.79" path="/8/nfsd/filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 58.323204][ T43] audit: type=1400 audit(1788576161.731:321): avc: denied { ioctl } for pid=6127 comm="syz.2.79" path="/8/nfsd/filehandle" dev="nfsd" ino=5 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 58.345248][ T43] audit: type=1400 audit(1788576161.751:322): avc: denied { unmount } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 58.358268][ T6131] ±ÿ†Ý'É|d: renamed from lo [ 58.409950][ T6131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16351 sclass=netlink_route_socket pid=6131 comm=syz.3.80 [ 58.414774][ T6131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.80'. [ 58.416717][ T6131] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6131 comm=syz.3.80 [ 58.452447][ T6143] IPVS: sh: FWM 3 0x00000003 - no destination available [ 58.538196][ T854] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.603124][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'. [ 58.660206][ T6168] overlayfs: failed to resolve './file0': -2 [ 58.709662][ T854] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 58.711476][ T854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.711512][ T854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.715086][ T854] usb 6-1: config 0 descriptor?? [ 58.815011][ T6178] IPVS: sh: FWM 3 0x00000003 - no destination available [ 58.918729][ T5822] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 58.933003][ T854] usbhid 6-1:0.0: can't add hid device: -71 [ 58.933136][ T854] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 58.938458][ T854] usb 6-1: USB disconnect, device number 2 [ 59.068177][ T5822] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 59.075131][ T5822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.282796][ T6170] syz.2.94 (6170): attempted to duplicate a private mapping with mremap. This is not supported. [ 59.294289][ T5822] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 59.375414][ T6200] netlink: 36 bytes leftover after parsing attributes in process `syz.3.104'. [ 59.380454][ T854] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.471310][ T6204] IPVS: sh: FWM 3 0x00000003 - no destination available [ 59.547495][ T854] usb 6-1: Using ep0 maxpacket: 32 [ 59.550463][ T854] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 59.559057][ T854] usb 6-1: config index 0 descriptor too short (expected 36, got 27) [ 59.562578][ T854] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.568769][ T854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.571258][ T854] usb 6-1: config 0 descriptor?? [ 59.577672][ T854] ldusb 6-1:0.0: Interrupt in endpoint not found [ 59.581481][ T854] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 59.753837][ T6229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.114'. [ 59.764527][ T6231] netlink: 344 bytes leftover after parsing attributes in process `syz.3.115'. [ 59.780147][ T42] usb 6-1: USB disconnect, device number 3 [ 59.788935][ T6233] IPVS: sh: FWM 3 0x00000003 - no destination available [ 59.861592][ T6229] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 59.861592][ T6229] The task syz.0.114 (6229) triggered the difference, watch for misbehavior. [ 59.861951][ T6229] netlink: 'syz.0.114': attribute type 29 has an invalid length. [ 59.872657][ T6238] tipc: Started in network mode [ 59.872678][ T6238] tipc: Node identity 2000004, cluster identity 4711 [ 59.872689][ T6238] tipc: Node number set to 33554436 [ 60.188519][ T65] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 60.338348][ T65] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 60.342854][ T65] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.342877][ T65] usb 8-1: Product: syz [ 60.342889][ T65] usb 8-1: Manufacturer: syz [ 60.342900][ T65] usb 8-1: SerialNumber: syz [ 60.437994][ T6241] No source specified [ 60.553024][ T65] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 60.553191][ T65] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 60.553251][ T65] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 60.571411][ T65] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 60.590762][ T65] usb 8-1: USB disconnect, device number 3 [ 60.737786][ T6244] jffs2: notice: (6244) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 60.787936][ T6261] tipc: Started in network mode [ 60.787987][ T6261] tipc: Node identity 42285b3d0fa4, cluster identity 4711 [ 60.788125][ T6261] tipc: Enabled bearer , priority 0 [ 60.803600][ T6260] tipc: Disabling bearer [ 60.821721][ T6263] IPVS: sh: FWM 3 0x00000003 - no destination available [ 60.862900][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 60.862980][ T6265] FAULT_INJECTION: forcing a failure. [ 60.862980][ T6265] name failslab, interval 1, probability 0, space 0, times 0 [ 60.864442][ T6265] CPU: 0 UID: 0 PID: 6265 Comm: syz.0.126 Not tainted syzkaller #0 PREEMPT(full) [ 60.864461][ T6265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.864469][ T6265] Call Trace: [ 60.864475][ T6265] [ 60.864481][ T6265] dump_stack_lvl+0x100/0x190 [ 60.864504][ T6265] should_fail_ex.cold+0x5/0xa [ 60.864525][ T6265] should_failslab+0xc2/0x120 [ 60.864542][ T6265] __kvmalloc_node_noprof+0x113/0x9b0 [ 60.864557][ T6265] ? nla_strdup+0xc3/0x150 [ 60.864572][ T6265] ? nf_tables_addchain.constprop.0+0x9be/0x1ca0 [ 60.864595][ T6265] nf_tables_addchain.constprop.0+0x9be/0x1ca0 [ 60.864615][ T6265] ? nft_chain_lookup+0x59c/0xa60 [ 60.864630][ T6265] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 60.864650][ T6265] ? __pfx_nft_chain_lookup+0x10/0x10 [ 60.864663][ T6265] ? __lock_acquire+0x4c5/0x1ec0 [ 60.864688][ T6265] ? nla_strcmp+0xff/0x130 [ 60.864705][ T6265] ? nft_table_lookup.part.0+0x1e3/0x230 [ 60.864727][ T6265] nf_tables_newchain+0x17c3/0x2d30 [ 60.864745][ T6265] ? __pfx____ratelimit+0x10/0x10 [ 60.864759][ T6265] ? rcu_is_watching+0x13/0xc0 [ 60.864776][ T6265] ? __nla_validate_parse+0x1e7/0x28b0 [ 60.864794][ T6265] ? __pfx_nf_tables_newchain+0x10/0x10 [ 60.864813][ T6265] ? __pfx___nla_validate_parse+0x10/0x10 [ 60.864836][ T6265] ? lock_acquire+0x1d1/0x380 [ 60.864851][ T6265] ? net_generic+0x25/0x2a0 [ 60.864868][ T6265] ? __nla_parse+0x40/0x60 [ 60.864887][ T6265] nfnetlink_rcv_batch+0x1410/0x2880 [ 60.864910][ T6265] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 60.864929][ T6265] ? lock_acquire+0x1d1/0x380 [ 60.864942][ T6265] ? avc_has_perm_noaudit+0x56/0x3b0 [ 60.864964][ T6265] ? avc_has_perm_noaudit+0x145/0x3b0 [ 60.864995][ T6265] ? __nla_parse+0x40/0x60 [ 60.865013][ T6265] nfnetlink_rcv+0x3bd/0x440 [ 60.865029][ T6265] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 60.865047][ T6265] netlink_unicast+0x585/0x850 [ 60.865067][ T6265] ? __pfx_netlink_unicast+0x10/0x10 [ 60.865163][ T6265] netlink_sendmsg+0x8b0/0xda0 [ 60.865202][ T6265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.865296][ T6265] ? selinux_socket_sendmsg+0x198/0x2f0 [ 60.865337][ T6265] ____sys_sendmsg+0xa4d/0xbe0 [ 60.865363][ T6265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.865395][ T6265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 60.865421][ T6265] ___sys_sendmsg+0x190/0x1e0 [ 60.865446][ T6265] ? __pfx____sys_sendmsg+0x10/0x10 [ 60.865465][ T6265] ? futex_wait+0x11e/0x370 [ 60.865493][ T6265] ? find_held_lock+0x2b/0x80 [ 60.865535][ T6265] __sys_sendmsg+0x160/0x210 [ 60.865557][ T6265] ? __pfx___sys_sendmsg+0x10/0x10 [ 60.865580][ T6265] do_syscall_64+0x123/0x790 [ 60.865600][ T6265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.865621][ T6265] RIP: 0033:0x7f4cac99e159 [ 60.865643][ T6265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.865660][ T6265] RSP: 002b:00007f4cad94f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.865680][ T6265] RAX: ffffffffffffffda RBX: 00007f4cacc25fa0 RCX: 00007f4cac99e159 [ 60.865693][ T6265] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 60.865703][ T6265] RBP: 00007f4caca35024 R08: 0000000000000000 R09: 0000000000000000 [ 60.865716][ T6265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.865727][ T6265] R13: 00007f4cacc26038 R14: 00007f4cacc25fa0 R15: 00007ffe59a79188 [ 60.865755][ T6265] [ 60.915416][ T6267] gretap0: mtu less than device minimum [ 60.938444][ T6271] FAULT_INJECTION: forcing a failure. [ 60.938444][ T6271] name fail_futex, interval 1, probability 0, space 0, times 1 [ 60.938476][ T6271] CPU: 0 UID: 0 PID: 6271 Comm: syz.0.128 Not tainted syzkaller #0 PREEMPT(full) [ 60.938498][ T6271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.938508][ T6271] Call Trace: [ 60.938514][ T6271] [ 60.938522][ T6271] dump_stack_lvl+0x100/0x190 [ 60.938554][ T6271] should_fail_ex.cold+0x5/0xa [ 60.938583][ T6271] get_futex_key+0x1d0/0x14f0 [ 60.938614][ T6271] ? __pfx_get_futex_key+0x10/0x10 [ 60.938655][ T6271] ? find_held_lock+0x2b/0x80 [ 60.938679][ T6271] ? futex_wake+0x4ea/0x5e0 [ 60.938711][ T6271] futex_wake+0xf4/0x5e0 [ 60.938734][ T6271] ? __pfx_futex_wake+0x10/0x10 [ 60.938760][ T6271] ? lock_acquire+0x1d1/0x380 [ 60.938779][ T6271] ? find_held_lock+0x2b/0x80 [ 60.938801][ T6271] ? __fget_files+0x215/0x3d0 [ 60.938821][ T6271] ? __fget_files+0x215/0x3d0 [ 60.938839][ T6271] do_futex+0x2b2/0x440 [ 60.938861][ T6271] ? __pfx_do_futex+0x10/0x10 [ 60.938885][ T6271] ? fdget+0x18b/0x210 [ 60.938906][ T6271] __x64_sys_futex+0x34f/0x4d0 [ 60.938933][ T6271] ? __pfx___x64_sys_futex+0x10/0x10 [ 60.938962][ T6271] do_syscall_64+0x123/0x790 [ 60.938986][ T6271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.939005][ T6271] RIP: 0033:0x7f4cac99e159 [ 60.939021][ T6271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.939038][ T6271] RSP: 002b:00007f4cad94f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 60.939056][ T6271] RAX: ffffffffffffffda RBX: 00007f4cacc25fa8 RCX: 00007f4cac99e159 [ 60.939068][ T6271] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4cacc25fac [ 60.939078][ T6271] RBP: 00007f4cacc25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 60.939085][ T6271] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 60.939092][ T6271] R13: 00007f4cacc26038 R14: 00007ffe59a790a0 R15: 00007ffe59a79188 [ 60.939116][ T6271] [ 60.981871][ T6273] FAULT_INJECTION: forcing a failure. [ 60.981871][ T6273] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 60.981902][ T6273] CPU: 2 UID: 0 PID: 6273 Comm: syz.1.129 Not tainted syzkaller #0 PREEMPT(full) [ 60.981924][ T6273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.981936][ T6273] Call Trace: [ 60.981944][ T6273] [ 60.981953][ T6273] dump_stack_lvl+0x100/0x190 [ 60.981997][ T6273] should_fail_ex.cold+0x5/0xa [ 60.982027][ T6273] _copy_to_user+0x32/0xd0 [ 60.982061][ T6273] simple_read_from_buffer+0xcb/0x170 [ 60.982089][ T6273] proc_fail_nth_read+0x1af/0x230 [ 60.982115][ T6273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.982142][ T6273] ? rw_verify_area+0xce/0x6d0 [ 60.982172][ T6273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.982197][ T6273] vfs_read+0x1e4/0xb40 [ 60.982218][ T6273] ? lock_acquire+0x1d1/0x380 [ 60.982241][ T6273] ? __fget_files+0x34/0x3d0 [ 60.982266][ T6273] ? __pfx_vfs_read+0x10/0x10 [ 60.982283][ T6273] ? find_held_lock+0x2b/0x80 [ 60.982313][ T6273] ? __fget_files+0x215/0x3d0 [ 60.982344][ T6273] ? __fget_files+0x21f/0x3d0 [ 60.982377][ T6273] ksys_read+0x12a/0x250 [ 60.982397][ T6273] ? __pfx_ksys_read+0x10/0x10 [ 60.982425][ T6273] do_syscall_64+0x123/0x790 [ 60.982454][ T6273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.982476][ T6273] RIP: 0033:0x7f077675e98e [ 60.982494][ T6273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.982514][ T6273] RSP: 002b:00007f0777624fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.982535][ T6273] RAX: ffffffffffffffda RBX: 00007f07776256c0 RCX: 00007f077675e98e [ 60.982548][ T6273] RDX: 000000000000000f RSI: 00007f07776250a0 RDI: 0000000000000004 [ 60.982561][ T6273] RBP: 00007f0777625090 R08: 0000000000000000 R09: 0000000000000000 [ 60.982573][ T6273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.982584][ T6273] R13: 00007f0776a26038 R14: 00007f0776a25fa0 R15: 00007ffd97783118 [ 60.982607][ T6273] [ 61.091779][ T6280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.133'. [ 61.141127][ T6286] IPVS: sh: FWM 3 0x00000003 - no destination available [ 61.275643][ T6294] netlink: 'syz.0.137': attribute type 10 has an invalid length. [ 61.290802][ T6294] team0 (unregistering): Port device team_slave_0 removed [ 61.304773][ T6294] team0 (unregistering): Port device team_slave_1 removed [ 61.398908][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 61.400661][ T6310] ip_tables: iptables: counters copy to user failed while replacing table [ 61.408639][ T6312] netlink: 844 bytes leftover after parsing attributes in process `syz.1.142'. [ 61.408707][ T6312] netlink: 844 bytes leftover after parsing attributes in process `syz.1.142'. [ 61.452998][ T6316] capability: warning: `syz.0.144' uses deprecated v2 capabilities in a way that may be insecure [ 61.686347][ T854] usb 7-1: USB disconnect, device number 3 [ 61.698070][ T5822] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 61.721422][ T6323] FAULT_INJECTION: forcing a failure. [ 61.721422][ T6323] name failslab, interval 1, probability 0, space 0, times 0 [ 61.721624][ T6323] CPU: 0 UID: 0 PID: 6323 Comm: syz.2.147 Not tainted syzkaller #0 PREEMPT(full) [ 61.721648][ T6323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.721660][ T6323] Call Trace: [ 61.721667][ T6323] [ 61.721675][ T6323] dump_stack_lvl+0x100/0x190 [ 61.721708][ T6323] should_fail_ex.cold+0x5/0xa [ 61.721738][ T6323] should_failslab+0xc2/0x120 [ 61.721761][ T6323] kmem_cache_alloc_noprof+0x92/0x6a0 [ 61.721783][ T6323] ? alloc_empty_file+0x5b/0x1c0 [ 61.721811][ T6323] alloc_empty_file+0x5b/0x1c0 [ 61.721834][ T6323] path_openat+0xdb/0x2440 [ 61.721878][ T6323] ? __pfx_path_openat+0x10/0x10 [ 61.721906][ T6323] do_file_open+0x20e/0x430 [ 61.721928][ T6323] ? __pfx_do_file_open+0x10/0x10 [ 61.721964][ T6323] ? _raw_spin_unlock+0x28/0x50 [ 61.721983][ T6323] ? alloc_fd+0x471/0x7a0 [ 61.722018][ T6323] do_sys_openat2+0x10f/0x1e0 [ 61.722042][ T6323] ? __pfx_do_sys_openat2+0x10/0x10 [ 61.722064][ T6323] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 61.722093][ T6323] __x64_sys_openat+0x12d/0x210 [ 61.722118][ T6323] ? __pfx___x64_sys_openat+0x10/0x10 [ 61.722152][ T6323] do_syscall_64+0x123/0x790 [ 61.722175][ T6323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.722192][ T6323] RIP: 0033:0x7fdce055e98e [ 61.722208][ T6323] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 61.722227][ T6323] RSP: 002b:00007fdce151eb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 61.722248][ T6323] RAX: ffffffffffffffda RBX: 00007fdce151f6c0 RCX: 00007fdce055e98e [ 61.722260][ T6323] RDX: 0000000000000002 RSI: 00007fdce151ec00 RDI: ffffffffffffff9c [ 61.722272][ T6323] RBP: 00007fdce151ec00 R08: 0000000000000000 R09: 0000000000000000 [ 61.722282][ T6323] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 61.722293][ T6323] R13: 00007fdce0826038 R14: 00007fdce0825fa0 R15: 00007ffeae8483a8 [ 61.722319][ T6323] [ 61.787508][ T65] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 61.850087][ T5822] usb 8-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 61.851145][ T5822] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 95 [ 61.852895][ T5822] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.852908][ T5822] usb 8-1: Product: syz [ 61.852915][ T5822] usb 8-1: Manufacturer: syz [ 61.852925][ T5822] usb 8-1: SerialNumber: syz [ 61.855779][ T6314] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.856924][ T5822] usb 8-1: NFC: intf ffff88802e733000 id ffffffff8fe8dc40 [ 61.870449][ T5822] nfcmrvl 8-1:1.0: NFC: registered with nci successfully [ 61.937585][ T65] usb 6-1: Using ep0 maxpacket: 8 [ 61.938201][ T65] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 61.939319][ T65] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 61.939341][ T65] usb 6-1: config 0 has no interface number 0 [ 61.939373][ T65] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 61.939393][ T65] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 61.939414][ T65] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 61.939436][ T65] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 61.939470][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.941871][ T65] usb 6-1: config 0 descriptor?? [ 61.959927][ T65] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 62.065587][ T13] nfcmrvl 8-1:1.0: NFC: send entry, len 4 [ 62.066045][ C0] nfcmrvl 8-1:1.0: NFC: urb ffff88802d786f00 status -71 count 0 [ 62.212517][ T5738] usb 6-1: USB disconnect, device number 4 [ 62.212580][ C2] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 62.225737][ T5738] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 62.225741][ T6321] ldusb: No device or device unplugged -19 [ 63.603662][ T6361] netlink: 'syz.2.156': attribute type 1 has an invalid length. [ 63.612157][ T6361] gretap1: entered promiscuous mode [ 63.770987][ T6366] IPVS: sh: FWM 3 0x00000003 - no destination available [ 64.267825][ T43] kauditd_printk_skb: 59 callbacks suppressed [ 64.267902][ T43] audit: type=1400 audit(1788576167.671:382): avc: denied { search } for pid=6374 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.267943][ T43] audit: type=1400 audit(1788576167.681:383): avc: denied { search } for pid=6374 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.267978][ T43] audit: type=1400 audit(1788576167.681:384): avc: denied { search } for pid=6374 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.267999][ T43] audit: type=1400 audit(1788576167.681:385): avc: denied { search } for pid=6374 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.270505][ T43] audit: type=1400 audit(1788576167.681:386): avc: denied { read } for pid=6375 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.272836][ T43] audit: type=1400 audit(1788576167.681:387): avc: denied { read open } for pid=6375 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.272874][ T43] audit: type=1400 audit(1788576167.681:388): avc: denied { getattr } for pid=6375 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.277543][ T43] audit: type=1400 audit(1788576167.681:389): avc: denied { write } for pid=6374 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.277705][ T43] audit: type=1400 audit(1788576167.681:390): avc: denied { add_name } for pid=6374 comm="dhcpcd-run-hook" name="resolv.conf.bond_slave_0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.340244][ T43] audit: type=1400 audit(1788576167.751:391): avc: denied { write } for pid=6377 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.427230][ T6314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 64.442225][ T65] usb 8-1: USB disconnect, device number 4 [ 64.444067][ T65] usb 8-1: NFC: intf ffff88802e733000 [ 64.485685][ T6382] __nla_validate_parse: 1 callbacks suppressed [ 64.485779][ T6382] netlink: 388 bytes leftover after parsing attributes in process `syz.0.163'. [ 64.523963][ T6386] netlink: 'syz.1.164': attribute type 11 has an invalid length. [ 64.536430][ T6386] comedi comedi3: board detection failed [ 64.610847][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'. [ 64.690918][ T6398] syz.3.169 uses obsolete (PF_INET,SOCK_PACKET) [ 64.745666][ T6402] syzkaller1: entered promiscuous mode [ 64.745720][ T6402] syzkaller1: entered allmulticast mode [ 64.750278][ T6402] netlink: 'syz.3.169': attribute type 1 has an invalid length. [ 64.842526][ T6402] bond1: entered promiscuous mode [ 64.843158][ T6402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.854092][ T6398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=6398 comm=syz.3.169 [ 64.880684][ T6403] bond1: option downdelay: invalid value (18446744073709551615) [ 64.880736][ T6403] bond1: option downdelay: allowed values 0 - 2147483647 [ 64.884128][ T6410] IPVS: sh: FWM 3 0x00000003 - no destination available [ 64.886603][ T6403] bond1 (unregistering): Released all slaves [ 64.991380][ T6415] rnbd_client L213: map_device: Parameters missing [ 65.126630][ T6426] block nbd0: Receive control failed (result -32) [ 65.153066][ T6432] block nbd0: Receive control failed (result -32) [ 65.211985][ T6438] IPVS: sh: FWM 3 0x00000003 - no destination available [ 65.350087][ T6450] can0: slcan on ttynull. [ 65.438953][ T6443] can0 (unregistered): slcan off ttynull. [ 65.496583][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.638869][ T6479] ======================================================= [ 65.638869][ T6479] WARNING: The mand mount option has been deprecated and [ 65.638869][ T6479] and is ignored by this kernel. Remove the mand [ 65.638869][ T6479] option from the mount to silence this warning. [ 65.638869][ T6479] ======================================================= [ 65.713821][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.830936][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.905504][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.928934][ T6497] macsec1: entered promiscuous mode [ 65.928998][ T6497] hsr0: entered promiscuous mode [ 65.974513][ T5089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.977170][ T5089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.978010][ T5089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.981640][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.982058][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.002271][ T6497] macsec1: entered promiscuous mode [ 66.115725][ T6497] macsec1: entered promiscuous mode [ 66.213452][ T13] bridge_slave_1: left allmulticast mode [ 66.213551][ T13] bridge_slave_1: left promiscuous mode [ 66.222265][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.232939][ T13] bridge_slave_0: left allmulticast mode [ 66.233009][ T13] bridge_slave_0: left promiscuous mode [ 66.233219][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.411759][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.420525][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.426086][ T13] bond0 (unregistering): Released all slaves [ 66.436650][ T6497] macsec1: entered promiscuous mode [ 66.618083][ T13] tipc: Left network mode [ 66.647957][ T6497] macsec1: entered promiscuous mode [ 66.758959][ T6540] FAULT_INJECTION: forcing a failure. [ 66.758959][ T6540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.759055][ T6540] CPU: 1 UID: 0 PID: 6540 Comm: syz.3.206 Not tainted syzkaller #0 PREEMPT(full) [ 66.759089][ T6540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.759101][ T6540] Call Trace: [ 66.759108][ T6540] [ 66.759115][ T6540] dump_stack_lvl+0x100/0x190 [ 66.759162][ T6540] should_fail_ex.cold+0x5/0xa [ 66.759188][ T6540] _copy_to_user+0x32/0xd0 [ 66.759222][ T6540] simple_read_from_buffer+0xcb/0x170 [ 66.759260][ T6540] proc_fail_nth_read+0x1af/0x230 [ 66.759290][ T6540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.759313][ T6540] ? rw_verify_area+0xce/0x6d0 [ 66.759338][ T6540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.759358][ T6540] vfs_read+0x1e4/0xb40 [ 66.759376][ T6540] ? lock_acquire+0x1d1/0x380 [ 66.759394][ T6540] ? __fget_files+0x34/0x3d0 [ 66.759414][ T6540] ? __pfx_vfs_read+0x10/0x10 [ 66.759429][ T6540] ? find_held_lock+0x2b/0x80 [ 66.759454][ T6540] ? __fget_files+0x215/0x3d0 [ 66.759478][ T6540] ? __fget_files+0x21f/0x3d0 [ 66.759507][ T6540] ksys_read+0x12a/0x250 [ 66.759522][ T6540] ? __pfx_ksys_read+0x10/0x10 [ 66.759536][ T6540] ? v4l2_ioctl+0x1c5/0x250 [ 66.759570][ T6540] do_syscall_64+0x123/0x790 [ 66.759599][ T6540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.759618][ T6540] RIP: 0033:0x7f31a1d5e98e [ 66.759632][ T6540] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 66.759648][ T6540] RSP: 002b:00007f31a2c63fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.759665][ T6540] RAX: ffffffffffffffda RBX: 00007f31a2c646c0 RCX: 00007f31a1d5e98e [ 66.759676][ T6540] RDX: 000000000000000f RSI: 00007f31a2c640a0 RDI: 0000000000000004 [ 66.759686][ T6540] RBP: 00007f31a2c64090 R08: 0000000000000000 R09: 0000000000000000 [ 66.759697][ T6540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.759707][ T6540] R13: 00007f31a2026038 R14: 00007f31a2025fa0 R15: 00007ffe0038e338 [ 66.759731][ T6540] [ 66.917646][ C2] sr 2:0:0:0: [sr0] tag#17 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 66.917727][ C2] sr 2:0:0:0: [sr0] tag#17 CDB: Test Unit Ready [ 66.979923][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 66.983078][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.210'. [ 67.056274][ T13] hsr_slave_0: left promiscuous mode [ 67.061891][ T13] hsr_slave_1: left promiscuous mode [ 67.065334][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.067757][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.072723][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.072738][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.077671][ T35] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 67.078280][ T13] veth1_macvtap: left promiscuous mode [ 67.078313][ T13] veth0_macvtap: left promiscuous mode [ 67.078385][ T13] veth1_vlan: left promiscuous mode [ 67.078424][ T13] veth0_vlan: left promiscuous mode [ 67.118216][ T6560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56088 sclass=netlink_route_socket pid=6560 comm=syz.3.212 [ 67.227726][ T35] usb 7-1: Using ep0 maxpacket: 32 [ 67.228498][ T35] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.229430][ T35] usb 7-1: config 1 interface 0 altsetting 252 bulk endpoint 0x82 has invalid maxpacket 32 [ 67.229452][ T35] usb 7-1: config 1 interface 0 altsetting 252 bulk endpoint 0x3 has invalid maxpacket 64 [ 67.229471][ T35] usb 7-1: config 1 interface 0 has no altsetting 0 [ 67.231477][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.231490][ T35] usb 7-1: Product: syz [ 67.231498][ T35] usb 7-1: Manufacturer: syz [ 67.231505][ T35] usb 7-1: SerialNumber: syz [ 67.235785][ T6545] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 67.236008][ T6545] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 67.284441][ T13] team0 (unregistering): Port device team_slave_1 removed [ 67.292615][ T13] team0 (unregistering): Port device team_slave_0 removed [ 67.367594][ T5738] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 67.481790][ T35] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 67.486290][ T35] usb 7-1: USB disconnect, device number 4 [ 67.532294][ T5738] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 67.532371][ T5738] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 67.533574][ T5738] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.533611][ T5738] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 67.533633][ T5738] usb 8-1: config 0 interface 0 has no altsetting 0 [ 67.534526][ T5738] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.534568][ T5738] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 67.534588][ T5738] usb 8-1: config 0 interface 0 has no altsetting 0 [ 67.538085][ T5738] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.538115][ T5738] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 67.538134][ T5738] usb 8-1: config 0 interface 0 has no altsetting 0 [ 67.539065][ T5738] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.539099][ T5738] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 67.539121][ T5738] usb 8-1: config 0 interface 0 has no altsetting 0 [ 67.542236][ T5738] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.542279][ T5738] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 67.542300][ T5738] usb 8-1: config 0 interface 0 has no altsetting 0 [ 67.548446][ T5738] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.548489][ T5738] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 67.548508][ T5738] usb 8-1: config 0 interface 0 has no altsetting 0 [ 67.550503][ T5738] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.550553][ T5738] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 67.550582][ T5738] usb 8-1: config 0 interface 0 has no altsetting 0 [ 67.552111][ T5738] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.552169][ T5738] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 67.552201][ T5738] usb 8-1: config 0 interface 0 has no altsetting 0 [ 67.556585][ T5738] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 67.556604][ T5738] usb 8-1: Product: syz [ 67.556616][ T5738] usb 8-1: Manufacturer: syz [ 67.556627][ T5738] usb 8-1: SerialNumber: syz [ 67.561278][ T5738] usb 8-1: config 0 descriptor?? [ 67.580984][ T5738] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 67.597306][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 67.597954][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.598016][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.598075][ T6500] bridge_slave_0: entered allmulticast mode [ 67.598838][ T6500] bridge_slave_0: entered promiscuous mode [ 67.609737][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.609878][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.610006][ T6500] bridge_slave_1: entered allmulticast mode [ 67.610929][ T6500] bridge_slave_1: entered promiscuous mode [ 67.631029][ T6500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.634028][ T6500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.661678][ T6500] team0: Port device team_slave_0 added [ 67.663030][ T6500] team0: Port device team_slave_1 added [ 67.677003][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.677013][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.677025][ T6500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.679625][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.679635][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.679648][ T6500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.710584][ T6500] hsr_slave_0: entered promiscuous mode [ 67.711031][ T6500] hsr_slave_1: entered promiscuous mode [ 67.711324][ T6500] debugfs: 'hsr0' already exists in 'hsr' [ 67.711335][ T6500] Cannot create hsr debugfs directory [ 67.770477][ T13] IPVS: stop unused estimator thread 0... [ 67.825498][ C1] usb 8-1: yurex_control_callback - control failed: -71 [ 67.827109][ T5738] usb 8-1: USB disconnect, device number 5 [ 67.835199][ T5738] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 67.869361][ T6591] tipc: Can't bind to reserved service type 2 [ 67.875361][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4 [ 67.890085][ T6500] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.895251][ T6500] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.898934][ T6500] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.903643][ T6500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.905717][ T6500] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.907884][ T6500] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.908520][ T6500] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.913386][ T6500] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.942158][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.942271][ T6500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.942808][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.942862][ T6500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.975270][ T6500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.008034][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.016068][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.030351][ T6500] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.043347][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.043435][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.049428][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.049509][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.068175][ T5749] Bluetooth: hci1: command tx timeout [ 68.108869][ T6611] kvm: emulating exchange as write [ 68.141061][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5 [ 68.441957][ T6644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.223'. [ 68.448985][ T6500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.468843][ T6636] ip6erspan0: entered allmulticast mode [ 68.559899][ T6653] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 68.744785][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 68.748682][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 68.759258][ T6500] veth0_vlan: entered promiscuous mode [ 68.765303][ T6500] veth1_vlan: entered promiscuous mode [ 68.808003][ T6500] veth0_macvtap: entered promiscuous mode [ 68.816974][ T6500] veth1_macvtap: entered promiscuous mode [ 68.833203][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.839742][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.899399][ T5813] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.899494][ T5813] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.909757][ T5813] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.909851][ T5813] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.967155][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.967229][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.000182][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.000256][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.172282][ T76] IPVS: starting estimator thread 0... [ 69.206408][ T6707] netlink: 488 bytes leftover after parsing attributes in process `syz.0.243'. [ 69.274270][ T6713] netlink: 'syz.0.246': attribute type 16 has an invalid length. [ 69.278063][ T6703] IPVS: using max 44 ests per chain, 105600 per kthread [ 69.317110][ T6722] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.249'. [ 69.317167][ T6722] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.249'. [ 69.330690][ T6719] bond2: (slave ip6gretap1): making interface the new active one [ 69.333341][ T6719] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 69.404366][ T6731] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 69.419971][ T43] kauditd_printk_skb: 60 callbacks suppressed [ 69.420088][ T43] audit: type=1400 audit(1788576172.831:452): avc: denied { connect } for pid=6730 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.448746][ T6729] usb usb2: usbfs: process 6729 (syz.4.252) did not claim interface 2 before use [ 69.479946][ T43] audit: type=1400 audit(1788576172.891:453): avc: denied { map_create } for pid=6735 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 69.488811][ T43] audit: type=1400 audit(1788576172.891:454): avc: denied { write } for pid=6735 comm="syz.4.254" path="socket:[12109]" dev="sockfs" ino=12109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.488998][ T6736] Bluetooth: MGMT ver 1.23 [ 69.493112][ T43] audit: type=1400 audit(1788576172.901:455): avc: denied { write } for pid=6735 comm="syz.4.254" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.537737][ T9] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 69.699591][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 69.700792][ T9] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 69.700812][ T9] usb 7-1: config 0 has no interface number 0 [ 69.700842][ T9] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 69.700866][ T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 69.700887][ T9] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 69.700907][ T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 39288, setting to 8 [ 69.700928][ T9] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 69.700961][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.705889][ T9] usb 7-1: config 0 descriptor?? [ 69.706692][ T6717] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 69.706843][ T6717] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 69.711278][ T43] audit: type=1400 audit(1788576173.121:456): avc: denied { create } for pid=6741 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.711746][ T43] audit: type=1400 audit(1788576173.121:457): avc: denied { bind } for pid=6741 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.713519][ T9] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 70.095067][ T9] usb 7-1: USB disconnect, device number 5 [ 70.101552][ T9] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 70.137861][ T5749] Bluetooth: hci1: command tx timeout [ 70.521719][ T43] audit: type=1400 audit(1788576173.931:458): avc: denied { write } for pid=6761 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 70.616171][ T43] audit: type=1400 audit(1788576174.021:459): avc: denied { read write } for pid=6773 comm="syz.4.267" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.616415][ T43] audit: type=1400 audit(1788576174.021:460): avc: denied { open } for pid=6773 comm="syz.4.267" path="/dev/uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.646568][ T43] audit: type=1400 audit(1788576174.051:461): avc: denied { create } for pid=6773 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 70.667843][ T6779] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 70.833487][ T6792] FAULT_INJECTION: forcing a failure. [ 70.833487][ T6792] name failslab, interval 1, probability 0, space 0, times 0 [ 70.833542][ T6792] CPU: 1 UID: 0 PID: 6792 Comm: syz.4.273 Not tainted syzkaller #0 PREEMPT(full) [ 70.833556][ T6792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.833563][ T6792] Call Trace: [ 70.833567][ T6792] [ 70.833572][ T6792] dump_stack_lvl+0x100/0x190 [ 70.833604][ T6792] should_fail_ex.cold+0x5/0xa [ 70.833622][ T6792] should_failslab+0xc2/0x120 [ 70.833640][ T6792] __kmalloc_noprof+0xfc/0x840 [ 70.833651][ T6792] ? rcu_is_watching+0x13/0xc0 [ 70.833666][ T6792] ? tomoyo_realpath_from_path+0xb6/0x690 [ 70.833683][ T6792] tomoyo_realpath_from_path+0xb6/0x690 [ 70.833698][ T6792] tomoyo_path_number_perm+0x23c/0x580 [ 70.833715][ T6792] ? tomoyo_path_number_perm+0x22e/0x580 [ 70.833738][ T6792] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 70.833770][ T6792] ? __lock_acquire+0x4c5/0x1ec0 [ 70.833797][ T6792] ? __fget_files+0x34/0x3d0 [ 70.833816][ T6792] ? find_held_lock+0x2b/0x80 [ 70.833847][ T6792] ? hook_file_ioctl_common+0x140/0x440 [ 70.833864][ T6792] ? __fget_files+0x21f/0x3d0 [ 70.833879][ T6792] security_file_ioctl+0xd3/0x230 [ 70.833902][ T6792] __x64_sys_ioctl+0xb7/0x210 [ 