last executing test programs: 30.27011913s ago: executing program 2 (id=126): r0 = socket$inet6_udp(0xa, 0x2, 0x11) sendto$inet6(r0, 0x0, 0x4000, 0xfffffff5, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 30.199111616s ago: executing program 2 (id=127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) pread64(r0, &(0x7f0000000000)=""/74, 0x4a, 0x3) 30.12717801s ago: executing program 2 (id=129): r0 = socket$kcm(0xa, 0x1, 0x106) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) recvmsg$kcm(r0, 0x0, 0x10022) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0, 0xfffe}, 0xe07e872420dfefca) 30.059071534s ago: executing program 2 (id=131): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000020900010073797a31000000000c0010400000e5ffffff0002140000001100010000000000000000000100000a"], 0x54}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 30.058433956s ago: executing program 2 (id=133): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0xc0089364, &(0x7f0000000180)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='file ne*/sctp/* +', 0x11) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0xe) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a0000000500040000000000090002"], 0x50}}, 0x20040000) sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) write$cgroup_devices(r7, &(0x7f0000000100)=ANY=[], 0x9) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fstatfs(0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x4a) 29.870034729s ago: executing program 2 (id=137): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @loopback}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x6, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}, 'caif0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x4, 0x39, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x24c02, 0x143) 24.239790629s ago: executing program 0 (id=210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x8000090) r3 = eventfd(0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x1, r2}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x48d4) r4 = socket(0x10, 0x2, 0x0) getsockname$packet(r4, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc040) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) socket(0x2, 0x80805, 0x0) read$FUSE(r5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0xba) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) clock_gettime(0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000280)=@userptr={0x7fff, 0x2, 0x4, 0x0, 0x5, {}, {0x2, 0x0, 0x8, 0x7, 0x9, 0x59, "2aabb566"}, 0x7fffffff, 0x2, {0x0}, 0xee}) 24.136854735s ago: executing program 0 (id=212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x8000090) r3 = eventfd(0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x1, r2}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x48d4) r4 = socket(0x10, 0x2, 0x0) getsockname$packet(r4, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc040) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) socket(0x2, 0x80805, 0x0) read$FUSE(r5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0xba) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) clock_gettime(0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000280)=@userptr={0x7fff, 0x2, 0x4, 0x0, 0x5, {}, {0x2, 0x0, 0x8, 0x7, 0x9, 0x59, "2aabb566"}, 0x7fffffff, 0x2, {0x0}, 0xee}) (fail_nth: 1) 24.060014851s ago: executing program 0 (id=213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000020900010073797a31000000000c0010400000e5ffffff0002140000001100010000000000000000000100000a"], 0x54}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 24.009321855s ago: executing program 0 (id=214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x8000090) r3 = eventfd(0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x1, r2}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x48d4) r4 = socket(0x10, 0x2, 0x0) getsockname$packet(r4, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc040) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) socket(0x2, 0x80805, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#X\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0xba) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) clock_gettime(0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000280)=@userptr={0x7fff, 0x2, 0x4, 0x0, 0x5, {}, {0x2, 0x0, 0x8, 0x7, 0x9, 0x59, "2aabb566"}, 0x7fffffff, 0x2, {0x0}, 0xee}) 23.929430449s ago: executing program 0 (id=215): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x20040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) setns(0xc9, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xfe, 0xfc, 0x7fff0026}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket(0x8, 0x5, 0x5) r5 = socket(0x10, 0x3, 0x0) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r6, 0x0) keyctl$describe(0x6, r6, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000500)=@newtaction={0x1594, 0x32, 0x829, 0xfffffffd, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x154c, 0x1, [@m_police={0x1548, 0x1a, 0x0, 0x0, {{0xb}, {0x145c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc6, 0x9fcc, 0xe0, 0x0, 0xb9b5, 0x3, 0x9, 0x9, 0x7fffffff, 0x9, 0xd8, 0x8, 0xc, 0x4, 0x8, 0x2, 0x0, 0x6, 0x7, 0x80000000, 0x8000, 0x6, 0x6, 0x1, 0x0, 0x7, 0x80000000, 0xfffffff9, 0x9, 0x3, 0x98c, 0x8, 0x7, 0x0, 0x400, 0x8, 0x9, 0xaf, 0x0, 0x4, 0x2, 0x100, 0xffffff7f, 0x9, 0x5, 0x5ea, 0xd4, 0x8, 0x10, 0x4bce, 0x7, 0x8, 0xea, 0x800, 0x5, 0x5, 0x9, 0xff, 0x8000, 0x1, 0x0, 0x4, 0x7, 0xd, 0x7f, 0xcc, 0x40fe, 0x6, 0x5, 0xa, 0x7, 0x7ff, 0x5, 0xffffffff, 0x14, 0x3, 0x1, 0x6, 0xea, 0xb2, 0x5, 0x3, 0xfffffffa, 0xef1a, 0x1, 0xf0, 0x4678, 0x7, 0x1, 0x1, 0x80000000, 0x9, 0x6, 0x8, 0x400, 0x9, 0x1d3, 0x9, 0xa5, 0x2, 0x5681, 0x40, 0x7, 0x7, 0x4, 0x0, 0x5, 0x80000001, 0x6, 0x0, 0x3, 0x5, 0x4, 0x7, 0x4, 0x6, 0x4000, 0x100, 0x8001, 0x2, 0x39, 0x7ff, 0x7f, 0x10, 0x5, 0x8, 0x6, 0x4, 0xef, 0xfffffffe, 0x5, 0x80000000, 0x3, 0x4, 0x400, 0x5, 0x1, 0x100, 0x600, 0x80, 0x75, 0x7, 0x7506, 0xd, 0xb, 0x10000, 0x32, 0x5, 0x400, 0x2b, 0x28000000, 0x5, 0x6, 0x7, 0xabe, 0x9, 0x5c8, 0xcd8a, 0x7, 0x8, 0x2, 0x9, 0x4, 0x1913bca4, 0x9, 0x7, 0xf, 0x1, 0xb, 0x80000001, 0x9, 0x1ff, 0x475, 0x0, 0xfff, 0x10000, 0x9, 0x8, 0x9, 0x5, 0x1, 0x2, 0x0, 0x3, 0x6, 0x8001, 0x13c, 0x10001, 0x7, 0x6, 0xd22, 0x6, 0x8, 0x80000001, 0xffffff81, 0x6f2a7192, 0x0, 0x0, 0x9abb, 0x2, 0x7a, 0x0, 0x80, 0x8, 0x4, 0x1, 0x4, 0x6, 0x6, 0x9, 0xc30, 0x2, 0x8, 0x4, 0x3, 0x8178, 0x1, 0x4333, 0x3, 0x4, 0x9, 0x2, 0x8, 0x8000, 0x6, 0x5, 0x7d, 0x9, 0x401, 0x80000000, 0x6, 0x8001, 0xb, 0x6, 0x10001, 0x8, 0x7, 0x81, 0x1000, 0x0, 0x3ff, 0x300, 0x4, 0x7fff, 0xfffffffa, 0x3ff, 0x401, 0x9, 0xffff8000, 0x1, 0x8, 0xf, 0x0, 0x8, 0x100, 0xf4]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x5, 0x3, 0xd, 0xbb, 0x21, 0x38, 0x30000000, 0x6, 0xb, 0x10001, 0x5, 0x9, 0x1, 0x1, 0x5, 0x2, 0x0, 0xffffff7f, 0x1, 0x7, 0x2, 0x0, 0x8, 0xfffff000, 0x5, 0x9, 0x1, 0x2, 0x0, 0x12, 0x8, 0x9, 0xf4, 0x3, 0x6, 0x5, 0x200, 0x9, 0x6, 0x0, 0x3, 0x0, 0x6, 0x12000, 0x7, 0x0, 0x3, 0x5, 0x3ff, 0x4, 0xfffffffe, 0x10, 0x2, 0x1, 0xffff8001, 0x98b, 0x292, 0x0, 0x3, 0x6, 0x0, 0x9, 0x9d9, 0xa9, 0x0, 0x3, 0x3, 0x7, 0x10, 0x7fffffff, 0x0, 0x44827e22, 0xa1ec, 0xd20, 0x3b7b, 0x6, 0x4, 0x5, 0x77c, 0x6, 0x0, 0x248a315e, 0xe, 0xe, 0x40, 0x7fff, 0x8, 0x6, 0x7, 0x1, 0x7, 0x8, 0x0, 0x1, 0x9, 0x1, 0x4, 0x9, 0x7f, 0x3e44b143, 0x1, 0x2, 0x1, 0x7, 0x6, 0xffffff35, 0x8, 0x9, 0x3, 0x3, 0x76, 0xb0e3, 0x2, 0x80, 0x4f, 0x200, 0x6, 0x713d, 0xe, 0xfffffff7, 0x7d18, 0x5, 0x7ff, 0x0, 0x5, 0x3, 0x8, 0xc0000000, 0x8, 0x1, 0x4, 0x5, 0x8, 0x4, 0x783, 0xe1, 0x60, 0x956c, 0x58, 0x8, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0xff0, 0x100, 0xda5d, 0x43, 0x8, 0x3, 0x5e0, 0x3, 0x6, 0x7f, 0x6124069d, 0x3, 0x3, 0x0, 0x68, 0x5, 0x80000000, 0x10, 0xcd, 0x8, 0xf5, 0x859, 0xef, 0xfffffc01, 0x180000, 0x10000, 0xffff, 0x2, 0x3, 0x5, 0x80000000, 0x2, 0x2, 0x6, 0xfff, 0x3, 0x9, 0x1, 0x7f41, 0xc, 0xbbac, 0xab99, 0x9, 0x2bbf, 0x8, 0x1306, 0x33f2, 0x573, 0xfffffffd, 0x4, 0x4, 0x6, 0x7, 0xd, 0x3, 0xfff, 0x18, 0xe857, 0x8001, 0xabb3, 0x6, 0x2, 0x4, 0x6, 0x7, 0x6ce, 0x2, 0x2, 0x5, 0x10, 0x1ee1, 0x7fffffff, 0x3, 0x8001, 0x10, 0x8000, 0x191, 0x8, 0x6b5, 0x0, 0x1, 0xb, 0x1, 0x8, 0x81, 0x6, 0x1ff, 0xe, 0x3, 0x8b, 0x4, 0xc7, 0x14000000, 0xc36, 0x9, 0x6, 0x1, 0x400, 0x0, 0x8, 0xff, 0x800, 0xfffffffe, 0x9, 0xde, 0x9, 0x5127]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x7a, 0xd, 0x1, 0x0, 0x101, 0x80000000, 0x0, 0x1, 0x0, 0x9, 0x7, 0x7f, 0x0, 0x6, 0x2b18dd43, 0x1, 0x1, 0x5, 0x7, 0xffffff0a, 0xffffffff, 0x5, 0x7, 0x9, 0xb8, 0x9, 0x8, 0x2, 0x3ff, 0x5, 0x3, 0x200, 0x5, 0x472a7bfb, 0xf, 0x8, 0x1be1, 0x26f6, 0x4, 0xe, 0x7c8d, 0xac, 0x6, 0x4, 0x4, 0x325, 0x9, 0x8, 0x19, 0x80000001, 0x5d3, 0x6, 0x800, 0x8, 0x8, 0x7fff, 0x4, 0x3ff, 0xce1, 0x1, 0x0, 0x2, 0x321, 0x2, 0x6, 0x1, 0x0, 0x5, 0x8dbe, 0x9, 0x3ff, 0xe9c, 0x299, 0x7, 0x7ff, 0xab, 0x8, 0x2, 0x2, 0x80000000, 0x0, 0x9, 0x32b, 0x7, 0x1, 0x7, 0x4, 0x6, 0x2, 0xbe01, 0x2, 0x1, 0xfec4, 0x1000, 0x1, 0x7, 0x342, 0x4, 0x67c1, 0x10001, 0x8000, 0x4, 0x6, 0x0, 0x8, 0x7, 0x1, 0x4, 0x1, 0xca9a, 0x8, 0x7, 0x5, 0x601, 0x5, 0x2, 0x2, 0xd, 0x5, 0x7f, 0xffff, 0x2, 0x4, 0x1c5d, 0x7fff, 0x0, 0x6, 0x4, 0x401, 0x7fff, 0x2, 0xffffffff, 0xa, 0x6, 0x0, 0x962, 0x7, 0xfffffff7, 0x5, 0x5, 0xa, 0x4, 0x4, 0x6e41, 0x9, 0x4, 0x9, 0x10001, 0x8, 0x7f, 0x8, 0x2, 0x4, 0xfffffffd, 0xfffffff8, 0xf, 0x7, 0x3, 0x9, 0x7, 0x2, 0x101, 0x16b12413, 0x1e, 0x1, 0x5, 0xd9, 0x6, 0x7, 0x1, 0x3, 0x4, 0x9, 0x9, 0xfff, 0x1000, 0x3, 0x9, 0x7, 0x658, 0x8, 0x8, 0x7fffffff, 0xcc, 0x8, 0xfffffffb, 0x4, 0x8, 0xa6027b5c, 0x4, 0x3, 0x1, 0x6, 0x4df, 0x7, 0xce61, 0xfffff800, 0x7, 0x7, 0x1, 0x6, 0xff, 0x5, 0x9, 0x9, 0xe, 0x1, 0x3, 0x7, 0x7, 0x1000, 0x5d32, 0x9fc, 0x7df, 0x1, 0x6, 0xd, 0x7, 0x9, 0x0, 0xffffffc0, 0x0, 0x2, 0x7, 0x3, 0x4, 0xc, 0x3, 0x4, 0x1ff, 0x1, 0x1, 0x9, 0x80, 0xfff, 0x6, 0x4, 0x1, 0x8e, 0xffffffff, 0x1, 0x6, 0x3, 0x3ff, 0x3ff, 0x3, 0x55, 0x3f59000, 0x0, 0x7, 0x7fffffff, 0xe, 0xfd, 0x7, 0xac6a, 0x9e]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfea8, 0x1, 0x1, 0x401, 0x3, 0x1, 0x0, 0x1, 0x40, 0xffffffff, 0x9, 0x0, 0x8000, 0x0, 0x9, 0x7fffffff, 0xa8d, 0x3ff, 0x100, 0x7ff, 0x6a35, 0x5, 0x5, 0xc12, 0xc, 0x9, 0xc0000000, 0x9, 0x7ff, 0x8, 0x81, 0x6, 0x7fffffff, 0xf, 0x6, 0x10000, 0x0, 0xc, 0x6, 0x2, 0x8340, 0x5, 0x3747, 0x5, 0x7, 0x7, 0x6, 0x31, 0xffffff7f, 0x4, 0x5, 0x0, 0x80, 0x76, 0x8, 0x6ea, 0x4, 0xff, 0x9, 0xc1, 0x8, 0x83, 0x9, 0x400, 0x8, 0x6, 0x1, 0xfffffff7, 0x1, 0x2, 0xfffffffc, 0x9, 0xa, 0x1b6cf6e5, 0x3ff, 0x800, 0x8, 0x59a, 0x0, 0x2, 0x9, 0x101, 0xfffffe00, 0x8, 0x7, 0x3ff, 0x80000001, 0x9e, 0x11e0, 0x9, 0x1, 0x7, 0x2, 0x3ff, 0xffffffb6, 0x6, 0x2, 0x40, 0x5, 0x10000, 0x8, 0x2, 0x5, 0x6, 0x4, 0x9, 0xe692, 0x8, 0x5, 0x1, 0x7, 0x6, 0x9, 0x2, 0x4, 0x7, 0x1000, 0xffffffff, 0x8, 0x6, 0x80000001, 0x7, 0x4, 0xf1, 0x3, 0x101, 0x7fff, 0x7, 0x1, 0x1, 0xffff, 0x4ce, 0x4, 0x7, 0xfd, 0x5, 0x0, 0x81, 0x9, 0x8, 0x7e, 0x8, 0x5, 0x3, 0x9, 0x3, 0x5, 0x8, 0x9, 0x8000, 0x2, 0x6, 0x1ff, 0xd3a2, 0x6, 0x200, 0x1, 0x3ff, 0x10, 0x7fffffff, 0x3, 0x8, 0x100, 0x3, 0x7f, 0x6, 0x10, 0xffff, 0x4, 0x6, 0x4, 0xa88, 0x7, 0xbfe7, 0x2, 0x6e0, 0xb, 0x1ff, 0x4, 0xffff, 0x5, 0xebb, 0xb0d, 0x10001, 0x9, 0x5, 0x0, 0x1, 0xffffff6d, 0x5b, 0xc, 0xff, 0x1, 0xffff8000, 0x4, 0x3e1b, 0x2, 0x3, 0x800, 0x100, 0xe, 0xffffffff, 0x7, 0x3, 0x8001, 0x9, 0x8, 0x6, 0xbf9, 0x8, 0x7fffffff, 0x5, 0x2, 0x9, 0x7a, 0x101, 0xd9d, 0xffff3a25, 0xa9, 0x5, 0x8, 0xf, 0x8, 0x4, 0x0, 0x2, 0x5000, 0x31, 0xb0f, 0x7, 0xe8a4, 0x81, 0x8000, 0xf, 0x0, 0xccd, 0xac2c, 0x8, 0x6, 0x1, 0x5, 0x4, 0x100, 0x3, 0x8, 0x5, 0x1, 0x3, 0x4, 0x2, 0xffffffb7, 0x9, 0x4, 0x2, 0xea, 0x7fffffff]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x1, 0x10000, 0x80, 0x80, 0x6, 0x9, 0xffff8000, 0x800, 0x7, 0x1000, 0x10000, 0x3, 0x68, 0xdc3fbefd, 0xfffffffa, 0x8, 0x1, 0x7, 0x9c, 0x4, 0x4, 0x7, 0xc3, 0x9, 0x0, 0x49, 0x7, 0x6, 0xbf, 0x101, 0x3, 0x6, 0x8e3f, 0x400, 0x0, 0xcc, 0x40, 0x8, 0x3, 0x365d, 0x2, 0x80, 0x1000, 0x8000, 0x5, 0x6, 0x7fff, 0x7, 0x3, 0x5, 0x6, 0x6, 0x20, 0xd, 0x4e2, 0xd, 0x8, 0x3, 0x7, 0x7, 0x9, 0x7, 0x0, 0x3d, 0x6, 0x2, 0x2, 0x4, 0x5, 0x7, 0xd36, 0xcbd5, 0x6, 0xb, 0x5, 0x1d, 0xfffffffa, 0x10001, 0x6, 0x10, 0x800, 0x0, 0x8, 0x100, 0x9, 0xfffeffff, 0x9, 0x0, 0xfffffa90, 0x4, 0x6, 0x81, 0xff, 0x10001, 0x4, 0x5b, 0x5, 0x4, 0x6, 0x2, 0x3, 0x1, 0x9, 0x8, 0x0, 0x3, 0x80000001, 0x200, 0x5, 0x3, 0x7, 0x9d, 0x3, 0x6, 0x6de, 0x2, 0x7792fbdf, 0x5, 0x10, 0x9, 0x1, 0x7, 0x1, 0x7, 0x2, 0x7, 0x4, 0xffffffff, 0x1ff, 0x10, 0xfffffffb, 0x100, 0x5, 0x8, 0x5, 0x8000, 0xdf, 0x9, 0x2, 0xfffffffa, 0x304, 0x80000001, 0xffffffff, 0x5, 0x1, 0x81, 0x4, 0x4, 0xffffffff, 0x9, 0x9, 0x2, 0xfffffffa, 0x800, 0xfffffffd, 0x8001, 0x200, 0x3, 0x6, 0xa, 0xff, 0x401, 0x8000, 0x39ee, 0x9, 0x3ff, 0x80, 0x1000, 0x8, 0xdd2c, 0x10001, 0x8000, 0xffffe4bb, 0x6, 0x80, 0x5, 0x7, 0x9, 0x0, 0x3, 0xbe8, 0xff, 0xfff, 0x739, 0x401, 0xa, 0x1, 0x6, 0x6, 0x6, 0xe, 0x35ce, 0x3, 0x4, 0x800000, 0x6, 0x10001, 0x4683, 0xb, 0x7ff, 0x3, 0xfff, 0xc, 0x7, 0x5, 0x22b6, 0x6, 0x1, 0x200, 0x5, 0x3, 0x7, 0x0, 0x28c, 0xffffffff, 0x3, 0x78, 0xd4, 0x9738, 0xded5, 0x80000001, 0x7, 0x5f6, 0x1, 0x10, 0x1, 0x8, 0xcfe, 0xf, 0x0, 0x2e, 0x6a, 0x6, 0x9, 0xffffffff, 0xf, 0xba12000, 0x4, 0x10000, 0x8, 0x5, 0x818f, 0x7e85d3ab, 0x0, 0x8000069, 0x2f1, 0x1, 0x4, 0xfffffffc, 0x10001, 0x2, 0x2, 0x9, 0x2c15, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]]}, {0xc2, 0x6, "f00f6d246e8660a9eeb0ebd4c6c8e17dbbbbf8bcefd7c539aa78d8d84fee7a3b9554700e58a6e1868206ace686af1983b9c981911277259e856f3b795bf5afa8af62de976d758d0f59d2e8f8ed5fa209ee0888f02aa76bc4017464240d717f61336016519a224f22e164bc0e2cf9ba247482cc5301451237e9f6c620fa8ad62dd8b20c682ea76bb31a0ef28209110ad05b2b257cbabfaa0a72516901afccca62e6dc9da05ad744de3faf95f25cb111506422be8567a41fd09f92abc6d5c4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1594}, 0x1, 0x0, 0x0, 0x6011}, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x6, 0x0, 0x1, @remote, @mcast2, 0x8, 0x889, 0xffffffff, 0x7a2}}) r7 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000300), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 23.599308466s ago: executing program 0 (id=216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000141000010000000000000000000000000a58000000060a0b040000000800000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) 14.852504529s ago: executing program 32 (id=137): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @loopback}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x6, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}, 'caif0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x4, 0x39, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x24c02, 0x143) 8.588619301s ago: executing program 33 (id=216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000141000010000000000000000000000000a58000000060a0b040000000800000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) 5.256738274s ago: executing program 4 (id=480): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0xff7b) syz_emit_ethernet(0x52, &(0x7f0000001880)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x1c, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_ns={0x87, 0x0, 0x0, @loopback={0x1000000}}}}}}}, 0x0) 5.197585003s ago: executing program 4 (id=482): mkdir(0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000840}, 0x804) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 5.193881049s ago: executing program 4 (id=484): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) read(r0, 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000000)={0xe, 0xfffffffa, 0x6, 0x8}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socketpair(0x1, 0x3, 0x28, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x5, 0x0, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x68c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket(0xf, 0xa, 0xffffffff) r6 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$sock_SIOCGSKNS(r5, 0x894c, 0x0) ioctl$KDGKBMODE(r4, 0x4bfa, &(0x7f0000000080)) 2.127642387s ago: executing program 5 (id=532): mkdirat(0xffffffffffffff9c, 0x0, 0x1ef) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x16b) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./sys/bus/pci/rescan\x00', 0x0, 0x40) r1 = openat(r0, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000140)=0x881) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5, 0x0, &(0x7f0000000300)="b13638b71c"}) write(r1, &(0x7f0000000300)='1', 0x1) 2.059752966s ago: executing program 5 (id=533): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0x2, 0x4, 0x40, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x20, 0x5}}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x8, 0x4) 2.059132965s ago: executing program 5 (id=534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) (async) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080321100c4e28ddc8dcd000000c182fd3f0000c850220000b801000000b9a6080000b9800000c035000800000f30ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x68}], 0x1, 0x5c, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x8630, 0x9, 0x1, 0x0, 0x5, 0x4, 0x3, 0x4000101, 0x48, 0x6, 0x100000001, 0x6, 0xc, 0xa2c, 0x6, 0x20000000400eee0], 0x8000000}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.889246777s ago: executing program 5 (id=535): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$dsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000080)={{r0}, 0x6, &(0x7f0000000040)=[0x8, 0x8, 0x7, 0xfffffffffffffff9, 0x193d8371, 0x8], 0x88, 0x2, 0x1}) syz_usb_disconnect(r2) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x6, 0x5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @private0}, 0x1c) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x2}}]}, 0x4c}}, 0x0) 1.888951311s ago: executing program 1 (id=536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000020900010073797a31000000000c0010400000e5ffffff0002140000001100010000000000000000000100000a"], 0x54}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 1.819845852s ago: executing program 1 (id=537): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000080)='syz_tun\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x0, 0x2000000000000, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xb, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r1, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRESOCT=r3], &(0x7f0000000000)='GPL\x00', 0xfffffff7, 0x0, 0x0, 0x0, 0x5f, '\x00', r2, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 1.819582012s ago: executing program 1 (id=538): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x48968}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5}}]}]}]}, 0x50}}, 0x80000) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xb, 0x40800) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000440)=""/4096) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x80) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x3}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x28, r5, 0x1, 0x70bd25, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4480}, 0x20000000) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000300)={@desc={0x1, 0x0, @desc1}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181102, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0x44) 1.487834094s ago: executing program 4 (id=539): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x2000, 0x0, @dev, 0x1}, 0x1c) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000040)="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", 0x2000, 0xfffffffffffffffe) write$binfmt_misc(r1, &(0x7f0000000040), 0xfe46) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000020c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002040), &(0x7f0000002080)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002180)={{0x1, 