last executing test programs: 1.953580852s ago: executing program 3 (id=1124): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000026c0)={'tunl0\x00', 0x0}) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000140)=0x4) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x20, '\x00', @data, 0xfff}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x17d) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000ac0)='cgroup.procs\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0xb5, @private2, 0x6, 0x1}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000580)="218f17dabc0876aeab34457c36e301b9116f5b94ed85902149494daaaed73cd354651a77e4589a6ab3948e63632d56ce2aab9acf9c35e85b6912a004f4f6d8f87eaaf5b4e85fe0d00eab8319f1b91164a9c32e6e743b063c7bd68bd2dd149c3ced0afa518a310ac9eee1876b2bd22c7d69f079c9a8b3e450fa03caf09273b28de132633b0eac13", 0x87}, {&(0x7f0000000500)="d0a7d2debc08c91431ffbde1a8253eb43041c8e7ee5a8816284f4301ca7066ebf7d3600d48f714a353a1152ae41316e1a46a571e6186c271e5976573cae15d800deaccb3627f", 0x46}, {&(0x7f0000000340)="f5373011564469e5005d75954c08b73fa5760d170f1ab6d7f42008e856fc603a5432a88103267a6880f6cea8109a8e0cda814ffeaa6686fecff29e501ddbe844b40a39ec90f6e18608604dd9316ea6a8b406024a7bdba2fc5f3377c06ba3455b7750af1cd469154e03861b0b4ce6b74ea76903e4788491b272401c210d6128827c57df8a5c3d63fb0a95b4e78890b87e5c1a41e2004a17d9186169a46f8a404bebc356e3536efc", 0xa7}], 0x3}, 0x24004805) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) rmdir(&(0x7f0000000940)='./cgroup/../file0\x00') write$cgroup_pid(r7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.953093724s ago: executing program 3 (id=1125): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x1ffd, @remote}, 0x10, 0x0}, 0x3000c041) syz_emit_vhci(0x0, 0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc95a, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0x3, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x7, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x1004006, 0x6, 0x80000000, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0x7, 0x40], [0x10000007, 0xf0000004, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x5, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x1], [0x7, 0x408, 0x9, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0xf8, 0x7, 0x4, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2, 0xfffffffe, 0x8, 0x7ff, 0x123, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb31, 0x7, 0x81, 0x8, 0x42c2, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x10000018, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x45, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) modify_ldt$write2(0x11, &(0x7f0000000180)={0x8, 0x20000800}, 0x10) modify_ldt$read(0x0, &(0x7f0000000780)=""/73, 0x49) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.834143004s ago: executing program 3 (id=1130): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @dev}}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@arp={@loopback, @remote, 0xffffff00, 0x0, 0x0, 0x2b, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0xfffe, 0xfffc, 0x0, 0x1, 'veth1_vlan\x00', 'erspan0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @private, 0x1}}}, {{@arp={@multicast2, @empty, 0xffffffff, 0xffffffff, 0xf, 0x5, {@empty, {[0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xca63d3e56e13e625]}}, 0x0, 0x1, 0x4, 0xe4, 0x1, 0xfd, 'veth0_vlan\x00', 'geneve0\x00', {0xff}, {0x1fe}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x11f, 0x5, 0x3, 0x80, 0x2d0}}}}]}, 0x4c}}, 0x2000c010) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x140d, 0x20, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x800) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r6, 0x400c0930, 0x0) socket$l2tp(0x2, 0x2, 0x73) connect$pppl2tp(r6, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0xb, 0x4, {0xa, 0x4e28, 0xb, @empty, 0x8001}}}, 0x32) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0xf56404d5501cb17d, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x11) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6f) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r9, &(0x7f00000017c0)=""/4086, 0xff6) write$dsp(r8, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x0, @loopback}, 0x80004, 0x0, 0xffffffff}}, 0x2e) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r11, 0x4bfb, &(0x7f0000000640)=""/4096) 934.011483ms ago: executing program 0 (id=1147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 931.12391ms ago: executing program 3 (id=1149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f00)=@updpolicy={0xb8, 0x19, 0x1, 0x4, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@broadcast, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}, 0x4}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="b80000001100010000000000be2e069df6558cf400000000400000000200000000000000000000000000ffff0a01010200000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000fbffffffffffffff000000000000000000000000000000000000000000000000000000000000000002000000000000000001000000000000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x96f23147092a967e}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff020000000000000000fffffff50000", 0x5dc}], 0x1}, 0x0) 873.620786ms ago: executing program 3 (id=1151): prctl$PR_SET_FPEXC(0xc, 0x40000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = fanotify_init(0xf00, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x8) read$FUSE(r0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x25dfdbfe, {}, [@CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x1, 0x1}, 0x2, 0x7, 0x0, 0x0, "b90316a140a9f4f2"}, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x64044050}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000100)) 821.933905ms ago: executing program 0 (id=1152): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 816.571235ms ago: executing program 0 (id=1153): mkdir(&(0x7f0000000300)='./bus\x00', 0x63) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143142, 0x103) symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000500)='./file0/file2\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(0x0, 0x16) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e0c04"], 0xf) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000000)={0x0, 0x5}) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x67b, 0x2303, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000006800e97800000000000000005f0f1d2a990000040c0400"/41], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x150) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 624.269176ms ago: executing program 2 (id=1158): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="0186dd007f"], 0x38}, 0x1, 0x0, 0xf000, 0x4}, 0x0) 573.943002ms ago: executing program 2 (id=1160): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800fffffffe00000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000feb7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baa00fe00000000b5090800000000007baaf0ff00000000bf8720000000000036070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004602010076000000bf98000000000000be080000000000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 569.483866ms ago: executing program 2 (id=1162): syz_emit_ethernet(0x50, &(0x7f0000000500)=ANY=[@ANYBLOB="33330000000100112233445586dd60000000001a0040fe800000000000000000000000000001ff0200000000000000000000000000013b0201003110"], 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@private0, @in=@local, 0x4e22, 0xa013, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x84, 0x0, 0xee01}, {0x4, 0x6, 0x30f00000000000, 0x4a4, 0x532, 0x1, 0xffffffffffffff00, 0x2}, {0x7, 0xa6, 0x4, 0x4}, 0x81, 0x6e6bbe, 0x0, 0x0, 0x3, 0x2}, {{@in=@remote, 0x4d3, 0x33}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3503, 0xc731c9fe7412ea7d, 0x1, 0x5, 0x7, 0x200, 0x6}}, 0xe8) 494.027271ms ago: executing program 2 (id=1163): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="0b7c0001d892c4d2b5e32393000800030735805500c9"], 0x1c}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0xc000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="0b7c0001d892c4d2b5e32393000800030735805500c9"], 