last executing test programs: 1m38.859589112s ago: executing program 3 (id=1054): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) 1m37.929521244s ago: executing program 3 (id=1061): r0 = socket$inet(0x2, 0x2, 0x11) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x210200, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000280)={0x4, [[0x7, 0x9, 0x7, 0x5, 0x3, 0x101, 0xffffffff, 0x80000000], [0x2, 0x9, 0xfff, 0x0, 0x0, 0x40, 0x4, 0x3], [0x70d86ee9, 0x6, 0xfffffffd, 0x6, 0x8, 0x4e, 0x6, 0x6]], '\x00', [{0x4, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x8001, 0x9, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x504b21cf, 0x0, 0x1, 0x1}, {0xffff, 0x80000000}, {0x4, 0x700000, 0x1, 0x1}, {0x1, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x4, 0x1}, {0xe, 0x2, 0x1, 0x1, 0x1, 0x1}, {0xeb82, 0x3, 0x1, 0x0, 0x1}, {0x6, 0x7, 0x1, 0x1}, {0x5, 0x4, 0x0, 0x0, 0x1}], '\x00', 0xf}) connect$pppl2tp(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x115c, @loopback}, 0x1, 0x0, 0x1}}, 0x26) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0x7, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x7, 0x10, 0x4, 0x9, {{0x6, 0x4, 0x3, 0x5, 0x18, 0x68, 0x0, 0x9, 0x29, 0x0, @broadcast, @local, {[@end]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x9, 0x3f1, 0x9, 0x2000, r2, 0x8, '\x00', r4, r2, 0x0, 0x2, 0x3, 0x2}, 0x50) 1m37.847150151s ago: executing program 3 (id=1064): prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000027c0)={0x14, 0x15, 0x1, 0x70bd26, 0x25dfdbfd, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4885}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000022c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002480)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x2, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x1e4, 0x2, 0x1b, 0xb, 0x1b, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4008010) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002240)={0x5c, r4, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000020c0), 0x28000, 0x0) setns(0xc9, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002a80)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x4004810) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000002100)=0x2) setuid(0xee01) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000002140)=0xf) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002540), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)={0x54, r8, 0x1, 0x300, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000002700)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x2c, r8, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008090}, 0x4040000) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/hibernate_compression_threads', 0x48a82, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000029c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002980)={&(0x7f0000002840)={0x118, r8, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x118}, 0x1, 0x0, 0x0, 0xc884}, 0x2000800) read$FUSE(r9, &(0x7f0000000080)={0x2020}, 0x2020) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x4) 1m37.680279517s ago: executing program 3 (id=1071): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x3b, 0x0, &(0x7f0000000200)=0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0xb, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xc7, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x17, 0xd, [@dev={0xac, 0x14, 0x14, 0x3f}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @remote, @multicast2]}]}}, {0x1, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000340)={0x1, 0x1, 0x2, 0xd, 0x4}) syz_usb_connect(0x0, 0x2e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000300), 0xd, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x80042, 0x4d) fallocate(r3, 0x0, 0x37e9, 0x2f92) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000180)={0x67, @rand_addr=0x64010101, 0x4e21, 0x4, 'sh\x00', 0x38, 0x3, 0x48}, 0x2c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x1c, 0x1, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl(r2, 0xc4c85514, &(0x7f0000000000)) 1m36.538521661s ago: executing program 3 (id=1097): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sec\x00', &(0x7f0000000080)='securityfs\x00', 0x800000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sec/tomoyo/profile\x00', 0x0, 0x80) read$FUSE(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000200)={0x100801000, &(0x7f00000023c0), 0x0, 0x0, {0x1d}, &(0x7f0000002400)=""/118, 0x76, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000200)={0x100801000, &(0x7f00000023c0), 0x0, 0x0, {0x1d}, &(0x7f0000002400)=""/118, 0x76, 0x0, 0x0}, 0x58) read$FUSE(r0, &(0x7f0000000380)={0x2020}, 0x2020) pipe(&(0x7f0000000280)) (async) pipe(&(0x7f0000000280)) fsopen(&(0x7f00000002c0)='autofs\x00', 0x0) (async) r1 = fsopen(&(0x7f00000002c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) open(&(0x7f0000000340)='.\x00', 0x0, 0x244) (async) r3 = open(&(0x7f0000000340)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x80049363, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x80049363, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003480)='./mnt\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000003480)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000034c0)='./mnt\x00', &(0x7f0000003500)='tmpfs\x00', 0x0, &(0x7f0000003540)='casefold,strict_encoding\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000003580)='./mnt/dir\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000035c0)='./mnt/dir\x00', &(0x7f0000003600), 0x0, &(0x7f0000003640)={[{@lowerdir={'lowerdir', 0x3d, './mnt'}}]}) (async) mount$overlay(0x0, &(0x7f00000035c0)='./mnt/dir\x00', &(0x7f0000003600), 0x0, &(0x7f0000003640)={[{@lowerdir={'lowerdir', 0x3d, './mnt'}}]}) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xecf86c37d53049cc) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f0000000140)='.\x00', 0x60000726) (async) inotify_add_watch(r5, &(0x7f0000000140)='.\x00', 0x60000726) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {0x3}, {0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x20}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7f51}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xc}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x2, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1be2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0xa}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x2}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) (async) ptrace(0x10, r7) ioctl$CEC_ADAP_G_PHYS_ADDR(r4, 0x80026101, &(0x7f0000000180)) ptrace$poke(0x5, r7, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000003440)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000003440)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) 1m36.306315428s ago: executing program 3 (id=1103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000030000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f00010069707636686561646572000008000200000000000700030020"], 0xec}}, 0x0) 1m21.266903093s ago: executing program 32 (id=1103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000030000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f00010069707636686561646572000008000200000000000700030020"], 0xec}}, 0x0) 3.152492316s ago: executing program 4 (id=1802): r0 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(0xca, &(0x7f0000000200)="0417e7f300", 0x5) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x1411, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@thin_pool={0x0, 0x800, 0x0, 0x68, 'thin-pool\x00', {@ram_num={'1:', 0x0}, 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, '128', 0x20, 0x13}}]}) 3.116607299s ago: executing program 4 (id=1805): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, r0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) (async) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000340), 0x1a9502, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000380)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x880) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000015c0), 0x20, 0x10, &(0x7f0000001600)={0x0, 0x5}, 0xfffffffffffffd00}, 0x48) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000500)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e17}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) write(r6, &(0x7f00000000c0)="1f4f918a391a0c440ce3a5597936a8eef3b2ebc71c8ee3c6725fab7a79eb40e43607b1c17d87", 0x26) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000001640)={0x2, 'tunl0\x00', {0x200}, 0x2a}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/my_nullb\x00', 0x1ff) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/my_nullb/power\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e63925789381db3fe455e8dadc7dcf81189517730bed5d8036168bd2e27cc611027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc506c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7964a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000000780)='GPL\x00', 0x2, 0xfd90, &(0x7f00000007c0)=""/195}, 0x48) (async) write(r7, &(0x7f0000000400)='1', 0x1) (async) rmdir(&(0x7f0000000040)='./config/nullb/my_nullb\x00') (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) (async) execve(&(0x7f00000004c0)='./config\x00', &(0x7f00000001c0), &(0x7f0000000480)) 2.910991242s ago: executing program 4 (id=1809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01040000000000f500000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f00010069707636686561646572000008000200000000000700030020"], 0xec}}, 0x0) 2.85572216s ago: executing program 4 (id=1812): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000300)={&(0x7f00000002c0)=""/3, 0x3}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f00000001c0)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000200)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="340000001a000100000000000000000002202000000000000000000008000100e001020308110200ac1414bb0800030001000000", 0x34) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) ioctl$PTP_PIN_GETFUNC(r3, 0xc0603d06, &(0x7f0000000380)={'\x00', 0x80, 0x0, 0xdee4}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0205648, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000002640), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = syz_open_dev$vim2m(&(0x7f00000026c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002700)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x4, 0x3, 0x12, "c12400"}, 0x3, 0x2, {&(0x7f0000002780)}, 0x96000}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000027c0)={0x1, @sdr={0x3136564e, 0x7}}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000028c0)={0x6, 0x4, 0x0, 0x20000000, @vifc_lcl_addr=@empty, @multicast2}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000002900)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000002940)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0xc, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000002a00)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 2.846638178s ago: executing program 4 (id=1814): set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ec0)={0x3, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="1802000000ff000000000000000000008500000020000000180100002020702500000000002020207b1af8ff0000000ebfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000002000)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.750782244s ago: executing program 4 (id=1815): timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000780)=0x0) timer_settime(0x0, 0x0, &(0x7f00000007c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_getoverrun(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) r3 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0xa2c6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000600)='nr0\x00', 0x10) recvmsg$unix(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x80) syz_ublk_add_dev(r7, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000500)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000540)={0x0, 0xc1, 0x8000, 0xfffffffd, 0x7f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x92, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26f}}], 0x1, 0x0, 0x0) bind$bt_l2cap(r6, &(0x7f0000000a80)={0x1f, 0x9b02, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x2}, 0xe) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r11 = socket$nl_generic(0x10, 0x3, 0x10) openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r11) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}}, 0x4000000) syz_memcpy_off$KVM_EXIT_MMIO(r2, 0x20, &(0x7f00000003c0)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) 2.448699324s ago: executing program 2 (id=1823): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000300)={&(0x7f00000002c0)=""/3, 0x3}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f00000001c0)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000200)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="340000001a000100000000000000000002202000000000000000000008000100e001020308110200ac1414bb0800030001000000", 0x34) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) ioctl$PTP_PIN_GETFUNC(r3, 0xc0603d06, &(0x7f0000000380)={'\x00', 0x80, 0x0, 0xdee4}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0205648, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000002640), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = syz_open_dev$vim2m(&(0x7f00000026c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002700)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x4, 0x3, 0x12, "c12400"}, 0x3, 0x2, {&(0x7f0000002780)}, 0x96000}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000027c0)={0x1, @sdr={0x3136564e, 0x7}}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000028c0)={0x6, 0x4, 0x0, 0x20000000, @vifc_lcl_addr=@empty, @multicast2}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000002900)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000002940)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0xc, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000002a00)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 2.437509709s ago: executing program 2 (id=1824): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', "000000000000000000000000000000000000000000000000000000e000"}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 2.309243121s ago: executing program 2 (id=1826): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045", 0x33}], 0x3}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) 1.759932011s ago: executing program 0 (id=1832): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000300)={&(0x7f00000002c0)=""/3, 0x3}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f00000001c0)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000200)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="340000001a000100000000000000000002202000000000000000000008000100e001020308110200ac1414bb0800030001000000", 0x34) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) ioctl$PTP_PIN_GETFUNC(r3, 0xc0603d06, &(0x7f0000000380)={'\x00', 0x80, 0x0, 0xdee4}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0205648, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000002640), 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = syz_open_dev$vim2m(&(0x7f00000026c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000002700)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x4, 0x3, 0x12, "c12400"}, 0x3, 0x2, {&(0x7f0000002780)}, 0x96000}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000027c0)={0x1, @sdr={0x3136564e, 0x7}}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000028c0)={0x6, 0x4, 0x0, 0x20000000, @vifc_lcl_addr=@empty, @multicast2}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000002900)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000002940)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0xc, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000002a00)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 1.699990955s ago: executing program 0 (id=1833): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000540)="5c7830313032303330342001", 0xc) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000240)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.45383322s ago: executing program 2 (id=1834): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', "000000000000000000000000000000000000000000000000000000000300"}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 1.319439263s ago: executing program 2 (id=1835): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge_slave_0\x00', 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000740)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000800), 