70.833931][ T6792] do_syscall_64+0x123/0x790 [ 70.833959][ T6792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.833976][ T6792] RIP: 0033:0x7fb208b9e159 [ 70.833992][ T6792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.834007][ T6792] RSP: 002b:00007fb209a53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.834024][ T6792] RAX: ffffffffffffffda RBX: 00007fb208e25fa0 RCX: 00007fb208b9e159 [ 70.834035][ T6792] RDX: 0000200000000040 RSI: 0000000080046f49 RDI: 0000000000000003 [ 70.834046][ T6792] RBP: 00007fb209a53090 R08: 0000000000000000 R09: 0000000000000000 [ 70.834056][ T6792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.834066][ T6792] R13: 00007fb208e26038 R14: 00007fb208e25fa0 R15: 00007ffc91444d28 [ 70.834087][ T6792] [ 70.834094][ T6792] ERROR: Out of memory at tomoyo_realpath_from_path. [ 70.923046][ T6789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 70.923203][ T6789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 70.924470][ T6789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 70.924708][ T6789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 70.924882][ T6789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 70.924988][ T6789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 70.940005][ T6789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 70.940167][ T6789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 70.940319][ T6789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 70.940423][ T6789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 71.068009][ T6807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49684 sclass=netlink_route_socket pid=6807 comm=syz.4.276 [ 71.159908][ T6809] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 71.172918][ T1019] cfg80211: failed to load regulatory.db [ 71.342314][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.342413][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.489316][ T6827] netlink: 'syz.3.283': attribute type 1 has an invalid length. [ 71.502093][ T6827] 8021q: adding VLAN 0 to HW filter on device bond3 [ 71.524411][ T6824] 8021q: adding VLAN 0 to HW filter on device bond3 [ 71.524858][ T6824] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 71.525550][ T6824] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 71.541805][ T6827] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 71.543225][ T6827] bond3: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 71.684144][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'. [ 71.847912][ T6842] kvm: Disabled LAPIC found during irq injection [ 71.962474][ T6848] overlayfs: missing 'workdir' [ 72.004600][ T6850] netlink: 844 bytes leftover after parsing attributes in process `syz.2.289'. [ 72.004670][ T6850] netlink: 844 bytes leftover after parsing attributes in process `syz.2.289'. [ 72.229406][ T5749] Bluetooth: hci1: command tx timeout [ 72.274482][ T6868] netlink: 'syz.0.297': attribute type 10 has an invalid length. [ 72.280556][ T6868] syz_tun: entered promiscuous mode [ 72.291522][ T6868] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 72.302228][ T5587] bond0: (slave bond_slave_1): interface is now down [ 72.316365][ T6870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.298'. [ 72.316466][ T6870] netlink: 36 bytes leftover after parsing attributes in process `syz.4.298'. [ 72.318802][ T5587] bond0: (slave bond_slave_1): interface is now down [ 72.318821][ T5587] bond0: (slave syz_tun): interface is now down [ 72.331576][ T5587] bond0: now running without any active interface! [ 72.343757][ T6874] FAULT_INJECTION: forcing a failure. [ 72.343757][ T6874] name failslab, interval 1, probability 0, space 0, times 0 [ 72.343846][ T6874] CPU: 1 UID: 0 PID: 6874 Comm: syz.0.299 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.343888][ T6874] Tainted: [L]=SOFTLOCKUP [ 72.343896][ T6874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.343907][ T6874] Call Trace: [ 72.343914][ T6874] [ 72.343921][ T6874] dump_stack_lvl+0x100/0x190 [ 72.343969][ T6874] should_fail_ex.cold+0x5/0xa [ 72.343995][ T6874] should_failslab+0xc2/0x120 [ 72.344024][ T6874] __kvmalloc_node_noprof+0x113/0x9b0 [ 72.344044][ T6874] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 72.344072][ T6874] ? percpu_ref_init+0xec/0x3f0 [ 72.344096][ T6874] ? io_alloc_cache_init+0x38/0x170 [ 72.344126][ T6874] io_alloc_cache_init+0x38/0x170 [ 72.344152][ T6874] io_uring_setup.cold+0x450/0x1cde [ 72.344174][ T6874] ? lock_acquire+0x1d1/0x380 [ 72.344193][ T6874] ? avc_has_perm_noaudit+0x56/0x3b0 [ 72.344216][ T6874] ? __pfx_io_uring_setup+0x10/0x10 [ 72.344263][ T6874] ? find_held_lock+0x2b/0x80 [ 72.344290][ T6874] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 72.344314][ T6874] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 72.344354][ T6874] ? xfd_validate_state+0x129/0x190 [ 72.344382][ T6874] __x64_sys_io_uring_setup+0xc2/0x170 [ 72.344405][ T6874] do_syscall_64+0x123/0x790 [ 72.344440][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.344462][ T6874] RIP: 0033:0x7f4cac99e159 [ 72.344486][ T6874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.344502][ T6874] RSP: 002b:00007f4cad94efb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 72.344521][ T6874] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007f4cac99e159 [ 72.344534][ T6874] RDX: 00002000000003c0 RSI: 0000200000000400 RDI: 00000000000026a8 [ 72.344547][ T6874] RBP: 00007f4caca35024 R08: 0000000000000000 R09: 0000000000000000 [ 72.344558][ T6874] R10: 0000200000000300 R11: 0000000000000206 R12: 00002000000003c0 [ 72.344571][ T6874] R13: 0000200000000300 R14: 0000200000000280 R15: 00007ffe59a79188 [ 72.344597][ T6874] [ 72.540888][ T6877] netlink: 84 bytes leftover after parsing attributes in process `syz.2.300'. [ 72.567320][ T6882] Cannot find del_set index 1 as target [ 72.694804][ T6901] mmap: syz.2.306 (6901) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.893327][ T6906] FAULT_INJECTION: forcing a failure. [ ** replaying previous printk message ** [ 72.893327][ T6906] FAULT_INJECTION: forcing a failure. [ 72.893327][ T6906] name failslab, interval 1, probability 0, space 0, times 0 [ 72.893425][ T6906] CPU: 0 UID: 0 PID: 6906 Comm: syz.0.308 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.893457][ T6906] Tainted: [L]=SOFTLOCKUP [ 72.893463][ T6906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.893473][ T6906] Call Trace: [ 72.893478][ T6906] [ 72.893483][ T6906] dump_stack_lvl+0x100/0x190 [ 72.893515][ T6906] should_fail_ex.cold+0x5/0xa [ 72.893536][ T6906] should_failslab+0xc2/0x120 [ 72.893554][ T6906] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 72.893570][ T6906] ? device_rename+0x88/0x250 [ 72.893590][ T6906] kstrdup+0x51/0xe0 [ 72.893608][ T6906] device_rename+0x88/0x250 [ 72.893628][ T6906] __dev_change_net_namespace+0x12a8/0x2100 [ 72.893661][ T6906] ? is_bpf_text_address+0x8a/0x1a0 [ 72.893679][ T6906] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 72.893695][ T6906] ? bpf_ksym_find+0x128/0x1c0 [ 72.893715][ T6906] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 72.893739][ T6906] ? is_bpf_text_address+0x94/0x1a0 [ 72.893756][ T6906] ? kernel_text_address+0x8d/0x100 [ 72.893778][ T6906] ? unwind_get_return_address+0x59/0xa0 [ 72.893795][ T6906] ? arch_stack_walk+0xa6/0xf0 [ 72.893813][ T6906] do_setlink.isra.0+0x261/0x3e60 [ 72.893830][ T6906] ? __lock_acquire+0x4c5/0x1ec0 [ 72.893842][ T6906] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 72.893856][ T6906] ? __lock_acquire+0x4c5/0x1ec0 [ 72.893870][ T6906] ? lock_acquire+0x1d1/0x380 [ 72.893881][ T6906] ? avc_has_perm_noaudit+0x56/0x3b0 [ 