0x1c}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0xc000) 423.127554ms ago: executing program 2 (id=1165): setuid(0xee00) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080080ffffff00000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000feb7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baa00fe00000000b5090800000000007baaf0ff00000000bf8720000000000036070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004602010076000000bf98000000000000be080000000000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 421.950177ms ago: executing program 2 (id=1167): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB='@'], 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r2, 0x11a, 0x4, &(0x7f0000000040), 0x44) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) msgget(0x0, 0x300) msgget(0x0, 0x5c) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000140)={0x7, "6d67b0b878a7d024af1252fb03084fa0eb60a12f9ed48d4eb6bb2113b05805ba"}) syz_ublk_setup_queues(r7, r5, &(0x7f0000000280)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x3, 0xffffffff}}], 0x1, 0x0, 0x0) 294.056743ms ago: executing program 1 (id=1168): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0xe26) (async) write(r0, &(0x7f00000001c0)="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", 0x1000) 234.521845ms ago: executing program 1 (id=1169): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2040800) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@mcast2, 0x6f, r2}) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f40000000000000ff0200000000000000000000000000010001c204dc"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)="02d168462fdf6d148049bc3bc55ec3866744b5ba0a5294183b0a59de3207252725bd6a6ef45a84a2a3bddd43d7f3b59846", 0x31) write$P9_RWRITE(r4, &(0x7f0000000100)={0xb, 0x77, 0x1, 0x6}, 0xb) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r1, r4}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x2, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4288}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x5}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x26040090) 174.14117ms ago: executing program 0 (id=1170): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000001ff00000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000feb7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baa00fe00000000b5090800000000007baaf0ff00000000bf8720000000000036070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004602010076000000bf98000000000000be080000000000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 173.994147ms ago: executing program 1 (id=1171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x104}, 0x1, 0x0, 0x0, 0x4048082}, 0x0) 173.834845ms ago: executing program 0 (id=1172): mknodat(0xffffffffffffff9c, 0x0, 0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x9, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./dev/sda\x00', 0x5b3240, 0x142) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x84042, 0xc2) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000002c0)={0x0, 0xfb85, 0x1, 0x0, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf00, 0x2000, 0x6, 0x15e, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x4000, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf915, 0x1, 0x1, 0x121, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40000, 0x82, 0x23d}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xf7f9, 0xd3, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 173.420807ms ago: executing program 1 (id=1173): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x44100, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f00000000c0)={'b', ' *:* ', 'w\x00'}, 0x8) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = accept4$x25(r1, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x800) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)="856f6930d1e336c98c4aad594d2bd426f0a13bf5988f6239f5a2a909d3c970ba5bcac2a5e13df93001b4d8025e5d181ac4fc08282578bfeece042f2714f84c6acae23e5b33f4a9a914c4777f6d54b3bf7a5768136b292b174bca695c0a674a9b3412f4e10781bd3e2011379388b0fb9663c93fe21ad3ec78b951a1d064532d71f3d231ad7c86816da6032525c3239d4b8dcda85af7d15acf54a0858caacf755b72e151e5753c8f", 0xa7}, {&(0x7f0000000240)="450c83d848f5cfafae7fe055fef0da33b54b6a755db694df10ba8a680e8f36c378a6c9885d2e9d703414a4bb750c41dc8e65fcce09aed91d9524670994e2aa7db2", 0x41}, {&(0x7f00000002c0)="6e74a8d85d1458f1ff03e589017e46b79b49121e3f426e2a4610993c49719fe26b273d4795a1d77f646a1a68abfeb9edde4bb7e5a3ffcc1c054c3714d5b077ebc96ff75ab6baae7e09f63cd74078b06977cb6a847b656acbb2576a95f4ec9a301643b247f8c42095d929ea6e0b9c65c0e4057ced6b9002d60659cd5f2599b4498b311d1fa9e24955ae4663e956295cfa52088e02a6bdaa8f024fdf8975ffe2203a0f72b6fc4fc7ab8f95fc0e6fae26081e38e147a5cd8c397e6999fa757f6a5b6a05d48cc1ef44a4018596d47ecdc1516a0eeecd22c1c41532dc30aa2bd3205557d4243ea556be09b74d1afd52438813c9411d0899de6ab5f020b7860919", 0xfe}, {&(0x7f00000003c0)="5b4c6acbdfbb086e8b76fa8aee3f5045b6899e3c40676814393f81d0a51e789978659eba0278f189ca276083b69e0e4907946603629de2552e6f2e4dfa3ee8f397774c8560c2807602232e7620262a87ccb4a2f01fd2fd4d2e6735f0297d243162b1a0eb681880c94c1e51ad19d73ed79cb31b77caa7575e657397c759c739e7d4a7b8e3041f6410fbfb7769f8632403e7fcdfc48a1f42", 0x97}, {&(0x7f0000000480)="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", 0xfb}, {&(0x7f0000000580)="4710d127e1e32c93fa41b29973092939c2873bb49c1efe417f9b80fb9597e8c2e86648fb4bbb0e733d4bea7532c51c9a3e12650ff39de8df4586fbda5de7fe101e2a599c0bc873e614bfc1aab71e1e48470becf7c401d0c575d07eeb5bcc98006d75a3d05eaf625d3901a3a4b3cd6cd4736cc0ef491f855f409eb394eeca2e2e1f4037bd7c0f53c20896ff8c94e51dcfa72f4c8ac85e319635e289fae232c8428a9997c9ed8f7251526bfdcb174e22d59b", 0xb1}], 0x6, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x18}}], 0x1, 0x20000001) ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000000740)=0x9) r4 = syz_open_dev$radio(&(0x7f0000000780), 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f00000007c0)={0x0, @src_change}) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000880)) r5 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000008c0), 0x80000) accept4$bt_l2cap(r5, 0x0, &(0x7f0000000900), 0x80800) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x288000, 0x2, 0x2c}, 0x18) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000009c0)={{r6}, "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"}) r7 = syz_open_dev$MSR(&(0x7f00000019c0), 0xffffffffffffffff, 0x0) ioctl$X86_IOC_RDMSR_REGS(r7, 0xc02063a0, &(0x7f0000001a00)=[0x10001, 0x7, 0x40, 0xa62a, 0x7, 0x4, 0x2ba8, 0x2]) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000001a40)=0x1, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f0000001c80)={&(0x7f0000001a80), 0xc, &(0x7f0000001c40)={&(0x7f0000001b00)={0x130, r9, 0x823, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "1bc8c7a60eab8489bb8451314c236bd0939f4e1de6a2ddd2"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xf, 0x3, "27747a91507605febee966"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x257}, @TIPC_NLA_NODE_ID={0x3a, 0x3, "9a1544ed42ce615a6e0835f24d5bc704cec965325d818dc1aac70c1a4333022087a6dac9b6cc5a8eea55c25a332dfad7d4be0c38f8f0"}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x10}, 0x4050) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000001cc0)={0x2228, 0x6, 0x4, 0x10001, 0x2, 0xee}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001e40)=0x14) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002200)=@bpf_lsm={0x1d, 0x6, &(0x7f0000001f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf9d}, @alu={0x7, 0x0, 0xd, 0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}]}, &(0x7f0000001f40)='syzkaller\x00', 0xfffffc01, 0xdc, &(0x7f0000001f80)=""/220, 0x41000, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002080)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000020c0)={0x1, 0x2, 0x0, 0x8001}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000002100)=[0xffffffffffffffff, 0x1], &(0x7f0000002140)=[{0x5, 0x4, 0x8, 0x2}, {0x0, 0x5, 0xd, 0x2}, {0x0, 0x1, 0x6, 0x5}, {0x5, 0x2, 0x0, 0x6}, {0x2, 0x2, 0x5, 0x3}, {0x0, 0x1, 0x10, 0x8}, {0x0, 0x3, 0x1}, {0x3, 0x1, 0xb, 0xa}, {0x3, 0x4, 0x3, 0x4}], 0x10, 0x3}, 