0x101) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=@bridge_delvlan={0x30, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x7, 0x7}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x2}}}]}, 0x30}}, 0x4000) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) close_range(r3, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/kernel/mm/ksm/sleep_millisecs\x00', 0x1, 0x0) 1.105409243s ago: executing program 0 (id=1838): set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ec0)={0x3, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="1802000000ff000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00008510bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000002000)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.011057245s ago: executing program 0 (id=1839): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0x5, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x64}}, 0x600000000000000) 921.050227ms ago: executing program 0 (id=1840): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000340)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1a2) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x205200c, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@default_permissions}, {@volatile}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r3, 0x0) mmap(&(0x7f00009c6000/0x2000)=nil, 0x2000, 0x3, 0x28012, r3, 0x1000) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0xa14000, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 871.123264ms ago: executing program 1 (id=1841): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000300)={&(0x7f00000002c0)=""/3, 0x3}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f00000001c0)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000200)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="340000001a000100000000000000000002202000000000000000000008000100e001020308110200ac1414bb0800030001000000", 0x34) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) ioctl$PTP_PIN_GETFUNC(r3, 0xc0603d06, &(0x7f0000000380)={'\x00', 0x80, 0x0, 0xdee4}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0205648, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000002640), 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = syz_open_dev$vim2m(&(0x7f00000026c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000002700)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x4, 0x3, 0x12, "c12400"}, 0x3, 0x2, {&(0x7f0000002780)}, 0x96000}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000027c0)={0x1, @sdr={0x3136564e, 0x7}}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000028c0)={0x6, 0x4, 0x0, 0x20000000, @vifc_lcl_addr=@empty, @multicast2}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000002900)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000002940)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0xc, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000002a00)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 828.354954ms ago: executing program 1 (id=1842): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361", 0x35}], 0x3}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) 748.699991ms ago: executing program 1 (id=1843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000009000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f00010069707636686561646572000008000200000000000700030020"], 0xec}}, 0x0) 639.03648ms ago: executing program 1 (id=1844): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', "000000000000000000000000000000000000000000000000000000000500"}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 638.849482ms ago: executing program 1 (id=1845): r0 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(0xca, &(0x7f0000000200)="0417e7f300056b", 0x7) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x1411, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@thin_pool={0x0, 0x800, 0x0, 0x68, 'thin-pool\x00', {@ram_num={'1:', 0x0}, 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, '128', 0x20, 0x13}}]}) 624.166411ms ago: executing program 1 (id=1846): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000540)="5c7830313032303330342001", 0xc) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000240)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 329.097263ms ago: executing program 0 (id=1847): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x1}, {r1, 0x4084}, {r0, 0x4000}], 0x3, &(0x7f00000000c0)={r2, r3+60000000}, &(0x7f0000000100)={[0x3]}, 0x8) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000400)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) 0s ago: executing program 2 (id=1848): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0xb) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) syslog(0x2, &(0x7f0000000040)=""/48, 0x30) syslog(0x9, &(0x7f0000000300)=""/232, 0xfffffffffffffee8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000000)={"e0196f03f09e5dc88d8df6db5b267ce196a8cee6aabc3e837fff54ca46952525", r1, 0xffffffffffffffff}) write(r1, &(0x7f00000002c0)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x2c) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000d00)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000d40)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000d80)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000dc0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000000e40)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000e80)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000f00)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f0000000f40)={0x0}) r12 = syz_open_dev$dri(&(0x7f0000000f80), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r12, 0xc00864bf, &(0x7f0000000fc0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r12, 0xc01864cd, &(0x7f0000001040)={&(0x7f0000001080)=[r13, r13, r13], 0x0, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000001100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f0000001140)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000001180)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000011c0)={0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(r1, 0xc0186449, &(0x7f0000001400)={0x0, 0x0, {0x28, 0x8, &(0x7f00000012c0)=[{0x678000, 0x3bed2898, 0x439546200774f800, 0x4, 0x0, {0x10, 0x100001be, &(0x7f0000000580)=[{0xff, 0x0, 0x9}, {0x0, 0x0, 0x3}, {0xff, 0x0, 0x8000}, {0xff, 0x0, 0x3}, {0xff, 0x0, 0xc}]}}, {0x28, 0x913985e0, 0x987510d1fdb3d1c0, 0x2, 0x0, {0x10, 0x2, &(0x7f0000000740)=[{0x1, 0x0, 0x3}, {0xff, 0x0, 0x1000}]}}, {0x8, 0x3309cc08, 0x8d36024db17ffb80, 0x7, 0x0, {0x10, 0x3, &(0x7f0000000940)=[{0x1, 0x0, 0x6}, {0xff, 0x0, 0x17f}, {0x1, 0x0, 0x1}]}}, {0xfff, 0x33ff6948, 0x85aa57b8bc26600, 0x6, 0x0, {0x10, 0x1, &(0x7f0000000a40)=[{0x0, 0x0, 0xf}]}}, {0x4, 0xd4bdf178, 0x918b98339c569d80, 0x5, 0x0, {0x10, 0x6, &(0x7f0000000c80)=[{0x1, 0x0, 0x93f}, {0x0, 0x0, 0x401}, {0xff, 0x0, 0x6}, {0x1, 0x0, 0x7}, {}, {0xfe}]}}, {0xf0, 0x24a399c0, 0x743205d4c2f9ae00, 0x1000, 0x0, {0x10, 0x4, &(0x7f0000000e00)=[{0x80000000, r4, 0xffffffffffff8000}, {0x1, r5, 0x5}, {0xff, r6, 0xfffffffffffffc05}, {0x0, r7, 0x7}]}}, {0x7fff, 0x669705e8, 0xbfdae6e2f036f400, 0x3, 0x0, {0x10, 0x3, &(0x7f0000000ec0)=[{0x0, 0x0, 0xc8}, {0x1, r8, 0x3}, {0xff, r9, 0x100000001}]}}, {0x2, 0xa2c3e628, 0x647a9021ee81b840, 0x4, 0x0, {0x10, 0x9, &(0x7f0000001200)=[{0x80000000, r10}, {0x800000ff, r11, 0x7}, {0x1, r13, 0xb488}, {0xff, r14, 0x6}, {0x80000000, r15, 0xffffffff80000000}, {0x0, 0x0, 0x7fffffffffffffff}, {0xff, r16, 0x7}, {0x1, r17, 0x3}, {0x80000000, r18}]}}]}}) kernel console output (not intermixed with test programs): 2] audit: type=1400 audit(1793278561.961:774): avc: denied { write } for pid=9941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.515020][ T9949] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 127.515037][ T9949] block device autoloading is deprecated and will be removed. [ 127.534869][ T42] audit: type=1400 audit(1793278562.081:775): avc: denied { write } for pid=9948 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.676513][ T42] audit: type=1400 audit(1793278562.221:776): avc: denied { write } for pid=9952 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.854635][ T42] audit: type=1400 audit(1793278562.401:777): avc: denied { write } for pid=9958 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.904217][ T9963] netlink: 400 bytes leftover after parsing attributes in process `syz.2.1119'. [ 127.914662][ T9963] netlink: 'syz.2.1119': attribute type 11 has an invalid length. [ 128.257691][ T5140] Bluetooth: hci3: command 0x0401 tx timeout [ 129.101606][ T9986] ip_tables: iptables: counters copy to user failed while replacing table [ 129.104449][ T9986] ip_tables: iptables: counters copy to user failed while replacing table [ 129.104792][ T9986] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1124'. [ 129.356376][ T9993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1126'. [ 129.922615][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'. [ 130.101415][T10006] fuse: fd is not a fuse device [ 130.127761][ T7556] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 130.279462][ T7556] usb 7-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 130.280278][ T7556] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.280291][ T7556] usb 7-1: config 0 has no interface number 0 [ 130.280310][ T7556] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 130.280324][ T7556] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 130.280343][ T7556] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.281656][ T7556] usb 7-1: config 0 descriptor?? [ 130.288969][ T7556] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 130.328757][ T5791] Bluetooth: hci1: unexpected cc 0x041a length: 8 > 7 [ 130.334316][T10015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10015 comm=syz.1.1132 [ 130.357076][ T9862] syz.3.1097 (9862) used greatest stack depth: 19064 bytes left [ 130.483572][ T9998] iowarrior 7-1:0.1: Error -90 while submitting URB [ 130.484183][ T7556] usb 7-1: USB disconnect, device number 25 [ 130.956642][T10023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1135'. [ 130.956664][T10023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1135'. [ 130.960309][T10023] gretap0: entered promiscuous mode [ 130.960887][T10023] gretap0: left promiscuous mode [ 131.156618][T10033] netlink: 'syz.2.1140': attribute type 6 has an invalid length. [ 131.156632][T10033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1140'. [ 131.230737][T10046] netlink: 'syz.0.1141': attribute type 1 has an invalid length. [ 131.513573][T10052] futex_wake_op: syz.0.1144 tries to shift op by 144; fix this program [ 132.137859][T10079] Bluetooth: MGMT ver 1.23 [ 132.145309][T10079] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1151'. [ 132.211104][ T7079] Bluetooth: hci4: Frame reassembly failed (-84) [ 132.211148][ T7079] Bluetooth: hci4: Frame reassembly failed (-84) [ 132.211178][ T7079] Bluetooth: hci4: Frame reassembly failed (-84) [ 132.214139][ T1173] Bluetooth: hci4: Frame reassembly failed (-84) [ 132.217267][ T7079] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 132.261163][T10086] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1154'. [ 132.284457][T10088] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 132.329901][T10092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.459594][ T7556] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 132.487033][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 132.490405][T10097] netlink: 'syz.0.1157': attribute type 1 has an invalid length. [ 132.526979][T10098] dummy0: left allmulticast mode [ 132.607681][ T7556] usb 7-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 132.608563][ T7556] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 132.609340][ T7556] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 132.615842][ T7556] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.615857][ T7556] usb 7-1: Product: syz [ 132.615864][ T7556] usb 7-1: Manufacturer: syz [ 132.615872][ T7556] usb 7-1: SerialNumber: syz [ 132.633000][ T7556] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 132.641346][ T7556] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 132.644810][ T7556] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 132.658307][ T1449] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.824679][T10110] team0 (unregistering): Port device team_slave_0 removed [ 132.831562][T10110] team0 (unregistering): Port device team_slave_1 removed [ 133.483744][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.484346][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.485006][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.485541][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.486147][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.486671][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.487926][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.488585][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.489108][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.489753][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.490305][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.490917][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.491666][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.492193][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.492812][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.493331][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.494948][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.495481][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.496103][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.496654][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.497334][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.497871][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.498514][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.499094][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.499616][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.500287][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.500822][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.501447][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.501986][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.502875][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.503395][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.504000][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.504623][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.505157][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.505748][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.506285][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.506859][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.508494][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.509120][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.509712][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.510299][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.510895][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.511435][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.512040][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.512641][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.513174][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.513754][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.514286][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.514888][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.515417][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.516020][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.516566][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.517161][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.523396][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.524007][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.524557][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.525152][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.525672][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.526262][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.526785][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.527882][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.528501][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.529033][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.529619][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.530209][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.536524][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.072273][T10137] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 134.257347][ T5791] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 134.325359][T10137] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 134.673389][T10083] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 134.729574][ T857] usb 7-1: USB disconnect, device number 26 [ 134.732725][ T857] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 134.734039][ T857] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 134.734419][ T857] ti_usb_3410_5052 7-1:2.0: device disconnected [ 134.899299][T10139] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1166'. [ 135.062658][T10146] md: array md1 already has disks! [ 135.179784][T10148] md1: Warning: Device ram3 is misaligned [ 135.179817][T10148] md/raid0:md1: remove inactive devices before converting to RAID0 [ 135.179881][T10148] md: pers->run() failed ... [ 135.182817][T10146] md: could not open device unknown-block(1,3). [ 135.182845][T10146] md: error, md_import_device() returned -16 [ 135.185505][T10146] md: md1 stopped. [ 135.580454][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 135.580467][ T42] audit: type=1400 audit(1793278570.131:787): avc: denied { append } for pid=10166 comm="syz.2.1175" name="event2" dev="devtmpfs" ino=1179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 135.584982][ T42] audit: type=1400 audit(1793278570.131:788): avc: denied { create } for pid=10166 comm="syz.2.