72.893899][ T6906] ? lock_acquire+0x1d1/0x380 [ 72.893909][ T6906] ? rtnl_newlink+0xac3/0x2620 [ 72.893924][ T6906] ? rcu_is_watching+0x13/0xc0 [ 72.893939][ T6906] ? trace_contention_end+0x126/0x160 [ 72.893954][ T6906] ? __mutex_lock+0x26c/0x1bd0 [ 72.893990][ T6906] ? rtnl_newlink+0xac3/0x2620 [ 72.894009][ T6906] ? find_held_lock+0x2b/0x80 [ 72.894029][ T6906] ? __fget_files+0x215/0x3d0 [ 72.894051][ T6906] ? __pfx___mutex_lock+0x10/0x10 [ 72.894071][ T6906] ? rcu_is_watching+0x13/0xc0 [ 72.894091][ T6906] ? cap_capable+0x107/0x430 [ 72.894127][ T6906] rtnl_newlink+0x13c1/0x2620 [ 72.894153][ T6906] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.894172][ T6906] ? avc_has_perm_noaudit+0x56/0x3b0 [ 72.894194][ T6906] ? find_held_lock+0x2b/0x80 [ 72.894214][ T6906] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 72.894236][ T6906] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 72.894268][ T6906] ? __lock_acquire+0x4c5/0x1ec0 [ 72.894300][ T6906] ? lock_acquire+0x1d1/0x380 [ 72.894317][ T6906] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 72.894336][ T6906] ? find_held_lock+0x2b/0x80 [ 72.894359][ T6906] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.894378][ T6906] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.894398][ T6906] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.894414][ T6906] rtnetlink_rcv_msg+0x95e/0xe90 [ 72.894435][ T6906] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.894462][ T6906] ? ref_tracker_free+0x37e/0x6c0 [ 72.894486][ T6906] netlink_rcv_skb+0x159/0x420 [ 72.894521][ T6906] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.894546][ T6906] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 72.894582][ T6906] ? netlink_deliver_tap+0x1ae/0xcc0 [ 72.894613][ T6906] netlink_unicast+0x585/0x850 [ 72.894645][ T6906] ? __pfx_netlink_unicast+0x10/0x10 [ 72.894678][ T6906] netlink_sendmsg+0x8b0/0xda0 [ 72.894707][ T6906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.894734][ T6906] ? selinux_socket_sendmsg+0x198/0x2f0 [ 72.894754][ T6906] ____sys_sendmsg+0xa4d/0xbe0 [ 72.894768][ T6906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.894786][ T6906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.894806][ T6906] ___sys_sendmsg+0x190/0x1e0 [ 72.894822][ T6906] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.894837][ T6906] ? futex_wait+0x11e/0x370 [ 72.894859][ T6906] ? find_held_lock+0x2b/0x80 [ 72.894883][ T6906] __sys_sendmsg+0x160/0x210 [ 72.894895][ T6906] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.894913][ T6906] do_syscall_64+0x123/0x790 [ 72.894928][ T6906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.894940][ T6906] RIP: 0033:0x7f4cac99e159 [ 72.894952][ T6906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.894964][ T6906] RSP: 002b:00007f4cad94f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.894979][ T6906] RAX: ffffffffffffffda RBX: 00007f4cacc25fa0 RCX: 00007f4cac99e159 [ 72.894986][ T6906] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000004 [ 72.894993][ T6906] RBP: 00007f4caca35024 R08: 0000000000000000 R09: 0000000000000000 [ 72.895003][ T6906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.895010][ T6906] R13: 00007f4cacc26038 R14: 00007f4cacc25fa0 R15: 00007ffe59a79188 [ 72.895027][ T6906] [ 72.896038][ T6906] ------------[ cut here ]------------ [ 72.896046][ T6906] err [ 72.896050][ T6906] WARNING: net/core/dev.c:12860 at __dev_change_net_namespace+0x1af5/0x2100, CPU#0: syz.0.308/6906 [ 73.061946][ T6906] Modules linked in: [ 73.063781][ T6906] CPU: 0 UID: 0 PID: 6906 Comm: syz.0.308 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.068363][ T6906] Tainted: [L]=SOFTLOCKUP [ 73.069743][ T6906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.072804][ T6906] RIP: 0010:__dev_change_net_namespace+0x1af5/0x2100 [ 73.074870][ T6906] Code: 89 c5 89 c6 e8 2c 07 6b f8 85 ed 0f 84 c5 fb ff ff e9 00 9b ce f7 e8 aa 0c 6b f8 90 0f 0b 90 e9 75 ef ff ff e8 9c 0c 6b f8 90 <0f> 0b 90 e9 ee f7 ff ff e8 8e 0c 6b f8 48 c7 c7 60 84 39 8d e8 d2 [ 73.082033][ T6906] RSP: 0018:ffffc9000409eed0 EFLAGS: 00010283 [ 73.085830][ T6906] RAX: 000000000003ae92 RBX: ffff888037fb87fc RCX: ffffc900040e1000 [ 73.089186][ T6906] RDX: 0000000000080000 RSI: ffffffff89a0e374 RDI: ffff888032fb4b00 [ 73.092320][ T6906] RBP: 00000000fffffff4 R08: 0000000000000005 R09: 0000000000000000 [ 73.095441][ T6906] R10: 00000000fffffff4 R11: 0000000000000001 R12: ffff888037fb8000 [ 73.098853][ T6906] R13: ffff888037fb8e09 R14: ffff888037fb8d20 R15: ffff888037fb81a8 [ 73.102323][ T6906] FS: 00007f4cad94f6c0(0000) GS:ffff8880d5b5f000(0000) knlGS:0000000000000000 [ 73.106062][ T6906] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.108383][ T6906] CR2: 00007f31a2c63ff8 CR3: 0000000054d18000 CR4: 0000000000352ef0 [ 73.110927][ T6906] Call Trace: [ 73.112134][ T6906] [ 73.113129][ T6906] ? is_bpf_text_address+0x8a/0x1a0 [ 73.114801][ T6906] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 73.117265][ T6906] ? bpf_ksym_find+0x128/0x1c0 [ 73.118937][ T6906] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 73.121241][ T6906] ? is_bpf_text_address+0x94/0x1a0 [ 73.123508][ T6906] ? kernel_text_address+0x8d/0x100 [ 73.125655][ T6906] ? unwind_get_return_address+0x59/0xa0 [ 73.127553][ T6906] ? arch_stack_walk+0xa6/0xf0 [ 73.129059][ T6906] do_setlink.isra.0+0x261/0x3e60 [ 73.130586][ T6906] ? __lock_acquire+0x4c5/0x1ec0 [ 73.132194][ T6906] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 73.134047][ T6906] ? __lock_acquire+0x4c5/0x1ec0 [ 73.135716][ T6906] ? lock_acquire+0x1d1/0x380 [ 73.137342][ T6906] ? avc_has_perm_noaudit+0x56/0x3b0 [ 73.139154][ T6906] ? lock_acquire+0x1d1/0x380 [ 73.140727][ T6906] ? rtnl_newlink+0xac3/0x2620 [ 73.142304][ T6906] ? rcu_is_watching+0x13/0xc0 [ 73.144157][ T6906] ? trace_contention_end+0x126/0x160 [ 73.146349][ T6906] ? __mutex_lock+0x26c/0x1bd0 [ 73.148814][ T6906] ? rtnl_newlink+0xac3/0x2620 [ 73.150956][ T6906] ? find_held_lock+0x2b/0x80 [ 73.153002][ T6906] ? __fget_files+0x215/0x3d0 [ 73.154793][ T6906] ? __pfx___mutex_lock+0x10/0x10 [ 73.156414][ T6906] ? rcu_is_watching+0x13/0xc0 [ 73.158169][ T6906] ? cap_capable+0x107/0x430 [ 73.160039][ T6906] rtnl_newlink+0x13c1/0x2620 [ 73.162012][ T6906] ? __pfx_rtnl_newlink+0x10/0x10 [ 73.164197][ T6906] ? avc_has_perm_noaudit+0x56/0x3b0 [ 73.166067][ T6906] ? find_held_lock+0x2b/0x80 [ 73.167780][ T6906] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 73.169586][ T6906] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 73.171233][ T6906] ? __lock_acquire+0x4c5/0x1ec0 [ 73.172672][ T6906] ? lock_acquire+0x1d1/0x380 [ 73.173989][ T6906] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 73.175409][ T6906] ? find_held_lock+0x2b/0x80 [ 73.176930][ T6906] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 73.179124][ T6906] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 73.181096][ T6906] ? __pfx_rtnl_newlink+0x10/0x10 [ 73.183140][ T6906] rtnetlink_rcv_msg+0x95e/0xe90 [ 73.185172][ T6906] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 73.187843][ T6906] ? ref_tracker_free+0x37e/0x6c0 [ 73.190378][ T6906] netlink_rcv_skb+0x159/0x420 [ 73.192730][ T6906] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 73.194896][ T6906] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 73.197007][ T6906] ? netlink_deliver_tap+0x1ae/0xcc0 [ 73.199196][ T6906] netlink_unicast+0x585/0x850 [ 73.201128][ T6906] ? __pfx_netlink_unicast+0x10/0x10 [ 73.203278][ T6906] netlink_sendmsg+0x8b0/0xda0 [ 73.205368][ T6906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.207728][ T6906] ? selinux_socket_sendmsg+0x198/0x2f0 [ 73.210304][ T6906] ____sys_sendmsg+0xa4d/0xbe0 [ 73.212667][ T6906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.214858][ T6906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.216989][ T6906] ___sys_sendmsg+0x190/0x1e0 [ 73.218965][ T6906] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.221092][ T6906] ? futex_wait+0x11e/0x370 [ 73.223001][ T6906] ? find_held_lock+0x2b/0x80 [ 73.225254][ T6906] __sys_sendmsg+0x160/0x210 [ 73.227485][ T6906] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.229485][ T6906] do_syscall_64+0x123/0x790 [ 73.231059][ T6906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.232870][ T6906] RIP: 0033:0x7f4cac99e159 [ 73.234238][ T6906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.240344][ T6906] RSP: 002b:00007f4cad94f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.242891][ T6906] RAX: ffffffffffffffda RBX: 00007f4cacc25fa0 RCX: 00007f4cac99e159 [ 73.245715][ T6906] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000004 [ 73.248931][ T6906] RBP: 00007f4caca35024 R08: 0000000000000000 R09: 0000000000000000 [ 73.251750][ T6906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.254205][ T6906] R13: 00007f4cacc26038 R14: 00007f4cacc25fa0 R15: 00007ffe59a79188 [ 73.256584][ T6906] [ 73.257844][ T6906] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 73.260142][ T6906] CPU: 0 UID: 0 PID: 6906 Comm: syz.0.308 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.263419][ T6906] Tainted: [L]=SOFTLOCKUP [ 73.264785][ T6906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.268630][ T6906] Call Trace: [ 73.270085][ T6906] [ 73.271180][ T6906] dump_stack_lvl+0x100/0x190 [ 73.272697][ T6906] vpanic+0x553/0x970 [ 73.273963][ T6906] ? __pfx_vpanic+0x10/0x10 [ 73.275387][ T6906] panic+0xd1/0xe0 [ 73.276650][ T6906] ? __pfx_panic+0x10/0x10 [ 73.278089][ T6906] check_panic_on_warn.cold+0x19/0x34 [ 73.279764][ T6906] ? __dev_change_net_namespace+0x1af5/0x2100 [ 73.281651][ T6906] __warn.cold+0x191/0x318 [ 73.283114][ T6906] __report_bug+0x30f/0x440 [ 73.284924][ T6906] ? __dev_change_net_namespace+0x1af5/0x2100 [ 73.287337][ T6906] ? __pfx___report_bug+0x10/0x10 [ 73.289230][ T6906] ? dump_stack_lvl+0x176/0x190 [ 73.290873][ T6906] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 73.292872][ T6906] ? dump_stack_lvl+0x17c/0x190 [ 73.294379][ T6906] ? __dev_change_net_namespace+0x1af5/0x2100 [ 73.296261][ T6906] report_bug+0xb3/0x220 [ 73.297590][ T6906] ? __dev_change_net_namespace+0x1af5/0x2100 [ 73.299502][ T6906] handle_bug+0x16a/0x2a0 [ 73.301016][ T6906] exc_invalid_op+0x17/0x50 [ 73.302670][ T6906] asm_exc_invalid_op+0x1a/0x20 [ 73.304539][ T6906] RIP: 0010:__dev_change_net_namespace+0x1af5/0x2100 [ 73.307020][ T6906] Code: 89 c5 89 c6 e8 2c 07 6b f8 85 ed 0f 84 c5 fb ff ff e9 00 9b ce f7 e8 aa 0c 6b f8 90 0f 0b 90 e9 75 ef ff ff e8 9c 0c 6b f8 90 <0f> 0b 90 e9 ee f7 ff ff e8 8e 0c 6b f8 48 c7 c7 60 84 39 8d e8 d2 [ 73.313702][ T6906] RSP: 0018:ffffc9000409eed0 EFLAGS: 00010283 [ 73.315596][ T6906] RAX: 000000000003ae92 RBX: ffff888037fb87fc RCX: ffffc900040e1000 [ 73.317975][ T6906] RDX: 0000000000080000 RSI: ffffffff89a0e374 RDI: ffff888032fb4b00 [ 73.320346][ T6906] RBP: 00000000fffffff4 R08: 0000000000000005 R09: 0000000000000000 [ 73.322940][ T6906] R10: 00000000fffffff4 R11: 0000000000000001 R12: ffff888037fb8000 [ 73.325661][ T6906] R13: ffff888037fb8e09 R14: ffff888037fb8d20 R15: ffff888037fb81a8 [ 73.328306][ T6906] ? __dev_change_net_namespace+0x1af4/0x2100 [ 73.330233][ T6906] ? is_bpf_text_address+0x8a/0x1a0 [ 73.331999][ T6906] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 73.333955][ T6906] ? bpf_ksym_find+0x128/0x1c0 [ 73.335608][ T6906] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 73.337709][ T6906] ? is_bpf_text_address+0x94/0x1a0 [ 73.339799][ T6906] ? kernel_text_address+0x8d/0x100 [ 73.341949][ T6906] ? unwind_get_return_address+0x59/0xa0 [ 73.344058][ T6906] ? arch_stack_walk+0xa6/0xf0 [ 73.345613][ T6906] do_setlink.isra.0+0x261/0x3e60 [ 73.347200][ T6906] ? __lock_acquire+0x4c5/0x1ec0 [ 73.348716][ T6906] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 73.350389][ T6906] ? __lock_acquire+0x4c5/0x1ec0 [ 73.351930][ T6906] ? lock_acquire+0x1d1/0x380 [ 73.353381][ T6906] ? avc_has_perm_noaudit+0x56/0x3b0 [ 73.354984][ T6906] ? lock_acquire+0x1d1/0x380 [ 73.356451][ T6906] ? rtnl_newlink+0xac3/0x2620 [ 73.357951][ T6906] ? rcu_is_watching+0x13/0xc0 [ 73.359437][ T6906] ? trace_contention_end+0x126/0x160 [ 73.361388][ T6906] ? __mutex_lock+0x26c/0x1bd0 [ 73.363512][ T6906] ? rtnl_newlink+0xac3/0x2620 [ 73.365601][ T6906] ? find_held_lock+0x2b/0x80 [ 73.367231][ T6906] ? __fget_files+0x215/0x3d0 [ 73.368714][ T6906] ? __pfx___mutex_lock+0x10/0x10 [ 73.370226][ T6906] ? rcu_is_watching+0x13/0xc0 [ 73.371692][ T6906] ? cap_capable+0x107/0x430 [ 73.373155][ T6906] rtnl_newlink+0x13c1/0x2620 [ 73.374598][ T6906] ? __pfx_rtnl_newlink+0x10/0x10 [ 73.376118][ T6906] ? avc_has_perm_noaudit+0x56/0x3b0 [ 73.377707][ T6906] ? find_held_lock+0x2b/0x80 [ 73.379141][ T6906] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 73.380897][ T6906] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 73.383023][ T6906] ? __lock_acquire+0x4c5/0x1ec0 [ 73.385014][ T6906] ? lock_acquire+0x1d1/0x380 [ 73.386874][ T6906] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 73.388669][ T6906] ? find_held_lock+0x2b/0x80 [ 73.390142][ T6906] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 73.391720][ T6906] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 73.393295][ T6906] ? __pfx_rtnl_newlink+0x10/0x10 [ 73.394843][ T6906] rtnetlink_rcv_msg+0x95e/0xe90 [ 73.396391][ T6906] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 73.398081][ T6906] ? ref_tracker_free+0x37e/0x6c0 [ 73.399613][ T6906] netlink_rcv_skb+0x159/0x420 [ 73.401112][ T6906] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 73.403008][ T6906] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 73.405058][ T6906] ? netlink_deliver_tap+0x1ae/0xcc0 [ 73.407337][ T6906] netlink_unicast+0x585/0x850 [ 73.409281][ T6906] ? __pfx_netlink_unicast+0x10/0x10 [ 73.411185][ T6906] netlink_sendmsg+0x8b0/0xda0 [ 73.412746][ T6906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.414354][ T6906] ? selinux_socket_sendmsg+0x198/0x2f0 [ 73.416039][ T6906] ____sys_sendmsg+0xa4d/0xbe0 [ 73.417501][ T6906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.419104][ T6906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.420725][ T6906] ___sys_sendmsg+0x190/0x1e0 [ 73.422202][ T6906] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.423852][ T6906] ? futex_wait+0x11e/0x370 [ 73.425326][ T6906] ? find_held_lock+0x2b/0x80 [ 73.426827][ T6906] __sys_sendmsg+0x160/0x210 [ 73.428262][ T6906] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.429841][ T6906] do_syscall_64+0x123/0x790 [ 73.431305][ T6906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.434068][ T6906] RIP: 0033:0x7f4cac99e159 [ 73.436672][ T6906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.442557][ T6906] RSP: 002b:00007f4cad94f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.445260][ T6906] RAX: ffffffffffffffda RBX: 00007f4cacc25fa0 RCX: 00007f4cac99e159 [ 73.447733][ T6906] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000004 [ 73.450216][ T6906] RBP: 00007f4caca35024 R08: 0000000000000000 R09: 0000000000000000 [ 73.452689][ T6906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.455289][ T6906] R13: 00007f4cacc26038 R14: 00007f4cacc25fa0 R15: 00007ffe59a79188 [ 73.457950][ T6906] [ 73.459872][ T6906] Kernel Offset: disabled [ 73.461365][ T6906] Rebooting in 86400 seconds..