0x94) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002300)=@o_path={&(0x7f00000022c0)='./file0\x00', 0x0, 0x4000, r3}, 0x18) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002380)=@generic={&(0x7f0000002340)='./file0\x00'}, 0x18) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000023c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000024c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000002440), &(0x7f0000002480)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002680)={0x18, 0x0, &(0x7f0000001d40), &(0x7f0000001d80)='syzkaller\x00', 0xc, 0xd, &(0x7f0000001dc0)=""/13, 0x41100, 0x4, '\x00', r10, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000001e80)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001ec0)={0x1, 0x4, 0x8001, 0x400}, 0x10, 0xffffffffffffffff, r11, 0x6, &(0x7f00000025c0)=[r12, r13, r14, r15, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002600)=[{0x3, 0x4, 0x4, 0x3}, {0x4, 0x4, 0x3, 0xa}, {0x2, 0x2, 0x6, 0xc}, {0x2, 0x3, 0x3, 0x6}, {0x2, 0x2, 0x9, 0x3}, {0x3, 0x1, 0xa, 0xa}], 0x10, 0x8}, 0x94) 89.214259ms ago: executing program 0 (id=1174): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x80000}) mount(&(0x7f0000000040)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='selinuxfs\x00', 0x20000, &(0x7f0000000340)='\'+\x00') mkdir(&(0x7f0000000080)='./bus\x00', 0x63) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143542, 0x160) write$P9_RREADDIR(r5, &(0x7f0000000200)={0xb, 0x29, 0x2, {0x7}}, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) setns(0xc9, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) timer_create(0x0, 0x0, 0x0) syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000030426bd7000ffdbdf2500000000", @ANYRES64=r6, @ANYBLOB="adffa88801"], 0x48}, 0x1, 0x0, 0x0, 0x44004}, 0x440088c4) openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40182, 0x0) 84.84277ms ago: executing program 1 (id=1175): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400100001000330600000000fddbdf250a010101200000000000000000000000000040004e24800000000000000000000000000000000000000000ff80000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe80000000000000000000000000000b230300000000000001000080000000000000000000000000c0000000000000000040000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000033500000a000500000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210002"], 0x140}}, 0x200080d4) 261.6µs ago: executing program 1 (id=1176): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$uinput_user_dev(r1, &(0x7f0000000180)={'syz1\x00', {0x10, 0x0, 0xffff}, 0x9, [0xb86, 0x7, 0x4, 0x7, 0x7ff, 0x7, 0x5, 0x100000, 0x5, 0x4, 0xd, 0x3, 0x9, 0x1f, 0xc795, 0x8, 0x7fff, 0x10001, 0x4, 0x4, 0x1, 0x8, 0xa, 0x6, 0x1, 0x5, 0x0, 0xfb82, 0x6, 0x0, 0x0, 0x1, 0xd, 0x2, 0x0, 0x1, 0x0, 0xfffffffc, 0x400, 0x5, 0x9, 0x5, 0x2, 0x6, 0x0, 0x8, 0x7, 0x10000, 0x1, 0xe8, 0x5, 0x7, 0x4, 0x2, 0x2f03132e, 0x0, 0x3, 0x9, 0x3, 0x0, 0x0, 0xbf, 0xdf, 0x1], [0x101, 0x31, 0x6, 0x7, 0x23e, 0x80000001, 0x40a1, 0xe, 0x3, 0x8, 0x9, 0x7f, 0x75, 0x8, 0x7fff, 0x2, 0x7f, 0x5, 0x73, 0x8, 0xfffffffb, 0x1, 0x7ff, 0x4, 0x1, 0x1, 0x0, 0x9, 0x0, 0x2, 0x8, 0xf, 0xd, 0x2, 0x2a, 0x8, 0x5, 0x3, 0x1, 0x8, 0x2, 0xfffffff0, 0x6, 0x8, 0x7cd, 0x8, 0x7, 0x3, 0xc6, 0x7, 0x9, 0x7, 0x10000, 0x6, 0x5, 0x0, 0x3, 0x4, 0x8, 0x0, 0x6, 0x0, 0x6], [0x0, 0xfffffff8, 0x1, 0x3, 0x9, 0x8001, 0x3, 0x3ea7, 0x6, 0xfff7fff8, 0x9, 0x1, 0x700, 0x0, 0xfffffffa, 0xd, 0x7ff, 0x6, 0x80000, 0x7fffffff, 0x8009, 0x5, 0x9, 0x6, 0x1, 0x9, 0x3, 0x509, 0x9, 0x9, 0x2, 0x7, 0xff, 0x7fffffff, 0x5, 0x6, 0x43cd, 0x5, 0xd, 0x8000, 0x4, 0x40, 0x7, 0x7, 0x8, 0x10001, 0x4, 0xffff89a1, 0x1000, 0x19, 0x9, 0xa59, 0x3ff, 0x1, 0x3, 0xfffffff5, 0x9, 0x1, 0x10000, 0x1d, 0x3, 0x4, 0x9, 0x1], [0x7, 0x8, 0x213, 0x789c, 0x40, 0x6, 0x1000, 0x8000, 0x4, 0x3, 0x2, 0x5, 0x7fffffff, 0xd, 0x6, 0x7, 0x8, 0x9, 0x7fffffff, 0x0, 0xffff, 0x0, 0x6, 0x7, 0x0, 0xda43, 0x2, 0x5, 0x14ac3b3b, 0x2, 0xb, 0x0, 0x2, 0x1, 0x1, 0x1000, 0x81, 0xff, 0xb6, 0x3, 0xffff, 0x10, 0xa114, 0x3, 0x6, 0x800, 0x4, 0x9, 0xfffffffb, 0x4, 0x0, 0xfffffff7, 0x7, 0x800, 0x0, 0x4, 0x1, 0x3, 0x2, 0x6, 0xe, 0x9a6, 0x5, 0x200]}, 0x45c) 0s ago: executing program 3 (id=1177): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0xc0) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) eventfd(0xfffffdfe) (async) r3 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ipv6_route\x00') (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ipv6_route\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/7, 0x7}], 0x1, 0xffffffbf, 0x0) (async) preadv(r5, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/7, 0x7}], 0x1, 0xffffffbf, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/70, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000006c0)) (async) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:9733' (ED25519) to the list of known hosts. [ 40.843285][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 40.843304][ T43] audit: type=1400 audit(1789073886.059:138): avc: denied { name_bind } for pid=5715 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.887063][ T43] audit: type=1400 audit(1789073886.109:139): avc: denied { execute } for pid=5717 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.887945][ T43] audit: type=1400 audit(1789073886.109:140): avc: denied { execute_no_trans } for pid=5717 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 43.522512][ T43] audit: type=1400 audit(1789073888.739:141): avc: denied { mounton } for pid=5717 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 43.525759][ T43] audit: type=1400 audit(1789073888.749:142): avc: denied { mount } for pid=5717 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.528761][ T5717] cgroup: Unknown subsys name 'net' [ 43.530557][ T43] audit: type=1400 audit(1789073888.749:143): avc: denied { unmount } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.689381][ T5717] cgroup: Unknown subsys name 'cpuset' [ 43.693218][ T5717] cgroup: Unknown subsys name 'rlimit' [ 43.835652][ T43] audit: type=1400 audit(1789073889.059:144): avc: denied { setattr } for pid=5717 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.836217][ T43] audit: type=1400 audit(1789073889.059:145): avc: denied { create } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.836524][ T43] audit: type=1400 audit(1789073889.059:146): avc: denied { write } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.836859][ T43] audit: type=1400 audit(1789073889.059:147): avc: denied { read } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 43.915748][ T5720] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 44.605172][ T5717] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.583567][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 49.583579][ T43] audit: type=1400 audit(1789073894.799:158): avc: denied { execmem } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.838080][ T43] audit: type=1400 audit(1789073895.059:159): avc: denied { create } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.838620][ T43] audit: type=1400 audit(1789073895.059:160): avc: denied { read write } for pid=5727 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.838660][ T43] audit: type=1400 audit(1789073895.059:161): avc: denied { read write } for pid=5728 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.839557][ T43] audit: type=1400 audit(1789073895.059:162): avc: denied { open } for pid=5727 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.839589][ T43] audit: type=1400 audit(1789073895.059:163): avc: denied { open } for pid=5728 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.851918][ T43] audit: type=1400 audit(1789073895.069:164): avc: denied { ioctl } for pid=5727 comm="syz-executor" path="socket:[4701]" dev="sockfs" ino=4701 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.884949][ T5738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 49.886134][ T5738] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 49.887804][ T5738] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 49.888467][ T5738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 49.890708][ T5745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 