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 135.740732][ T42] audit: type=1400 audit(1793278570.291:789): avc: denied { bind } for pid=10173 comm="syz.2.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.745153][T10174] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 9 (only 8 groups) [ 135.821963][T10178] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1178'. [ 135.821978][T10178] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1178'. [ 135.949502][ T42] audit: type=1400 audit(1793278570.501:790): avc: denied { bind } for pid=10179 comm="syz.2.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 135.958291][T10180] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1179'. [ 135.958305][T10180] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 135.982683][T10187] overlayfs: failed to clone lowerpath [ 136.066898][ T42] audit: type=1400 audit(1793278570.611:791): avc: denied { write } for pid=10190 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.138581][ T42] audit: type=1400 audit(1793278570.691:792): avc: denied { write } for pid=10197 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.321166][ T42] audit: type=1400 audit(1793278570.871:793): avc: denied { write } for pid=10205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.429140][ T42] audit: type=1400 audit(1793278570.981:794): avc: denied { write } for pid=10210 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.530949][T10217] jffs2: notice: (10217) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 136.534393][ T42] audit: type=1400 audit(1793278571.081:795): avc: denied { write } for pid=10216 comm="syz.2.1188" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.535288][ T42] audit: type=1400 audit(1793278571.081:796): avc: denied { add_name } for pid=10216 comm="syz.2.1188" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.551924][T10217] sctp: Trying to GSO but underlying device doesn't support it. [ 136.684594][T10223] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 136.684611][T10223] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 137.527059][T10239] loop2: detected capacity change from 0 to 8 [ 137.582581][T10240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1195'. [ 137.674600][T10239] Dev loop2: unable to read RDB block 8 [ 137.674625][T10239] loop2: unable to read partition table [ 137.674716][T10239] loop2: partition table beyond EOD, truncated [ 137.674784][T10239] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 137.880242][T10252] netlink: 'syz.0.1200': attribute type 32 has an invalid length. [ 137.880258][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'. [ 138.267774][T10260] netlink: 'syz.1.1203': attribute type 4 has an invalid length. [ 138.267788][T10260] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1203'. [ 138.472645][T10271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1206'. [ 138.501117][T10274] fuse: fd is not a fuse device [ 138.607240][T10281] bond0: entered allmulticast mode [ 138.607580][T10281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.610821][T10282] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1208'. [ 138.703522][ T5140] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 138.706449][T10290] ima: policy update completed [ 138.718475][T10291] br_netfilter no longer supported in user namespaces [ 138.723493][T10291] rxe_eth0 speed is unknown, defaulting to 1000 [ 138.824733][T10291] lo speed is unknown, defaulting to 1000 [ 139.476447][ T5791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.489630][ T5791] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.491649][ T5791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.492228][ T5791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.493097][ T5791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.832226][T10313] rxe_eth0 speed is unknown, defaulting to 1000 [ 139.909587][T10313] lo speed is unknown, defaulting to 1000 [ 139.973567][T10338] ceph: Path missing in source [ 140.096092][T10313] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.096187][T10313] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.096272][T10313] bridge_slave_0: entered allmulticast mode [ 140.097054][T10313] bridge_slave_0: entered promiscuous mode [ 140.098663][T10313] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.098706][T10313] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.098761][T10313] bridge_slave_1: entered allmulticast mode [ 140.099468][T10313] bridge_slave_1: entered promiscuous mode [ 140.112271][T10313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.114134][T10313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.126627][T10313] team0: Port device team_slave_0 added [ 140.128308][T10313] team0: Port device team_slave_1 added [ 140.140927][T10313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.140938][T10313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.140953][T10313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.141805][T10313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.141813][T10313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.141828][T10313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.161406][T10313] hsr_slave_0: entered promiscuous mode [ 140.161873][T10313] hsr_slave_1: entered promiscuous mode [ 140.162181][T10313] debugfs: 'hsr0' already exists in 'hsr' [ 140.162192][T10313] Cannot create hsr debugfs directory [ 140.360377][T10313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 140.362617][T10313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 140.363191][T10313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 140.365180][T10313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 140.365706][T10313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 140.368264][T10313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 140.369845][T10313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 140.371792][T10313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 140.392695][T10313] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.392811][T10313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.393075][T10313] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.393166][T10313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.434924][T10313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.478399][ T1237] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.480987][ T1237] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.494336][T10313] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.508577][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.508624][ T1237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.514474][T10386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=10386 comm=syz.2.1236 [ 140.514951][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.515039][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.542119][T10313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 140.542140][T10313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.856696][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 140.856709][ T42] audit: type=1800 audit(1793278575.401:820): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206002 res=0 errno=-22 [ 140.881699][T10410] FAULT_INJECTION: forcing a failure. [ 140.881699][T10410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.881727][T10410] CPU: 2 UID: 0 PID: 10410 Comm: syz.2.1242 Not tainted syzkaller #0 PREEMPT(full) [ 140.881749][T10410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.881761][T10410] Call Trace: [ 140.881767][T10410] [ 140.881775][T10410] dump_stack_lvl+0x100/0x190 [ 140.881822][T10410] should_fail_ex.cold+0x5/0xa [ 140.881851][T10410] _copy_from_user+0x2e/0xd0 [ 140.881879][T10410] ucma_write+0x123/0x330 [ 140.881910][T10410] ? __pfx_ucma_write+0x10/0x10 [ 140.881935][T10410] ? bpf_lsm_file_permission+0x9/0x10 [ 140.881961][T10410] ? security_file_permission+0x76/0x210 [ 140.881991][T10410] ? rw_verify_area+0xce/0x6d0 [ 140.882019][T10410] vfs_write+0x2aa/0x1050 [ 140.882036][T10410] ? __pfx_ucma_write+0x10/0x10 [ 140.882058][T10410] ? lock_acquire+0x1d1/0x380 [ 140.882082][T10410] ? __fget_files+0x34/0x3d0 [ 140.882102][T10410] ? __pfx_vfs_write+0x10/0x10 [ 140.882127][T10410] ? find_held_lock+0x2b/0x80 [ 140.882144][T10410] ? __fget_files+0x215/0x3d0 [ 140.882163][T10410] ? __fget_files+0x215/0x3d0 [ 140.882186][T10410] ? __fget_files+0x21f/0x3d0 [ 140.882212][T10410] ksys_write+0x1f8/0x250 [ 140.882227][T10410] ? __pfx_ksys_write+0x10/0x10 [ 140.882250][T10410] do_syscall_64+0x123/0x790 [ 140.882274][T10410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.882297][T10410] RIP: 0033:0x7f42d339f559 [ 140.882312][T10410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.882328][T10410] RSP: 002b:00007f42d4297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.882345][T10410] RAX: ffffffffffffffda RBX: 00007f42d3625fa0 RCX: 00007f42d339f559 [ 140.882357][T10410] RDX: 0000000000000018 RSI: 00002000000001c0 RDI: 0000000000000003 [ 140.882367][T10410] RBP: 00007f42d4297090 R08: 0000000000000000 R09: 0000000000000000 [ 140.882377][T10410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.882387][T10410] R13: 00007f42d3626038 R14: 00007f42d3625fa0 R15: 00007ffdc94b77d8 [ 140.882410][T10410] [ 140.964367][T10313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.048130][ T5827] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.161318][T10313] veth0_vlan: entered promiscuous mode [ 141.165116][T10313] veth1_vlan: entered promiscuous mode [ 141.178573][T10313] veth0_macvtap: entered promiscuous mode [ 141.181027][T10313] veth1_macvtap: entered promiscuous mode [ 141.189261][T10313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.193373][T10313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.286854][ T5827] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.314280][ T42] audit: type=1800 audit(1793278575.861:821): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206021 res=0 errno=-22 [ 141.334237][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.334253][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.335531][ T42] audit: type=1800 audit(1793278575.881:822): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206147 res=0 errno=-22 [ 141.357378][ T5858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.357424][ T5858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.357454][ T5858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.357482][ T5858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.388003][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.388018][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.434287][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'. [ 141.537473][ T5791] Bluetooth: hci4: command tx timeout [ 141.829938][ T42] audit: type=1400 audit(1793278576.381:823): avc: denied { create } for pid=10475 comm="syz.0.1261" name="dm0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 141.830492][ T42] audit: type=1400 audit(1793278576.381:824): avc: denied { read write } for pid=10475 comm="syz.0.1261" name="dm0" dev="tmpfs" ino=1847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 141.831082][ T42] audit: type=1400 audit(1793278576.381:825): avc: denied { open } for pid=10475 comm="syz.0.1261" path="/340/dm0" dev="tmpfs" ino=1847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 141.845438][ T5827] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.892078][ T42] audit: type=1400 audit(1793278576.441:826): avc: denied { unlink } for pid=5781 comm="syz-executor" name="dm0" dev="tmpfs" ino=1847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.002609][ T42] audit: type=1400 audit(1793278576.551:827): avc: denied { unmount } for pid=5786 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 142.106476][ T42] audit: type=1800 audit(1793278576.651:828): pid=10504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1271" name="nullb0" dev="tmpfs" ino=675 res=0 errno=-22 [ 142.282902][ T5827] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.555303][ T42] audit: type=1800 audit(1793278577.101:829): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206348 res=0 errno=-22 [ 142.595814][ T5827] bridge_slave_1: left allmulticast mode [ 142.595840][ T5827] bridge_slave_1: left promiscuous mode [ 142.596019][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.605705][ T5827] bridge_slave_0: left allmulticast mode [ 142.605728][ T5827] bridge_slave_0: left promiscuous mode [ 142.605891][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.647362][ T7566] SELinux: failure in sel_netif_sid_slow(), invalid network interface (78) [ 142.647525][ T7566] SELinux: failure in sel_netif_sid_slow(), invalid network interface (77) [ 142.744755][ T5827] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 142.744771][ T5827] bond1 (unregistering): (slave bridge1): the permanent HWaddr of slave - 66:c8:6a:e8:3f:63 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 142.744789][ T5827] bond1 (unregistering): (slave bridge2): making interface the new active one [ 142.761673][ T5827] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 142.766636][ T5827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.823488][ T5827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.826627][ T5827] bond0 (unregistering): Released all slaves [ 142.830367][ T5827] bond1 (unregistering): Released all slaves [ 143.023932][ T5495] 8021q: adding VLAN 0 to HW filter on device eth2 [ 143.449920][T10577] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 143.552999][ T5495] 8021q: adding VLAN 0 to HW filter on device eth3 [ 143.617714][ T5140] Bluetooth: hci4: command tx timeout [ 143.850914][ T5495] 8021q: adding VLAN 0 to HW filter on device eth4 [ 143.852356][T10622] CIFS: Witness protocol support is experimental [ 143.852377][T10622] CIFS mount error: No usable UNC path provided in device string! [ 143.852377][T10622] [ 143.852528][T10622] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 144.206114][ T5827] hsr_slave_0: left promiscuous mode [ 144.209177][ T5827] hsr_slave_1: left promiscuous mode [ 144.209608][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.209651][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.213785][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.213796][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.294462][ T5827] veth1_macvtap: left promiscuous mode [ 144.294525][ T5827] veth0_macvtap: left promiscuous mode [ 144.294570][ T5827] veth1_vlan: left promiscuous mode [ 144.294590][ T5827] veth0_vlan: left promiscuous mode [ 144.567973][ T5827] team0 (unregistering): Port device team_slave_1 removed [ 144.573301][ T5827] team0 (unregistering): Port device team_slave_0 removed [ 144.651547][ T5495] 8021q: adding VLAN 0 to HW filter on device eth5 [ 144.656368][T10657] lo: entered promiscuous mode [ 144.666149][T10657] tunl0: entered promiscuous mode [ 144.669661][T10657] gre0: entered promiscuous mode [ 144.782523][T10657] gretap0: entered promiscuous mode [ 144.784786][T10657] erspan0: entered promiscuous mode [ 144.786247][T10657] ip_vti0: entered promiscuous mode [ 144.789144][T10657] ip6_vti0: entered promiscuous mode [ 144.790365][T10657] sit0: entered promiscuous mode [ 144.792013][T10657] ip6tnl0: entered promiscuous mode [ 144.793131][T10657] ip6gre0: entered promiscuous mode [ 144.796141][T10657] syz_tun: entered promiscuous mode [ 144.802650][T10657] ip6gretap0: entered promiscuous mode [ 144.804088][T10657] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.804346][T10657] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.804957][T10657] bridge0: entered promiscuous mode [ 144.806364][T10657] vcan0: entered promiscuous mode [ 144.809655][T10657] bond0: entered promiscuous mode [ 144.809670][T10657] bond_slave_0: entered promiscuous mode [ 144.809880][T10657] bond_slave_1: entered promiscuous mode [ 144.811837][T10657] team0: entered promiscuous mode [ 144.811847][T10657] team_slave_0: entered promiscuous mode [ 144.811931][T10657] team_slave_1: entered promiscuous mode [ 144.813430][T10657] dummy0: entered promiscuous mode [ 144.815313][T10657] nlmon0: entered promiscuous mode [ 144.816077][T10657] batadv0: entered promiscuous mode [ 144.818497][T10657] vxcan0: entered promiscuous mode [ 144.819032][T10657] vxcan1: entered promiscuous mode [ 144.819478][T10657] veth0: entered promiscuous mode [ 144.821589][T10657] veth1: entered promiscuous mode [ 144.823388][T10657] wg0: entered promiscuous mode [ 144.825628][T10657] wg1: entered promiscuous mode [ 144.828504][T10657] wg2: entered promiscuous mode [ 144.829319][T10657] veth0_to_bridge: entered promiscuous mode [ 144.831875][T10657] veth1_to_bridge: entered promiscuous mode [ 144.834207][T10657] veth0_to_bond: entered promiscuous mode [ 144.836164][T10657] veth1_to_bond: entered promiscuous mode [ 144.839432][T10657] veth0_to_team: entered promiscuous mode [ 144.843962][T10657] veth1_to_team: entered promiscuous mode [ 144.849001][T10657] veth0_to_batadv: entered promiscuous mode [ 144.851486][T10657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.851526][T10657] batadv_slave_0: entered promiscuous mode [ 144.854275][T10657] veth1_to_batadv: entered promiscuous mode [ 144.856028][T10657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.856054][T10657] batadv_slave_1: entered promiscuous mode [ 144.858359][T10657] xfrm0: entered promiscuous mode [ 144.859349][T10657] veth0_to_hsr: entered promiscuous mode [ 144.861609][T10657] veth1_to_hsr: entered promiscuous mode [ 144.864082][T10657] hsr0: entered promiscuous mode [ 144.865111][T10657] veth1_virt_wifi: entered promiscuous mode [ 144.866401][T10657] veth0_virt_wifi: entered promiscuous mode [ 144.868046][T10657] virt_wifi0: entered promiscuous mode [ 144.870807][T10657] vlan0: entered promiscuous mode [ 144.872227][T10657] vlan1: entered promiscuous mode [ 144.914827][T10657] macvlan0: entered promiscuous mode [ 144.923245][T10657] macvlan1: entered promiscuous mode [ 144.924677][T10657] ipvlan0: entered promiscuous mode [ 144.924764][T10657] ipvlan1: entered promiscuous mode [ 144.942716][T10657] macvtap0: entered promiscuous mode [ 144.944095][T10657] macsec0: entered promiscuous mode [ 144.945213][T10657] geneve0: entered promiscuous mode [ 144.946318][T10657] geneve1: entered promiscuous mode [ 144.948031][T10657] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 144.949301][T10657] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 144.950541][T10657] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 144.952630][T10657] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 144.958203][T10657] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 144.962096][T10657] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 144.977699][ T5936] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.977765][ T5936] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.977784][ T5936] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.977803][ T5936] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.217320][ T5791] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 145.545621][T10712] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 145.546003][T10712] batman_adv: batadv0: Adding interface: gretap1 [ 145.546011][T10712] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.546155][T10712] batman_adv: batadv0: Interface activated: gretap1 [ 145.594581][T10719] XFS (nullb0): Invalid superblock magic number [ 145.698181][ T5140] Bluetooth: hci4: command tx timeout [ 146.548707][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 146.548720][ T42] audit: type=1400 audit(1793278581.091:868): avc: denied { mount } for pid=10749 comm="syz.0.1339" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 146.549772][T10750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1339'. [ 146.571830][ T42] audit: type=1400 audit(1793278581.121:869): avc: denied { mounton } for pid=10751 comm="syz.4.1340" path="/19/proc" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 146.719568][ T5140] Bluetooth: hci3: connection err: -111 [ 146.723521][T10762] netlink: 'syz.0.1345': attribute type 1 has an invalid length. [ 146.725811][ T42] audit: type=1400 audit(1793278581.271:870): avc: denied { watch } for pid=10763 comm="syz.4.1346" path="/21" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 146.738899][T10762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.752368][T10762] bond1: (slave ip6erspan0): making interface the new active one [ 146.753225][T10762] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 146.826321][ T42] audit: type=1400 audit(1793278581.371:871): avc: denied { map } for pid=10768 comm="syz.0.1347" path="socket:[32821]" dev="sockfs" ino=32821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 147.339261][ T42] audit: type=1800 audit(1793278581.881:872): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34870 res=0 errno=-22 [ 147.340993][ T42] audit: type=1800 audit(1793278581.891:873): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34893 res=0 errno=-22 [ 147.531548][ T42] audit: type=1400 audit(1793278582.081:874): avc: denied { write } for pid=10799 comm="syz.4.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 147.575134][T10806] x_tables: duplicate underflow at hook 1 [ 147.576846][ T42] audit: type=1400 audit(1793278582.121:875): avc: denied { write } for pid=10805 comm="syz.0.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 147.595786][ T42] audit: type=1400 audit(1793278582.141:876): avc: denied { setattr } for pid=10808 comm="syz.4.1358" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 147.617374][ T5788] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 147.777280][ T5788] usb 7-1: Using ep0 maxpacket: 32 [ 147.777355][ T5140] Bluetooth: hci4: command tx timeout [ 147.778049][ T5788] usb 7-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 147.779052][ T5788] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 147.779074][ T5788] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 147.779088][ T5788] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.779101][ T5788] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 147.781038][ T5788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.781051][ T5788] usb 7-1: Product: syz [ 147.781059][ T5788] usb 7-1: Manufacturer: syz [ 147.781066][ T5788] usb 7-1: SerialNumber: syz [ 147.786699][ T42] audit: type=1800 audit(1793278582.331:877): pid=5794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207512 res=0 errno=-22 [ 147.790079][ C3] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 147.806518][ T5788] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input10 [ 147.993550][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'. [ 147.993564][T10790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1350'. [ 148.077501][ T5788] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 148.077515][ T5788] (id 0x00) [ 148.117369][ T5788] rc_core: IR keymap rc-imon-pad not found [ 148.117392][ T5788] Registered IR keymap rc-empty [ 148.117532][ T5788] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 148.117549][ T5788] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 148.283594][ T5788] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 148.286600][ T5788] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input11 [ 148.304045][ T5788] imon 7-1:155.0: iMON device (15c2:ffdc) on usb<7:27> initialized [ 148.492115][T10828] x_tables: duplicate underflow at hook 1 [ 148.859960][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1372'. [ 149.000673][T10856] afs: Unknown parameter 'floc!Ii' [ 149.000940][T10856] afs: Unknown parameter 'floc!Ii' [ 149.075933][T10852] jffs2: notice: (10852) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 3 of xref (0 dead, 3 orphan) found. [ 149.375362][T10874] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1376'. [ 149.379713][T10874] gretap0: entered promiscuous mode [ 149.388061][T10874] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.1376'. [ 149.388291][T10874] 0XD: renamed from gretap0 [ 149.392660][T10874] 0XD: left promiscuous mode [ 149.464927][T10881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1381'. [ 149.467026][T10881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1381'. [ 150.351037][T10893] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1384'. [ 150.358425][ T7549] usb 7-1: USB disconnect, device number 27 [ 150.520247][T10903] tipc: Can't bind to reserved service type 2 [ 150.523395][T10903] fuse: fd is not a fuse device [ 150.575614][T10909] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 150.803765][T10915] 9p: Unknown uid 00000000004294967295 [ 151.081135][T10921] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1391'. [ 151.082078][T10921] netlink: 'syz.2.1391': attribute type 4 has an invalid length. [ 151.173366][ T5791] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 151.174367][ T5791] Bluetooth: hci3: unexpected event for opcode 0x203e [ 151.193834][T10927] xt_hashlimit: size too large, truncated to 1048576 [ 151.691741][T10964] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1403'. [ 151.691759][T10964] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1403'. [ 151.858547][T10970] netlink: 'syz.4.1406': attribute type 16 has an invalid length. [ 151.858568][T10970] netlink: 'syz.4.1406': attribute type 17 has an invalid length. [ 151.858657][T10970] lo: left promiscuous mode [ 151.860568][T10970] tunl0: left promiscuous mode [ 151.861712][T10970] gre0: left promiscuous mode [ 151.864885][T10970] gretap0: left promiscuous mode [ 151.866430][T10970] erspan0: left promiscuous mode [ 151.869147][T10970] ip_vti0: left promiscuous mode [ 151.870223][T10970] ip6_vti0: left promiscuous mode [ 151.871344][T10970] sit0: left promiscuous mode [ 151.875510][T10970] ip6tnl0: left promiscuous mode [ 151.876760][T10970] ip6gre0: left promiscuous mode [ 151.878093][T10970] syz_tun: left promiscuous mode [ 151.880401][T10970] bridge0: left promiscuous mode [ 151.881284][T10970] bond0: left promiscuous mode [ 151.882564][T10970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.883338][T10970] team0: left promiscuous mode [ 151.884233][T10970] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.885021][T10970] dummy0: left promiscuous mode [ 151.886545][T10970] nlmon0: left promiscuous mode [ 151.890791][T10970] batadv0: left promiscuous mode [ 151.891436][T10970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.892089][T10970] vxcan0: left promiscuous mode [ 151.892871][T10970] vxcan1: left promiscuous mode [ 151.893579][T10970] veth0: left promiscuous mode [ 151.894466][T10970] veth1: left promiscuous mode [ 151.948825][T10970] wg0: left promiscuous mode [ 151.951653][T10970] wg1: left promiscuous mode [ 151.969008][T10970] wg2: left promiscuous mode [ 151.970113][T10970] veth0_to_bridge: left promiscuous mode [ 151.972449][T10970] veth1_to_bridge: left promiscuous mode [ 151.974905][T10970] veth0_to_bond: left promiscuous mode [ 151.975848][T10970] bond_slave_0: left promiscuous mode [ 151.976980][T10970] veth1_to_bond: left promiscuous mode [ 151.977899][T10970] bond_slave_1: left promiscuous mode [ 151.978865][T10970] veth0_to_team: left promiscuous mode [ 151.979950][T10970] team_slave_0: left promiscuous mode [ 151.980842][T10970] veth1_to_team: left promiscuous mode [ 151.981870][T10970] team_slave_1: left promiscuous mode [ 151.982716][T10970] veth0_to_batadv: left promiscuous mode [ 151.983624][T10970] batadv_slave_0: left promiscuous mode [ 151.984271][T10970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.984533][T10970] veth1_to_batadv: left promiscuous mode [ 151.985729][T10970] batadv_slave_1: left promiscuous mode [ 151.986304][T10970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.986549][T10970] xfrm0: left promiscuous mode [ 151.988166][T10970] veth0_to_hsr: left promiscuous mode [ 151.989088][T10970] veth1_to_hsr: left promiscuous mode [ 151.990530][T10970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.990548][T10970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.990586][T10970] hsr0: left promiscuous mode [ 151.991648][T10970] veth1_virt_wifi: left promiscuous mode [ 151.992624][T10970] veth0_virt_wifi: left promiscuous mode [ 151.993366][T10970] virt_wifi0: left promiscuous mode [ 151.994025][T10970] veth1_vlan: left promiscuous mode [ 151.995442][T10970] vlan0: left promiscuous mode [ 151.996208][T10970] vlan1: left promiscuous mode [ 151.997147][T10970] veth1_vlan: entered promiscuous mode [ 151.997379][T10970] macvlan0: left promiscuous mode [ 151.998476][T10970] macvlan1: left promiscuous mode [ 151.999577][T10970] ipvlan0: left promiscuous mode [ 152.000708][T10970] ipvlan1: left promiscuous mode [ 152.001766][T10970] veth1_macvtap: left promiscuous mode [ 152.002604][T10970] veth0_macvtap: left promiscuous mode [ 152.003131][T10970] veth0_macvtap: entered promiscuous mode [ 152.003252][T10970] macvtap0: left promiscuous mode [ 152.004553][T10970] veth1_macvtap: entered promiscuous mode [ 152.004734][T10970] macsec0: left promiscuous mode [ 152.006231][T10970] geneve0: left promiscuous mode [ 152.007975][T10970] geneve1: left promiscuous mode [ 152.009330][T10970] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 152.009512][T10970] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.009988][T10970] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 152.010259][T10970] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.010819][T10970] netdevsim netdevsim4 netdevsim2: left promiscuous mode [ 152.011109][T10970] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 152.011637][T10970] netdevsim netdevsim4 netdevsim3: left promiscuous mode [ 152.011899][T10970] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 152.013593][T10970] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 152.014022][T10970] mac80211_hwsim hwsim15 wlan1: left promiscuous mode [ 152.014039][T10970] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 152.016720][ T7079] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.016764][ T7079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.018117][ T7079] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.018189][ T7079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.042118][T10979] bridge: RTM_NEWNEIGH with invalid ether address [ 152.120311][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.120340][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.120361][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.120381][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.139389][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1410'. [ 152.150400][T10981] veth1_to_hsr (unregistering): left allmulticast mode [ 152.185163][T10983] EXT4-fs warning (device sda1): ext4_group_extend:1872: need to use ext2online to resize further [ 152.205270][ T42] kauditd_printk_skb: 43 callbacks suppressed [ 152.205285][ T42] audit: type=1400 audit(1793278586.751:921): avc: denied { ioctl } for pid=10982 comm="syz.4.1411" path="/dev/usbmon9" dev="devtmpfs" ino=763 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 152.303335][T10989] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1413'. [ 152.496660][T11021] batman_adv: batadv0: Adding interface: dummy0 [ 152.496679][T11021] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.496702][T11021] batman_adv: batadv0: Interface activated: dummy0 [ 152.519012][ T42] audit: type=1400 audit(1793278587.071:922): avc: denied { ioctl } for pid=11012 comm="syz.1.1420" path="socket:[33227]" dev="sockfs" ino=33227 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 152.545506][T11021] batadv0: mtu less than device minimum [ 152.546622][T11021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.547760][T11021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.548687][T11021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.549700][T11021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.550701][T11021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.551764][T11021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.552847][T11021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.553919][T11021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.581608][ T5791] Bluetooth: hci1: command 0x206a tx timeout [ 152.588730][ T5140] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 152.811762][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1422'. [ 153.195705][T11004] cgroup: fork rejected by pids controller in /syz2 [ 153.264509][ T42] audit: type=1400 audit(1793278587.801:923): avc: denied { read } for pid=11047 comm="syz.2.1424" name="cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 153.361988][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1425'. [ 153.368475][ T42] audit: type=1800 audit(1793278587.911:924): pid=11053 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1425" name="nullb0" dev="tmpfs" ino=675 res=0 errno=-22 [ 153.392051][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1427'. [ 153.392067][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'. [ 153.392083][T11058] netlink: 'syz.1.1427': attribute type 12 has an invalid length. [ 153.392091][T11058] netlink: 'syz.1.1427': attribute type 7 has an invalid length. [ 153.402656][T11058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11058 comm=syz.1.1427 [ 153.407400][ T5936] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 153.407437][ T5936] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 153.407465][ T5936] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 153.407489][ T5936] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 153.413389][T11060] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (7) [ 153.413791][T11060] netlink: 'syz.4.1428': attribute type 20 has an invalid length. [ 153.487795][ T42] audit: type=1400 audit(1793278588.031:925): avc: denied { create_files_as } for pid=11047 comm="syz.2.