0xffffffffffffffff}, &(0x7f0000002100), &(0x7f0000002140)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002640)={0xffffffffffffffff, 0xe0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000023c0)=[0x0], &(0x7f0000002400)=[0x0, 0x0], 0x0, 0xa0, &(0x7f0000002440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002480), &(0x7f00000024c0), 0x8, 0x67, 0x8, 0x8, &(0x7f0000002500)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002740)={&(0x7f0000002680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x3, [@union={0x7, 0x2, 0x0, 0x5, 0x1, 0x6, [{0x8, 0x2, 0x9}, {0xb, 0x2, 0x2}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x2, 0x1}, {}, {0xb}, {0x2}, {0xe}]}]}, {0x0, [0x61]}}, &(0x7f0000002700)=""/52, 0x73, 0x34, 0x0, 0x2dcd}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002800)=@base={0x17, 0xdf, 0x7, 0x3, 0x2010, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002980)={0x6, 0x15, &(0x7f0000002a40)=ANY=[@ANYBLOB="18000000040000000000000000000100184a0000ffffffff0000000000000000287a2000f0ffffff1860000005000000000000000100000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000185b00000600000000000000000000001849000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000002280)='GPL\x00', 0x1, 0x8a, &(0x7f00000022c0)=""/138, 0x41000, 0x40, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000002780)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000027c0)={0x1, 0x10, 0x3, 0xe}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000002880)=[r6], &(0x7f00000028c0)=[{0x4, 0x2, 0xd, 0x6}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x5, 0x2, 0xb}, {0x5, 0x2, 0x8, 0x5}, {0x3, 0x4, 0xe}, {0x5, 0x3, 0xf, 0x9}, {0x4, 0x1, 0x5, 0x2}, {0x1, 0x2, 0x5, 0x8}, {0x1, 0x4, 0x0, 0xd976e8e81b210917}, {0x2, 0x3, 0xa, 0x1}], 0x10, 0x7}, 0x94) 1.329563717s ago: executing program 4 (id=540): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='0', 0x1) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r3, 0x2, 0x7ff, 0x8, 0x5, 0xc}, 0x14) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0x87002100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0xffffffff) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000000c0)=0x4, 0x4) io_uring_setup(0x2d03, &(0x7f0000000200)={0x0, 0xa0d7, 0xc9363d4a7118db5f, 0x3, 0x141, 0x0, r5}) connect$pppl2tp(r6, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) 1.169656029s ago: executing program 4 (id=541): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004580001c0000000000e55a766e2f907800000000e00000012001880b00089078d0771a4356c1220aa7bda49b194b699b616e4f75714f0a8844ae53e0b93e90ea73001e90a416e6"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xfffffffd, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1, {[@ssrr={0x89, 0xf, 0x24, [@local, @loopback, @remote]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x31, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast2}}}}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x2, 0x0, @pic={0x1, 0x10, 0x9, 0x8, 0x0, 0xc6, 0xf9, 0x3, 0x5, 0xff, 0x6, 0x6, 0x71, 0xe, 0xf, 0x7f}}) 928.327915ms ago: executing program 1 (id=542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd04, 0x25dfdbfc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xfeffffff}]}, 0x1c}}, 0x800) sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) (fail_nth: 5) 769.388012ms ago: executing program 1 (id=543): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x0, 0x4498bda7e2139f17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r0, &(0x7f0000000000)="ff", 0x4f21f, 0x2200) 768.624651ms ago: executing program 1 (id=544): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143542, 0x160) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800000, 0x13, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000030426bd7000ffdbdf2500000000", @ANYRES64=r0, @ANYBLOB="adffa8"], 0x48}, 0x1, 0x0, 0x0, 0x44004}, 0x440088c4) 669.690356ms ago: executing program 3 (id=545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000020900010073797a31000000000c0010400000e5ffffff0002140000001100010000000000000000000100000a"], 0x54}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 595.860337ms ago: executing program 3 (id=546): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x8f) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdir(0x0, 0x130) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x58bc, 0x1fffe, 0x10001, 0x3da}, &(0x7f0000000740), &(0x7f0000000100), &(0x7f0000000180)) 529.647695ms ago: executing program 3 (id=547): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x700, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) 459.146377ms ago: executing program 5 (id=548): r0 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_of_msg(r0, &(0x7f0000000000)={@cmd={{0x4, 0x4, 0x48, 0x9}, {@get_log_page={0x2, 0x15, 0x1, 0xf4, '\x00', @sgl={0x0, 0x5}, 0xda, 0xfb, 0xb27, 0x1, 0x0, @anon_struct={0x9, 0xffffff21}, '\x00', 0x43}}}, @void}, 0x80, 0x0, 0x0, 0x0) r1 = epoll_create(0x5) r2 = epoll_create(0x0) epoll_wait(r2, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f00000000c0)={0x20000010}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='devices.list\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000140)={0x2}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "8bba1d3012847341", "1939492d3e5b8d743066a5ec45448c36241d8e0a995574b1dfdaa20432e5f7fe", "078ddda1", "4c564e353dc40b7d"}, 0x38) listen(r0, 0x7) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, &(0x7f00000001c0)={0xfffff000, 0xc}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r5, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x56}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80000}, 0x20040050) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) ioctl$XFS_IOC_SWAPEXT(r7, 0xc0c0586d, &(0x7f00000003c0)={0x0, r3, r2, 0x80000000, 0xfffffffffffffff8, '\x00', {0x5fe, 0x10, 0xe9, 0x7, 0x81, 0x9, 0x5, 0x0, {0x9, 0x4}, {0x7411, 0x10}, {0x7fff, 0x8}, 0x5, 0x133, 0x10001, 0x0, 0x200, 0x7f, 0x7ff, 0x2, 0x9, 0x373, '\x00', 0x5, 0xffffffc3, 0x0, 0x6}}) recvmsg(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/195, 0xc3}], 0x2, &(0x7f0000000680)=""/89, 0x59}, 0x40000020) ioctl$NILFS_IOCTL_SET_SUINFO(r2, 0x40186e8d, &(0x7f0000000800)={&(0x7f0000000740)=[{0x2, 0x0, 0x0, {0x4, 0x2, 0x1}}, {0x62de, 0x0, 0x0, {0x80000000, 0x67, 0x1}}, {0x0, 0x0, 0x0, {0x800, 0x732b}}, {0xa8a1, 0x3, 0x0, {0x81}}, {0x11a54363, 0x0, 0x0, {0x1, 0x3, 0x1}}, {0x3952bc54, 0x0, 0x0, {0x42, 0x5, 0x1}}], 0x6, 0x20, 0xfff7, 0x7}) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000840)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, &(0x7f00000008c0)) ioctl$XFS_IOC_FSGROWFSLOG(r4, 0x4008586f, &(0x7f0000000900)={0x4, 0x4}) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000940)={0xc0, 0x0, 0x9000}) ioctl$NILFS_IOCTL_SET_SUINFO(r4, 0x40186e8d, &(0x7f0000000a80)={&(0x7f00000009c0)=[{0x8, 0x2, 0x0, {0x0, 0x3ff, 0x1}}, {0x516, 0x1, 0x0, {0xffffffffffffffff, 0xf6f, 0x1}}, {0x3, 0x2, 0x0, {0x1, 0x7fff, 0x2}}, {0x6a3abc05, 0x1, 0x0, {0x7fffffffffffffff, 0xd, 0x1}}, {0x8000000000000001, 0x0, 0x0, {0x3, 0x2, 0x1}}, {0x2, 0x2, 0x0, {0x1, 0x4f1}}], 0x6, 0x20, 0x8000, 0xffffffffffff37ef}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000b80)={'gre0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x8000, 0x8000, 0x0, 0xe70, {{0xf, 0x4, 0x1, 0x5, 0x3c, 0x65, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @remote, {[@timestamp_prespec={0x44, 0x1c, 0x8e, 0x3, 0x4, [{@broadcast}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7ff}]}, @lsrr={0x83, 0xb, 0xe0, [@multicast1, @broadcast]}]}}}}}) sendmsg$nl_route(r8, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8800010}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@bridge_setlink={0x30, 0x13, 0x2, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r9, 0x800, 0x41802}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_LINK_NETNSID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10004001}, 0x90) syz_open_dev$sndpcmp(&(0x7f0000000c80), 0x8, 0x48a482) sendmsg$tipc(r8, &(0x7f0000001000)={&(0x7f0000000cc0)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x4, 0x4}}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000d00)="df40a3c03a9ec5901c5f68c14bd004ac63e97d9b0d56ecda580ec82d38ca9837a9b0122527815da02a50c560c6bf17ad25cb025432e52e31cbaa452f15a031d1fd53f73c3949faa99ac1442e6612dff4ed086ef0a71ad1f4bf1bf576d315fa263b1732d171d0fb53d3a3dcbeddf9ea6e1b358cb1b6f53e795be10e00ba0aa67b649d746a05e192d43f1c4100a6d7a44430943bd745bf59e24b61d11ed2786d2df93df1f2514af1c4d5f63f757a584e666716ef71178b68bd78f5ddab578366bc1489b2b39838c7a3f2aebda2fdedd7c8fdb6cb32fc7028e4e78af7e80f3f42876ece61b1508f9b073bbd8a1ea1b854eebd2e5b283710c35e3b88e5ff3265", 0xfe}, {&(0x7f0000000e00)="45f10c9938030ffed09ea45bde513169698bbd8db0da0998afc8bdfbc6909eb2deea4b5bb23b46a6c9ca3e5031439764a8d132d16ebd9c0838b65af8a08e123acc1d6fde0e0c2c4bfbfc9dcfb974a0b052826dbc7ff6c2b2fc0135ad2b2ca90c988118ed2a7e2d926ae7c4dfa312595f7f38c1329acbaf5ba131b72c5e808dc7f1f3c8f20031b3900de40e6a7c796e0bc1b0a9a44bdcdad76cda724d34c1b26735f254eea2f1d77e6d2240df1a4009991510", 0xb2}, {&(0x7f0000000ec0)="376daa43b89969475b809bb246a12bf690bff8357a28e07b3066f3b8dd9b8dc1a83cb34d6958a6d3a783906041c8429311b5a82d351d421cc0a787", 0x3b}], 0x3, &(0x7f0000000f40)="3383fa93a106832b67cb9a37ccbbf4950c715f9c5b1b62124db281e8005e018aeb2f2db733dfb7fc3ac8b1199d8e80403f046be4705d1f415adc6ea865fefee78f529c4f74ecb31ca3c3d1bcccaba175eafb760257249aa6ec23d53dc8f37048c1a9ff6fd590759cb1b854e05312bd0b820f12221bbd4c05b1d7909389348f6eda04d73b5a98208e78dbbc0971a55f43903bf6ff2101f777430ca558ca4526ad2032fc5ed63cf9ae9c4e76c103fdeaf29ef5769c1c9a40", 0xb7, 0x4c0c0}, 0x8d0) read$usbmon(0xffffffffffffffff, &(0x7f0000001080)=""/125, 0x7d) 458.902358ms ago: executing program 3 (id=549): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x59}, 0x10}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) r2 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='secret\x00.oA\xef\x8cw\x17\x98\xea\xd2\xed\x84\xfdy\x8dt%p\xe7\xdb\xc7\x85\xfe:[\xc5L\xd8z\"FA\x01/\x97\xc2F\r2\xf0\xac\x00\x00\x85Y\x82_\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\x1d\xc1A\"\xa7\x9b\xb7\xb7G\xdfq\xc3h\x9e\x84\xb1\x96\v\x86\xe1{@\r\xaa\xf5\xe2{\xec\xdc\x7f\x06\xa2T\xb09\x1c\xfah\xd7\xd7\xc5AK&q\xb8\xfe\xb8@\x7f<\a\xb8\xf1r\x7f$\x9d\xe5i\xc9\xa3N\xa7c\xd6\x7f:\x80\xa1\b\xd8\x83\xb2a0\x83^\xed\xbb\xb8^\xbf\x91z\x02se\xfe{\xdbf\x15GIT8j\x9d|\xe0[^K\x9a\xb5\xff\xc0i\bb\xa7\x1d\xa3k,r\x86\x8d\x94\x8cQ&\xee\r\x9b\xfd\xcd\x86H|\xda\xfd\xf4H\xd8\x86\xa0\x97\x867\"\xcfQ\xb3\xca\x94\xef\xca\xefx\xc1\xe8OH_\xc4h\x91\x84\x13sd\x92\x19=\x1d\x97,\xd2\x91&\xc8J}\x16\"\x0fli\xec\xf5\x1a\xf0>\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19_\xe7\xc8\x84\xb9I\xf3\x0f?\xa3\xa3t\xcf\xce\xa8\re\x9a\xfe\xb4KL4$\xd5\xc1j\xdd\xd5I\x02\xac\xceF\xcer\xab_5\xf4%\x88\xf6\xe7\xbb\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='=\xf1K\xccC!/\xd61f\xccaMAAAAVA9\x15AM\x183\x86@AAAAAC\x00AAAA==\x00\x9b\xc0\xc0ZA\xc0X\xed3\xe3\xc5\xf9/\xcc\x1d\x95jf6\xe7\x11\x1e]\f \xcdQ\xd5\xda~A\xa5\xadP\x96\xb6\x9d\xb2\x1d\x1a\xccU8\xb6^\xd5\x8d\x80\xf1<\x87q\xbd\xbd\xbd\x83\xae\xa91\xb7\xd4\x06I\x14\x9e\xeb\xe3J\r\x95\x19\xec\xe2\x12\x06\x88<\xe3)\xbe\xda\xdc,\xa5\x10\"\xa8\x85)\xc1\xc0\f', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000000)='7', 0x1) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$XFS_IOC_GETBMAPA(r4, 0xc020582c, &(0x7f0000000180)={0x0, 0x9, 0x1ff, 0x9}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r7}, &(0x7f00000006c0), &(0x7f0000000780)='%+9llu \x00'}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r8, &(0x7f0000000100), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) 378.276263ms ago: executing program 5 (id=550): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$mice(0xffffffffffffff9c, &(0x7f0000000a40), 0x6800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000910000000000000000000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c00028005"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setns(0xc9, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10f) r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000200), 0x8982, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, 0xd, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) r5 = socket(0x400000000010, 0x3, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000100)={0x0, 0xf1, 0x3, &(0x7f00000000c0)={0x1f, "24a7e4db24fd3308a33c2b1ba2939dd59c53a8466d9d026bfb03b13a05abb8614c"}}) r7 = socket$unix(0x1, 0x5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettfilter={0x74, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x9, 0x15}, {0xa, 0xfff2}, {0x7, 0xfff5}}, [{0x8, 0xb, 0xc66}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x7efe}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xff}, {0x8, 0xb, 0x800}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0xea}, {0x8, 0xb, 0x80}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0x400, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, r9, {0x1, 0x6}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) socket(0x1f, 0x4, 0xa59) 189.604309ms ago: executing program 3 (id=551): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) futex(0x0, 0x100, 0x1, 0x0, 0x0, 0xa0090199) (async) r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) (async) read(r0, &(0x7f00000004c0)=""/118, 0x76) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) 0s ago: executing program 3 (id=552): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r1 = open(&(0x7f0000001080)='./file0\x00', 0x80, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000000)={{0x1, 0x0, 0x1}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r6, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000300)='cifs\x00', 0x0, &(0x7f0000000400)='vers=3.0,username=guest,password=,port=20000,hard\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)={0x30, r4, 0x3, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_IE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x2c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xb4, 0x69}}}}, [@NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008811}, 0x400404c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000011c0)) syz_open_procfs(0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r9, &(0x7f0000000080)=""/4096, 0x1000) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x58bc, 0x10000, 0x10001, 0x3da}, &(0x7f0000000740)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x36, 0x0, r0, &(0x7f00000005c0), &(0x7f0000001600)="ba", 0x1, 0x4014, 0x0, {0x0, 0x0, 0x9}}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000040)={@local, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast1}, 0xc) kernel console output (not intermixed with test programs): e_0 added [ 48.773912][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.779049][ T5733] hsr_slave_0: entered promiscuous mode [ 48.779686][ T5733] hsr_slave_1: entered promiscuous mode [ 48.782168][ T5728] team0: Port device team_slave_1 added [ 48.845673][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.845684][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.845696][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.856605][ T5735] team0: Port device team_slave_0 added [ 48.859579][ T5735] team0: Port device team_slave_1 added [ 48.860217][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.860227][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.860244][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.900446][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.900460][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.900476][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.905062][ T5741] hsr_slave_0: entered promiscuous mode [ 48.905592][ T5741] hsr_slave_1: entered promiscuous mode [ 48.905879][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 48.905926][ T5741] Cannot create hsr debugfs directory [ 48.920944][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.920959][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.920979][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.969578][ T5728] hsr_slave_0: entered promiscuous mode [ 48.970333][ T5728] hsr_slave_1: entered promiscuous mode [ 48.970857][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 48.970875][ T5728] Cannot create hsr debugfs directory [ 49.038504][ T5735] hsr_slave_0: entered promiscuous mode [ 49.039269][ T5735] hsr_slave_1: entered promiscuous mode [ 49.039775][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 49.039791][ T5735] Cannot create hsr debugfs directory [ 49.218265][ T5733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.223134][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.223723][ T5733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.225848][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.240358][ T5733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.243824][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.281511][ T5733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.283754][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.358414][ T5741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.361833][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.362850][ T5741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.365616][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.368376][ T5741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.373373][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.374247][ T5741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.379253][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.440013][ T5728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.443796][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.444316][ T5728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.446172][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.454337][ T5728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.459200][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.461489][ T5728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.466807][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.538081][ T5735] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.541022][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.541909][ T5735] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.543308][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.543679][ T5735] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.546859][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.548099][ T5735] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.552060][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.559114][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.604695][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.614581][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.614694][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.625405][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.625489][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.632362][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.655109][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.673710][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.683785][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.694201][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.694246][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.695555][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.695598][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.706031][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.706075][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.706893][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.706933][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.737362][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.776791][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.796623][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.796670][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.798905][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.798971][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.806272][ T5741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.879976][ T65] Bluetooth: hci1: command tx timeout [ 49.880138][ T65] Bluetooth: hci3: command tx timeout [ 49.890338][ T65] Bluetooth: hci0: command tx timeout [ 49.890508][ T5087] Bluetooth: hci2: command tx timeout [ 49.994854][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.018734][ T5733] veth0_vlan: entered promiscuous mode [ 50.023121][ T5733] veth1_vlan: entered promiscuous mode [ 50.032358][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.053499][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.059354][ T5733] veth0_macvtap: entered promiscuous mode [ 50.063421][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.066599][ T5733] veth1_macvtap: entered promiscuous mode [ 50.089438][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.103779][ T5741] veth0_vlan: entered promiscuous mode [ 50.106690][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.113885][ T5735] veth0_vlan: entered promiscuous mode [ 50.116847][ T5741] veth1_vlan: entered promiscuous mode [ 50.140208][ T5728] veth0_vlan: entered promiscuous mode [ 50.140633][ T5735] veth1_vlan: entered promiscuous mode [ 50.149977][ T5728] veth1_vlan: entered promiscuous mode [ 50.172525][ T5741] veth0_macvtap: entered promiscuous mode [ 50.177738][ T5741] veth1_macvtap: entered promiscuous mode [ 50.198905][ T5735] veth0_macvtap: entered promiscuous mode [ 50.208900][ T5735] veth1_macvtap: entered promiscuous mode [ 50.212378][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.212680][ T110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.212695][ T110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.213236][ T5728] veth0_macvtap: entered promiscuous mode [ 50.223624][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.232489][ T5728] veth1_macvtap: entered promiscuous mode [ 50.244694][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.246922][ T5804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.259136][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.269556][ T202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.269568][ T202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.276116][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.294269][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.334531][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.334549][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.349694][ T5733] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.356819][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.356839][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.413973][ T202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.413985][ T202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.449807][ T202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.449820][ T202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.465048][ T202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.465061][ T202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.469677][ T5804] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.469699][ T5804] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.470090][ T5804] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.470114][ T5804] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.470131][ T5804] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.470153][ T5804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.470169][ T5804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.470187][ T5804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.470206][ T5804] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.470223][ T5804] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.470240][ T5804] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.470258][ T5804] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.470274][ T5804] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.470291][ T5804] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.470308][ T5804] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.493808][ T5878] capability: warning: `syz.3.4' uses 32-bit capabilities (legacy support in use) [ 50.515043][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.515062][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.703641][ T5895] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 50.703658][ T5895] flags: 0x57ff00000002000(reserved|node=1|zone=2|lastcpupid=0x7ff) [ 50.703673][ T5895] raw: 057ff00000002000 0000000000000000 dead000000000122 0000000000000000 [ 50.703683][ T5895] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 50.703689][ T5895] page dumped because: unmovable page [ 50.703694][ T5895] page_owner tracks the page as allocated [ 50.703699][ T5895] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 9586296546 [ 50.703714][ T5895] post_alloc_hook+0xfd/0x120 [ 50.703733][ T5895] get_page_from_freelist+0x110d/0x35d0 [ 50.703750][ T5895] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 50.703766][ T5895] alloc_pages_mpol+0x201/0x550 [ 50.703780][ T5895] alloc_pages_noprof+0x1a/0x160 [ 50.703795][ T5895] get_zeroed_page_noprof+0x18/0xb0 [ 50.703808][ T5895] comedi_buf_alloc+0x648/0xa00 [ 50.703823][ T5895] comedi_device_postconfig+0x3dc/0xbc0 [ 50.703837][ T5895] comedi_auto_config+0x19b/0x250 [ 50.703850][ T5895] comedi_test_init+0xf7/0x150 [ 50.703860][ T5895] do_one_initcall+0x11c/0x6f0 [ 50.703873][ T5895] kernel_init_freeable+0x6ea/0x7b0 [ 50.703887][ T5895] kernel_init+0x21/0x1e0 [ 50.703902][ T5895] ret_from_fork+0x730/0xd60 [ 50.703914][ T5895] ret_from_fork_asm+0x1a/0x30 [ 50.703925][ T5895] page last free pid 1 tgid 1 ts 9416868751 stack trace: [ 50.703946][ T5895] free_pages_prepare+0x586/0xe00 [ 50.704304][ T5895] __free_contig_range_common+0x14f/0x250 [ 50.706071][ T5895] free_pages_bulk+0x12a/0x200 [ 50.706091][ T5895] vm_area_free_pages+0xb2/0x2a0 [ 50.706107][ T5895] vfree+0xf7/0x6d0 [ 50.706126][ T5895] tpg_free+0x23a/0x490 [ 50.706148][ T5895] vivid_dev_release+0xd0/0x160 [ 50.706163][ T5895] v4l2_device_put+0xa3/0xd0 [ 50.706186][ T5895] vivid_probe.cold+0xf88/0x921e [ 50.706210][ T5895] platform_probe+0x106/0x1d0 [ 50.706234][ T5895] really_probe+0x241/0xa60 [ 50.706252][ T5895] __driver_probe_device+0x210/0x460 [ 50.706269][ T5895] driver_probe_device+0x4a/0x140 [ 50.706288][ T5895] __driver_attach+0x21f/0x5b0 [ 50.706304][ T5895] bus_for_each_dev+0x13e/0x1d0 [ 50.706324][ T5895] bus_add_driver+0x305/0x5b0 [ 50.740822][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 50.819740][ T5901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 50.899139][ T5905] 9p: Bad value for 'version' [ 50.947690][ T5916] netlink: 'syz.2.14': attribute type 6 has an invalid length. [ 51.177193][ T5929] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 51.177211][ T5929] flags: 0x57ff00000002000(reserved|node=1|zone=2|lastcpupid=0x7ff) [ 51.177225][ T5929] raw: 057ff00000002000 0000000000000000 dead000000000122 0000000000000000 [ 51.177234][ T5929] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 51.177240][ T5929] page dumped because: unmovable page [ 51.177245][ T5929] page_owner tracks the page as allocated [ 51.177249][ T5929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 9586296546 [ 51.177265][ T5929] post_alloc_hook+0xfd/0x120 [ 51.177283][ T5929] get_page_from_freelist+0x110d/0x35d0 [ 51.177299][ T5929] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 51.177316][ T5929] alloc_pages_mpol+0x201/0x550 [ 51.177331][ T5929] alloc_pages_noprof+0x1a/0x160 [ 51.177346][ T5929] get_zeroed_page_noprof+0x18/0xb0 [ 51.177359][ T5929] comedi_buf_alloc+0x648/0xa00 [ 51.177377][ T5929] comedi_device_postconfig+0x3dc/0xbc0 [ 51.177397][ T5929] comedi_auto_config+0x19b/0x250 [ 51.177417][ T5929] comedi_test_init+0xf7/0x150 [ 51.177435][ T5929] do_one_initcall+0x11c/0x6f0 [ 51.177452][ T5929] kernel_init_freeable+0x6ea/0x7b0 [ 51.177476][ T5929] kernel_init+0x21/0x1e0 [ 51.177505][ T5929] ret_from_fork+0x730/0xd60 [ 51.177525][ T5929] ret_from_fork_asm+0x1a/0x30 [ 51.177544][ T5929] page last free pid 1 tgid 1 ts 9416868751 stack trace: [ 51.177556][ T5929] free_pages_prepare+0x586/0xe00 [ 51.177579][ T5929] __free_contig_range_common+0x14f/0x250 [ 51.177604][ T5929] free_pages_bulk+0x12a/0x200 [ 51.177620][ T5929] vm_area_free_pages+0xb2/0x2a0 [ 51.177636][ T5929] vfree+0xf7/0x6d0 [ 51.177655][ T5929] tpg_free+0x23a/0x490 [ 51.177677][ T5929] vivid_dev_release+0xd0/0x160 [ 51.177693][ T5929] v4l2_device_put+0xa3/0xd0 [ 51.177717][ T5929] vivid_probe.cold+0xf88/0x921e [ 51.177741][ T5929] platform_probe+0x106/0x1d0 [ 51.177767][ T5929] really_probe+0x241/0xa60 [ 51.177784][ T5929] __driver_probe_device+0x210/0x460 [ 51.177803][ T5929] driver_probe_device+0x4a/0x140 [ 51.177822][ T5929] __driver_attach+0x21f/0x5b0 [ 51.177840][ T5929] bus_for_each_dev+0x13e/0x1d0 [ 51.177866][ T5929] bus_add_driver+0x305/0x5b0 [ 51.185445][ T5931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20'. [ 51.185471][ T5931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20'. [ 51.340360][ T5940] 9p: Bad value for 'version' [ 51.371458][ T5944] xt_hashlimit: size too large, truncated to 1048576 [ 51.513502][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 51.572361][ T5959] netlink: 'syz.1.32': attribute type 10 has an invalid length. [ 51.581021][ T5959] team0: Device wg2 is up. Set it down before adding it as a team port [ 51.590909][ T5961] bond1: (slave bond_slave_0): Device is not our slave [ 51.590922][ T5961] bond1: option active_slave: invalid value (bond_slave_0) [ 51.594014][ T5961] bond1 (unregistering): Released all slaves [ 51.957636][ T5087] Bluetooth: hci2: command tx timeout [ 51.957666][ T5087] Bluetooth: hci0: command tx timeout [ 51.957686][ T5087] Bluetooth: hci3: command tx timeout [ 51.957705][ T5087] Bluetooth: hci1: command tx timeout [ 52.009811][ T5983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.42'. [ 52.009833][ T5983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.42'. [ 52.213410][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.52'. [ 52.213431][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.52'. [ 52.370405][ T6023] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 52.637291][ T74] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.701830][ T6048] binder: 6044:6048 ioctl 4008f510 200000000240 returned -22 [ 52.787550][ T74] usb 5-1: Using ep0 maxpacket: 16 [ 52.788083][ T74] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 52.791717][ T74] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.791734][ T74] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.791746][ T74] usb 5-1: config 0 interface 0 has no altsetting 0 [ 52.791761][ T74] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.793563][ T74] usb 5-1: config 0 descriptor?? [ 52.993925][ T43] kauditd_printk_skb: 116 callbacks suppressed [ 52.993943][ T43] audit: type=1400 audit(1789040527.888:284): avc: denied { name_bind } for pid=6058 comm="syz.1.73" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 53.100704][ T43] audit: type=1400 audit(1789040527.998:285): avc: denied { create } for pid=6065 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 53.101331][ T43] audit: type=1400 audit(1789040527.998:286): avc: denied { ioctl } for pid=6065 comm="syz.1.77" path="socket:[10764]" dev="sockfs" ino=10764 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.139034][ T43] audit: type=1400 audit(1789040528.038:287): avc: denied { write } for pid=6065 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.139537][ T43] audit: type=1400 audit(1789040528.038:288): avc: denied { setopt } for pid=6065 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.140888][ T43] audit: type=1400 audit(1789040528.038:289): avc: denied { bind } for pid=6065 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.141886][ T43] audit: type=1400 audit(1789040528.038:290): avc: denied { bind } for pid=6072 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.141927][ T43] audit: type=1400 audit(1789040528.038:291): avc: denied { write } for pid=6065 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 53.142227][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 53.152451][ T43] audit: type=1400 audit(1789040528.048:292): avc: denied { sys_module } for pid=6065 comm="syz.1.77" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.202557][ T6084] Zero length message leads to an empty skb [ 53.228926][ T74] hid-multitouch 0003:0EEF:72C4.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 53.291069][ T6088] ======================================================= [ 53.291069][ T6088] WARNING: The mand mount option has been deprecated and [ 53.291069][ T6088] and is ignored by this kernel. Remove the mand [ 53.291069][ T6088] option from the mount to silence this warning. [ 53.291069][ T6088] ======================================================= [ 53.460351][ T6030] hfsplus: Unknown parameter 'barrierïÄr' [ 53.466046][ T6030] FAULT_INJECTION: forcing a failure. [ 53.466046][ T6030] name failslab, interval 1, probability 0, space 0, times 1 [ 53.466073][ T6030] CPU: 0 UID: 0 PID: 6030 Comm: syz.0.61 Not tainted syzkaller #0 PREEMPT(full) [ 53.466092][ T6030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.466101][ T6030] Call Trace: [ 53.466120][ T6030] [ 53.466129][ T6030] dump_stack_lvl+0x100/0x190 [ 53.466158][ T6030] should_fail_ex.cold+0x5/0xa [ 53.466181][ T6030] should_failslab+0xc2/0x120 [ 53.466201][ T6030] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 53.466221][ T6030] ? __d_alloc+0x35/0xa50 [ 53.466247][ T6030] __d_alloc+0x35/0xa50 [ 53.466271][ T6030] d_alloc_pseudo+0x1c/0xc0 [ 53.466287][ T6030] alloc_file_pseudo+0x118/0x290 [ 53.466310][ T6030] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 53.466332][ T6030] ? alloc_fd+0x471/0x7a0 [ 53.466355][ T6030] sock_alloc_file+0x50/0x210 [ 53.466375][ T6030] __sys_socket+0x1c0/0x260 [ 53.466399][ T6030] ? __pfx___sys_socket+0x10/0x10 [ 53.466428][ T6030] __x64_sys_socket+0x72/0xb0 [ 53.466451][ T6030] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.466473][ T6030] do_syscall_64+0x123/0x790 [ 53.466502][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.466520][ T6030] RIP: 0033:0x7f891039e159 [ 53.466534][ T6030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.466548][ T6030] RSP: 002b:00007f89111a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 53.466565][ T6030] RAX: ffffffffffffffda RBX: 00007f8910625fa0 RCX: 00007f891039e159 [ 53.466577][ T6030] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000018 [ 53.466586][ T6030] RBP: 00007f891043503b R08: 0000000000000000 R09: 0000000000000000 [ 53.466596][ T6030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.466606][ T6030] R13: 00007f8910626038 R14: 00007f8910625fa0 R15: 00007ffd4b253f48 [ 53.466626][ T6030] [ 53.475019][ T5834] usb 5-1: USB disconnect, device number 2 [ 53.489623][ T6100] /dev/sg0: Can't lookup blockdev [ 53.538739][ T6107] netlink: 'syz.1.87': attribute type 1 has an invalid length. [ 53.538758][ T6107] netlink: 'syz.1.87': attribute type 2 has an invalid length. [ 53.540066][ T43] audit: type=1400 audit(1789040528.438:293): avc: denied { write } for pid=6106 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.939891][ T6154] syzkaller0: entered promiscuous mode [ 53.939908][ T6154] syzkaller0: entered allmulticast mode [ 53.944135][ T6154] tipc: Started in network mode [ 53.944152][ T6154] tipc: Node identity 6a0a9eb416fc, cluster identity 4711 [ 53.944251][ T6154] tipc: Enabled bearer , priority 0 [ 53.944496][ T6154] netlink: 'syz.3.107': attribute type 7 has an invalid length. [ 53.946021][ T6153] tipc: Resetting bearer [ 53.960728][ T6153] tipc: Disabling bearer [ 54.047164][ T65] Bluetooth: hci1: command tx timeout [ 54.047196][ T65] Bluetooth: hci3: command tx timeout [ 54.047210][ T5087] Bluetooth: hci0: command tx timeout [ 54.102524][ T6172] netlink: 'syz.2.116': attribute type 2 has an invalid length. [ 54.317143][ T63] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.407123][ T5729] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 54.478885][ T63] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 54.479797][ T63] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.479817][ T63] usb 5-1: config 0 has no interfaces? [ 54.482469][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.482486][ T63] usb 5-1: Product: syz [ 54.482496][ T63] usb 5-1: Manufacturer: syz [ 54.482507][ T63] usb 5-1: SerialNumber: syz [ 54.485913][ T63] usb 5-1: config 0 descriptor?? [ 54.577085][ T5729] usb 8-1: Invalid ep0 maxpacket: 64 [ 54.697195][ T25] usb 5-1: USB disconnect, device number 3 [ 54.727171][ T5729] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 54.897064][ T5729] usb 8-1: Invalid ep0 maxpacket: 64 [ 54.897193][ T5729] usb usb8-port1: attempt power cycle [ 55.236596][ T6203] overlayfs: overlapping lowerdir path [ 55.238498][ T5729] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 55.257552][ T5729] usb 8-1: Invalid ep0 maxpacket: 64 [ 55.387071][ T5729] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 55.408539][ T5729] usb 8-1: Invalid ep0 maxpacket: 64 [ 55.408946][ T5729] usb usb8-port1: unable to enumerate USB device [ 55.429283][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.541408][ T6222] overlayfs: invalid origin (0000) [ 55.578263][ T25] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 55.579201][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.579218][ T25] usb 6-1: config 0 has no interfaces? [ 55.583537][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.583557][ T25] usb 6-1: Product: syz [ 55.583569][ T25] usb 6-1: Manufacturer: syz [ 55.583581][ T25] usb 6-1: SerialNumber: syz [ 55.592405][ T6228] Bluetooth: MGMT ver 1.23 [ 55.598511][ T25] usb 6-1: config 0 descriptor?? [ 55.805068][ T6198] FAULT_INJECTION: forcing a failure. [ 55.805068][ T6198] name failslab, interval 1, probability 0, space 0, times 0 [ 55.805087][ T6198] CPU: 3 UID: 0 PID: 6198 Comm: syz.1.121 Not tainted syzkaller #0 PREEMPT(full) [ 55.805100][ T6198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.805106][ T6198] Call Trace: [ 55.805110][ T6198] [ 55.805114][ T6198] dump_stack_lvl+0x100/0x190 [ 55.805134][ T6198] should_fail_ex.cold+0x5/0xa [ 55.805150][ T6198] should_failslab+0xc2/0x120 [ 55.805164][ T6198] __kvmalloc_node_noprof+0x113/0x9b0 [ 55.805176][ T6198] ? __lock_acquire+0xe8b/0x1f40 [ 55.805188][ T6198] ? fq_resize+0x17b/0xd80 [ 55.805222][ T6198] fq_resize+0x17b/0xd80 [ 55.805240][ T6198] ? do_raw_spin_lock+0x128/0x260 [ 55.805255][ T6198] ? __pfx_fq_resize+0x10/0x10 [ 55.805270][ T6198] ? __local_bh_enable_ip+0xa5/0x120 [ 55.805284][ T6198] fq_change+0x13d6/0x1cb0 [ 55.805299][ T6198] ? __lock_acquire+0x5c0/0x1f40 [ 55.805312][ T6198] ? __pfx_fq_change+0x10/0x10 [ 55.805332][ T6198] ? qdisc_lookup_ops+0xf3/0x130 [ 55.805345][ T6198] ? nla_strcmp+0xff/0x130 [ 55.805361][ T6198] ? __pfx_fq_change+0x10/0x10 [ 55.805375][ T6198] tc_modify_qdisc+0x7e1/0x2120 [ 55.805390][ T6198] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 55.805413][ T6198] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 55.805426][ T6198] rtnetlink_rcv_msg+0x3c9/0xe90 [ 55.805442][ T6198] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 55.805459][ T6198] ? ref_tracker_free+0x37e/0x6c0 [ 55.805475][ T6198] netlink_rcv_skb+0x159/0x420 [ 55.805486][ T6198] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 55.805500][ T6198] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 55.805517][ T6198] ? netlink_deliver_tap+0x1ae/0xcc0 [ 55.805537][ T6198] netlink_unicast+0x585/0x850 [ 55.805557][ T6198] ? __pfx_netlink_unicast+0x10/0x10 [ 55.805580][ T6198] netlink_sendmsg+0x8b0/0xda0 [ 55.805606][ T6198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.805628][ T6198] ? selinux_socket_sendmsg+0x198/0x2f0 [ 55.805660][ T6198] ____sys_sendmsg+0xa4d/0xbe0 [ 55.805683][ T6198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.805702][ T6198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 55.805728][ T6198] ? lock_acquire+0x1d1/0x380 [ 55.805743][ T6198] ? get_pid_task+0x2a/0x250 [ 55.805767][ T6198] ___sys_sendmsg+0x190/0x1e0 [ 55.805794][ T6198] ? __pfx____sys_sendmsg+0x10/0x10 [ 55.805819][ T6198] ? get_pid_task+0x106/0x250 [ 55.805854][ T6198] ? find_held_lock+0x2b/0x80 [ 55.805894][ T6198] __sys_sendmsg+0x160/0x210 [ 55.805916][ T6198] ? __pfx___sys_sendmsg+0x10/0x10 [ 55.805952][ T6198] do_syscall_64+0x123/0x790 [ 55.805979][ T6198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.805998][ T6198] RIP: 0033:0x7f706a99e159 [ 55.806012][ T6198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.806027][ T6198] RSP: 002b:00007f706b810028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.806046][ T6198] RAX: ffffffffffffffda RBX: 00007f706ac25fa0 RCX: 00007f706a99e159 [ 55.806057][ T6198] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 55.806067][ T6198] RBP: 00007f706b810090 R08: 0000000000000000 R09: 0000000000000000 [ 55.806076][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.806086][ T6198] R13: 00007f706ac26038 R14: 00007f706ac25fa0 R15: 00007fff3f7a7d38 [ 55.806109][ T6198] [ 55.808225][ T1688] usb 6-1: USB disconnect, device number 2 [ 55.878892][ T6237] XFS (nbd0): SB validate failed with error -5. [ 56.117271][ T5737] Bluetooth: hci3: command tx timeout [ 56.117295][ T5737] Bluetooth: hci0: command tx timeout [ 56.117328][ T65] Bluetooth: hci1: command tx timeout [ 56.386778][ T6269] __nla_validate_parse: 4 callbacks suppressed [ 56.386788][ T6269] netlink: 64 bytes leftover after parsing attributes in process `syz.0.149'. [ 56.414674][ T6271] netlink: 32 bytes leftover after parsing attributes in process `syz.0.150'. [ 56.425972][ T6271] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 56.508477][ T6279] hpfs: hpfs_map_sector(): read error [ 56.606093][ T6284] FAULT_INJECTION: forcing a failure. [ 56.606093][ T6284] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 56.606125][ T6284] CPU: 3 UID: 0 PID: 6284 Comm: syz.0.155 Not tainted syzkaller #0 PREEMPT(full) [ 56.606147][ T6284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.606156][ T6284] Call Trace: [ 56.606164][ T6284] [ 56.606171][ T6284] dump_stack_lvl+0x100/0x190 [ 56.606202][ T6284] should_fail_ex.cold+0x5/0xa [ 56.606222][ T6284] ? prepare_alloc_pages+0x16d/0x5b0 [ 56.606246][ T6284] should_fail_alloc_page+0xeb/0x140 [ 56.606267][ T6284] prepare_alloc_pages+0x1f0/0x5b0 [ 56.606293][ T6284] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 56.606340][ T6284] ? __bfs+0x150/0x2a0 [ 56.606366][ T6284] ? __bfs+0x150/0x2a0 [ 56.606388][ T6284] ? check_prev_add+0xfe/0xe60 [ 56.606410][ T6284] ? __lock_acquire+0x5c0/0x1f40 [ 56.606431][ T6284] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 56.606463][ T6284] ? __css_rstat_updated+0x1ce/0x590 [ 56.606489][ T6284] ? lock_acquire+0x1d1/0x380 [ 56.606509][ T6284] ? do_raw_spin_lock+0x128/0x260 [ 56.606533][ T6284] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 56.606556][ T6284] ? find_held_lock+0x2b/0x80 [ 56.606589][ T6284] ? __lock_acquire+0x5c0/0x1f40 [ 56.606609][ T6284] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 56.606633][ T6284] ? policy_nodemask+0xed/0x4f0 [ 56.606660][ T6284] alloc_pages_mpol+0x201/0x550 [ 56.606685][ T6284] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 56.606717][ T6284] folio_alloc_mpol_noprof+0x36/0x260 [ 56.606746][ T6284] shmem_alloc_folio+0x135/0x160 [ 56.606772][ T6284] shmem_alloc_and_add_folio+0x371/0xd40 [ 56.606805][ T6284] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 56.606833][ T6284] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 56.606866][ T6284] shmem_get_folio_gfp+0x75b/0x1980 [ 56.606906][ T6284] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 56.606936][ T6284] ? filemap_map_pages+0x114a/0x2100 [ 56.606966][ T6284] shmem_fault+0x1fb/0xa30 [ 56.606994][ T6284] ? __pfx_shmem_fault+0x10/0x10 [ 56.607025][ T6284] ? __pfx_filemap_map_pages+0x10/0x10 [ 56.607052][ T6284] ? find_held_lock+0x2b/0x80 [ 56.607079][ T6284] ? __pfx_filemap_map_pages+0x10/0x10 [ 56.607100][ T6284] __do_fault+0x10b/0x440 [ 56.607121][ T6284] do_fault+0xb3f/0x1830 [ 56.607146][ T6284] ? __pfx_do_fault+0x10/0x10 [ 56.607166][ T6284] ? rcu_read_unlock+0x2d/0xb0 [ 56.607191][ T6284] ? rcu_read_unlock+0x2d/0xb0 [ 56.607214][ T6284] ? __pte_offset_map+0x179/0x310 [ 56.607237][ T6284] __handle_mm_fault+0x150b/0x2f60 [ 56.607269][ T6284] ? __pfx___handle_mm_fault+0x10/0x10 [ 56.607294][ T6284] ? pte_offset_map_lock+0x174/0x320 [ 56.607312][ T6284] ? find_held_lock+0x2b/0x80 [ 56.607334][ T6284] ? find_held_lock+0x2b/0x80 [ 56.607355][ T6284] ? follow_page_pte+0x536/0x1050 [ 56.607389][ T6284] handle_mm_fault+0x363/0xa20 [ 56.607418][ T6284] __get_user_pages+0x8ae/0x2c30 [ 56.607445][ T6284] ? __pfx___get_user_pages+0x10/0x10 [ 56.607462][ T6284] ? __pfx_down_read_killable+0x10/0x10 [ 56.607494][ T6284] __gup_longterm_locked+0x87d/0x16f0 [ 56.607522][ T6284] ? __pfx___gup_longterm_locked+0x10/0x10 [ 56.607543][ T6284] ? lock_acquire+0x1d1/0x380 [ 56.607561][ T6284] ? gup_fast_fallback+0x946/0x2790 [ 56.607584][ T6284] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 56.607607][ T6284] gup_fast_fallback+0x16dc/0x2790 [ 56.607642][ T6284] ? __pfx_gup_fast_fallback+0x10/0x10 [ 56.607661][ T6284] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 56.607690][ T6284] pin_user_pages_fast+0xa7/0xf0 [ 56.607711][ T6284] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 56.607731][ T6284] ? __lock_acquire+0x5c0/0x1f40 [ 56.607754][ T6284] iov_iter_extract_pages+0xac8/0x2100 [ 56.607776][ T6284] ? lock_acquire+0x1d1/0x380 [ 56.607793][ T6284] ? bio_associate_blkg_from_css+0x26d/0x1960 [ 56.607813][ T6284] ? find_held_lock+0x2b/0x80 [ 56.607836][ T6284] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 56.607855][ T6284] ? lock_acquire+0x1d1/0x380 [ 56.607871][ T6284] ? percpu_ref_put_many.constprop.0+0x23/0x2a0 [ 56.607890][ T6284] ? find_held_lock+0x2b/0x80 [ 56.607919][ T6284] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 56.607940][ T6284] iov_iter_extract_bvecs+0x22d/0xc20 [ 56.607969][ T6284] ? __pfx_iov_iter_extract_bvecs+0x10/0x10 [ 56.607987][ T6284] ? bio_alloc_bioset+0x25d/0x1060 [ 56.608017][ T6284] bio_iov_iter_get_pages+0x569/0x9f0 [ 56.608051][ T6284] iomap_dio_bio_iter+0xea9/0x19e0 [ 56.608077][ T6284] ? rcu_is_watching+0x13/0xc0 [ 56.608106][ T6284] __iomap_dio_rw+0xc78/0x19a0 [ 56.608135][ T6284] ? __pfx___iomap_dio_rw+0x10/0x10 [ 56.608166][ T6284] ? kasan_quarantine_put+0x104/0x240 [ 56.608184][ T6284] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.608222][ T6284] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 56.608249][ T6284] iomap_dio_rw+0x40/0xa0 [ 56.608270][ T6284] ext4_file_write_iter+0x1546/0x1d90 [ 56.608301][ T6284] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 56.608322][ T6284] ? __x64_sys_pwrite64+0x1eb/0x250 [ 56.608354][ T6284] vfs_write+0x6af/0x1050 [ 56.608374][ T6284] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 56.608399][ T6284] ? __pfx_vfs_write+0x10/0x10 [ 56.608415][ T6284] ? find_held_lock+0x2b/0x80 [ 56.608458][ T6284] __x64_sys_pwrite64+0x1eb/0x250 [ 56.608479][ T6284] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 56.608507][ T6284] do_syscall_64+0x123/0x790 [ 56.608532][ T6284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.608549][ T6284] RIP: 0033:0x7f891039e159 [ 56.608564][ T6284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.608579][ T6284] RSP: 002b:00007f89111a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 56.608597][ T6284] RAX: ffffffffffffffda RBX: 00007f8910625fa0 RCX: 00007f891039e159 [ 56.608608][ T6284] RDX: 000000000004f200 RSI: 0000200000000000 RDI: 0000000000000003 [ 56.608619][ T6284] RBP: 00007f89111a1090 R08: 0000000000000000 R09: 0000000000000000 [ 56.608630][ T6284] R10: 0000000000002200 R11: 0000000000000246 R12: 0000000000000002 [ 56.608639][ T6284] R13: 00007f8910626038 R14: 00007f8910625fa0 R15: 00007ffd4b253f48 [ 56.608663][ T6284] [ 56.718286][ T6293] netlink: 132 bytes leftover after parsing attributes in process `syz.0.156'. [ 56.718303][ T6293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 56.755539][ T6294] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 57.521067][ T6313] kvm [6312]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 57.543085][ T6313] kvm [6312]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 57.555491][ T6313] kvm [6312]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 57.555870][ T6313] kvm [6312]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 57.965236][ T6324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.165'. [ 58.082877][ T6325] xt_TCPMSS: Only works on TCP SYN packets [ 58.867826][ T43] kauditd_printk_skb: 62 callbacks suppressed [ 58.867846][ T43] audit: type=1400 audit(1789040533.768:356): avc: denied { write } for pid=6330 comm="syz.3.167" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.917836][ T6333] netlink: 40 bytes leftover after parsing attributes in process `syz.3.168'. [ 58.961228][ T43] audit: type=1400 audit(1789040533.858:357): avc: denied { create } for pid=6334 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 58.961807][ T43] audit: type=1400 audit(1789040533.858:358): avc: denied { ioctl } for pid=6334 comm="syz.3.169" path="socket:[11543]" dev="sockfs" ino=11543 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 58.962127][ T43] audit: type=1400 audit(1789040533.858:359): avc: denied { write } for pid=6334 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 59.498083][ T6285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 59.550183][ T43] audit: type=1400 audit(1789040534.448:360): avc: denied { create } for pid=6342 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.555316][ T43] audit: type=1400 audit(1789040534.448:361): avc: denied { map } for pid=6342 comm="syz.3.171" path="socket:[11561]" dev="sockfs" ino=11561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 59.572938][ T43] audit: type=1400 audit(1789040534.468:362): avc: denied { bind } for pid=6344 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.573183][ T43] audit: type=1400 audit(1789040534.468:363): avc: denied { node_bind } for pid=6344 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 59.576524][ T43] audit: type=1400 audit(1789040534.468:364): avc: denied { read } for pid=6344 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.590043][ T43] audit: type=1400 audit(1789040534.488:365): avc: denied { read } for pid=6347 comm="syz.1.173" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 59.595577][ T6349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=6349 comm=syz.1.173 [ 59.615700][ T6358] xt_hashlimit: size too large, truncated to 1048576 [ 59.900296][ T6379] capability: warning: `syz.3.179' uses deprecated v2 capabilities in a way that may be insecure [ 60.057191][ T74] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 60.128964][ T6395] process 'syz.1.187' launched './file0' with NULL argv: empty string added [ 60.195546][ T6397] tc action pedit 'at' offset 5 out of bounds [ 60.195558][ T6397] tc action pedit 'at' offset 5 out of bounds [ 60.195565][ T6397] tc action pedit 'at' offset 5 out of bounds [ 60.195570][ T6397] tc action pedit 'at' offset 5 out of bounds [ 60.195575][ T6397] tc action pedit 'at' offset 5 out of bounds [ 60.195580][ T6397] tc action pedit 'at' offset 5 out of bounds [ 60.195585][ T6397] tc action pedit 'at' offset 5 out of bounds [ 60.195590][ T6397] tc action pedit 'at' offset 5 out of bounds [ 60.195595][ T6397] tc action pedit 'at' offset 5 out of bounds [ 60.195600][ T6397] tc action pedit 'at' offset 5 out of bounds [ 60.195628][ T6397] 0: reclassify loop, rule prio 0, protocol 800 [ 60.215508][ T6399] netlink: 'syz.3.189': attribute type 1 has an invalid length. [ 60.227722][ T74] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 60.228576][ T74] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.228587][ T74] usb 5-1: config 0 has no interfaces? [ 60.230747][ T74] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.230765][ T74] usb 5-1: Product: syz [ 60.230776][ T74] usb 5-1: Manufacturer: syz [ 60.230788][ T74] usb 5-1: SerialNumber: syz [ 60.233966][ T6399] bond1: entered promiscuous mode [ 60.234184][ T6399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.237273][ T74] usb 5-1: config 0 descriptor?? [ 60.249010][ T6402] bond1: (slave bridge1): making interface the new active one [ 60.249024][ T6402] bridge1: entered promiscuous mode [ 60.252093][ T6402] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 60.447178][ T5840] usb 5-1: USB disconnect, device number 4 [ 60.490811][ T6418] loop4: detected capacity change from 0 to 2640 [ 60.496553][ T6418] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.496580][ T6418] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.496596][ T6418] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.496610][ T6418] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.496625][ T6418] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.496647][ T6418] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.496668][ T6418] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.496682][ T6418] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.496690][ T6418] ldm_validate_partition_table(): Disk read failed. [ 60.496703][ T6418] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.496718][ T6418] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.496740][ T6418] Dev loop4: unable to read RDB block 0 [ 60.496896][ T6418] loop4: unable to read partition table [ 60.497094][ T6418] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 60.520690][ T6418] netlink: 14 bytes leftover after parsing attributes in process `syz.1.196'. [ 60.870366][ T6430] netlink: 'syz.1.201': attribute type 1 has an invalid length. [ 60.870384][ T6430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.201'. [ 61.067891][ T6446] UBIFS error (pid: 6446): cannot open "ubi0_0", error -19 [ 61.071839][ T6436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.252275][ T6457] FAULT_INJECTION: forcing a failure. [ 61.252275][ T6457] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 61.252294][ T6457] CPU: 3 UID: 0 PID: 6457 Comm: syz.0.208 Not tainted syzkaller #0 PREEMPT(full) [ 61.252307][ T6457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.252313][ T6457] Call Trace: [ 61.252317][ T6457] [ 61.252322][ T6457] dump_stack_lvl+0x100/0x190 [ 61.252353][ T6457] should_fail_ex.cold+0x5/0xa [ 61.252369][ T6457] _copy_from_user+0x2e/0xd0 [ 61.252384][ T6457] bpf_vlog_reverse_ubuf+0x13b/0x470 [ 61.252405][ T6457] bpf_vlog_finalize+0x2bf/0x360 [ 61.252424][ T6457] bpf_log_attr_finalize+0x86/0x1a0 [ 61.252442][ T6457] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 61.252464][ T6457] btf_new_fd+0x9c7/0x5bc0 [ 61.252481][ T6457] ? avc_has_perm_noaudit+0x145/0x3b0 [ 61.252502][ T6457] ? __pfx_btf_new_fd+0x10/0x10 [ 61.252518][ T6457] ? rcu_is_watching+0x13/0xc0 [ 61.252535][ T6457] ? cap_capable+0x107/0x430 [ 61.252558][ T6457] ? bpf_lsm_capable+0x9/0x10 [ 61.252578][ T6457] ? security_capable+0x80/0x260 [ 61.252601][ T6457] ? ns_capable+0xd2/0xf0 [ 61.252621][ T6457] __sys_bpf+0x13ef/0x4a30 [ 61.252643][ T6457] ? __pfx___sys_bpf+0x10/0x10 [ 61.252657][ T6457] ? find_held_lock+0x2b/0x80 [ 61.252679][ T6457] ? futex_wake+0x4ea/0x5e0 [ 61.252741][ T6457] ? rcu_read_lock_any_held+0x6a/0x90 [ 61.252766][ T6457] ? find_held_lock+0x2b/0x80 [ 61.252787][ T6457] ? ksys_write+0x190/0x250 [ 61.252803][ T6457] ? ksys_write+0x190/0x250 [ 61.252853][ T6457] ? __x64_sys_futex+0x34f/0x4d0 [ 61.252877][ T6457] ? __x64_sys_futex+0x358/0x4d0 [ 61.252906][ T6457] ? xfd_validate_state+0x129/0x190 [ 61.252928][ T6457] ? __x64_sys_bpf+0xce/0x140 [ 61.252945][ T6457] __x64_sys_bpf+0xce/0x140 [ 61.252963][ T6457] ? do_syscall_64+0xae/0x790 [ 61.252994][ T6457] do_syscall_64+0x123/0x790 [ 61.253018][ T6457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.253037][ T6457] RIP: 0033:0x7f891039e159 [ 61.253052][ T6457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.253066][ T6457] RSP: 002b:00007f89111a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 61.253085][ T6457] RAX: ffffffffffffffda RBX: 00007f8910625fa0 RCX: 00007f891039e159 [ 61.253097][ T6457] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 61.253108][ T6457] RBP: 00007f891043503b R08: 0000000000000000 R09: 0000000000000000 [ 61.253119][ T6457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.253128][ T6457] R13: 00007f8910626038 R14: 00007f8910625fa0 R15: 00007ffd4b253f48 [ 61.253150][ T6457] [ 61.468713][ T6466] FAULT_INJECTION: forcing a failure. [ 61.468713][ T6466] name failslab, interval 1, probability 0, space 0, times 0 [ 61.468743][ T6466] CPU: 2 UID: 0 PID: 6466 Comm: syz.0.212 Not tainted syzkaller #0 PREEMPT(full) [ 61.468765][ T6466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.468776][ T6466] Call Trace: [ 61.468782][ T6466] [ 61.468791][ T6466] dump_stack_lvl+0x100/0x190 [ 61.468845][ T6466] should_fail_ex.cold+0x5/0xa [ 61.468871][ T6466] should_failslab+0xc2/0x120 [ 61.468895][ T6466] __kmalloc_noprof+0xfc/0x840 [ 61.468913][ T6466] ? rcu_is_watching+0x13/0xc0 [ 61.468938][ T6466] ? tomoyo_realpath_from_path+0xb6/0x690 [ 61.468966][ T6466] tomoyo_realpath_from_path+0xb6/0x690 [ 61.468993][ T6466] tomoyo_path_number_perm+0x23c/0x580 [ 61.469042][ T6466] ? tomoyo_path_number_perm+0x22e/0x580 [ 61.469074][ T6466] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 61.469113][ T6466] ? __lock_acquire+0x5c0/0x1f40 [ 61.469146][ T6466] ? __fget_files+0x34/0x3d0 [ 61.469170][ T6466] ? find_held_lock+0x2b/0x80 [ 61.469195][ T6466] ? hook_file_ioctl_common+0x140/0x440 [ 61.469225][ T6466] ? __fget_files+0x21f/0x3d0 [ 61.469252][ T6466] security_file_ioctl+0xd3/0x230 [ 61.469275][ T6466] __x64_sys_ioctl+0xb7/0x210 [ 61.469297][ T6466] do_syscall_64+0x123/0x790 [ 61.469325][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.469346][ T6466] RIP: 0033:0x7f891039e159 [ 61.469362][ T6466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.469379][ T6466] RSP: 002b:00007f89111a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.469398][ T6466] RAX: ffffffffffffffda RBX: 00007f8910625fa0 RCX: 00007f891039e159 [ 61.469411][ T6466] RDX: 0000200000000280 RSI: 00000000c058565d RDI: 000000000000000a [ 61.469422][ T6466] RBP: 00007f89111a1090 R08: 0000000000000000 R09: 0000000000000000 [ 61.469432][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.469444][ T6466] R13: 00007f8910626038 R14: 00007f8910625fa0 R15: 00007ffd4b253f48 [ 61.469469][ T6466] [ 61.469507][ T6466] ERROR: Out of memory at tomoyo_realpath_from_path. [ 61.658569][ T6474] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 62.370316][ T6485] IPVS: length: 120 != 24 [ 62.374090][ T6485] netlink: 'syz.1.218': attribute type 1 has an invalid length. [ 62.374122][ T6485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 62.374135][ T6485] IPv6: NLM_F_CREATE should be set when creating new route [ 62.374146][ T6485] IPv6: NLM_F_CREATE should be set when creating new route [ 62.378779][ T6485] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 62.726840][ T6492] FAULT_INJECTION: forcing a failure. [ 62.726840][ T6492] name failslab, interval 1, probability 0, space 0, times 0 [ 62.726868][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.221 Not tainted syzkaller #0 PREEMPT(full) [ 62.726887][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.726897][ T6492] Call Trace: [ 62.726902][ T6492] [ 62.726909][ T6492] dump_stack_lvl+0x100/0x190 [ 62.726938][ T6492] should_fail_ex.cold+0x5/0xa [ 62.726962][ T6492] should_failslab+0xc2/0x120 [ 62.727004][ T6492] kmem_cache_alloc_noprof+0x92/0x6a0 [ 62.727023][ T6492] ? mas_preallocate+0xc22/0xee0 [ 62.727051][ T6492] mas_preallocate+0xc22/0xee0 [ 62.727078][ T6492] ? __pfx_mas_preallocate+0x10/0x10 [ 62.727099][ T6492] ? mt_find+0x136/0x9b0 [ 62.727128][ T6492] ? lock_acquire+0x1d1/0x380 [ 62.727145][ T6492] ? avc_has_perm_noaudit+0x56/0x3b0 [ 62.727172][ T6492] vma_link+0x14a/0x8c0 [ 62.727199][ T6492] ? __pfx_vma_link+0x10/0x10 [ 62.727228][ T6492] ? __pfx_selinux_vm_enough_memory+0x10/0x10 [ 62.727249][ T6492] ? rcu_is_watching+0x13/0xc0 [ 62.727270][ T6492] ? percpu_counter_add_batch+0xb9/0x230 [ 62.727297][ T6492] insert_vm_struct+0x1f7/0x890 [ 62.727317][ T6492] create_init_stack_vma+0x830/0xcf0 [ 62.727339][ T6492] ? __pfx_create_init_stack_vma+0x10/0x10 [ 62.727359][ T6492] ? lock_acquire+0x1d1/0x380 [ 62.727376][ T6492] ? do_raw_spin_lock+0x128/0x260 [ 62.727397][ T6492] ? alloc_bprm+0x54e/0x9e0 [ 62.727412][ T6492] ? alloc_bprm+0x54e/0x9e0 [ 62.727434][ T6492] alloc_bprm+0x57b/0x9e0 [ 62.727455][ T6492] do_execveat_common.isra.0+0x19c/0x580 [ 62.727473][ T6492] ? do_getname+0x191/0x390 [ 62.727499][ T6492] __x64_sys_execve+0x93/0xd0 [ 62.727517][ T6492] do_syscall_64+0x123/0x790 [ 62.727541][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.727558][ T6492] RIP: 0033:0x7f706a99e159 [ 62.727572][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.727587][ T6492] RSP: 002b:00007f706b810028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 62.727603][ T6492] RAX: ffffffffffffffda RBX: 00007f706ac25fa0 RCX: 00007f706a99e159 [ 62.727614][ T6492] RDX: 00002000000001c0 RSI: 0000000000000000 RDI: 0000200000000000 [ 62.727624][ T6492] RBP: 00007f706b810090 R08: 0000000000000000 R09: 0000000000000000 [ 62.727634][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.727643][ T6492] R13: 00007f706ac26038 R14: 00007f706ac25fa0 R15: 00007fff3f7a7d38 [ 62.727667][ T6492] [ 62.946351][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 63.026420][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.226'. [ 63.030264][ T6503] TCP: TCP_TX_DELAY enabled [ 63.119689][ T6505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.227'. [ 63.120938][ T6505] netlink: 28 bytes leftover after parsing attributes in process `syz.3.227'. [ 63.120955][ T6505] netlink: 28 bytes leftover after parsing attributes in process `syz.3.227'. [ 63.244907][ T6514] tmpfs: Unknown parameter '@' [ 63.430093][ T6525] 9pnet_virtio: no channels available for device syz [ 63.721095][ T6537] qnx4: unable to read the superblock [ 64.196799][ T6544] warning: `syz.1.240' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.410801][ T6553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.241'. [ 64.566848][ T43] kauditd_printk_skb: 80 callbacks suppressed [ 64.566865][ T43] audit: type=1400 audit(1789040539.458:446): avc: denied { unlink } for pid=6556 comm="syz.3.246" name="#3" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 64.746860][ T6570] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 64.759409][ T43] audit: type=1400 audit(1789040539.658:447): avc: denied { mounton } for pid=6569 comm="syz.3.250" path="/58/file0" dev="tmpfs" ino=334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.759559][ T6570] fuse: Unknown parameter 'gr' [ 64.770932][ T6570] sctp: [Deprecated]: syz.3.250 (pid 6570) Use of int in max_burst socket option. [ 64.770932][ T6570] Use struct sctp_assoc_value instead [ 64.832146][ T43] audit: type=1400 audit(1789040539.728:448): avc: denied { bind } for pid=6573 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.832798][ T43] audit: type=1400 audit(1789040539.728:449): avc: denied { setopt } for pid=6573 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.903451][ T43] audit: type=1400 audit(1789040539.798:450): avc: denied { map_create } for pid=6580 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 64.903611][ T43] audit: type=1400 audit(1789040539.798:451): avc: denied { map_read map_write } for pid=6580 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 64.950688][ T43] audit: type=1400 audit(1789040539.848:452): avc: denied { create } for pid=6582 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 64.953762][ T43] audit: type=1400 audit(1789040539.848:453): avc: denied { connect } for pid=6582 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 64.954461][ T43] audit: type=1400 audit(1789040539.848:454): avc: denied { read } for pid=6582 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 64.989891][ T43] audit: type=1326 audit(1789040539.888:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.3.254" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd04b79e159 code=0x0 [ 65.091170][ T6586] tmpfs: Unknown parameter '' [ 65.395718][ T6596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6596 comm=syz.1.261 [ 65.440301][ T6598] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 65.534055][ T6602] netlink: 36 bytes leftover after parsing attributes in process `syz.1.264'. [ 65.548540][ T6602] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 65.601500][ T6604] lo: entered promiscuous mode [ 65.603823][ T6604] bond0: entered promiscuous mode [ 65.604366][ T6604] dummy0: entered promiscuous mode [ 65.605352][ T6604] eql: entered promiscuous mode [ 65.605537][ T6604] ifb0: entered promiscuous mode [ 65.605813][ T6604] ifb1: entered promiscuous mode [ 65.609123][ T6604] e1000 0000:00:06.0 eth0: entered promiscuous mode [ 65.618653][ T6604] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 65.621822][ T6604] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 65.622136][ T6604] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 65.622677][ T6604] hwsim0: entered promiscuous mode [ 65.623161][ T6604] ieee802154 phy0 wpan0: entered promiscuous mode [ 65.623330][ T6604] ieee802154 phy1 wpan1: entered promiscuous mode [ 65.623519][ T6604] teql0: entered promiscuous mode [ 65.623531][ T6604] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 65.822639][ T6612] devpts: Unknown parameter 'ôfù«–U~_²ÆGš Tÿck§’V­_¾8' [ 65.867508][ T6616] jffs2: notice: (6616) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 65.932350][ T6616] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 65.932630][ T6616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.271'. [ 65.979066][ T6621] Cannot find add_set index 65532 as target [ 66.930771][ T6639] syz.1.278 uses obsolete (PF_INET,SOCK_PACKET) [ 67.172472][ T6654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.173434][ T6654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.407373][ T5827] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 67.512015][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'. [ 67.537556][ T5827] usb 8-1: device descriptor read/64, error -71 [ 67.777158][ T5827] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 67.790065][ T6671] tipc: Started in network mode [ 67.790086][ T6671] tipc: Node identity 1000001, cluster identity 4369 [ 67.790096][ T6671] tipc: Node number set to 16777217 [ 67.790401][ T6671] tipc: Cannot configure node identity twice [ 67.792709][ T6671] tipc: New replicast peer: 127.0.0.1 [ 67.793918][ T6671] tipc: Enabled bearer , priority 10 [ 67.917306][ T5827] usb 8-1: device descriptor read/64, error -71 [ 68.027324][ T5827] usb usb8-port1: attempt power cycle [ 68.377065][ T5827] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 68.398162][ T5827] usb 8-1: device descriptor read/8, error -71 [ 68.514129][ T6700] netlink: 64 bytes leftover after parsing attributes in process `syz.1.300'. [ 68.522645][ T6700] tmpfs: Unknown parameter '' [ 68.637090][ T5827] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 68.667847][ T5827] usb 8-1: device descriptor read/8, error -71 [ 68.787459][ T5827] usb usb8-port1: unable to enumerate USB device [ 69.535642][ T6705] netlink: 224 bytes leftover after parsing attributes in process `syz.1.302'. [ 69.556229][ T6705] netlink: 14 bytes leftover after parsing attributes in process `syz.1.302'. [ 69.814650][ T6718] tmpfs: Unknown parameter '' [ 69.860033][ T6720] tipc: Enabling of bearer rejected, already enabled [ 69.860469][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 69.860482][ T43] audit: type=1400 audit(1789040544.758:475): avc: denied { setopt } for pid=6719 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.897067][ T43] audit: type=1400 audit(1789040544.788:476): avc: denied { connect } for pid=6721 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.897310][ T43] audit: type=1400 audit(1789040544.798:477): avc: denied { write } for pid=6721 comm="syz.1.306" path="socket:[17428]" dev="sockfs" ino=17428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.903297][ T43] audit: type=1400 audit(1789040544.798:478): avc: denied { read } for pid=6721 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.994967][ T6729] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 70.172552][ T43] audit: type=1400 audit(1789040545.068:479): avc: denied { read append } for pid=6734 comm="syz.1.310" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 70.173912][ T43] audit: type=1400 audit(1789040545.068:480): avc: denied { open } for pid=6734 comm="syz.1.310" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 70.174892][ T43] audit: type=1400 audit(1789040545.068:481): avc: denied { ioctl } for pid=6734 comm="syz.1.310" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x460f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 70.182792][ T6735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.310'. [ 70.202832][ T43] audit: type=1400 audit(1789040545.098:482): avc: denied { ioctl } for pid=6734 comm="syz.1.310" path="socket:[13968]" dev="sockfs" ino=13968 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.266355][ T43] audit: type=1400 audit(1789040545.158:483): avc: denied { write } for pid=6736 comm="syz.1.311" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 70.559912][ T43] audit: type=1400 audit(1789040545.458:484): avc: denied { mounton } for pid=6736 comm="syz.1.311" path="/132/file0" dev="fuse" ino=18446744073709551613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 70.812476][ T6745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6745 comm=syz.3.314 [ 70.813373][ T6745] netlink: 'syz.3.314': attribute type 3 has an invalid length. [ 70.814076][ T6745] netlink: 'syz.3.314': attribute type 3 has an invalid length. [ 70.859157][ T65] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.863374][ T65] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.865340][ T65] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.867918][ T65] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.868766][ T65] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.148608][ T5777] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.174891][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.175228][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.184452][ T6763] input: syz0 as /devices/virtual/input/input7 [ 71.219001][ T30] cfg80211: failed to load regulatory.db [ 71.261380][ T5777] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.346281][ T5777] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.463522][ T5777] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.565775][ T6746] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.565854][ T6746] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.565916][ T6746] bridge_slave_0: entered allmulticast mode [ 71.576051][ T6746] bridge_slave_0: entered promiscuous mode [ 71.583465][ T6746] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.583543][ T6746] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.583650][ T6746] bridge_slave_1: entered allmulticast mode [ 71.588031][ T6746] bridge_slave_1: entered promiscuous mode [ 71.677964][ T6746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.689643][ T6746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.738596][ T6793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.327'. [ 71.762930][ T6746] team0: Port device team_slave_0 added [ 71.768191][ T6746] team0: Port device team_slave_1 added [ 71.834627][ T6746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.834641][ T6746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.834657][ T6746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.836134][ T6746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.836145][ T6746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.836163][ T6746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.854321][ T6795] FAULT_INJECTION: forcing a failure. [ 71.854321][ T6795] name fail_futex, interval 1, probability 0, space 0, times 1 [ 71.854343][ T6795] CPU: 1 UID: 0 PID: 6795 Comm: syz.3.328 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.854360][ T6795] Tainted: [L]=SOFTLOCKUP [ 71.854364][ T6795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.854371][ T6795] Call Trace: [ 71.854376][ T6795] [ 71.854381][ T6795] dump_stack_lvl+0x100/0x190 [ 71.854409][ T6795] should_fail_ex.cold+0x5/0xa [ 71.854426][ T6795] get_futex_key+0x1d0/0x14f0 [ 71.854443][ T6795] ? __pfx_get_futex_key+0x10/0x10 [ 71.854459][ T6795] ? ___sys_sendmsg+0x127/0x1e0 [ 71.854487][ T6795] futex_wake+0xf4/0x5e0 [ 71.854507][ T6795] ? __pfx_futex_wake+0x10/0x10 [ 71.854527][ T6795] ? find_held_lock+0x2b/0x80 [ 71.854547][ T6795] do_futex+0x2b2/0x440 [ 71.854564][ T6795] ? __pfx_do_futex+0x10/0x10 [ 71.854581][ T6795] ? fput+0x7c/0x100 [ 71.854598][ T6795] __x64_sys_futex+0x34f/0x4d0 [ 71.854615][ T6795] ? __pfx___x64_sys_futex+0x10/0x10 [ 71.854636][ T6795] do_syscall_64+0x123/0x790 [ 71.854652][ T6795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.854664][ T6795] RIP: 0033:0x7fd04b79e159 [ 71.854674][ T6795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.854685][ T6795] RSP: 002b:00007fd04c7140e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 71.854697][ T6795] RAX: ffffffffffffffda RBX: 00007fd04ba25fa8 RCX: 00007fd04b79e159 [ 71.854704][ T6795] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd04ba25fac [ 71.854711][ T6795] RBP: 00007fd04ba25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 71.854718][ T6795] R10: 0000000000000054 R11: 0000000000000246 R12: 0000000000000000 [ 71.854724][ T6795] R13: 00007fd04ba26038 R14: 00007fff66f37820 R15: 00007fff66f37908 [ 71.854738][ T6795] [ 71.901715][ T6800] netlink: 68 bytes leftover after parsing attributes in process `syz.1.330'. [ 71.941980][ T5777] bridge_slave_1: left allmulticast mode [ 71.942047][ T5777] bridge_slave_1: left promiscuous mode [ 71.942979][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.964596][ T5777] bridge_slave_0: left allmulticast mode [ 71.964619][ T5777] bridge_slave_0: left promiscuous mode [ 71.964814][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.164133][ T5777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.166564][ T5777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.167694][ T5777] bond0 (unregistering): Released all slaves [ 72.191385][ T6746] hsr_slave_0: entered promiscuous mode [ 72.193011][ T6746] hsr_slave_1: entered promiscuous mode [ 72.195006][ T6746] debugfs: 'hsr0' already exists in 'hsr' [ 72.195024][ T6746] Cannot create hsr debugfs directory [ 72.213991][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 72.261127][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 72.361841][ T6823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.337'. [ 72.395305][ T6821] netlink: 'syz.1.336': attribute type 39 has an invalid length. [ 72.552014][ T5777] hsr_slave_0: left promiscuous mode [ 72.552432][ T5777] hsr_slave_1: left promiscuous mode [ 72.552963][ T5777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.552978][ T5777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.558778][ T5777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.558791][ T5777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.600309][ T5777] veth1_macvtap: left promiscuous mode [ 72.600339][ T5777] veth0_macvtap: left promiscuous mode [ 72.600388][ T5777] veth1_vlan: left promiscuous mode [ 72.600426][ T5777] veth0_vlan: left promiscuous mode [ 72.792830][ T5777] team0 (unregistering): Port device team_slave_1 removed [ 72.820621][ T5777] team0 (unregistering): Port device team_slave_0 removed [ 72.917766][ T5087] Bluetooth: hci4: command tx timeout [ 72.933763][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 72.986488][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 73.031966][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 73.032175][ T6746] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.061174][ T6746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.061586][ T6746] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.066406][ T6746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.081120][ T6746] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.083844][ T6746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.091549][ T6746] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.096188][ T6746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.192448][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4 [ 73.275869][ T6746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.298597][ T6746] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.304014][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.304059][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.322811][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.322857][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.424205][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5 [ 73.553399][ T6916] overlay: filesystem on ./file0/file1 not supported as upperdir [ 73.568863][ T6916] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 73.628324][ T6746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.653039][ T6925] Invalid logical block size (-1) [ 73.689470][ T6929] overlayfs: upper fs does not support file handles, falling back to index=off. [ 73.811069][ T6746] veth0_vlan: entered promiscuous mode [ 73.814203][ T6746] veth1_vlan: entered promiscuous mode [ 73.828514][ T6746] veth0_macvtap: entered promiscuous mode [ 73.837135][ T6746] veth1_macvtap: entered promiscuous mode [ 73.849930][ T6746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.855100][ T6746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.907442][ T5777] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.908327][ T5777] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.908366][ T5777] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.980805][ T6714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.980823][ T6714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.987277][ T5777] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.011547][ T6714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.011565][ T6714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.085131][ T6957] fuse: Unknown parameter 'fÿ<¾](ƒæx|Eª‚7¹Û-ÏÛî¨' [ 74.106522][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'. [ 74.106535][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'. [ 74.106541][ T6961] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 74.152371][ T6965] Format for deleting device is "id" (uint). [ 74.876179][ T43] kauditd_printk_skb: 52 callbacks suppressed [ 74.876197][ T43] audit: type=1400 audit(1789040549.768:537): avc: denied { read } for pid=6997 comm="syz.4.382" path="socket:[16072]" dev="sockfs" ino=16072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.952165][ T43] audit: type=1400 audit(1789040549.848:538): avc: denied { getopt } for pid=7000 comm="syz.3.