49.892213][ T5745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 49.893494][ T5745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 49.893935][ T5745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 49.894276][ T5745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 49.894489][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 49.898418][ T5741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 49.900101][ T5741] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 49.900797][ T5741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 49.901460][ T5741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.901644][ T43] audit: type=1400 audit(1789073895.119:165): avc: denied { read } for pid=5730 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.901680][ T43] audit: type=1400 audit(1789073895.119:166): avc: denied { open } for pid=5730 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.903932][ T43] audit: type=1400 audit(1789073895.119:167): avc: denied { mounton } for pid=5730 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 49.914032][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 49.914462][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 49.916324][ T5738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 49.917596][ T5738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 49.918664][ T5732] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 49.919047][ T5732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 50.711223][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.712338][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.712473][ T5729] bridge_slave_0: entered allmulticast mode [ 50.713910][ T5729] bridge_slave_0: entered promiscuous mode [ 50.740201][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.740277][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.740371][ T5729] bridge_slave_1: entered allmulticast mode [ 50.741707][ T5729] bridge_slave_1: entered promiscuous mode [ 50.810840][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.810952][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.811043][ T5727] bridge_slave_0: entered allmulticast mode [ 50.812208][ T5727] bridge_slave_0: entered promiscuous mode [ 50.842355][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.842458][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.842540][ T5727] bridge_slave_1: entered allmulticast mode [ 50.843409][ T5727] bridge_slave_1: entered promiscuous mode [ 50.848129][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.850608][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.909291][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.925440][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.925518][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.925608][ T5730] bridge_slave_0: entered allmulticast mode [ 50.926939][ T5730] bridge_slave_0: entered promiscuous mode [ 50.936186][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.936258][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.936347][ T5730] bridge_slave_1: entered allmulticast mode [ 50.937657][ T5730] bridge_slave_1: entered promiscuous mode [ 50.940332][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.949645][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.949719][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.949816][ T5728] bridge_slave_0: entered allmulticast mode [ 50.951205][ T5728] bridge_slave_0: entered promiscuous mode [ 50.953281][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.953353][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.953621][ T5728] bridge_slave_1: entered allmulticast mode [ 50.955028][ T5728] bridge_slave_1: entered promiscuous mode [ 50.960798][ T5729] team0: Port device team_slave_0 added [ 50.996236][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.998186][ T5729] team0: Port device team_slave_1 added [ 51.035392][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.037428][ T5727] team0: Port device team_slave_0 added [ 51.040025][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.041373][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.041385][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.041405][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.044125][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.056477][ T5727] team0: Port device team_slave_1 added [ 51.077189][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.077204][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.077224][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.099531][ T5730] team0: Port device team_slave_0 added [ 51.116541][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.116557][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.116577][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.119200][ T5728] team0: Port device team_slave_0 added [ 51.121740][ T5730] team0: Port device team_slave_1 added [ 51.123212][ T5728] team0: Port device team_slave_1 added [ 51.145700][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.145714][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.145734][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.167163][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.167178][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.167198][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.168623][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.168635][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.168654][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.183173][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.183187][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.183205][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.192110][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.192123][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.192143][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.217950][ T5729] hsr_slave_0: entered promiscuous mode [ 51.218754][ T5729] hsr_slave_1: entered promiscuous mode [ 51.277345][ T5727] hsr_slave_0: entered promiscuous mode [ 51.278126][ T5727] hsr_slave_1: entered promiscuous mode [ 51.278736][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 51.278827][ T5727] Cannot create hsr debugfs directory [ 51.284659][ T5730] hsr_slave_0: entered promiscuous mode [ 51.285512][ T5730] hsr_slave_1: entered promiscuous mode [ 51.286065][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 51.286081][ T5730] Cannot create hsr debugfs directory [ 51.310019][ T5728] hsr_slave_0: entered promiscuous mode [ 51.310756][ T5728] hsr_slave_1: entered promiscuous mode [ 51.311280][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 51.311296][ T5728] Cannot create hsr debugfs directory [ 51.697868][ T5729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.706667][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.707296][ T5729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.713605][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.714484][ T5729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.721643][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.731174][ T5729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.734585][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.788702][ T5727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.790930][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.792016][ T5727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.795453][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.796073][ T5727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.800496][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.803248][ T5727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.807701][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.862218][ T5730] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.865056][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.871058][ T5730] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.876542][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.877154][ T5730] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.880424][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.881530][ T5730] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.886624][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.965972][ T5090] Bluetooth: hci0: command tx timeout [ 51.965979][ T5732] Bluetooth: hci1: command tx timeout [ 51.966277][ T5090] Bluetooth: hci2: command tx timeout [ 51.966286][ T5732] Bluetooth: hci3: command tx timeout [ 51.984196][ T5728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.988454][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.989050][ T5728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.992148][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.005493][ T5728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.008286][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.012218][ T5728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.013868][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.018679][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.042547][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.054484][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.061676][ T190] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.061860][ T190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.078314][ T190] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.078393][ T190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.101201][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.113305][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.127156][ T190] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.127238][ T190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.142797][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.142862][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.160019][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.175081][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.175158][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.191448][ T190] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.191528][ T190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.210786][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.260539][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.276100][ T190] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.276177][ T190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.288259][ T190] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.288342][ T190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.526304][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.570191][ T5729] veth0_vlan: entered promiscuous mode [ 52.574351][ T5729] veth1_vlan: entered promiscuous mode [ 52.594472][ T5729] veth0_macvtap: entered promiscuous mode [ 52.602643][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.604187][ T5729] veth1_macvtap: entered promiscuous mode [ 52.618964][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.636482][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.640584][ T5808] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.650507][ T5727] veth0_vlan: entered promiscuous mode [ 52.654593][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.669664][ T5727] veth1_vlan: entered promiscuous mode [ 52.678168][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.699331][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.744524][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.744543][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.750655][ T5730] veth0_vlan: entered promiscuous mode [ 52.790046][ T5730] veth1_vlan: entered promiscuous mode [ 52.792676][ T5727] veth0_macvtap: entered promiscuous mode [ 52.795655][ T441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.795670][ T441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.804588][ T5727] veth1_macvtap: entered promiscuous mode [ 52.816465][ T5728] veth0_vlan: entered promiscuous mode [ 52.826664][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.834288][ T5728] veth1_vlan: entered promiscuous mode [ 52.838406][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.844818][ T5730] veth0_macvtap: entered promiscuous mode [ 52.858196][ T5730] veth1_macvtap: entered promiscuous mode [ 52.868538][ T5729] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 52.889231][ T5728] veth0_macvtap: entered promiscuous mode [ 52.892328][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.901383][ T5728] veth1_macvtap: entered promiscuous mode [ 52.911247][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.931840][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.967253][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.967267][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.973731][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.990506][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.003866][ T5881] i2c i2c-0: delete_device: Extra parameters [ 53.013863][ T441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.013879][ T441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.047647][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.047689][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.047720][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.047868][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.047897][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.047925][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.047954][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.047988][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.048018][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.052188][ T441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.052200][ T441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.074990][ T5808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.075120][ T5808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.075240][ T5808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.075381][ T5808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.116744][ T5883] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5'. [ 53.123430][ T441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.123443][ T441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.124457][ T441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.124467][ T441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.173428][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.173448][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.599673][ T5916] Zero length message leads to an empty skb [ 54.045119][ T5738] Bluetooth: hci2: command tx timeout [ 54.045137][ T5090] Bluetooth: hci0: command tx timeout [ 54.059053][ T5090] Bluetooth: hci3: command tx timeout [ 54.312584][ T5969] FAULT_INJECTION: forcing a failure. [ 54.312584][ T5969] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.312613][ T5969] CPU: 1 UID: 0 PID: 5969 Comm: syz.1.26 Not tainted syzkaller #0 PREEMPT(full) [ 54.312632][ T5969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.312642][ T5969] Call Trace: [ 54.312648][ T5969] [ 54.312655][ T5969] dump_stack_lvl+0x100/0x190 [ 54.312685][ T5969] should_fail_ex.cold+0x5/0xa [ 54.312710][ T5969] _copy_from_user+0x2e/0xd0 [ 54.312729][ T5969] move_addr_to_kernel+0x65/0x170 [ 54.312756][ T5969] __sys_sendto+0x1b8/0x4e0 [ 54.312776][ T5969] ? __pfx___sys_sendto+0x10/0x10 [ 54.312801][ T5969] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 54.312835][ T5969] ? ksys_write+0x1ac/0x250 [ 54.312855][ T5969] ? __pfx_ksys_write+0x10/0x10 [ 54.312875][ T5969] __x64_sys_sendto+0xe0/0x1c0 [ 54.312893][ T5969] ? do_syscall_64+0xae/0x790 [ 54.312914][ T5969] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.312936][ T5969] do_syscall_64+0x123/0x790 [ 54.312961][ T5969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.312979][ T5969] RIP: 0033:0x7f7176f9e159 [ 54.312994][ T5969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.313010][ T5969] RSP: 002b:00007f7177ed3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 54.313028][ T5969] RAX: ffffffffffffffda RBX: 00007f7177225fa0 RCX: 00007f7176f9e159 [ 54.313040][ T5969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 54.313050][ T5969] RBP: 00007f7177ed3090 