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=kernel_service permissive=1 [ 153.572526][T11048] netfs: Cache "CacheFiles" added (type cachefiles) [ 153.572561][T11048] CacheFiles: File cache on CacheFiles registered [ 153.606902][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1432'. [ 153.607088][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1432'. [ 153.688443][T11051] CacheFiles: File cache on CacheFiles unregistering [ 153.688455][T11051] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 153.831851][T11080] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 153.840224][T11080] cramfs: wrong magic [ 153.868971][T11081] input: syz1 as /devices/virtual/input/input13 [ 153.872318][ T42] audit: type=1800 audit(1793278588.421:926): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=208436 res=0 errno=-22 [ 153.891263][ T42] audit: type=1800 audit(1793278588.431:927): pid=5794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=208451 res=0 errno=-22 [ 153.891306][ T42] audit: type=1800 audit(1793278588.441:928): pid=5794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=208454 res=0 errno=-22 [ 153.895975][ T42] audit: type=1800 audit(1793278588.441:929): pid=5794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=208453 res=0 errno=-22 [ 153.896020][ T42] audit: type=1800 audit(1793278588.441:930): pid=5794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=208452 res=0 errno=-22 [ 154.042095][ T5140] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 154.053298][T11101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11101 comm=syz.2.1440 [ 154.336090][T11120] tipc: Resetting bearer [ 154.368423][T11116] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 154.406404][T11120] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.481026][T11126] netlink: 'syz.1.1451': attribute type 12 has an invalid length. [ 154.892586][T11149] misc userio: No port type given on /dev/userio [ 155.221230][ T5140] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 155.221294][ T5140] Bluetooth: hci3: Injecting HCI hardware error event [ 155.223624][ T5791] Bluetooth: hci3: hardware error 0x00 [ 155.522755][T11180] FAULT_INJECTION: forcing a failure. [ 155.522755][T11180] name failslab, interval 1, probability 0, space 0, times 0 [ 155.522785][T11180] CPU: 3 UID: 0 PID: 11180 Comm: syz.2.1464 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.522810][T11180] Tainted: [L]=SOFTLOCKUP [ 155.522817][T11180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.522828][T11180] Call Trace: [ 155.522835][T11180] [ 155.522843][T11180] dump_stack_lvl+0x100/0x190 [ 155.522890][T11180] should_fail_ex.cold+0x5/0xa [ 155.522921][T11180] should_failslab+0xc2/0x120 [ 155.522946][T11180] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 155.522976][T11180] ? __alloc_skb+0x140/0x710 [ 155.523006][T11180] __alloc_skb+0x140/0x710 [ 155.523024][T11180] ? __alloc_skb+0x5b7/0x710 [ 155.523042][T11180] ? __pfx___alloc_skb+0x10/0x10 [ 155.523070][T11180] create_monitor_ctrl_open+0x13d/0x790 [ 155.523095][T11180] ? __pfx_create_monitor_ctrl_open+0x10/0x10 [ 155.523116][T11180] ? futex_ref_is_dead+0x152/0x270 [ 155.523134][T11180] ? security_capable+0x80/0x260 [ 155.523164][T11180] hci_sock_ioctl+0x4ce/0x7e0 [ 155.523187][T11180] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 155.523217][T11180] sock_do_ioctl+0x118/0x280 [ 155.523243][T11180] ? __pfx_sock_do_ioctl+0x10/0x10 [ 155.523272][T11180] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.523307][T11180] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 155.523334][T11180] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 155.523367][T11180] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 155.523402][T11180] sock_ioctl+0x599/0x6b0 [ 155.523429][T11180] ? __pfx_sock_ioctl+0x10/0x10 [ 155.523463][T11180] ? selinux_file_ioctl+0x1e0/0x290 [ 155.523491][T11180] ? selinux_file_ioctl+0x1e7/0x290 [ 155.523521][T11180] ? __pfx_sock_ioctl+0x10/0x10 [ 155.523549][T11180] __x64_sys_ioctl+0x18e/0x210 [ 155.523580][T11180] do_syscall_64+0x123/0x790 [ 155.523607][T11180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.523626][T11180] RIP: 0033:0x7f42d339f559 [ 155.523642][T11180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.523660][T11180] RSP: 002b:00007f42d4297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.523681][T11180] RAX: ffffffffffffffda RBX: 00007f42d3625fa0 RCX: 00007f42d339f559 [ 155.523694][T11180] RDX: 0000200000000000 RSI: 00000000800448d4 RDI: 0000000000000004 [ 155.523706][T11180] RBP: 00007f42d4297090 R08: 0000000000000000 R09: 0000000000000000 [ 155.523717][T11180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.523728][T11180] R13: 00007f42d3626038 R14: 00007f42d3625fa0 R15: 00007ffdc94b77d8 [ 155.523755][T11180] [ 155.887982][ T7549] e1000 0000:00:07.0 eth0: Reset adapter [ 155.941953][ T857] lo speed is unknown, defaulting to 1000 [ 155.967028][ T5140] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 156.113990][T11208] tipc: Started in network mode [ 156.114021][T11208] tipc: Node identity 4ebcf7186784, cluster identity 4711 [ 156.114170][T11208] tipc: Enabled bearer , priority 0 [ 156.196752][T11204] syzkaller0: entered promiscuous mode [ 156.196776][T11204] syzkaller0: entered allmulticast mode [ 156.199816][T11204] tipc: Resetting bearer [ 156.206317][T11203] tipc: Resetting bearer [ 157.310933][ T5791] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 157.719300][T11203] tipc: Disabling bearer [ 157.725237][ T7566] tipc: Node number set to 691599128 [ 157.755002][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 157.755016][ T42] audit: type=1400 audit(1793278592.301:965): avc: denied { write } for pid=11241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.801710][ T42] audit: type=1400 audit(1793278592.351:966): avc: denied { write } for pid=11244 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.921297][ T42] audit: type=1400 audit(1793278592.471:967): avc: denied { write } for pid=11247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.991867][ T42] audit: type=1400 audit(1793278592.541:968): avc: denied { write } for pid=11250 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.076201][ T42] audit: type=1400 audit(1793278592.621:969): avc: denied { write } for pid=11252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.120897][ T42] audit: type=1400 audit(1793278592.671:970): avc: denied { write } for pid=11255 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.188327][ T7549] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 158.208474][ T42] audit: type=1400 audit(1793278592.751:971): avc: denied { write } for pid=11257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.304431][ T42] audit: type=1400 audit(1793278592.851:972): avc: denied { write } for pid=11260 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.256738][ T42] audit: type=1400 audit(1793278594.801:973): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=10.0.2.2 src=67 daddr=255.255.255.255 dest=68 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 162.155356][ T42] audit: type=1400 audit(1793278596.701:974): avc: denied { write } for pid=11265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.995064][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 164.995077][ T42] audit: type=1400 audit(1793278599.541:976): avc: denied { write } for pid=11270 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.041656][ T42] audit: type=1400 audit(1793278599.591:977): avc: denied { write } for pid=11273 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.703830][T11289] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11289 comm=syz.1.1480 [ 166.713955][T11289] overlayfs: failed to clone upperpath [ 166.783086][T11295] FAULT_INJECTION: forcing a failure. [ 166.783086][T11295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.783116][T11295] CPU: 3 UID: 0 PID: 11295 Comm: syz.4.1485 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.783143][T11295] Tainted: [L]=SOFTLOCKUP [ 166.783150][T11295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.783160][T11295] Call Trace: [ 166.783168][T11295] [ 166.783175][T11295] dump_stack_lvl+0x100/0x190 [ 166.783215][T11295] should_fail_ex.cold+0x5/0xa [ 166.783245][T11295] _copy_from_user+0x2e/0xd0 [ 166.783269][T11295] hci_get_conn_list+0x92/0x6b0 [ 166.783291][T11295] ? do_raw_spin_lock+0x128/0x260 [ 166.783310][T11295] ? hci_sock_ioctl+0x162/0x7e0 [ 166.783331][T11295] ? __pfx_hci_get_conn_list+0x10/0x10 [ 166.783352][T11295] ? hci_sock_ioctl+0x162/0x7e0 [ 166.783371][T11295] ? hci_sock_ioctl+0x162/0x7e0 [ 166.783392][T11295] ? __local_bh_enable_ip+0xa5/0x120 [ 166.783419][T11295] hci_sock_ioctl+0x5db/0x7e0 [ 166.783440][T11295] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 166.783469][T11295] sock_do_ioctl+0x118/0x280 [ 166.783494][T11295] ? __pfx_sock_do_ioctl+0x10/0x10 [ 166.783518][T11295] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 166.783552][T11295] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 166.783580][T11295] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 166.783613][T11295] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 166.783650][T11295] sock_ioctl+0x599/0x6b0 [ 166.783678][T11295] ? __pfx_sock_ioctl+0x10/0x10 [ 166.783710][T11295] ? selinux_file_ioctl+0x1e0/0x290 [ 166.783737][T11295] ? selinux_file_ioctl+0x1e7/0x290 [ 166.783766][T11295] ? __pfx_sock_ioctl+0x10/0x10 [ 166.783794][T11295] __x64_sys_ioctl+0x18e/0x210 [ 166.783818][T11295] do_syscall_64+0x123/0x790 [ 166.783836][T11295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.783856][T11295] RIP: 0033:0x7f00fe99f559 [ 166.783874][T11295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.783892][T11295] RSP: 002b:00007f00ff91b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.783911][T11295] RAX: ffffffffffffffda RBX: 00007f00fec25fa0 RCX: 00007f00fe99f559 [ 166.783922][T11295] RDX: 0000200000000000 RSI: 00000000800448d4 RDI: 0000000000000004 [ 166.783929][T11295] RBP: 00007f00ff91b090 R08: 0000000000000000 R09: 0000000000000000 [ 166.783936][T11295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.783943][T11295] R13: 00007f00fec26038 R14: 00007f00fec25fa0 R15: 00007ffd383f06b8 [ 166.783958][T11295] [ 166.821035][ T5791] Bluetooth: hci1: unexpected event for opcode 0x042e [ 166.874209][ T42] audit: type=1800 audit(1793278601.421:978): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16878 res=0 errno=-22 [ 166.895872][ T42] audit: type=1800 audit(1793278601.441:979): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16878 res=0 errno=-22 [ 166.932157][T11311] net_ratelimit: 12 callbacks suppressed [ 166.932176][T11311] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 167.136544][T11331] __nla_validate_parse: 2 callbacks suppressed [ 167.136558][T11331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1495'. [ 167.233352][ T42] audit: type=1800 audit(1793278601.781:980): pid=11341 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1498" name="warn_count" dev="sysfs" ino=57227 res=0 errno=-22 [ 167.235844][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1499'. [ 167.235856][T11343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1499'. [ 167.288993][T11350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1501'. [ 167.294751][T11350] syz_tun: entered allmulticast mode [ 167.302771][T11350] pimreg: entered allmulticast mode [ 167.306113][T11350] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 167.306127][T11350] mroute: pending queue full, dropping entries [ 167.475366][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1502'. [ 167.644266][T11378] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1511'. [ 167.696720][T11373] xt_IDLETIMER: timeout value is too big [ 167.704793][T11373] netlink: 'syz.0.1510': attribute type 7 has an invalid length. [ 167.704941][T11373] netlink: 'syz.0.1510': attribute type 8 has an invalid length. [ 167.744775][T11388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11388 comm=syz.0.1513 [ 167.749613][T11388] netlink: 'syz.0.1513': attribute type 1 has an invalid length. [ 167.767249][ T80] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 167.770724][T11388] bond2: (slave gretap0): making interface the new active one [ 167.771112][T11388] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 167.772147][T11388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11388 comm=syz.0.1513 [ 167.775774][T11388] vlan1: entered allmulticast mode [ 167.775784][T11388] bond2: entered allmulticast mode [ 167.775791][T11388] gretap0: entered allmulticast mode [ 167.781526][T11388] bond2: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 167.825313][T11397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11397 comm=syz.0.1513 [ 167.825863][T11394] netlink: 'syz.0.1513': attribute type 1 has an invalid length. [ 167.827132][T11395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11395 comm=syz.0.1513 [ 167.828913][T11393] fuse: fd is not a fuse device [ 167.831182][ T42] audit: type=1326 audit(1793278602.381:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11392 comm="syz.1.1515" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2e299f559 code=0x0 [ 167.837381][T11398] vlan1: entered allmulticast mode [ 167.838780][T11398] bond2: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 167.878953][ T42] audit: type=1800 audit(1793278602.431:982): pid=11400 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1516" name="pm_freeze_timeout" dev="sysfs" ino=873 res=0 errno=-22 [ 167.918468][ T80] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.919301][ T80] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 167.919334][ T80] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 167.919357][ T80] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 167.919377][ T80] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.919408][ T80] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.924265][ T42] audit: type=1800 audit(1793278602.471:983): pid=11309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=209475 res=0 errno=-22 [ 167.945570][ T42] audit: type=1800 audit(1793278602.491:984): pid=11309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=209504 res=0 errno=-22 [ 167.946575][ T42] audit: type=1800 audit(1793278602.491:985): pid=11309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=209482 res=0 errno=-22 [ 168.141681][ T80] usb 7-1: GET_CAPABILITIES returned 0 [ 168.141706][ T80] usbtmc 7-1:16.0: can't read capabilities [ 168.320680][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1521'. [ 168.320730][T11419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.320736][T11419] IPv6: NLM_F_CREATE should be set when creating new route [ 168.320750][T11419] IPv6: NLM_F_CREATE should be set when creating new route qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 168.414130][ T80] usb 7-1: USB disconnect, device number 28 [ 168.796988][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1525'. [ 