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.997789][ T5087] Bluetooth: hci4: command tx timeout [ 75.079092][ T7008] bridge_slave_0: left allmulticast mode [ 75.079118][ T7008] bridge_slave_0: left promiscuous mode [ 75.081715][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.095973][ T7008] bridge_slave_1: left allmulticast mode [ 75.095996][ T7008] bridge_slave_1: left promiscuous mode [ 75.096706][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.111884][ T7008] bond0: (slave bond_slave_0): Releasing backup interface [ 75.135732][ T7008] bond0: (slave bond_slave_1): Releasing backup interface [ 75.218580][ T7008] team0: Port device team_slave_0 removed [ 75.240152][ T7008] team0: Port device team_slave_1 removed [ 75.242193][ T7008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.242212][ T7008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.243869][ T7008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.243886][ T7008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.248462][ T7008] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 75.320004][ T43] audit: type=1400 audit(1789040550.218:539): avc: denied { create } for pid=7020 comm="syz.4.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.320489][ T43] audit: type=1400 audit(1789040550.218:540): avc: denied { bind } for pid=7020 comm="syz.4.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.348406][ T43] audit: type=1400 audit(1789040550.248:541): avc: denied { setopt } for pid=7020 comm="syz.4.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.348920][ T43] audit: type=1400 audit(1789040550.248:542): avc: denied { accept } for pid=7020 comm="syz.4.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.378842][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 75.486617][ T7041] netlink: 'syz.1.393': attribute type 2 has an invalid length. [ 75.486630][ T7041] netlink: 'syz.1.393': attribute type 1 has an invalid length. [ 75.486637][ T7041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.393'. [ 75.486644][ T7041] netlink: 'syz.1.393': attribute type 2 has an invalid length. [ 75.486650][ T7041] netlink: 'syz.1.393': attribute type 1 has an invalid length. [ 75.486656][ T7041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.393'. [ 75.486663][ T7041] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 75.520284][ T7038] netlink: 36 bytes leftover after parsing attributes in process `syz.4.392'. [ 75.520995][ T7038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7038 comm=syz.4.392 [ 75.522657][ T43] audit: type=1400 audit(1789040550.418:543): avc: denied { audit_control } for pid=7037 comm="syz.4.392" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.561274][ T7044] netlink: 444 bytes leftover after parsing attributes in process `syz.1.394'. [ 75.596285][ T7050] netlink: 'syz.4.397': attribute type 8 has an invalid length. [ 75.601916][ T7050] Invalid logical block size (-1) [ 75.616213][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 75.731096][ T7059] FAULT_INJECTION: forcing a failure. [ 75.731096][ T7059] name failslab, interval 1, probability 0, space 0, times 0 [ 75.731128][ T7059] CPU: 0 UID: 0 PID: 7059 Comm: syz.1.400 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.731153][ T7059] Tainted: [L]=SOFTLOCKUP [ 75.731160][ T7059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.731188][ T7059] Call Trace: [ 75.731201][ T7059] [ 75.731209][ T7059] dump_stack_lvl+0x100/0x190 [ 75.731249][ T7059] should_fail_ex.cold+0x5/0xa [ 75.731274][ T7059] should_failslab+0xc2/0x120 [ 75.731302][ T7059] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 75.731323][ T7059] ? sock_alloc_inode+0x26/0x2c0 [ 75.731354][ T7059] ? __pfx_sock_alloc_inode+0x10/0x10 [ 75.731377][ T7059] sock_alloc_inode+0x26/0x2c0 [ 75.731399][ T7059] ? __pfx_sock_alloc_inode+0x10/0x10 [ 75.731422][ T7059] alloc_inode+0x68/0x250 [ 75.731439][ T7059] sock_alloc+0x44/0x280 [ 75.731459][ T7059] ? security_socket_create+0x7f/0x250 [ 75.731489][ T7059] __sock_create+0xc2/0x860 [ 75.731519][ T7059] __sys_socket+0x14d/0x260 [ 75.731547][ T7059] ? __pfx___sys_socket+0x10/0x10 [ 75.731581][ T7059] __x64_sys_socket+0x72/0xb0 [ 75.731607][ T7059] ? lockdep_hardirqs_on+0x7d/0x110 [ 75.731636][ T7059] do_syscall_64+0x123/0x790 [ 75.731662][ T7059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.731682][ T7059] RIP: 0033:0x7f706a99e159 [ 75.731698][ T7059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.731716][ T7059] RSP: 002b:00007f706b810028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 75.731738][ T7059] RAX: ffffffffffffffda RBX: 00007f706ac25fa0 RCX: 00007f706a99e159 [ 75.731750][ T7059] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 75.731760][ T7059] RBP: 00007f706aa3503b R08: 0000000000000000 R09: 0000000000000000 [ 75.731771][ T7059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.731781][ T7059] R13: 00007f706ac26038 R14: 00007f706ac25fa0 R15: 00007fff3f7a7d38 [ 75.731806][ T7059] [ 75.731986][ T7059] socket: no more sockets [ 75.735677][ T7059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.400'. [ 75.738737][ T43] audit: type=1400 audit(1789040550.638:544): avc: denied { ioctl } for pid=7058 comm="syz.1.400" path="socket:[17245]" dev="sockfs" ino=17245 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.738963][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.400'. [ 75.820680][ T7061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.820693][ T7061] IPv6: NLM_F_CREATE should be set when creating new route [ 75.820713][ T7061] IPv6: NLM_F_CREATE should be set when creating new route [ 75.926576][ T43] audit: type=1400 audit(1789040550.818:545): avc: denied { create } for pid=7068 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 75.931462][ T43] audit: type=1400 audit(1789040550.828:546): avc: denied { setopt } for pid=7068 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.944548][ T7067] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 75.944571][ T7067] flags: 0x57ff00000002000(reserved|node=1|zone=2|lastcpupid=0x7ff) [ 75.944595][ T7067] raw: 057ff00000002000 0000000000000000 dead000000000122 0000000000000000 [ 75.944611][ T7067] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 75.944622][ T7067] page dumped because: unmovable page [ 75.944631][ T7067] page_owner tracks the page as allocated [ 75.944637][ T7067] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 9586296546 [ 75.944661][ T7067] post_alloc_hook+0xfd/0x120 [ 75.944691][ T7067] get_page_from_freelist+0x110d/0x35d0 [ 75.944719][ T7067] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 75.944748][ T7067] alloc_pages_mpol+0x201/0x550 [ 75.944801][ T7067] alloc_pages_noprof+0x1a/0x160 [ 75.944825][ T7067] get_zeroed_page_noprof+0x18/0xb0 [ 75.944846][ T7067] comedi_buf_alloc+0x648/0xa00 [ 75.944871][ T7067] comedi_device_postconfig+0x3dc/0xbc0 [ 75.944900][ T7067] comedi_auto_config+0x19b/0x250 [ 75.944924][ T7067] comedi_test_init+0xf7/0x150 [ 75.944942][ T7067] do_one_initcall+0x11c/0x6f0 [ 75.944960][ T7067] kernel_init_freeable+0x6ea/0x7b0 [ 75.944983][ T7067] kernel_init+0x21/0x1e0 [ 75.945011][ T7067] ret_from_fork+0x730/0xd60 [ 75.945029][ T7067] ret_from_fork_asm+0x1a/0x30 [ 75.945046][ T7067] page last free pid 1 tgid 1 ts 9416868751 stack trace: [ 75.945057][ T7067] free_pages_prepare+0x586/0xe00 [ 75.945081][ T7067] __free_contig_range_common+0x14f/0x250 [ 75.945106][ T7067] free_pages_bulk+0x12a/0x200 [ 75.945121][ T7067] vm_area_free_pages+0xb2/0x2a0 [ 75.945137][ T7067] vfree+0xf7/0x6d0 [ 75.945156][ T7067] tpg_free+0x23a/0x490 [ 75.945178][ T7067] vivid_dev_release+0xd0/0x160 [ 75.945194][ T7067] v4l2_device_put+0xa3/0xd0 [ 75.945217][ T7067] vivid_probe.cold+0xf88/0x921e [ 75.945241][ T7067] platform_probe+0x106/0x1d0 [ 75.945268][ T7067] really_probe+0x241/0xa60 [ 75.945285][ T7067] __driver_probe_device+0x210/0x460 [ 75.945303][ T7067] driver_probe_device+0x4a/0x140 [ 75.945318][ T7067] __driver_attach+0x21f/0x5b0 [ 75.945335][ T7067] bus_for_each_dev+0x13e/0x1d0 [ 75.945359][ T7067] bus_add_driver+0x305/0x5b0 [ 76.095970][ T7079] CUSE: unknown device info "" [ 76.095979][ T7079] CUSE: unknown device info "" [ 76.095983][ T7079] CUSE: unknown device info "" [ 76.095995][ T7079] CUSE: unknown device info "" [ 76.095998][ T7079] CUSE: zero length info key specified [ 76.100892][ T7079] netfs: Cache "CacheFiles" added (type cachefiles) [ 76.100912][ T7079] CacheFiles: File cache on CacheFiles registered [ 76.101859][ T7078] CacheFiles: File cache on CacheFiles unregistering [ 76.101867][ T7078] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 76.110417][ T7081] FAULT_INJECTION: forcing a failure. [ 76.110417][ T7081] name failslab, interval 1, probability 0, space 0, times 0 [ 76.110438][ T7081] CPU: 3 UID: 0 PID: 7081 Comm: syz.4.411 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.110454][ T7081] Tainted: [L]=SOFTLOCKUP [ 76.110458][ T7081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.110478][ T7081] Call Trace: [ 76.110483][ T7081] [ 76.110488][ T7081] dump_stack_lvl+0x100/0x190 [ 76.110508][ T7081] should_fail_ex.cold+0x5/0xa [ 76.110526][ T7081] should_failslab+0xc2/0x120 [ 76.110540][ T7081] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 76.110555][ T7081] ? lock_acquire+0x1d1/0x380 [ 76.110566][ T7081] ? kstrdup_const+0x63/0x80 [ 76.110585][ T7081] kstrdup+0x51/0xe0 [ 76.110601][ T7081] kstrdup_const+0x63/0x80 [ 76.110618][ T7081] alloc_vfsmnt+0xe5/0x710 [ 76.110636][ T7081] clone_mnt+0x4b/0x930 [ 76.110653][ T7081] copy_tree+0x329/0xbf0 [ 76.110670][ T7081] copy_mnt_ns+0x3fa/0x1180 [ 76.110689][ T7081] ? __pfx_copy_mnt_ns+0x10/0x10 [ 76.110706][ T7081] ? create_new_namespaces+0x30/0xac0 [ 76.110721][ T7081] create_new_namespaces+0xd3/0xac0 [ 76.110733][ T7081] ? bpf_lsm_capable+0x9/0x10 [ 76.110747][ T7081] ? security_capable+0x80/0x260 [ 76.110765][ T7081] unshare_nsproxy_namespaces+0xf2/0x220 [ 76.110784][ T7081] ksys_unshare+0x4a2/0xa70 [ 76.110798][ T7081] ? __pfx_ksys_unshare+0x10/0x10 [ 76.110811][ T7081] ? ksys_write+0x1ac/0x250 [ 76.110827][ T7081] __x64_sys_unshare+0x31/0x40 [ 76.110840][ T7081] do_syscall_64+0x123/0x790 [ 76.110858][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.110869][ T7081] RIP: 0033:0x7fad72d9e159 [ 76.110879][ T7081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.110889][ T7081] RSP: 002b:00007fad70ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 76.110900][ T7081] RAX: ffffffffffffffda RBX: 00007fad73025fa0 RCX: 00007fad72d9e159 [ 76.110908][ T7081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024020400 [ 76.110916][ T7081] RBP: 00007fad72e3503b R08: 0000000000000000 R09: 0000000000000000 [ 76.110923][ T7081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.110930][ T7081] R13: 00007fad73026038 R14: 00007fad73025fa0 R15: 00007ffe2b14a398 [ 76.110946][ T7081] [ 76.222827][ T7088] netlink: 'syz.3.414': attribute type 1 has an invalid length. [ 76.247610][ T7088] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.077266][ T5087] Bluetooth: hci4: command tx timeout [ 77.103098][ T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.105643][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.106670][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.117794][ T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.118708][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.394351][ T7133] ip_tables: iptables: counters copy to user failed while replacing table [ 77.472644][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.518069][ T7146] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 77.539247][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.539614][ T7148] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.539755][ T7148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.570738][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.653383][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.729643][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.810777][ T7106] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.810844][ T7106] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.810898][ T7106] bridge_slave_0: entered allmulticast mode [ 77.811654][ T7106] bridge_slave_0: entered promiscuous mode [ 77.816551][ T7106] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.816675][ T7106] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.816794][ T7106] bridge_slave_1: entered allmulticast mode [ 77.818185][ T7106] bridge_slave_1: entered promiscuous mode [ 77.861827][ T7106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.867697][ T7106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.932905][ T7106] team0: Port device team_slave_0 added [ 77.935257][ T7106] team0: Port device team_slave_1 added [ 77.990568][ T7106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.990584][ T7106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.990605][ T7106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.992617][ T7106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.992631][ T7106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.992652][ T7106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.994787][ T12] bridge_slave_1: left allmulticast mode [ 77.994806][ T12] bridge_slave_1: left promiscuous mode [ 77.994961][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.998309][ T12] bridge_slave_0: left allmulticast mode [ 77.998327][ T12] bridge_slave_0: left promiscuous mode [ 77.998516][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.122313][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.124782][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.126059][ T12] bond0 (unregistering): Released all slaves [ 78.190253][ T7106] hsr_slave_0: entered promiscuous mode [ 78.190691][ T7106] hsr_slave_1: entered promiscuous mode [ 78.193329][ T7106] debugfs: 'hsr0' already exists in 'hsr' [ 78.193348][ T7106] Cannot create hsr debugfs directory [ 78.212497][ C2] tipc: RX(1000001): key[1] is activated [ 78.394530][ T5442] 8021q: adding VLAN 0 to HW filter on device eth6 [ 78.458254][ T12] hsr_slave_0: left promiscuous mode [ 78.459752][ T12] hsr_slave_1: left promiscuous mode [ 78.460415][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.460433][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.462342][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.462358][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.467457][ T12] veth1_macvtap: left promiscuous mode [ 78.467476][ T12] veth0_macvtap: left promiscuous mode [ 78.467519][ T12] veth1_vlan: left promiscuous mode [ 78.467548][ T12] veth0_vlan: left promiscuous mode [ 78.689453][ T12] team0 (unregistering): Port device team_slave_1 removed [ 78.697273][ T12] team0 (unregistering): Port device team_slave_0 removed [ 78.798283][ T5442] 8021q: adding VLAN 0 to HW filter on device eth7 [ 78.814616][ T7106] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.820078][ T7106] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.820712][ T7106] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.823541][ T7106] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.824384][ T7106] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.832210][ T7106] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.832870][ T7106] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 78.839124][ T7106] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.914524][ T7106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.929960][ T7106] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.938647][ T6714] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.938692][ T6714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.939442][ T6714] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.939489][ T6714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.083732][ T5442] 8021q: adding VLAN 0 to HW filter on device eth8 [ 79.091131][ T65] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 79.158040][ T65] Bluetooth: hci2: command tx timeout [ 79.158467][ T5087] Bluetooth: hci4: command tx timeout [ 79.274040][ T7106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.295135][ T7244] kvm [7239]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x400006 [ 79.358907][ T5442] 8021q: adding VLAN 0 to HW filter on device eth9 [ 79.490805][ T7106] veth0_vlan: entered promiscuous mode [ 79.498072][ T7106] veth1_vlan: entered promiscuous mode [ 79.513076][ T7106] veth0_macvtap: entered promiscuous mode [ 79.515187][ T7106] veth1_macvtap: entered promiscuous mode [ 79.521672][ T7106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.524925][ T7106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.533537][ T5804] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.533647][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.533682][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.568898][ T5804] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.632269][ T6714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.632283][ T6714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.655056][ T6714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.655068][ T6714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.785045][ T7275] veth0_to_bridge: entered promiscuous mode [ 79.786730][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.811366][ T7280] __nla_validate_parse: 8 callbacks suppressed [ 79.811377][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 79.880577][ T7290] syz.3.461 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.952924][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 79.953554][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 79.953945][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 79.953958][ T43] audit: type=1400 audit(1789040554.848:569): avc: denied { ioctl } for pid=7297 comm="syz.3.463" path="socket:[20450]" dev="sockfs" ino=20450 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 79.956306][ T43] audit: type=1400 audit(1789040554.848:570): avc: denied { write } for pid=7297 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 80.048948][ T7302] xt_limit: Overflow, try lower: 0/0 [ 80.055403][ T7301] Process accounting resumed [ 80.072133][ T7310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.467'. [ 80.072345][ T7310] netlink: 36 bytes leftover after parsing attributes in process `syz.3.467'. [ 80.072474][ T7310] netlink: 36 bytes leftover after parsing attributes in process `syz.3.467'. [ 80.136404][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.471'. [ 80.201350][ T43] audit: type=1400 audit(1789040555.098:571): avc: denied { bind } for pid=7329 comm="syz.5.