168.811008][T11430] batadv_slave_1: entered promiscuous mode [ 168.812339][T11430] batadv_slave_1: left promiscuous mode [ 168.849861][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1525'. [ 168.942513][T11432] batadv_slave_1: entered promiscuous mode [ 168.942610][T11432] batadv_slave_1: left promiscuous mode [ 169.240475][T11449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=11449 comm=syz.0.1533 [ 169.240494][T11449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=11449 comm=syz.0.1533 [ 169.240508][T11449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=11449 comm=syz.0.1533 [ 169.240521][T11449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=11449 comm=syz.0.1533 [ 169.240532][T11449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=11449 comm=syz.0.1533 [ 169.264492][T11452] netlink: 'syz.0.1534': attribute type 4 has an invalid length. [ 169.300775][T11448] Dead loop on virtual device lo (net 211), fix it urgently! [ 169.300879][T11448] Dead loop on virtual device lo (net 211), fix it urgently! [ 169.301015][T11448] Dead loop on virtual device lo (net 211), fix it urgently! [ 169.301224][T11448] Dead loop on virtual device lo (net 211), fix it urgently! [ 169.301325][T11448] Dead loop on virtual device lo (net 211), fix it urgently! [ 169.301404][T11448] Dead loop on virtual device lo (net 211), fix it urgently! [ 169.301576][T11448] Dead loop on virtual device lo (net 211), fix it urgently! [ 169.301652][T11448] Dead loop on virtual device lo (net 211), fix it urgently! [ 169.386083][T11455] xt_socket: unknown flags 0x4c [ 169.395608][T11455] FAULT_INJECTION: forcing a failure. [ 169.395608][T11455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.395640][T11455] CPU: 3 UID: 0 PID: 11455 Comm: syz.4.1535 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.395662][T11455] Tainted: [L]=SOFTLOCKUP [ 169.395670][T11455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.395681][T11455] Call Trace: [ 169.395685][T11455] [ 169.395695][T11455] dump_stack_lvl+0x100/0x190 [ 169.395742][T11455] should_fail_ex.cold+0x5/0xa [ 169.395770][T11455] _copy_from_iter+0x1f4/0x16c0 [ 169.395798][T11455] ? __asan_memset+0x23/0x50 [ 169.395824][T11455] ? __pfx__copy_from_iter+0x10/0x10 [ 169.395844][T11455] ? __pfx___alloc_skb+0x10/0x10 [ 169.395873][T11455] netlink_sendmsg+0x8f5/0x10c0 [ 169.395897][T11455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.395923][T11455] ? selinux_socket_sendmsg+0x198/0x2f0 [ 169.395952][T11455] ? ____sys_sendmsg+0xa99/0xc30 [ 169.395976][T11455] ____sys_sendmsg+0xa99/0xc30 [ 169.396000][T11455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.396026][T11455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.396088][T11455] ___sys_sendmsg+0x190/0x1e0 [ 169.396121][T11455] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.396150][T11455] ? futex_wait+0x11e/0x370 [ 169.396186][T11455] ? find_held_lock+0x2b/0x80 [ 169.396223][T11455] __sys_sendmsg+0x160/0x210 [ 169.396239][T11455] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.396262][T11455] do_syscall_64+0x123/0x790 [ 169.396292][T11455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.396315][T11455] RIP: 0033:0x7f00fe99f559 [ 169.396333][T11455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.396368][T11455] RSP: 002b:00007f00ff91b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.396391][T11455] RAX: ffffffffffffffda RBX: 00007f00fec25fa0 RCX: 00007f00fe99f559 [ 169.396405][T11455] RDX: 0000000000000000 RSI: 0000200000000f00 RDI: 0000000000000008 [ 169.396416][T11455] RBP: 00007f00fea36b20 R08: 0000000000000000 R09: 0000000000000000 [ 169.396429][T11455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.396441][T11455] R13: 00007f00fec26038 R14: 00007f00fec25fa0 R15: 00007ffd383f06b8 [ 169.396467][T11455] [ 169.509780][T11463] syzkaller0: entered promiscuous mode [ 169.509796][T11463] syzkaller0: entered allmulticast mode [ 169.512187][T11465] tipc: New replicast peer: 172.20.20.187 [ 169.514302][T11465] tipc: Enabled bearer , priority 10 [ 169.529740][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1538'. [ 169.789692][ T80] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 169.941743][ T80] usb 9-1: device descriptor read/64, error -71 [ 170.181311][ T80] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 170.308012][ T80] usb 9-1: device descriptor read/64, error -71 [ 170.423214][ T80] usb usb9-port1: attempt power cycle [ 170.588182][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 170.588250][ T68] Bluetooth: hci1: command 0x206a tx timeout [ 170.760741][ T80] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 170.782324][ T80] usb 9-1: device descriptor read/8, error -71 [ 171.017948][ T80] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 171.037813][ T80] usb 9-1: device descriptor read/8, error -71 [ 171.072534][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 171.072547][ T42] audit: type=1800 audit(1793278605.621:998): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=209986 res=0 errno=-22 [ 171.072570][ T42] audit: type=1800 audit(1793278605.621:999): pid=11309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=209990 res=0 errno=-22 [ 171.088121][ T42] audit: type=1400 audit(1793278605.631:1000): avc: denied { connect } for pid=11483 comm="syz.1.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.147550][ T80] usb usb9-port1: unable to enumerate USB device [ 171.156558][T11489] bond2: entered promiscuous mode [ 171.156808][T11489] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.191431][ T42] audit: type=1400 audit(1793278605.741:1001): avc: denied { write } for pid=11494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.214744][T11500] fuse: fd is not a fuse device [ 171.248005][ T42] audit: type=1400 audit(1793278605.801:1002): avc: denied { write } for pid=11501 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.309640][ T42] audit: type=1400 audit(1793278605.861:1003): avc: denied { write } for pid=11505 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.341191][ T5140] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 171.342524][T11511] fuse: fd is not a fuse device [ 171.369683][ T42] audit: type=1400 audit(1793278605.921:1004): avc: denied { write } for pid=11512 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.895872][T11515] syz_tun: entered allmulticast mode [ 171.896748][T11515] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 171.902278][T11514] syz_tun: left allmulticast mode [ 172.018772][T11525] xt_hashlimit: size too large, truncated to 1048576 [ 172.297384][ T7549] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 172.457297][ T7549] usb 7-1: Using ep0 maxpacket: 16 [ 172.459845][ T7549] usb 7-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 172.460837][ T7549] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.460860][ T7549] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.460875][ T7549] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 172.460887][ T7549] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 172.460899][ T7549] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.461863][ T7549] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 172.461876][ T7549] usb 7-1: Manufacturer: syz [ 172.463763][ T7549] usb 7-1: config 0 descriptor?? [ 172.465476][ T42] audit: type=1800 audit(1793278607.011:1005): pid=11309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=210340 res=0 errno=-22 [ 172.468327][ T42] audit: type=1800 audit(1793278607.021:1006): pid=11309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=210370 res=0 errno=-22 [ 172.474606][ T42] audit: type=1800 audit(1793278607.021:1007): pid=11309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=210347 res=0 errno=-22 [ 172.729498][ T7549] rc_core: IR keymap rc-hauppauge not found [ 172.729510][ T7549] Registered IR keymap rc-empty [ 172.729925][ T7549] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 172.747479][ T7549] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 172.769800][ T7549] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 172.770892][ T7549] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input15 [ 172.795345][ T7549] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 172.807400][ T7549] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 172.837424][ T7549] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 172.867399][ T7549] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 172.899135][ T7549] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 172.927404][ T7549] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 172.957403][ T7549] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 172.987385][ T7549] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 173.017429][ T7549] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 173.037397][ T7549] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 173.058891][ T7549] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 173.058906][ T7549] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 173.063664][ T7549] usb 7-1: USB disconnect, device number 29 [ 173.339897][T11562] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 173.343722][T11568] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 173.515662][T11579] __nla_validate_parse: 2 callbacks suppressed [ 173.515682][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1575'. [ 173.827242][T11598] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20001 [ 173.876790][T11600] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1580'. [ 173.949250][ T5140] Bluetooth: hci2: connection err: -111 [ 174.073282][T11612] device-mapper: table: 248:6: thin-pool: target type may not be included in a read-only table (-EINVAL) [ 174.073300][T11612] device-mapper: ioctl: error adding target to table [ 174.075616][ T5140] Bluetooth: hci4: SCO packet for unknown connection handle 1 [ 174.726668][T11639] ufs: You didn't specify the type of your ufs filesystem [ 174.726668][T11639] [ 174.726668][T11639] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 174.726668][T11639] [ 174.726668][T11639] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 174.726703][T11639] ufs: ufstype=old is supported read-only [ 174.740963][T11639] ufs: ufs_fill_super(): bad magic number [ 174.786976][T11642] SET target dimension over the limit! [ 174.949507][T11620] ceph: No mds server is up or the cluster is laggy [ 174.950151][T11617] ceph: No mds server is up or the cluster is laggy [ 175.662060][T11653] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1597'. [ 175.826338][T11665] vlan2: entered promiscuous mode [ 175.826351][T11665] bridge0: entered promiscuous mode [ 175.848720][T11677] FAULT_INJECTION: forcing a failure. [ 175.848720][T11677] name failslab, interval 1, probability 0, space 0, times 0 [ 175.848742][T11677] CPU: 1 UID: 0 PID: 11677 Comm: syz.2.1606 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.848759][T11677] Tainted: [L]=SOFTLOCKUP [ 175.848764][T11677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.848771][T11677] Call Trace: [ 175.848775][T11677] [ 175.848780][T11677] dump_stack_lvl+0x100/0x190 [ 175.848815][T11677] should_fail_ex.cold+0x5/0xa [ 175.848833][T11677] should_failslab+0xc2/0x120 [ 175.848850][T11677] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 175.848868][T11677] ? __alloc_skb+0x5b7/0x710 [ 175.848884][T11677] ? __alloc_skb+0x140/0x710 [ 175.848897][T11677] __alloc_skb+0x140/0x710 [ 175.848908][T11677] ? __alloc_skb+0x5b7/0x710 [ 175.848919][T11677] ? __pfx___alloc_skb+0x10/0x10 [ 175.848935][T11677] netlink_ack+0x117/0xba0 [ 175.848948][T11677] ? avc_has_perm_noaudit+0x145/0x470 [ 175.848966][T11677] netlink_rcv_skb+0x333/0x420 [ 175.848979][T11677] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 175.848999][T11677] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 175.849019][T11677] ? ns_capable+0xcd/0xf0 [ 175.849034][T11677] nfnetlink_rcv+0x1b3/0x440 [ 175.849051][T11677] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 175.849068][T11677] ? netlink_deliver_tap+0x1ae/0xb50 [ 175.849083][T11677] netlink_unicast+0x668/0x950 [ 175.849099][T11677] ? __pfx_netlink_unicast+0x10/0x10 [ 175.849117][T11677] netlink_sendmsg+0x9ac/0x10c0 [ 175.849133][T11677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.849150][T11677] ? selinux_socket_sendmsg+0x198/0x2f0 [ 175.849167][T11677] ? ____sys_sendmsg+0xa99/0xc30 [ 175.849183][T11677] ____sys_sendmsg+0xa99/0xc30 [ 175.849198][T11677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.849213][T11677] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.849232][T11677] ? lock_acquire+0x1d1/0x380 [ 175.849248][T11677] ? get_pid_task+0x2a/0x250 [ 175.849260][T11677] ___sys_sendmsg+0x190/0x1e0 [ 175.849277][T11677] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.849293][T11677] ? get_pid_task+0x106/0x250 [ 175.849309][T11677] ? find_held_lock+0x2b/0x80 [ 175.849330][T11677] __sys_sendmsg+0x160/0x210 [ 175.849343][T11677] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.849364][T11677] do_syscall_64+0x123/0x790 [ 175.849380][T11677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.849392][T11677] RIP: 0033:0x7f42d339f559 [ 175.849402][T11677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.849413][T11677] RSP: 002b:00007f42d4297028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.849425][T11677] RAX: ffffffffffffffda RBX: 00007f42d3625fa0 RCX: 00007f42d339f559 [ 175.849433][T11677] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 175.849440][T11677] RBP: 00007f42d4297090 R08: 0000000000000000 R09: 0000000000000000 [ 175.849446][T11677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.849453][T11677] R13: 00007f42d3626038 R14: 00007f42d3625fa0 R15: 00007ffdc94b77d8 [ 175.849468][T11677] [ 175.956252][T11684] fuse: Bad value for 'fd' [ 175.992099][T11683] xt_hashlimit: overflow, rate too high: 1 [ 191.406015][T11698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1614'. [ 191.545471][T11711] loop5: detected capacity change from 0 to 7 [ 191.559155][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 191.559168][ T42] audit: type=1800 audit(1793278626.111:1037): pid=11717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16491 res=0 errno=-22 [ 191.673525][T11728] gadgetfs: bound to dummy_udc driver [ 191.676386][ T42] audit: type=1800 audit(1793278626.221:1038): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34770 res=0 errno=-22 [ 191.691460][ T42] audit: type=1800 audit(1793278626.241:1039): pid=11729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34793 res=0 errno=-22 [ 191.692077][ T42] audit: type=1800 audit(1793278626.241:1040): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=210817 res=0 errno=-22 [ 191.694495][ T42] audit: type=1800 audit(1793278626.241:1041): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=210829 res=0 errno=-22 [ 191.736913][ T42] audit: type=1800 audit(1793278626.281:1042): pid=11730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=210841 res=0 errno=-22 [ 191.869297][ T42] audit: type=1400 audit(1793278626.421:1043): avc: denied { watch watch_reads } for pid=11737 comm="syz.4.1624" path="/syzcgroup/net/syz4/devices.allow" dev="cgroup" ino=358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 191.882526][T11740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1625'. [ 192.127540][T11758] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 192.127588][T11758] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 192.131288][T11759] overlay: filesystem on ./bus not supported as upperdir [ 192.131360][T11760] overlay: filesystem on ./bus not supported as upperdir [ 192.283692][ T42] audit: type=1400 audit(1793278626.831:1044): avc: denied { accept } for pid=11775 comm="syz.2.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 192.284670][ T42] audit: type=1800 audit(1793278626.831:1045): pid=11776 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1633" name="file0" dev="tmpfs" ino=1684 res=0 errno=-22 [ 192.326692][T11778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1634'. [ 192.334297][T11778] bond1: entered allmulticast mode [ 192.342748][T11778] pimreg: entered allmulticast mode [ 192.553647][ T42] audit: type=1800 audit(1793278627.101:1046): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=56364 res=0 errno=-22 [ 192.680955][T11797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1643'. [ 192.708514][ T7560] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 192.857890][ T7560] usb 7-1: Using ep0 maxpacket: 8 [ 192.858640][ T7560] usb 7-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 192.859794][ T7560] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.859814][ T7560] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 192.859849][ T7560] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.859879][ T7560] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.882347][ T7560] hub 7-1:1.0: bad descriptor, ignoring hub [ 192.882371][ T7560] hub 7-1:1.0: probe with driver hub failed with error -5 [ 192.882787][ T7560] cdc_wdm 7-1:1.0: skipping garbage [ 192.882800][ T7560] cdc_wdm 7-1:1.0: skipping garbage [ 192.882865][ T7560] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 193.083054][T11817] overlay: Unknown parameter 'smackfstransmute' [ 193.245911][T11823] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 193.245932][T11823] block device autoloading is deprecated and will be removed. [ 193.397571][ T7560] usb 7-1: USB disconnect, device number 30 [ 193.647762][T11830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1653'. [ 193.736842][T11834] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1655'. [ 193.897678][ T7549] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 194.099209][ T1449] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.263395][T11869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1662'. [ 197.748718][ T42] kauditd_printk_skb: 3443 callbacks suppressed [ 197.748738][ T42] audit: type=1400 audit(1793278632.301:4490): avc: denied { write } for pid=11882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.824453][ T42] audit: type=1400 audit(1793278632.371:4491): avc: denied { write } for pid=11885 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.558965][ T42] audit: type=1400 audit(1793278637.111:4492): avc: denied { write } for pid=11887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.629578][ T42] audit: type=1400 audit(1793278637.181:4493): avc: denied { write } for pid=11890 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.626155][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1666'. [ 207.647480][T11896] tipc: Resetting bearer [ 207.718151][T11900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.761676][T11915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1672'. [ 207.804983][T11920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1673'. [ 207.806353][T11920] syz_tun: entered allmulticast mode [ 207.817805][T11920] pimreg: entered allmulticast mode [ 207.818947][T11920] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 207.818959][T11920] net_ratelimit: 45 callbacks suppressed [ 207.818966][T11920] mroute: pending queue full, dropping entries [ 207.987276][ T7560] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 208.157422][ T7560] usb 9-1: Using ep0 maxpacket: 32 [ 208.157937][ T7560] usb 9-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 208.159072][ T7560] usb 9-1: config 1 interface 0 altsetting 185 bulk endpoint 0x82 has invalid maxpacket 16 [ 208.159088][ T7560] usb 9-1: config 1 interface 0 altsetting 185 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 208.159103][ T7560] usb 9-1: config 1 interface 0 has no altsetting 0 [ 208.160656][ T7560] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.160669][ T7560] usb 9-1: Product: ꛑꔠ䠉⌜䓖穜翻콭犮毓녤م젱櫏鎧砮礉⒂ϫ㙶퇨쵻킷莦蓅䢊㣃쵖ﶏ漳閗井鞶偹ظꩯ埞速烾釉䂙❍ᔩ岁刭䞝伐֪鈫鍩㭢뛄訧狗쿙䆑뷵㊄쎓݀℗륣櫭魸引벱촜⨩쟓㈾⩽팁䔜먇㧱쵹ꃄ⟴㟑㿒肟詿薱᭚ꄽ잍஁䘢睑嫉䇗鹢⽈䟷純⤸谆င켷斊ᢺᱧ㬭㢱ﻮ,ﳎ灎䑸䰅൞⿌侮搇 [ 208.160688][ T7560] usb 9-1: Manufacturer: ᫒₷⌼Ꝟ欒鰮⊧덝ꗀ疶賜䙎Ĕ鄓䀊请朼出釧첖霫礶緫粈鋑㣺넭ﻳ녖跨텹笎릁䟀ഇ츳쉯䓙曩弱﯏涥郈雾ᦘ뾀䖄䲍耱㭰✈﫠㇎ᢪ僄틴ᅎ徒犸桜畿ᷩꇱ枃ὄ哦쮟欱㖳%廄ﻅ᠆碀꥾ﯭ杻㻻즅⦾蟔Ⱀ鮤䤞ｘ从∍㓼⑚刭ㆽ糘鯺ﺪ⨡⎯굍焧읥ꨲⶨ㤿⻳୮쾧૨䨦ޥ嵦쳖짹 [ 208.160708][ T7560] usb 9-1: SerialNumber: syz [ 208.163232][ T42] audit: type=1800 audit(1793278642.711:4494): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=211391 res=0 errno=-22 [ 208.163643][T11910] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 208.165917][ T42] audit: type=1800 audit(1793278642.711:4495): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=211423 res=0 errno=-22 [ 208.167824][ T42] audit: type=1800 audit(1793278642.721:4496): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=211398 res=0 errno=-22 [ 208.168302][ T42] audit: type=1800 audit(1793278642.721:4497): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=211399 res=0 errno=-22 [ 208.274629][ T42] audit: type=1400 audit(1793278642.821:4498): avc: denied { kexec_image_load } for pid=11960 comm="syz.0.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 208.573579][ T7560] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 208.581242][ T42] audit: type=1800 audit(1793278643.131:4499): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=211420 res=0 errno=-22 [ 208.581970][ T42] audit: type=1800 audit(1793278643.131:4500): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=211421 res=0 errno=-22 [ 208.583681][ T42] audit: type=1800 audit(1793278643.131:4501): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=211400 res=0 errno=-22 [ 208.584215][ T42] audit: type=1800 audit(1793278643.131:4502): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=211422 res=0 errno=-22 [ 208.622783][ T42] audit: type=1800 audit(1793278643.171:4503): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=211452 res=0 errno=-22 [ 208.794174][T11999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1683'. [ 209.287710][T12012] fuse: fd is not a fuse device [ 209.449740][T12029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1693'. [ 209.511088][T12031] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.511137][T12031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.547717][ T7554] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 209.617402][ T5140] Bluetooth: hci2: command 0x0406 tx timeout [ 209.677649][ T7554] usb 7-1: device descriptor read/64, error -71 [ 209.811002][T12052] fuse: fd is not a fuse device [ 209.865476][T12055] netlink: 'syz.1.1701': attribute type 1 has an invalid length. [ 209.880851][T12055] bond4: entered promiscuous mode [ 209.881145][T12055] 8021q: adding VLAN 0 to HW filter on device bond4 [ 209.896709][T12055] bond4: (slave bridge4): making interface the new active one [ 209.896728][T12055] bridge4: entered promiscuous mode [ 209.900110][T12055] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 209.917256][ T7554] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 209.977330][T12060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1702'. [ 210.047635][ T7554] usb 7-1: device descriptor read/64, error -71 [ 210.163839][ T7554] usb usb7-port1: attempt power cycle [ 210.497672][ T7554] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 210.518825][ T7554] usb 7-1: device descriptor read/8, error -71 [ 210.590649][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1705'. [ 210.590684][T12067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1705'. [ 210.757460][ T7554] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 210.773512][ T7556] usb 9-1: USB disconnect, device number 6 [ 210.783633][ T7554] usb 7-1: device descriptor read/8, error -71 [ 210.888922][ T7554] usb usb7-port1: unable to enumerate USB device [ 210.921071][T12088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=12088 comm=syz.1.1709 [ 210.921090][T12088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=12088 comm=syz.1.1709 [ 210.921103][T12088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=12088 comm=syz.1.1709 [ 210.921115][T12088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=12088 comm=syz.1.1709 [ 210.921126][T12088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7174 sclass=netlink_route_socket pid=12088 comm=syz.1.1709 [ 210.922387][T12085] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 210.922497][T12085] CIFS: Unable to determine destination address [ 210.976718][T12093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1711'. [ 211.671092][ T7554] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 211.679844][ T7554] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 211.939523][ T7554] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 211.939800][T12151] md: array md1 already initialised! [ 211.979896][T12151] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:11:22:1e:44:55 [ 212.002563][T12151] md/raid:md1: not clean -- starting background reconstruction [ 212.002581][T12151] md/raid:md1: layout 20 not supported [ 212.002591][T12151] md: pers->run() failed ... [ 212.064703][T12158] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1722'. [ 212.212524][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.218218][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.220553][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.221300][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.221745][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.363216][ T7595] syz_tun (unregistering): left allmulticast mode [ 212.396769][T12175] program syz.2.1726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.419637][T12175] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 212.449432][ T7556] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 212.470863][T12164] rxe_eth0 speed is unknown, defaulting to 1000 [ 212.536992][T12191] overlayfs: failed to clone upperpath [ 212.609844][ T5936] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 30067 - 0 [ 212.609866][ T5936] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 212.609882][ T5936] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.620881][T12164] lo speed is unknown, defaulting to 1000 [ 212.720988][ T5936] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 30067 - 0 [ 212.721011][ T5936] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 212.721027][ T5936] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.738217][T12133] ceph: No mds server is up or the cluster is laggy [ 212.821647][ T5936] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 30067 - 0 [ 212.821681][ T5936] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 212.821705][ T5936] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.901055][T12211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1731'. [ 212.915584][T12164] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.917432][T12164] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.917501][T12164] bridge_slave_0: entered allmulticast mode [ 212.918182][T12164] bridge_slave_0: entered promiscuous mode [ 212.922885][T12164] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.922959][T12164] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.923111][T12164] bridge_slave_1: entered allmulticast mode [ 212.925125][T12164] bridge_slave_1: entered promiscuous mode [ 212.958696][T12164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.961669][T12164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.996379][ T5936] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 30067 - 0 [ 212.996402][ T5936] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 212.996417][ T5936] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.013359][T12164] team0: Port device team_slave_0 added [ 213.014705][T12164] team0: Port device team_slave_1 added [ 213.030601][T12164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.030613][T12164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.030628][T12164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.031605][T12164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.031614][T12164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.031628][T12164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.062744][T12164] hsr_slave_0: entered promiscuous mode [ 213.064415][T12164] hsr_slave_1: entered promiscuous mode [ 213.064747][T12164] debugfs: 'hsr0' already exists in 'hsr' [ 213.064759][T12164] Cannot create hsr debugfs directory [ 213.175830][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 213.175842][ T42] audit: type=1800 audit(1793278647.721:4528): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220538 res=0 errno=-22 [ 213.179244][ T42] audit: type=1800 audit(1793278647.731:4529): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=220543 res=0 errno=-22 [ 213.180211][ T42] audit: type=1800 audit(1793278647.731:4530): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=220547 res=0 errno=-22 [ 213.181358][ T42] audit: type=1800 audit(1793278647.731:4531): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=220546 res=0 errno=-22 [ 213.182581][ T42] audit: type=1800 audit(1793278647.731:4532): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=220549 res=0 errno=-22 [ 213.220541][ T42] audit: type=1800 audit(1793278647.771:4533): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220975 res=0 errno=-22 [ 213.233917][ T42] audit: type=1800 audit(1793278647.781:4534): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=220980 res=0 errno=-22 [ 213.237069][ T42] audit: type=1800 audit(1793278647.781:4536): pid=12164 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27357 res=0 errno=-13 [ 213.240891][ T42] audit: type=1800 audit(1793278647.781:4535): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=220984 res=0 errno=-22 [ 213.240918][ T42] audit: type=1800 audit(1793278647.791:4537): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=220983 res=0 errno=-22 [ 213.271481][T12219] overlayfs: failed to clone upperpath [ 213.293718][ T5936] pimreg: left allmulticast mode [ 213.299076][ T5936] batman_adv: batadv0: Interface deactivated: gretap1 [ 213.299090][ T5936] batadv0: mtu less than device minimum [ 213.299670][ T5936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 213.300274][ T5936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 213.300788][ T5936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 213.301407][ T5936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 213.301918][ T5936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 213.302430][ T5936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 213.303007][ T5936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 213.303520][ T5936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 213.304135][ T5936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 213.329873][T12226] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1733'. [ 213.437759][ T7560] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 213.446941][ T5936] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 213.514279][ T5936] xfrm0 (unregistering): left allmulticast mode [ 213.517034][ T5936] team0: Port device xfrm0 removed [ 213.540481][ T7086] IPVS: starting estimator thread 0... [ 213.540671][ T5936] batman_adv: batadv0: Removing interface: gretap1 [ 213.637254][T12238] IPVS: using max 42 ests per chain, 100800 per kthread [ 213.793634][ T5936] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 213.793652][ T5936] bridge4 (unregistering): left promiscuous mode [ 213.807503][T12215] ceph: No mds server is up or the cluster is laggy [ 213.809798][ T5936] bond0 (unregistering): Released all slaves [ 213.842732][ T5936] bond1 (unregistering): Released all slaves [ 213.849743][ T5936] bond2 (unregistering): Released all slaves [ 213.855436][ T5936] bond3 (unregistering): Released all slaves [ 213.864631][ T5936] bond4 (unregistering): Released all slaves [ 213.953595][ T5791] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 213.994623][ T5936] tipc: Disabling bearer [ 214.000298][ T5936] tipc: Left network mode [ 214.269628][ T5791] Bluetooth: hci0: command tx timeout [ 214.380028][T12164] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.386363][T12164] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 214.404172][ T5936] batman_adv: batadv0: Interface deactivated: dummy0 [ 214.404187][ T5936] batman_adv: batadv0: Removing interface: dummy0 [ 214.430985][ T5936] veth1_macvtap: left promiscuous mode [ 214.431006][ T5936] veth0_macvtap: left promiscuous mode [ 214.431069][ T5936] veth1_vlan: left promiscuous mode [ 214.431098][ T5936] veth0_vlan: left promiscuous mode [ 214.490131][ T7560] SELinux: failure in sel_netif_sid_slow(), invalid network interface (51) [ 214.491423][T12259] netlink: 'syz.4.1740': attribute type 1 has an invalid length. [ 214.567502][ T7560] SELinux: failure in sel_netif_sid_slow(), invalid network interface (51) [ 214.747275][ T7554] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 214.748399][T12272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1743'. [ 214.750670][T12164] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.754540][T12164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 214.769290][T12259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.814998][T12264] bond1: (slave veth3): Enslaving as an active interface with a down link [ 214.815067][T12267] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 214.816164][T12267] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 214.844024][T12164] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.849283][T12164] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.852296][T12164] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 