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.203085][ T7331] tipc: Can't bind to reserved service type 2 [ 80.208031][ T43] audit: type=1400 audit(1789040555.108:572): avc: denied { read append } for pid=7329 comm="syz.5.475" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.208360][ T43] audit: type=1400 audit(1789040555.108:573): avc: denied { open } for pid=7329 comm="syz.5.475" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.208929][ T43] audit: type=1400 audit(1789040555.108:574): avc: denied { ioctl } for pid=7329 comm="syz.5.475" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.249099][ T43] audit: type=1400 audit(1789040555.148:575): avc: denied { mounton } for pid=7334 comm="syz.4.477" path="/" dev="tmpfs" ino=205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 80.329828][ T7342] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 80.359375][ T43] audit: type=1400 audit(1789040555.258:576): avc: denied { setopt } for pid=7344 comm="syz.5.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 80.359673][ T7345] netlink: 44 bytes leftover after parsing attributes in process `syz.5.481'. [ 80.395455][ T43] audit: type=1400 audit(1789040555.288:577): avc: denied { ioctl } for pid=7336 comm="syz.1.478" path="socket:[22592]" dev="sockfs" ino=22592 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.414767][ T7337] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 80.426944][ T43] audit: type=1400 audit(1789040555.318:578): avc: denied { read } for pid=7336 comm="syz.1.478" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 80.572407][ T50] hid (null): unknown global tag 0xc [ 80.579675][ T50] hid-generic FF86:0006:FFFF.0003: unknown main item tag 0x2 [ 80.579711][ T50] hid-generic FF86:0006:FFFF.0003: unknown global tag 0xc [ 80.579726][ T50] hid-generic FF86:0006:FFFF.0003: item 0 4 1 12 parsing failed [ 80.580425][ T50] hid-generic FF86:0006:FFFF.0003: probe with driver hid-generic failed with error -22 [ 80.917172][ T2153] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 81.067846][ T2153] usb 6-1: Using ep0 maxpacket: 32 [ 81.069153][ T2153] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 81.069964][ T2153] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 81.071722][ T2153] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 81.071735][ T2153] usb 6-1: Product: syz [ 81.071743][ T2153] usb 6-1: Manufacturer: syz [ 81.071751][ T2153] usb 6-1: SerialNumber: syz [ 81.074417][ T2153] usb 6-1: config 0 descriptor?? [ 81.074900][ T7378] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 81.237215][ T5087] Bluetooth: hci2: command tx timeout [ 81.337260][ T7406] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 81.337723][ T7406] Cannot find add_set index 0 as target [ 81.522581][ T7415] FAULT_INJECTION: forcing a failure. [ 81.522581][ T7415] name failslab, interval 1, probability 0, space 0, times 0 [ 81.522613][ T7415] CPU: 3 UID: 0 PID: 7415 Comm: syz.5.509 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.522637][ T7415] Tainted: [L]=SOFTLOCKUP [ 81.522644][ T7415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.522653][ T7415] Call Trace: [ 81.522660][ T7415] [ 81.522668][ T7415] dump_stack_lvl+0x100/0x190 [ 81.522698][ T7415] should_fail_ex.cold+0x5/0xa [ 81.522727][ T7415] should_failslab+0xc2/0x120 [ 81.522758][ T7415] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 81.522780][ T7415] ? __d_alloc+0x35/0xa50 [ 81.522811][ T7415] __d_alloc+0x35/0xa50 [ 81.522840][ T7415] d_alloc_pseudo+0x1c/0xc0 [ 81.522858][ T7415] alloc_file_pseudo+0x118/0x290 [ 81.522884][ T7415] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 81.522909][ T7415] ? alloc_fd+0x471/0x7a0 [ 81.522957][ T7415] sock_alloc_file+0x50/0x210 [ 81.522982][ T7415] __sys_socket+0x1c0/0x260 [ 81.523009][ T7415] ? fput+0x7c/0x100 [ 81.523029][ T7415] ? __pfx___sys_socket+0x10/0x10 [ 81.523054][ T7415] ? ksys_write+0x1ac/0x250 [ 81.523071][ T7415] ? __pfx_ksys_write+0x10/0x10 [ 81.523094][ T7415] __x64_sys_socket+0x72/0xb0 [ 81.523121][ T7415] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.523151][ T7415] do_syscall_64+0x123/0x790 [ 81.523178][ T7415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.523201][ T7415] RIP: 0033:0x7fda5339e159 [ 81.523218][ T7415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.523235][ T7415] RSP: 002b:00007fda515f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 81.523254][ T7415] RAX: ffffffffffffffda RBX: 00007fda53625fa0 RCX: 00007fda5339e159 [ 81.523267][ T7415] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000018 [ 81.523278][ T7415] RBP: 00007fda5343503b R08: 0000000000000000 R09: 0000000000000000 [ 81.523289][ T7415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.523300][ T7415] R13: 00007fda53626038 R14: 00007fda53625fa0 R15: 00007fff33864d78 [ 81.523324][ T7415] [ 81.664108][ T7424] netlink: 100 bytes leftover after parsing attributes in process `syz.3.512'. [ 81.713089][ T7425] xt_hashlimit: size too large, truncated to 1048576 [ 82.047744][ T7447] netlink: 348 bytes leftover after parsing attributes in process `syz.5.518'. [ 82.087379][ T5827] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 82.175937][ T7453] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 82.178622][ T7453] sctp: [Deprecated]: syz.5.519 (pid 7453) Use of int in maxseg socket option. [ 82.178622][ T7453] Use struct sctp_assoc_value instead [ 82.258792][ T5827] usb 8-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 82.261087][ T5827] usb 8-1: config 0 has no interfaces? [ 82.263455][ T5827] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.263474][ T5827] usb 8-1: Product: syz [ 82.263486][ T5827] usb 8-1: Manufacturer: syz [ 82.263498][ T5827] usb 8-1: SerialNumber: syz [ 82.267520][ T5827] usb 8-1: config 0 descriptor?? [ 82.469266][ T7436] FAULT_INJECTION: forcing a failure. [ 82.469266][ T7436] name failslab, interval 1, probability 0, space 0, times 0 [ 82.469288][ T7436] CPU: 2 UID: 0 PID: 7436 Comm: syz.3.515 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.469303][ T7436] Tainted: [L]=SOFTLOCKUP [ 82.469307][ T7436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.469313][ T7436] Call Trace: [ 82.469317][ T7436] [ 82.469322][ T7436] dump_stack_lvl+0x100/0x190 [ 82.469342][ T7436] should_fail_ex.cold+0x5/0xa [ 82.469357][ T7436] should_failslab+0xc2/0x120 [ 82.469372][ T7436] kmem_cache_alloc_noprof+0x92/0x6a0 [ 82.469385][ T7436] ? security_file_alloc+0x34/0x2c0 [ 82.469401][ T7436] security_file_alloc+0x34/0x2c0 [ 82.469414][ T7436] init_file+0x95/0x480 [ 82.469428][ T7436] alloc_empty_file+0x79/0x1c0 [ 82.469444][ T7436] path_openat+0xdb/0x2440 [ 82.469460][ T7436] ? __pfx_path_openat+0x10/0x10 [ 82.469477][ T7436] do_file_open+0x20e/0x430 [ 82.469491][ T7436] ? __pfx_do_file_open+0x10/0x10 [ 82.469514][ T7436] ? _raw_spin_unlock+0x28/0x50 [ 82.469526][ T7436] ? alloc_fd+0x471/0x7a0 [ 82.469543][ T7436] do_sys_openat2+0x10f/0x1e0 [ 82.469558][ T7436] ? __pfx_do_sys_openat2+0x10/0x10 [ 82.469573][ T7436] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.469594][ T7436] ? __fget_files+0x21f/0x3d0 [ 82.469609][ T7436] __x64_sys_openat+0x12d/0x210 [ 82.469624][ T7436] ? __pfx___x64_sys_openat+0x10/0x10 [ 82.469638][ T7436] ? ksys_write+0x1ac/0x250 [ 82.469654][ T7436] do_syscall_64+0x123/0x790 [ 82.469669][ T7436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.469681][ T7436] RIP: 0033:0x7fd04b75e98e [ 82.469690][ T7436] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 82.469701][ T7436] RSP: 002b:00007fd04c713f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.469716][ T7436] RAX: ffffffffffffffda RBX: 00007fd04c7146c0 RCX: 00007fd04b75e98e [ 82.469727][ T7436] RDX: 0000000000000000 RSI: 00007fd04b834776 RDI: ffffffffffffff9c [ 82.469737][ T7436] RBP: 00007fd04c714090 R08: 0000000000000000 R09: 0000000000000000 [ 82.469747][ T7436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.469757][ T7436] R13: 00007fd04ba26038 R14: 00007fd04ba25fa0 R15: 00007fff66f37908 [ 82.469781][ T7436] [ 82.473432][ T2153] usb 8-1: USB disconnect, device number 10 [ 82.519832][ T65] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 83.104852][ T7465] ./dev/sda1: Can't open blockdev [ 83.167933][ T65] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 83.168056][ T65] Bluetooth: hci3: Injecting HCI hardware error event [ 83.169593][ T5087] Bluetooth: hci3: hardware error 0x00 [ 83.247850][ T7474] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 83.317350][ T65] Bluetooth: hci2: command tx timeout [ 83.328013][ T7478] Cannot find add_set index 0 as target [ 83.607688][ T50] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 83.679864][ T42] usb 6-1: USB disconnect, device number 3 [ 83.770451][ T50] usb 8-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 83.771008][ T50] usb 8-1: config 0 has no interfaces? [ 83.775867][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.775881][ T50] usb 8-1: Product: syz [ 83.775888][ T50] usb 8-1: Manufacturer: syz [ 83.775896][ T50] usb 8-1: SerialNumber: syz [ 83.793406][ T50] usb 8-1: config 0 descriptor?? [ 83.927134][ T5834] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 84.087167][ T5834] usb 10-1: Using ep0 maxpacket: 32 [ 84.088100][ T5834] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 84.089095][ T5834] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 84.089118][ T5834] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 84.089141][ T5834] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 84.089159][ T5834] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 84.089176][ T5834] usb 10-1: config 0 interface 0 has no altsetting 0 [ 84.090921][ T5834] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 84.090937][ T5834] usb 10-1: Product: syz [ 84.090946][ T5834] usb 10-1: Manufacturer: syz [ 84.090955][ T5834] usb 10-1: SerialNumber: syz [ 84.095780][ T5834] usb 10-1: config 0 descriptor?? [ 84.100803][ T7513] xt_hashlimit: size too large, truncated to 1048576 [ 84.113999][ T7479] bond3: (slave bond_slave_0): Device is not bonding slave [ 84.114013][ T7479] bond3: option active_slave: invalid value (bond_slave_0) [ 84.115198][ T5834] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 84.119362][ T7479] bond3 (unregistering): Released all slaves [ 84.121133][ T5834] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 84.292935][ T7517] smpboot: CPU 1 is now offline [ 84.306273][ T5834] usb 10-1: USB disconnect, device number 2 [ 84.306408][ C0] ldusb 10-1:0.0: usb_submit_urb failed (-19) [ 84.309646][ T5834] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 84.329541][ T2153] usb 8-1: USB disconnect, device number 11 [ 84.649807][ T7524] FAULT_INJECTION: forcing a failure. [ 84.649807][ T7524] name failslab, interval 1, probability 0, space 0, times 0 [ 84.649838][ T7524] CPU: 2 UID: 0 PID: 7524 Comm: syz.1.542 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.649861][ T7524] Tainted: [L]=SOFTLOCKUP [ 84.649867][ T7524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.649878][ T7524] Call Trace: [ 84.649883][ T7524] [ 84.649890][ T7524] dump_stack_lvl+0x100/0x190 [ 84.649918][ T7524] should_fail_ex.cold+0x5/0xa [ 84.649942][ T7524] should_failslab+0xc2/0x120 [ 84.649963][ T7524] __kmalloc_cache_noprof+0x91/0x6d0 [ 84.649994][ T7524] ? rtnl_newlink+0x139/0x2620 [ 84.650016][ T7524] ? __pfx_rtnl_newlink+0x10/0x10 [ 84.650036][ T7524] rtnl_newlink+0x139/0x2620 [ 84.650065][ T7524] ? __pfx_rtnl_newlink+0x10/0x10 [ 84.650083][ T7524] ? avc_has_perm_noaudit+0x56/0x3b0 [ 84.650108][ T7524] ? find_held_lock+0x2b/0x80 [ 84.650128][ T7524] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 84.650150][ T7524] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 84.650183][ T7524] ? __lock_acquire+0x5c0/0x1f40 [ 84.650209][ T7524] ? lock_acquire+0x1d1/0x380 [ 84.650226][ T7524] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 84.650245][ T7524] ? find_held_lock+0x2b/0x80 [ 84.650266][ T7524] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 84.650285][ T7524] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 84.650306][ T7524] ? __pfx_rtnl_newlink+0x10/0x10 [ 84.650327][ T7524] rtnetlink_rcv_msg+0x95e/0xe90 [ 84.650349][ T7524] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 84.650376][ T7524] ? ref_tracker_free+0x37e/0x6c0 [ 84.650401][ T7524] netlink_rcv_skb+0x159/0x420 [ 84.650420][ T7524] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 84.650442][ T7524] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 84.650470][ T7524] ? netlink_deliver_tap+0x1ae/0xcc0 [ 84.650501][ T7524] netlink_unicast+0x585/0x850 [ 84.650521][ T7524] ? __pfx_netlink_unicast+0x10/0x10 [ 84.650545][ T7524] netlink_sendmsg+0x8b0/0xda0 [ 84.650565][ T7524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.650585][ T7524] ? selinux_socket_sendmsg+0x198/0x2f0 [ 84.650615][ T7524] ____sys_sendmsg+0xa4d/0xbe0 [ 84.650637][ T7524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.650655][ T7524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.650683][ T7524] ? lock_acquire+0x1d1/0x380 [ 84.650699][ T7524] ? get_pid_task+0x2a/0x250 [ 84.650724][ T7524] ___sys_sendmsg+0x190/0x1e0 [ 84.650749][ T7524] ? __pfx____sys_sendmsg+0x10/0x10 [ 84.650772][ T7524] ? get_pid_task+0x106/0x250 [ 84.650802][ T7524] ? find_held_lock+0x2b/0x80 [ 84.650838][ T7524] __sys_sendmsg+0x160/0x210 [ 84.650858][ T7524] ? __pfx___sys_sendmsg+0x10/0x10 [ 84.650889][ T7524] do_syscall_64+0x123/0x790 [ 84.650913][ T7524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.650931][ T7524] RIP: 0033:0x7f706a99e159 [ 84.650945][ T7524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.650960][ T7524] RSP: 002b:00007f706b810028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.650981][ T7524] RAX: ffffffffffffffda RBX: 00007f706ac25fa0 RCX: 00007f706a99e159 [ 84.650991][ T7524] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 84.651001][ T7524] RBP: 00007f706b810090 R08: 0000000000000000 R09: 0000000000000000 [ 84.651011][ T7524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.651021][ T7524] R13: 00007f706ac26038 R14: 00007f706ac25fa0 R15: 00007fff3f7a7d38 [ 84.651043][ T7524] [ 85.004587][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 85.004599][ T43] audit: type=1400 audit(1789040559.898:594): avc: denied { write } for pid=7542 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.135712][ T43] audit: type=1400 audit(1789040560.028:595): avc: denied { create } for pid=7549 comm="syz.5.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.145298][ T43] audit: type=1400 audit(1789040560.038:596): avc: denied { setopt } for pid=7549 comm="syz.5.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.147789][ T43] audit: type=1400 audit(1789040560.048:597): avc: denied { read } for pid=7549 comm="syz.5.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.148148][ T43] audit: type=1400 audit(1789040560.048:598): avc: denied { ioctl } for pid=7549 comm="syz.5.548" path="socket:[22471]" dev="sockfs" ino=22471 ioctlcmd=0x586f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.202627][ T7552] FAULT_INJECTION: forcing a failure. [ 85.202627][ T7552] name failslab, interval 1, probability 0, space 0, times 0 [ 85.202648][ T7552] CPU: 3 UID: 0 PID: 7552 Comm: syz.3.549 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.202662][ T7552] Tainted: [L]=SOFTLOCKUP [ 85.202666][ T7552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.202672][ T7552] Call Trace: [ 85.202677][ T7552] [ 85.202681][ T7552] dump_stack_lvl+0x100/0x190 [ 85.202699][ T7552] should_fail_ex.cold+0x5/0xa [ 85.202716][ T7552] should_failslab+0xc2/0x120 [ 85.202731][ T7552] __kmalloc_node_noprof+0xff/0x880 [ 85.202743][ T7552] ? __get_vm_area_node+0x1ff/0x350 [ 85.202756][ T7552] ? __get_vm_area_node+0x22b/0x350 [ 85.202769][ T7552] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 85.202786][ T7552] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 85.202805][ T7552] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 85.202821][ T7552] ? find_held_lock+0x2b/0x80 [ 85.202837][ T7552] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 85.202852][ T7552] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 85.202869][ T7552] ? avc_has_perm_noaudit+0x145/0x3b0 [ 85.202884][ T7552] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 85.202897][ T7552] __vmalloc_node_noprof+0xad/0xf0 [ 85.202911][ T7552] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 85.202926][ T7552] __vmalloc_noprof+0xa3/0x120 [ 85.202939][ T7552] ? __pfx___vmalloc_noprof+0x10/0x10 [ 85.202962][ T7552] ? rcu_is_watching+0x13/0xc0 [ 85.202978][ T7552] ? cap_capable+0x107/0x430 [ 85.202996][ T7552] bpf_prog_alloc_no_stats+0x59/0x690 [ 85.203010][ T7552] ? security_capable+0x80/0x260 [ 85.203027][ T7552] bpf_prog_alloc+0x3b/0x200 [ 85.203040][ T7552] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.203054][ T7552] bpf_prog_load+0x49e/0x2a80 [ 85.203073][ T7552] ? __pfx_bpf_prog_load+0x10/0x10 [ 85.203098][ T7552] __sys_bpf+0x1f46/0x4a30 [ 85.203112][ T7552] ? __pfx___sys_bpf+0x10/0x10 [ 85.203124][ T7552] ? find_held_lock+0x2b/0x80 [ 85.203138][ T7552] ? futex_wake+0x4ea/0x5e0 [ 85.203163][ T7552] ? rcu_read_lock_any_held+0x6a/0x90 [ 85.203178][ T7552] ? find_held_lock+0x2b/0x80 [ 85.203193][ T7552] ? ksys_write+0x190/0x250 [ 85.203203][ T7552] ? ksys_write+0x190/0x250 [ 85.203221][ T7552] ? __x64_sys_futex+0x34f/0x4d0 [ 85.203235][ T7552] ? __x64_sys_futex+0x358/0x4d0 [ 85.203250][ T7552] ? xfd_validate_state+0x129/0x190 [ 85.203281][ T7552] ? __x64_sys_bpf+0xce/0x140 [ 85.203294][ T7552] __x64_sys_bpf+0xce/0x140 [ 85.203306][ T7552] ? do_syscall_64+0xae/0x790 [ 85.203323][ T7552] do_syscall_64+0x123/0x790 [ 85.203339][ T7552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.203352][ T7552] RIP: 0033:0x7fd04b79e159 [ 85.203362][ T7552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.203373][ T7552] RSP: 002b:00007fd04c714028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.203386][ T7552] RAX: ffffffffffffffda RBX: 00007fd04ba25fa0 RCX: 00007fd04b79e159 [ 85.203393][ T7552] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000005 [ 85.203400][ T7552] RBP: 00007fd04b83503b R08: 0000000000000000 R09: 0000000000000000 [ 85.203406][ T7552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.203413][ T7552] R13: 00007fd04ba26038 R14: 00007fd04ba25fa0 R15: 00007fff66f37908 [ 85.203426][ T7552] [ 85.203594][ T7552] syz.3.549: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 85.203677][ T7552] CPU: 3 UID: 0 PID: 7552 Comm: syz.3.549 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.203693][ T7552] Tainted: [L]=SOFTLOCKUP [ 85.203698][ T7552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.203705][ T7552] Call Trace: [ 85.203708][ T7552] [ 85.203713][ T7552] dump_stack_lvl+0x100/0x190 [ 85.203731][ T7552] warn_alloc.cold+0x9e/0xb2 [ 85.203743][ T7552] ? __pfx_warn_alloc+0x10/0x10 [ 85.203761][ T7552] ? dump_stack_lvl+0x17c/0x190 [ 85.203777][ T7552] ? rcu_is_watching+0x13/0xc0 [ 85.203792][ T7552] ? __kasan_kmalloc+0x8a/0xb0 [ 85.203805][ T7552] ? __kmalloc_node_noprof+0x360/0x880 [ 85.203816][ T7552] ? __get_vm_area_node+0x1ff/0x350 [ 85.203828][ T7552] ? __get_vm_area_node+0x22b/0x350 [ 85.203840][ T7552] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 85.203857][ T7552] __vmalloc_node_range_noprof+0x10f4/0x1420 [ 85.203876][ T7552] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 85.203892][ T7552] ? find_held_lock+0x2b/0x80 [ 85.203907][ T7552] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 85.203921][ T7552] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 85.203937][ T7552] ? avc_has_perm_noaudit+0x145/0x3b0 [ 85.203961][ T7552] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 85.203975][ T7552] __vmalloc_node_noprof+0xad/0xf0 [ 85.203989][ T7552] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 85.204006][ T7552] __vmalloc_noprof+0xa3/0x120 [ 85.204020][ T7552] ? __pfx___vmalloc_noprof+0x10/0x10 [ 85.204036][ T7552] ? rcu_is_watching+0x13/0xc0 [ 85.204052][ T7552] ? cap_capable+0x107/0x430 [ 85.204069][ T7552] bpf_prog_alloc_no_stats+0x59/0x690 [ 85.204082][ T7552] ? security_capable+0x80/0x260 [ 85.204099][ T7552] bpf_prog_alloc+0x3b/0x200 [ 85.204111][ T7552] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.204124][ T7552] bpf_prog_load+0x49e/0x2a80 [ 85.204141][ T7552] ? __pfx_bpf_prog_load+0x10/0x10 [ 85.204165][ T7552] __sys_bpf+0x1f46/0x4a30 [ 85.204179][ T7552] ? __pfx___sys_bpf+0x10/0x10 [ 85.204188][ T7552] ? find_held_lock+0x2b/0x80 [ 85.204202][ T7552] ? futex_wake+0x4ea/0x5e0 [ 85.204227][ T7552] ? rcu_read_lock_any_held+0x6a/0x90 [ 85.204261][ T7552] ? find_held_lock+0x2b/0x80 [ 85.204276][ T7552] ? ksys_write+0x190/0x250 [ 85.204287][ T7552] ? ksys_write+0x190/0x250 [ 85.204305][ T7552] ? __x64_sys_futex+0x34f/0x4d0 [ 85.204318][ T7552] ? __x64_sys_futex+0x358/0x4d0 [ 85.204334][ T7552] ? xfd_validate_state+0x129/0x190 [ 85.204348][ T7552] ? __x64_sys_bpf+0xce/0x140 [ 85.204357][ T7552] __x64_sys_bpf+0xce/0x140 [ 85.204368][ T7552] ? do_syscall_64+0xae/0x790 [ 85.204383][ T7552] do_syscall_64+0x123/0x790 [ 85.204398][ T7552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.204409][ T7552] RIP: 0033:0x7fd04b79e159 [ 85.204417][ T7552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.204428][ T7552] RSP: 002b:00007fd04c714028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.204438][ T7552] RAX: ffffffffffffffda RBX: 00007fd04ba25fa0 RCX: 00007fd04b79e159 [ 85.204447][ T7552] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000005 [ 85.204454][ T7552] RBP: 00007fd04b83503b R08: 0000000000000000 R09: 0000000000000000 [ 85.204460][ T7552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.204466][ T7552] R13: 00007fd04ba26038 R14: 00007fd04ba25fa0 R15: 00007fff66f37908 [ 85.204480][ T7552] [ 85.204484][ T7552] Mem-Info: [ 85.204490][ T7552] active_anon:48807 inactive_anon:0 isolated_anon:0 [ 85.204490][ T7552] active_file:8400 inactive_file:52837 isolated_file:0 [ 85.204490][ T7552] unevictable:1000 dirty:69 writeback:0 [ 85.204490][ T7552] slab_reclaimable:9122 slab_unreclaimable:70746 [ 85.204490][ T7552] mapped:32257 shmem:41233 pagetables:3668 [ 85.204490][ T7552] sec_pagetables:295 bounce:0 [ 85.204490][ T7552] kernel_misc_reclaimable:0 [ 85.204490][ T7552] free:404913 free_pcp:5075 free_cma:0 [ 85.204515][ T7552] Node 0 active_anon:194552kB inactive_anon:0kB active_file:33600kB inactive_file:207032kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:104132kB dirty:264kB writeback:0kB shmem:162256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13424kB pagetables:5400kB sec_pagetables:1180kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 85.204543][ T7552] Node 1 active_anon:676kB inactive_anon:0kB active_file:0kB inactive_file:4316kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:24896kB dirty:12kB writeback:0kB shmem:2676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:9272kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 85.204569][ T7552] Node 0 DMA free:8148kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4864kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:172kB local_pcp:64kB free_cma:0kB [ 85.204600][ T7552] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 85.204621][ T7552] Node 0 DMA32 free:32740kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:189680kB inactive_anon:0kB active_file:33600kB inactive_file:207032kB unevictable:2000kB writepending:264kB zspages:0kB present:2080628kB managed:1252920kB mlocked:0kB bounce:0kB free_pcp:13324kB local_pcp:10404kB free_cma:0kB [ 85.204655][ T7552] lowmem_reserve[]: 0 0 0 0 0 [ 85.204674][ T7552] Node 1 Normal free:1578764kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:676kB inactive_anon:0kB active_file:0kB inactive_file:4316kB unevictable:2000kB writepending:12kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:6792kB local_pcp:852kB free_cma:0kB [ 85.204703][ T7552] lowmem_reserve[]: 0 0 0 0 0 [ 85.204749][ T7552] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 4*256kB (U) 5*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 8100kB [ 85.214774][ T7552] Node 0 DMA32: 9*4kB (E) 178*8kB (UE) 147*16kB (UE) 171*32kB (UE) 162*64kB (UME) 52*128kB (UME) 19*256kB (UME) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 32708kB [ 85.214857][ T7552] Node 1 Normal: 1*4kB (U) 170*8kB (U) 282*16kB (UME) 266*32kB (UME) 263*64kB (UE) 252*128kB (UME) 243*256kB (UE) 230*512kB (UM) 214*1024kB (UME) 7*2048kB (UME) 269*4096kB (M) = 1578740kB [ 85.214941][ T7552] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.214957][ T7552] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 85.214965][ T7552] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.214974][ T7552] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 85.214982][ T7552] 102550 total pagecache pages [ 85.214987][ T7552] 0 pages in swap cache [ 85.214990][ T7552] Free swap = 124996kB [ 85.214994][ T7552] Total swap = 124996kB [ 85.214999][ T7552] 1048443 pages RAM [ 85.215003][ T7552] 0 pages HighMem/MovableOnly [ 85.215006][ T7552] 285903 pages reserved [ 85.215010][ T7552] 0 pages cma reserved [ 85.218908][ T43] audit: type=1400 audit(1789040560.118:599): avc: denied { read } for pid=7553 comm="syz.5.550" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 85.218938][ T43] audit: type=1400 audit(1789040560.118:600): avc: denied { open } for pid=7553 comm="syz.5.550" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 85.237691][ T5087] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 85.288470][ T43] audit: type=1400 audit(1789040560.188:601): avc: denied { write } for pid=7553 comm="syz.5.550" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 85.315141][ T7551] BUG: using smp_processor_id() in preemptible [00000000] code: syz.3.549/7551 [ 85.315156][ T7551] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 85.315180][ T7551] CPU: 3 UID: 0 PID: 7551 Comm: syz.3.549 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.315195][ T7551] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 85.315199][ T7551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.315205][ T7551] Call Trace: [ 85.315209][ T7551] [ 85.315214][ T7551] dump_stack_lvl+0x100/0x190 [ 85.315232][ T7551] check_preemption_disabled+0xd2/0xe0 [ 85.315249][ T7551] ? skb_queue_purge_reason+0x2aa/0x420 [ 85.315263][ T7551] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 85.315278][ T7551] ? skb_queue_purge_reason+0x2aa/0x420 [ 85.315293][ T7551] trace_kfree_skb+0x18b/0x230 [ 85.315308][ T7551] sk_skb_reason_drop+0xb7/0x1b0 [ 85.315322][ T7551] skb_queue_purge_reason+0x2aa/0x420 [ 85.315335][ T7551] ? synchronize_rcu_expedited+0x3c3/0x450 [ 85.315348][ T7551] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 85.315369][ T7551] packet_release+0x839/0xd70 [ 85.315384][ T7551] ? __pfx_packet_release+0x10/0x10 [ 85.315397][ T7551] ? __pfx_down_write+0x10/0x10 [ 85.315415][ T7551] __sock_release+0xb3/0x260 [ 85.315428][ T7551] ? __pfx_sock_close+0x10/0x10 [ 85.315440][ T7551] sock_close+0x1c/0x30 [ 85.315452][ T7551] __fput+0x3ff/0xb50 [ 85.315469][ T7551] task_work_run+0x150/0x240 [ 85.315486][ T7551] ? __pfx_task_work_run+0x10/0x10 [ 85.315505][ T7551] exit_to_user_mode_loop+0x1d8/0x700 [ 85.315518][ T7551] ? rcu_is_watching+0x13/0xc0 [ 85.315533][ T7551] do_syscall_64+0x661/0x790 [ 85.315549][ T7551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.315560][ T7551] RIP: 0033:0x7fd04b79e159 [ 85.315570][ T7551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.315580][ T7551] RSP: 002b:00007fff66f37a68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 85.315592][ T7551] RAX: 0000000000000000 RBX: 00007fff66f37b50 RCX: 00007fd04b79e159 [ 85.315599][ T7551] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 85.315605][ T7551] RBP: 0000000000014c4f R08: 0000000000000001 R09: 0000000000000000 [ 85.315611][ T7551] R10: 0000001b31f20000 R11: 0000000000000246 R12: 00007fff66f37b90 [ 85.315618][ T7551] R13: 00007fd04ba25fac R14: 0000000000014caf R15: 00007fd04ba25fa0 [ 85.315631][ T7551] [ 85.326699][ T7551] BUG: using smp_processor_id() in preemptible [00000000] code: syz.3.549/7551 [ 85.326719][ T7551] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 85.326752][ T7551] CPU: 0 UID: 0 PID: 7551 Comm: syz.3.549 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.326777][ T7551] Tainted: [L]=SOFTLOCKUP [ 85.326783][ T7551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.326794][ T7551] Call Trace: [ 85.326800][ T7551] [ 85.326808][ T7551] dump_stack_lvl+0x100/0x190 [ 85.326835][ T7551] check_preemption_disabled+0xd2/0xe0 [ 85.326879][ T7551] ? skb_queue_purge_reason+0x2aa/0x420 [ 85.326902][ T7551] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 85.326928][ T7551] ? skb_queue_purge_reason+0x2aa/0x420 [ 85.326950][ T7551] trace_kfree_skb+0x18b/0x230 [ 85.326974][ T7551] sk_skb_reason_drop+0xb7/0x1b0 [ 85.326998][ T7551] skb_queue_purge_reason+0x2aa/0x420 [ 85.327020][ T7551] ? synchronize_rcu_expedited+0x3c3/0x450 [ 85.327042][ T7551] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 85.327080][ T7551] packet_release+0x839/0xd70 [ 85.327104][ T7551] ? __pfx_packet_release+0x10/0x10 [ 85.327126][ T7551] ? __pfx_down_write+0x10/0x10 [ 85.327157][ T7551] __sock_release+0xb3/0x260 [ 85.327178][ T7551] ? __pfx_sock_close+0x10/0x10 [ 85.327199][ T7551] sock_close+0x1c/0x30 [ 85.327218][ T7551] __fput+0x3ff/0xb50 [ 85.327264][ T7551] task_work_run+0x150/0x240 [ 85.327293][ T7551] ? __pfx_task_work_run+0x10/0x10 [ 85.327326][ T7551] exit_to_user_mode_loop+0x1d8/0x700 [ 85.327347][ T7551] ? rcu_is_watching+0x13/0xc0 [ 85.327373][ T7551] do_syscall_64+0x661/0x790 [ 85.327399][ T7551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.327417][ T7551] RIP: 0033:0x7fd04b79e159 [ 85.327433][ T7551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.327455][ T7551] RSP: 002b:00007fff66f37a68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 85.327473][ T7551] RAX: 0000000000000000 RBX: 00007fff66f37b50 RCX: 00007fd04b79e159 [ 85.327485][ T7551] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 85.327495][ T7551] RBP: 0000000000014c4f R08: 0000000000000001 R09: 0000000000000000 [ 85.327505][ T7551] R10: 0000001b31f20000 R11: 0000000000000246 R12: 00007fff66f37b90 [ 85.327516][ T7551] R13: 00007fd04ba25fac R14: 0000000000014caf R15: 00007fd04ba25fa0 [ 85.327541][ T7551] [ 85.397181][ T5087] Bluetooth: hci2: command tx timeout [ 85.686480][ T7568] CIFS: Attempting to mount //127.0.0.1/share [ 85.800821][ T7568] CIFS: VFS: cifs_mount failed w/return code = -512 [ 86.128155][ T5804] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.282600][ T5804] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.356792][ T5804] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.441395][ T5804] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.576447][ T5804] bridge_slave_1: left allmulticast mode [ 86.576470][ T5804] bridge_slave_1: left promiscuous mode [ 86.576632][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.590153][ T5804] bridge_slave_0: left allmulticast mode [ 86.590174][ T5804] bridge_slave_0: left promiscuous mode [ 86.590330][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.700084][ T5804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.704632][ T5804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.705920][ T5804] bond0 (unregistering): Released all slaves [ 86.872880][ T5442] 8021q: adding VLAN 0 to HW filter on device eth10 [ 87.038363][ T5804] hsr_slave_0: left promiscuous mode [ 87.039121][ T5804] hsr_slave_1: left promiscuous mode [ 87.039765][ T5804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.039780][ T5804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.040520][ T5804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.040534][ T5804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.045775][ T5804] veth1_macvtap: left promiscuous mode [ 87.045801][ T5804] veth0_macvtap: left promiscuous mode [ 87.045871][ T5804] veth1_vlan: left promiscuous mode [ 87.045948][ T5804] veth0_vlan: left promiscuous mode [ 87.221055][ T5804] team0 (unregistering): Port device team_slave_1 removed [ 87.225666][ T5804] team0 (unregistering): Port device team_slave_0 removed [ 87.299242][ T5442] 8021q: adding VLAN 0 to HW filter on device eth11 [ 87.495380][ T5442] 8021q: adding VLAN 0 to HW filter on device eth12 [ 87.608475][ T5804] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.663841][ T5442] 8021q: adding VLAN 0 to HW filter on device eth13 [ 87.682599][ T5804] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.735061][ T5804] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.811562][ T5804] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.943922][ T5804] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.015785][ T5804] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.113991][ T5804] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.123612][ T5442] 8021q: adding VLAN 0 to HW filter on device eth14 [ 88.168236][ T5804] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.294878][ T5442] 8021q: adding VLAN 0 to HW filter on device eth15 [ 88.334439][ T5804] bridge_slave_1: left allmulticast mode [ 88.334463][ T5804] bridge_slave_1: left promiscuous mode [ 88.336288][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.340464][ T5804] bridge_slave_0: left allmulticast mode [ 88.340484][ T5804] bridge_slave_0: left promiscuous mode [ 88.341371][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.354286][ T5804] bridge_slave_1: left allmulticast mode [ 88.354308][ T5804] bridge_slave_1: left promiscuous mode [ 88.354462][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.360286][ T5804] bridge_slave_0: left allmulticast mode [ 88.360306][ T5804] bridge_slave_0: left promiscuous mode [ 88.360441][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.486190][ T5804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.493426][ T5804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.494244][ T5804] bond0 (unregistering): Released all slaves [ 88.555624][ T5804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.556909][ T5804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.565357][ T5804] bond0 (unregistering): Released all slaves [ 88.644096][ T5804] tipc: Disabling bearer [ 88.659610][ T5804] tipc: Left network mode [ 88.772675][ T5442] 8021q: adding VLAN 0 to HW filter on device eth16 [ 88.971119][ T5442] 8021q: adding VLAN 0 to HW filter on device eth17 [ 89.002459][ T5804] hsr_slave_0: left promiscuous mode [ 89.002894][ T5804] hsr_slave_1: left promiscuous mode [ 89.003253][ T5804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.003264][ T5804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.003837][ T5804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.003846][ T5804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.006509][ T5804] hsr_slave_0: left promiscuous mode [ 89.006862][ T5804] hsr_slave_1: left promiscuous mode [ 89.007470][ T5804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.007480][ T5804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.008481][ T5804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.008491][ T5804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.015428][ T5804] veth1_macvtap: left promiscuous mode [ 89.015450][ T5804] veth0_macvtap: left promiscuous mode [ 89.015494][ T5804] veth1_vlan: left promiscuous mode [ 89.015546][ T5804] veth0_vlan: left promiscuous mode [ 89.024385][ T5804] veth0_macvtap: left promiscuous mode [ 89.024429][ T5804] veth1_vlan: left promiscuous mode [ 89.024478][ T5804] veth0_vlan: left promiscuous mode [ 89.224946][ T5804] team0 (unregistering): Port device team_slave_1 removed [ 89.229837][ T5804] team0 (unregistering): Port device team_slave_0 removed [ 89.393595][ T5804] team0 (unregistering): Port device team_slave_1 removed [ 89.401074][ T5804] team0 (unregistering): Port device team_slave_0 removed [ 89.663744][ T5442] 8021q: adding VLAN 0 to HW filter on device eth18 [ 89.990827][ T5442] 8021q: adding VLAN 0 to HW filter on device eth19 [ 90.060072][ T43] kauditd_printk_skb: 41 callbacks suppressed [ 90.060084][ T43] audit: type=1400 audit(1789040564.958:630): avc: denied { write } for pid=7675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.102892][ T43] audit: type=1400 audit(1789040564.998:631): avc: denied { write } for pid=7678 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.140483][ T5442] 8021q: adding VLAN 0 to HW filter on device eth20 [ 90.172919][ T43] audit: type=1400 audit(1789040565.068:632): avc: denied { write } for pid=7680 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.226616][ T43] audit: type=1400 audit(1789040565.118:633): avc: denied { write } for pid=7683 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.363898][ T43] audit: type=1400 audit(1789040565.258:634): avc: denied { write } for pid=7688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.409329][ T43] audit: type=1400 audit(1789040565.308:635): avc: denied { write } for pid=7691 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.456271][ T5442] 8021q: adding VLAN 0 to HW filter on device eth21 [ 91.702713][ T43] audit: type=1400 audit(1789040566.598:636): avc: denied { write } for pid=7705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.762557][ T43] audit: type=1400 audit(1789040566.658:637): avc: denied { write } for pid=7708 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.853478][ T43] audit: type=1400 audit(1789040566.748:638): avc: denied { write } for pid=7712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.901230][ T43] audit: type=1400 audit(1789040566.798:639): avc: denied { write } for pid=7715 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.354710][ T5777] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.431229][ T5777] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.484783][ T5777] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.555387][ T5777] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.856399][ T5777] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 93.856424][ T5777] bridge1 (unregistering): left promiscuous mode [ 93.866242][ T5777] bond0 (unregistering): Released all slaves [ 93.871428][ T5777] bond1 (unregistering): Released all slaves [ 93.882583][ T5777] bond2 (unregistering): Released all slaves [ 93.986401][ T5777] tipc: Left network mode [ 94.080270][ T5442] 8021q: adding VLAN 0 to HW filter on device eth22 [ 94.181812][ T5777] hsr_slave_0: left promiscuous mode [ 94.182439][ T5777] hsr_slave_1: left promiscuous mode [ 94.193538][ T5777] veth1_macvtap: left promiscuous mode [ 94.193571][ T5777] veth0_macvtap: left promiscuous mode [ 94.193647][ T5777] veth1_vlan: left promiscuous mode [ 94.193701][ T5777] veth0_vlan: left promiscuous mode [ 94.482005][ T5442] 8021q: adding VLAN 0 to HW filter on device eth23 [ 94.700008][ T5442] 8021q: adding VLAN 0 to HW filter on device eth24 [ 94.885546][ T5442] 8021q: adding VLAN 0 to HW filter on device eth25