214.855294][T12164] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.908055][ T7554] usb 7-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 214.913767][ T7554] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 214.914730][ T7554] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 214.916807][ T7554] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.916828][ T7554] usb 7-1: Product: syz [ 214.916841][ T7554] usb 7-1: Manufacturer: syz [ 214.916853][ T7554] usb 7-1: SerialNumber: syz [ 214.935597][ T7554] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 214.951033][ T7554] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 214.962649][ T7554] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 215.117884][T12164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.132155][T12164] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.140439][ T7086] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.140485][ T7086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.149555][ T7086] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.149624][ T7086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.170990][ T5936] IPVS: stop unused estimator thread 0... [ 215.203218][T12164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.483160][T12331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1752'. [ 215.622805][T12164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.637032][T12346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1756'. [ 215.686668][T12164] veth0_vlan: entered promiscuous mode [ 215.691594][T12164] veth1_vlan: entered promiscuous mode [ 215.709240][T12164] veth0_macvtap: entered promiscuous mode [ 215.711295][T12164] veth1_macvtap: entered promiscuous mode [ 215.723776][T12164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.731317][T12164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.823444][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.823456][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.829085][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.829295][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.829359][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.829379][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.854214][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.854228][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.909144][T12363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1760'. [ 216.019332][T12374] netlink: 'syz.0.1762': attribute type 32 has an invalid length. [ 216.019346][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1762'. [ 216.059279][T12381] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1763'. [ 216.118267][T12386] fuseblk: Bad value for 'blksize' [ 216.122824][T12374] bond3: option coupled_control: invalid value (47) [ 216.225897][T12374] bond3 (unregistering): Released all slaves [ 216.335856][T12399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1768'. [ 216.337359][ T5791] Bluetooth: hci0: command tx timeout [ 216.340533][T12399] syz_tun: entered allmulticast mode [ 216.344963][T12399] pimreg: entered allmulticast mode [ 216.348203][T12399] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 216.517050][T12414] netlink: 'syz.4.1775': attribute type 5 has an invalid length. [ 216.529687][T12421] netlink: 'syz.4.1775': attribute type 5 has an invalid length. [ 216.648038][T12425] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.703440][T12429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1779'. [ 216.713179][T12429] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 216.817452][T12261] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 216.824403][ T7560] usb 7-1: USB disconnect, device number 35 [ 216.835279][ T7560] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 216.840379][ T7560] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 216.840762][ T7560] ti_usb_3410_5052 7-1:2.0: device disconnected [ 217.075266][ T5791] Bluetooth: hci2: unexpected event 0x17 length: 2 < 6 [ 217.431012][T12488] overlayfs: failed to clone upperpath [ 217.474227][ T5791] Bluetooth: hci4: unexpected event 0x17 length: 2 < 6 [ 217.746323][T12517] tmpfs: Group quota inode hardlimit too large. [ 218.093551][T12540] __nla_validate_parse: 3 callbacks suppressed [ 218.093568][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 218.144294][T12542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1823'. [ 218.337373][ T5791] Bluetooth: hci2: unexpected event 0x17 length: 4 < 6 [ 218.417852][ T5791] Bluetooth: hci0: command tx timeout [ 218.778290][T12567] netlink: 'syz.0.1831': attribute type 10 has an invalid length. [ 218.870229][T12569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1832'. [ 219.468931][ T5791] Bluetooth: hci0: unexpected event 0x17 length: 4 < 6 [ 219.587529][ T7556] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 219.704698][ T42] kauditd_printk_skb: 64 callbacks suppressed [ 219.704711][ T42] audit: type=1400 audit(1793278654.251:4602): avc: denied { mounton } for pid=12588 comm="syz.0.1840" path="/file0" dev="ramfs" ino=32644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 219.712828][T12589] overlayfs: failed to resolve './file1': -2 [ 219.739144][ T7556] usb 7-1: Using ep0 maxpacket: 8 [ 219.740801][ T7556] usb 7-1: unable to get BOS descriptor or descriptor too short [ 219.740825][ T7556] usb 7-1: New USB device found: idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 219.741649][ T7556] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 219.741663][ T7556] usb 7-1: config 0 has no interface number 0 [ 219.741682][ T7556] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 219.741696][ T7556] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 219.741709][ T7556] usb 7-1: config 0 interface 88 has no altsetting 0 [ 219.742196][T12591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1841'. [ 219.743986][ T7556] usb 7-1: string descriptor 0 read error: -22 [ 219.744042][ T7556] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 219.747902][ T7556] usb 7-1: config 0 descriptor?? [ 219.750218][T12591] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 219.750234][T12591] net_ratelimit: 12 callbacks suppressed [ 219.750246][T12591] mroute: pending queue full, dropping entries [ 219.754952][ T7556] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.88/input/input16 [ 219.757782][ T42] audit: type=1800 audit(1793278654.311:4603): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=223085 res=0 errno=-22 [ 219.770313][ T42] audit: type=1800 audit(1793278654.321:4604): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=223114 res=0 errno=-22 [ 219.773443][ T42] audit: type=1800 audit(1793278654.321:4605): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=223092 res=0 errno=-22 [ 219.779151][ T42] audit: type=1800 audit(1793278654.331:4606): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=223093 res=0 errno=-22 [ 219.807603][ T42] audit: type=1800 audit(1793278654.351:4607): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=223094 res=0 errno=-22 [ 219.821059][ T42] audit: type=1800 audit(1793278654.371:4608): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=223134 res=0 errno=-22 [ 219.828819][ T42] audit: type=1800 audit(1793278654.381:4609): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=223153 res=0 errno=-22 [ 219.834954][ T42] audit: type=1800 audit(1793278654.381:4610): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=223169 res=0 errno=-22 [ 219.835638][ T42] audit: type=1800 audit(1793278654.381:4611): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=223172 res=0 errno=-22 [ 219.923780][T11916] udevd[11916]: Error opening device "/dev/input/event4": Input/output error [ 219.923874][T11916] udevd[11916]: Unable to EVIOCGABS device "/dev/input/event4" [ 219.923920][T11916] udevd[11916]: Unable to EVIOCGABS device "/dev/input/event4" [ 219.973823][ T5791] Bluetooth: hci0: unexpected event 0x17 length: 4 < 6 [ 220.027547][ T857] usb 7-1: USB disconnect, device number 36 [ 220.237415][ T6241] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 220.401059][ T6241] usb 6-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 220.402448][ T6241] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 220.403540][ T6241] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 220.405845][ T6241] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.405866][ T6241] usb 6-1: Product: syz [ 220.405879][ T6241] usb 6-1: Manufacturer: syz [ 220.405892][ T6241] usb 6-1: SerialNumber: syz [ 220.419891][ T6241] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 220.432299][ T6241] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 220.440925][ T6241] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 220.497364][ T5791] Bluetooth: hci0: command tx timeout [ 220.749001][T12611] ------------[ cut here ]------------ [ 220.749010][T12611] 1 [ 220.749013][T12611] WARNING: mm/slub.c:5459 at ___kmalloc_large_node+0x132/0x170, CPU#3: syz.2.1848/12611 [ 220.754457][T12611] Modules linked in: [ 220.756285][T12611] CPU: 3 UID: 0 PID: 12611 Comm: syz.2.1848 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.760949][T12611] Tainted: [L]=SOFTLOCKUP [ 220.762808][T12611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 SYZFAIL: failed to recv rpc [ 220.766838][T12611] RIP: 0010:___kmalloc_large_node+0x132/0x170 [ 220.769600][T12611] Code: db 0f 85 66 ff ff ff 45 31 e4 eb cb 48 81 ff 00 00 40 00 0f 86 07 ff ff ff 80 3d 18 26 d6 0f 00 75 0b c6 05 0f 26 d6 0f 01 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 220.777686][T12611] RSP: 0018:ffffc90006187a60 EFLAGS: 00010246 [ 220.780498][T12611] RAX: ffffffff85e71ea4 RBX: 00000000bc000000 RCX: ffffc900264b6000 [ 220.783546][T12611] RDX: 00000000ffffffff RSI: 0000000000000cc0 RDI: 00000000bc000000 [ 220.785892][T12611] RBP: 0000000000000cc0 R08: 0000000000000000 R09: 000000002f000000 [ 220.788444][T12611] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000cc0 [ 220.790825][T12611] R13: 00000000ffffffff R14: 00000000bc000000 R15: ffff88805f2ac000 [ 220.793528][T12611] FS: 00007f42d42556c0(0000) GS:ffff8880d478e000(0000) knlGS:0000000000000000 [ 220.797124][T12611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.799906][T12611] CR2: 0000200000001054 CR3: 0000000037810000 CR4: 0000000000352ef0 [ 220.803145][T12611] Call Trace: [ 220.804571][T12611] [ 220.805824][T12611] __kmalloc_large_node_noprof+0x1c/0x70 [ 220.808767][T12611] __kmalloc_noprof+0x5a3/0x840 [ 220.810736][T12611] ? avc_has_extended_perms+0x4a5/0x10b0 [ 220.813088][T12611] ? drm_syncobj_array_find+0x34/0x3a0 [ 220.815312][T12611] drm_syncobj_array_find+0x34/0x3a0 [ 220.817870][T12611] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 220.820444][T12611] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 220.823031][T12611] ? drm_dev_enter+0x53/0x170 [ 220.824995][T12611] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 220.827778][T12611] ? drm_dev_exit+0x41/0x60 [ 220.829714][T12611] ? drm_dev_exit+0x41/0x60 [ 220.831604][T12611] drm_ioctl_kernel+0x1f3/0x3e0 [ 220.833601][T12611] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 220.836361][T12611] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 220.838832][T12611] drm_ioctl+0x5e6/0xc60 [ 220.840641][T12611] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 220.843406][T12611] ? __pfx_drm_ioctl+0x10/0x10 [ 220.845420][T12611] ? __fget_files+0x34/0x3d0 [ 220.847462][T12611] ? selinux_file_ioctl+0x1e0/0x290 [ 220.849695][T12611] ? selinux_file_ioctl+0x1e7/0x290 [ 220.851894][T12611] ? __pfx_drm_ioctl+0x10/0x10 [ 220.853916][T12611] __x64_sys_ioctl+0x18e/0x210 [ 220.855985][T12611] do_syscall_64+0x123/0x790 [ 220.858125][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.860586][T12611] RIP: 0033:0x7f42d339f559 [ 220.862470][T12611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.870456][T12611] RSP: 002b:00007f42d4255028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.873818][T12611] RAX: ffffffffffffffda RBX: 00007f42d3626180 RCX: 00007f42d339f559 [ 220.876643][T12611] RDX: 0000200000001040 RSI: 00000000c01864cd RDI: 0000000000000005 [ 220.879875][T12611] RBP: 00007f42d3436b20 R08: 0000000000000000 R09: 0000000000000000 [ 220.883412][T12611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.886828][T12611] R13: 00007f42d3626218 R14: 00007f42d3626180 R15: 00007ffdc94b77d8 [ 220.890091][T12611] [ 220.891412][T12611] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 220.893671][T12611] CPU: 3 UID: 0 PID: 12611 Comm: syz.2.1848 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.897110][T12611] Tainted: [L]=SOFTLOCKUP [ 220.898669][T12611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.902607][T12611] Call Trace: [ 220.903970][T12611] [ 220.905236][T12611] dump_stack_lvl+0x100/0x190 [ 220.907158][T12611] vpanic+0x2dc/0x6f8 [ 220.908803][T12611] panic+0xd1/0xe0 [ 220.910351][T12611] ? __pfx_panic+0x10/0x10 [ 220.912187][T12611] check_panic_on_warn.cold+0x19/0x34 [ 220.914333][T12611] ? ___kmalloc_large_node+0x132/0x170 [ 220.916552][T12611] __warn.cold+0x191/0x321 [ 220.918330][T12611] __report_bug+0x30f/0x440 [ 220.920164][T12611] ? ___kmalloc_large_node+0x132/0x170 [ 220.922349][T12611] ? __pfx___report_bug+0x10/0x10 [ 220.924390][T12611] ? tomoyo_path_number_perm+0x46d/0x580 [ 220.926644][T12611] ? stack_trace_save+0x8e/0xc0 [ 220.928643][T12611] ? __pfx_stack_trace_save+0x10/0x10 [ 220.930806][T12611] ? ___kmalloc_large_node+0x132/0x170 [ 220.933056][T12611] report_bug+0xb3/0x220 [ 220.934766][T12611] ? ___kmalloc_large_node+0x132/0x170 [ 220.936957][T12611] handle_bug+0x16a/0x2a0 [ 220.938717][T12611] exc_invalid_op+0x17/0x50 [ 220.940538][T12611] asm_exc_invalid_op+0x1a/0x20 [ 220.942511][T12611] RIP: 0010:___kmalloc_large_node+0x132/0x170 [ 220.944896][T12611] Code: db 0f 85 66 ff ff ff 45 31 e4 eb cb 48 81 ff 00 00 40 00 0f 86 07 ff ff ff 80 3d 18 26 d6 0f 00 75 0b c6 05 0f 26 d6 0f 01 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc [ 220.952360][T12611] RSP: 0018:ffffc90006187a60 EFLAGS: 00010246 [ 220.954673][T12611] RAX: ffffffff85e71ea4 RBX: 00000000bc000000 RCX: ffffc900264b6000 [ 220.957735][T12611] RDX: 00000000ffffffff RSI: 0000000000000cc0 RDI: 00000000bc000000 [ 220.961109][T12611] RBP: 0000000000000cc0 R08: 0000000000000000 R09: 000000002f000000 [ 220.964146][T12611] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000cc0 [ 220.967262][T12611] R13: 00000000ffffffff R14: 00000000bc000000 R15: ffff88805f2ac000 [ 220.970488][T12611] ? drm_syncobj_array_find+0x34/0x3a0 [ 220.972684][T12611] __kmalloc_large_node_noprof+0x1c/0x70 [ 220.974934][T12611] __kmalloc_noprof+0x5a3/0x840 [ 220.976951][T12611] ? avc_has_extended_perms+0x4a5/0x10b0 [ 220.979217][T12611] ? drm_syncobj_array_find+0x34/0x3a0 [ 220.981432][T12611] drm_syncobj_array_find+0x34/0x3a0 [ 220.983511][T12611] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 220.985867][T12611] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 220.988386][T12611] ? drm_dev_enter+0x53/0x170 [ 220.990291][T12611] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 220.993035][T12611] ? drm_dev_exit+0x41/0x60 [ 220.994861][T12611] ? drm_dev_exit+0x41/0x60 [ 220.996727][T12611] drm_ioctl_kernel+0x1f3/0x3e0 [ 220.998605][T12611] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 221.000659][T12611] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 221.002326][T12611] drm_ioctl+0x5e6/0xc60 [ 221.003672][T12611] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 221.005837][T12611] ? __pfx_drm_ioctl+0x10/0x10 [ 221.007221][T12611] ? __fget_files+0x34/0x3d0 [ 221.008766][T12611] ? selinux_file_ioctl+0x1e0/0x290 [ 221.010426][T12611] ? selinux_file_ioctl+0x1e7/0x290 [ 221.011967][T12611] ? __pfx_drm_ioctl+0x10/0x10 [ 221.013461][T12611] __x64_sys_ioctl+0x18e/0x210 [ 221.015022][T12611] do_syscall_64+0x123/0x790 [ 221.016841][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.019152][T12611] RIP: 0033:0x7f42d339f559 [ 221.020855][T12611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.028112][T12611] RSP: 002b:00007f42d4255028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.031309][T12611] RAX: ffffffffffffffda RBX: 00007f42d3626180 RCX: 00007f42d339f559 [ 221.034490][T12611] RDX: 0000200000001040 RSI: 00000000c01864cd RDI: 0000000000000005 [ 221.037578][T12611] RBP: 00007f42d3436b20 R08: 0000000000000000 R09: 0000000000000000 [ 221.040617][T12611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.043605][T12611] R13: 00007f42d3626218 R14: 00007f42d3626180 R15: 00007ffdc94b77d8 [ 221.046633][T12611] [ 221.048590][T12611] Kernel Offset: disabled [ 221.050263][T12611] Rebooting in 86400 seconds..