R08: 0000200000000200 R09: 0000000000000014 [ 54.313060][ T5969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.313070][ T5969] R13: 00007f7177226038 R14: 00007f7177225fa0 R15: 00007ffe36c64978 [ 54.313095][ T5969] [ 54.511083][ T5975] fuse: Bad value for 'fd' [ 54.641719][ T5936] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 54.641828][ T5936] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 54.648524][ T5936] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 54.655649][ T5936] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 54.655732][ T5936] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 54.658247][ T5936] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 54.660466][ T5936] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 54.660611][ T5936] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 54.662900][ T5936] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 54.664530][ T5936] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 54.664581][ T5936] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 54.669789][ T5936] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 54.835412][ T5982] netlink: 'syz.3.30': attribute type 4 has an invalid length. [ 54.939260][ T43] kauditd_printk_skb: 105 callbacks suppressed [ 54.939272][ T43] audit: type=1400 audit(1789073900.159:273): avc: denied { create } for pid=6001 comm="syz.2.38" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 54.939369][ T43] audit: type=1400 audit(1789073900.159:274): avc: denied { map } for pid=6001 comm="syz.2.38" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 54.939502][ T43] audit: type=1400 audit(1789073900.159:275): avc: denied { read write } for pid=6001 comm="syz.2.38" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 54.948016][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 54.957988][ T43] audit: type=1400 audit(1789073900.179:276): avc: denied { write } for pid=6001 comm="syz.2.38" name="virtual_nci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.958967][ T5994] Invalid ELF header type: 2 != 1 [ 54.960561][ T43] audit: type=1400 audit(1789073900.179:277): avc: denied { module_load } for pid=5993 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 54.996423][ T5994] Invalid ELF header type: 2 != 1 [ 55.000198][ T6028] bridge0: port 3(syz_tun) entered blocking state [ 55.000281][ T6028] bridge0: port 3(syz_tun) entered disabled state [ 55.000668][ T6028] syz_tun: entered allmulticast mode [ 55.007254][ T6028] syz_tun: entered promiscuous mode [ 55.007983][ T6028] bridge0: port 3(syz_tun) entered blocking state [ 55.008068][ T6028] bridge0: port 3(syz_tun) entered forwarding state [ 55.051581][ T6028] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 55.056892][ T43] audit: type=1400 audit(1789073900.279:278): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 55.103223][ T6037] netlink: 488 bytes leftover after parsing attributes in process `syz.0.41'. [ 55.111542][ T6037] batman_adv: batadv0: Adding interface: dummy0 [ 55.111556][ T6037] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.111577][ T6037] batman_adv: batadv0: Interface activated: dummy0 [ 55.112870][ T43] audit: type=1400 audit(1789073900.329:279): avc: denied { create } for pid=6036 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.113388][ T43] audit: type=1400 audit(1789073900.329:280): avc: denied { read } for pid=6036 comm="syz.0.41" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 55.113558][ T43] audit: type=1400 audit(1789073900.329:281): avc: denied { open } for pid=6036 comm="syz.0.41" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 55.113821][ T43] audit: type=1400 audit(1789073900.329:282): avc: denied { ioctl } for pid=6036 comm="syz.0.41" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x128a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 55.121002][ T6037] batadv0: mtu less than device minimum [ 55.121641][ T6037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 55.122507][ T6037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 55.123071][ T6037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 55.123550][ T5090] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 55.123601][ T6037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 55.124149][ T6037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 55.124682][ T6037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 55.125535][ T6037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 55.126092][ T6037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 55.250894][ T6052] netlink: 830 bytes leftover after parsing attributes in process `syz.0.46'. [ 55.308223][ T6059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.48'. [ 55.487984][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.54'. [ 55.507596][ T6082] ALSA: seq fatal error: cannot create timer (-16) [ 55.519483][ T6085] ALSA: seq fatal error: cannot create timer (-16) [ 55.589961][ T6093] jffs2: notice: (6093) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 55.669207][ T6100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6100 comm=syz.2.62 [ 55.804064][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 55.826178][ T6114] warning: `syz.3.68' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.878503][ T6122] binder: 6117:6122 ioctl c0306201 200000000080 returned -14 [ 55.885294][ T5090] Bluetooth: hci1: command 0x040f tx timeout [ 55.889503][ T6126] input: syz0 as /devices/virtual/input/input5 [ 56.154029][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.78'. [ 56.589689][ T5090] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 56.642566][ T6167] Bluetooth: MGMT ver 1.23 [ 56.643372][ T6167] Bluetooth: MGMT ver 1.23 [ 56.643648][ T6167] Bluetooth: MGMT ver 1.23 [ 56.684888][ T5090] Bluetooth: hci2: command 0x0419 tx timeout [ 57.061930][ T6186] pim6reg1: entered promiscuous mode [ 57.061952][ T6186] pim6reg1: entered allmulticast mode [ 57.063897][ T6186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.89'. [ 57.498178][ T6192] ======================================================= [ 57.498178][ T6192] WARNING: The mand mount option has been deprecated and [ 57.498178][ T6192] and is ignored by this kernel. Remove the mand [ 57.498178][ T6192] option from the mount to silence this warning. [ 57.498178][ T6192] ======================================================= [ 57.499360][ T6192] jffs2: notice: (6192) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 57.974909][ T5090] Bluetooth: hci1: command 0x040f tx timeout [ 58.057919][ T6216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.99'. [ 58.076212][ T6223] ieee802154 phy0 wpan0: encryption failed: -90 [ 58.774959][ T5090] Bluetooth: hci2: command 0x0419 tx timeout [ 59.383700][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 59.533273][ T6279] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 59.590212][ T6279] tc_dump_action: action bad kind [ 59.645080][ T6287] 9pnet_virtio: no channels available for device syz [ 59.645283][ T6287] 9pnet_virtio: no channels available for device syz [ 59.645415][ T6287] 9pnet_virtio: no channels available for device syz [ 59.645560][ T6287] 9pnet_virtio: no channels available for device syz [ 59.645690][ T6287] 9pnet_virtio: no channels available for device syz [ 59.645818][ T6287] 9pnet_virtio: no channels available for device syz [ 59.645955][ T6287] 9pnet_virtio: no channels available for device syz [ 59.646084][ T6287] 9pnet_virtio: no channels available for device syz [ 59.646212][ T6287] 9pnet_virtio: no channels available for device syz [ 59.646652][ T6287] 9pnet_virtio: no channels available for device syz [ 59.652570][ T6287] 9pnet_virtio: no channels available for device syz [ 59.652737][ T6287] 9pnet_virtio: no channels available for device syz [ 59.652870][ T6287] 9pnet_virtio: no channels available for device syz [ 59.653006][ T6287] 9pnet_virtio: no channels available for device syz [ 59.653135][ T6287] 9pnet_virtio: no channels available for device syz [ 59.653264][ T6287] 9pnet_virtio: no channels available for device syz [ 59.653436][ T6287] 9pnet_virtio: no channels available for device syz [ 59.653596][ T6287] 9pnet_virtio: no channels available for device syz [ 59.653727][ T6287] 9pnet_virtio: no channels available for device syz [ 59.653855][ T6287] 9pnet_virtio: no channels available for device syz [ 59.653988][ T6287] 9pnet_virtio: no channels available for device syz [ 59.654156][ T6287] 9pnet_virtio: no channels available for device syz [ 59.654286][ T6287] 9pnet_virtio: no channels available for device syz [ 59.654432][ T6287] 9pnet_virtio: no channels available for device syz [ 59.654561][ T6287] 9pnet_virtio: no channels available for device syz [ 59.661608][ T6287] 9pnet_virtio: no channels available for device syz [ 59.661752][ T6287] 9pnet_virtio: no channels available for device syz [ 59.661882][ T6287] 9pnet_virtio: no channels available for device syz [ 59.662015][ T6287] 9pnet_virtio: no channels available for device syz [ 59.662224][ T6287] 9pnet_virtio: no channels available for device syz [ 59.662353][ T6287] 9pnet_virtio: no channels available for device syz [ 59.662483][ T6287] 9pnet_virtio: no channels available for device syz [ 59.663845][ T6287] 9pnet_virtio: no channels available for device syz [ 59.664003][ T6287] 9pnet_virtio: no channels available for device syz [ 59.664134][ T6287] 9pnet_virtio: no channels available for device syz [ 59.664287][ T6287] 9pnet_virtio: no channels available for device syz [ 59.664471][ T6287] 9pnet_virtio: no channels available for device syz [ 59.664616][ T6287] 9pnet_virtio: no channels available for device syz [ 59.664743][ T6287] 9pnet_virtio: no channels available for device syz [ 59.666690][ T6287] 9pnet_virtio: no channels available for device syz [ 59.666822][ T6287] 9pnet_virtio: no channels available for device syz [ 59.666975][ T6287] 9pnet_virtio: no channels available for device syz [ 59.667102][ T6287] 9pnet_virtio: no channels available for device syz [ 59.667228][ T6287] 9pnet_virtio: no channels available for device syz [ 59.669169][ T6287] 9pnet_virtio: no channels available for device syz [ 59.669384][ T6287] 9pnet_virtio: no channels available for device syz [ 59.669558][ T6287] 9pnet_virtio: no channels available for device syz [ 59.669691][ T6287] 9pnet_virtio: no channels available for device syz [ 59.669822][ T6287] 9pnet_virtio: no channels available for device syz [ 59.669971][ T6287] 9pnet_virtio: no channels available for device syz [ 59.670440][ T6287] 9pnet_virtio: no channels available for device syz [ 59.670583][ T6287] 9pnet_virtio: no channels available for device syz [ 59.670710][ T6287] 9pnet_virtio: no channels available for device syz [ 59.672414][ T6287] 9pnet_virtio: no channels available for device syz [ 59.672557][ T6287] 9pnet_virtio: no channels available for device syz [ 59.672712][ T6287] 9pnet_virtio: no channels available for device syz [ 59.672843][ T6287] 9pnet_virtio: no channels available for device syz [ 59.672996][ T6287] 9pnet_virtio: no channels available for device syz [ 59.673643][ T6287] 9pnet_virtio: no channels available for device syz [ 59.673781][ T6287] 9pnet_virtio: no channels available for device syz [ 59.674614][ T6287] 9pnet_virtio: no channels available for device syz [ 59.674751][ T6287] 9pnet_virtio: no channels available for device syz [ 59.676516][ T6287] 9pnet_virtio: no channels available for device syz [ 59.678034][ T6287] 9pnet_virtio: no channels available for device syz [ 59.864850][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 59.879184][ T6288] cgroup: fork rejected by pids controller in /syz3 [ 60.016948][ T25] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.020315][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.020366][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.020384][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.020416][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.031397][ T25] usb 7-1: config 0 descriptor?? [ 60.047975][ T5738] Bluetooth: hci1: command 0x040f tx timeout [ 60.619842][ T6360] xt_hashlimit: size too large, truncated to 1048576 [ 60.657373][ T25] usbhid 7-1:0.0: can't add hid device: -71 [ 60.657459][ T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 60.675988][ T25] usb 7-1: USB disconnect, device number 2 [ 60.681853][ T43] kauditd_printk_skb: 95 callbacks suppressed [ 60.681864][ T43] audit: type=1400 audit(1789073905.899:378): avc: denied { bind } for pid=6361 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.855755][ T5090] Bluetooth: hci2: command 0x0419 tx timeout [ 60.873350][ T6374] capability: warning: `syz.0.130' uses deprecated v2 capabilities in a way that may be insecure [ 60.886851][ T6373] net_ratelimit: 11 callbacks suppressed [ 60.886868][ T6373] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 61.007939][ T43] audit: type=1400 audit(1789073906.229:379): avc: denied { write } for pid=6379 comm="syz.3.132" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 61.008186][ T6380] random: crng reseeded on system resumption [ 61.203374][ T43] audit: type=1400 audit(1789073906.419:380): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 61.244937][ T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 61.259210][ T43] audit: type=1400 audit(1789073906.479:381): avc: denied { mounton } for pid=6381 comm="syz.2.133" path="/29/file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.259554][ T6382] fuse: fd is not a fuse device [ 61.326292][ T43] audit: type=1400 audit(1789073906.549:382): avc: denied { create } for pid=6254 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.327060][ T43] audit: type=1400 audit(1789073906.549:383): avc: denied { bind } for pid=6254 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.327524][ T43] audit: type=1400 audit(1789073906.549:384): avc: denied { setopt } for pid=6254 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.327853][ T43] audit: type=1400 audit(1789073906.549:385): avc: denied { accept } for pid=6254 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.328462][ T43] audit: type=1400 audit(1789073906.549:386): avc: denied { write } for pid=6254 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.331385][ T43] audit: type=1400 audit(1789073906.549:387): avc: denied { create } for pid=6254 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 61.424933][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 61.428482][ T25] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.429618][ T25] usb 8-1: config index 0 descriptor too short (expected 62576, got 113) [ 61.429637][ T25] usb 8-1: config 1 has an invalid descriptor of length 201, skipping remainder of the config [ 61.429652][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 61.429683][ T25] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 61.431823][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.431843][ T25] usb 8-1: Product: syz [ 61.431855][ T25] usb 8-1: Manufacturer: Т [ 61.431866][ T25] usb 8-1: SerialNumber: syz [ 61.691015][ T25] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 61.691057][ T25] cdc_ncm 8-1:1.0: bind() failure [ 61.707081][ T25] usb 8-1: USB disconnect, device number 2 [ 62.107061][ T5090] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 62.564935][ T5878] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 62.599292][ T6436] geneve1: entered allmulticast mode [ 62.716587][ T5878] usb 7-1: Invalid ep0 maxpacket: 64 [ 62.848705][ T5878] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 62.934918][ T5090] Bluetooth: hci2: command 0x0419 tx timeout [ 62.995062][ T5878] usb 7-1: Invalid ep0 maxpacket: 64 [ 63.001475][ T5878] usb usb7-port1: attempt power cycle [ 63.166874][ T5090] Bluetooth: hci3: command 0x0419 tx timeout [ 63.335915][ T5878] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 63.367109][ T5878] usb 7-1: Invalid ep0 maxpacket: 64 [ 63.488296][ T6456] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 63.496516][ T5878] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 63.516155][ T5878] usb 7-1: Invalid ep0 maxpacket: 64 [ 63.519121][ T5878] usb usb7-port1: unable to enumerate USB device [ 64.061713][ T6463] binder: 6462:6463 ioctl 4018620d 200000000100 returned -22 [ 64.484872][ T1355] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 64.636863][ T1355] usb 6-1: unable to get BOS descriptor or descriptor too short [ 64.637284][ T1355] usb 6-1: not running at top speed; connect to a high speed hub [ 64.637300][ T1355] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 64.638122][ T1355] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 64.638135][ T1355] usb 6-1: config 0 has no interface number 0 [ 64.638153][ T1355] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 64.638165][ T1355] usb 6-1: config 0 interface 88 has no altsetting 0 [ 64.640646][ T1355] usb 6-1: language id specifier not provided by device, defaulting to English [ 64.670070][ T1355] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 64.670084][ T1355] usb 6-1: Product: syz [ 64.673293][ T1355] usb 6-1: config 0 descriptor?? [ 64.674714][ T6465] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 64.890311][ T1355] input: syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.88/input/input7 [ 64.901861][ T1355] usb 6-1: USB disconnect, device number 2 [ 65.245021][ T5738] Bluetooth: hci3: command 0x0419 tx timeout [ 65.593761][ T5738] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 65.594316][ T5738] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 65.813893][ T43] kauditd_printk_skb: 58 callbacks suppressed [ 65.813938][ T43] audit: type=1400 audit(1789073911.029:446): avc: denied { create } for pid=6520 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.814193][ T43] audit: type=1400 audit(1789073911.029:447): avc: denied { bind } for pid=6520 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.814577][ T43] audit: type=1400 audit(1789073911.029:448): avc: denied { listen } for pid=6520 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.817561][ T43] audit: type=1400 audit(1789073911.039:449): avc: denied { connect } for pid=6520 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.921295][ T6525] ipt_ah: unknown flags FF [ 65.958259][ T6530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6530 comm=syz.3.182 [ 66.015121][ T1355] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 66.166803][ T1355] usb 5-1: unable to get BOS descriptor or descriptor too short [ 66.167256][ T1355] usb 5-1: not running at top speed; connect to a high speed hub [ 66.167279][ T1355] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 66.168164][ T1355] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 66.168182][ T1355] usb 5-1: config 0 has no interface number 0 [ 66.168240][ T1355] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 66.168261][ T1355] usb 5-1: config 0 interface 88 has no altsetting 0 [ 66.171748][ T1355] usb 5-1: language id specifier not provided by device, defaulting to English [ 66.177682][ T1355] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 66.177703][ T1355] usb 5-1: Product: syz [ 66.182209][ T1355] usb 5-1: config 0 descriptor?? [ 66.182953][ T6516] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 66.254934][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 66.399550][ T1355] input: syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.88/input/input8 [ 66.405766][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 66.406614][ T25] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 66.414665][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.429602][ T1355] usb 5-1: USB disconnect, device number 2 [ 66.433547][ T25] pvrusb2: Hardware description: Terratec Grabster AV400 [ 66.433560][ T25] pvrusb2: ********** [ 66.433565][ T25] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 66.433574][ T25] pvrusb2: Important functionality might not be entirely working. [ 66.433581][ T25] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 66.433589][ T25] pvrusb2: ********** [ 66.626191][ T2513] pvrusb2: Invalid write control endpoint [ 66.629136][ T6539] syz.3.183 uses obsolete (PF_INET,SOCK_PACKET) [ 66.641356][ T43] audit: type=1400 audit(1789073911.859:450): avc: denied { ioctl } for pid=6535 comm="syz.3.183" path="socket:[20675]" dev="sockfs" ino=20675 ioctlcmd=0x7446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 66.663568][ T6539] geneve2: entered promiscuous mode [ 66.699965][ T2513] pvrusb2: Invalid write control endpoint [ 66.699979][ T2513] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 66.699987][ T2513] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 66.699993][ T2513] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 66.700001][ T2513] pvrusb2: Device being rendered inoperable [ 66.701512][ T2513] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 66.701580][ T2513] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 66.704328][ T2513] pvrusb2: Attached sub-driver cx25840 [ 66.704340][ T2513] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 66.704347][ T2513] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 66.815853][ T43] audit: type=1400 audit(1789073912.039:451): avc: denied { create } for pid=6551 comm="syz.1.187" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.816541][ T43] audit: type=1400 audit(1789073912.039:452): avc: denied { write } for pid=6551 comm="syz.1.187" name="file0" dev="tmpfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.816937][ T43] audit: type=1400 audit(1789073912.039:453): avc: denied { open } for pid=6551 comm="syz.1.187" path="/35/file0" dev="tmpfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.817551][ T43] audit: type=1400 audit(1789073912.039:454): avc: denied { ioctl } for pid=6551 comm="syz.1.187" path="/35/file0" dev="tmpfs" ino=202 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.893921][ T6554] Console: switching to colour dummy device 80x25 [ 66.911912][ T5809] usb 8-1: USB disconnect, device number 3 [ 66.961939][ T43] audit: type=1400 audit(1789073912.179:455): avc: denied { allowed } for pid=6551 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.983862][ T6553] cgroup: Unknown subsys name 'sysfs' [ 67.113674][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 67.326212][ T5738] Bluetooth: hci3: command 0x0419 tx timeout [ 67.656918][ T6608] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6608 comm=syz.2.204 [ 67.752827][ T5738] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 67.899117][ T6624] misc userio: No port type given on /dev/userio [ 68.472057][ T6678] netlink: 88 bytes leftover after parsing attributes in process `syz.3.232'. [ 68.764942][ T6689] syz.1.236 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 68.764967][ T6689] CPU: 2 UID: 0 PID: 6689 Comm: syz.1.236 Not tainted syzkaller #0 PREEMPT(full) [ 68.764979][ T6689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.764986][ T6689] Call Trace: [ 68.764991][ T6689] [ 68.764996][ T6689] dump_stack_lvl+0x100/0x190 [ 68.765016][ T6689] dump_header+0xfb/0x606 [ 68.765029][ T6689] oom_kill_process.cold+0xd/0x380 [ 68.765043][ T6689] out_of_memory+0x340/0x14f0 [ 68.765061][ T6689] ? __pfx_out_of_memory+0x10/0x10 [ 68.765080][ T6689] mem_cgroup_out_of_memory+0xc6/0x130 [ 68.765093][ T6689] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 68.765105][ T6689] ? find_held_lock+0x2b/0x80 [ 68.765142][ T6689] ? do_raw_spin_unlock+0x145/0x1e0 [ 68.765157][ T6689] ? _raw_spin_unlock+0x28/0x50 [ 68.765172][ T6689] try_charge_memcg+0x783/0xf60 [ 68.765191][ T6689] ? __pfx_try_charge_memcg+0x10/0x10 [ 68.765208][ T6689] ? find_held_lock+0x2b/0x80 [ 68.765222][ T6689] ? rcu_read_unlock+0x17/0x60 [ 68.765237][ T6689] ? rcu_read_unlock+0x17/0x60 [ 68.765257][ T6689] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 68.765279][ T6689] ? kasan_unpoison+0x27/0x60 [ 68.765292][ T6689] __kmalloc_noprof+0x653/0x840 [ 68.765304][ T6689] ? __register_sysctl_table+0xac/0x1650 [ 68.765323][ T6689] __register_sysctl_table+0xac/0x1650 [ 68.765341][ T6689] ? lock_acquire+0x1d1/0x380 [ 68.765353][ T6689] ? __pfx___register_sysctl_table+0x10/0x10 [ 68.765369][ T6689] ? is_module_address+0x5f/0xf0 [ 68.765382][ T6689] ? is_module_address+0x5f/0xf0 [ 68.765398][ T6689] register_net_sysctl_sz+0x325/0x420 [ 68.765415][ T6689] ? __asan_memcpy+0x3c/0x60 [ 68.765428][ T6689] ipv4_sysctl_init_net+0x156/0x3c0 [ 68.765451][ T6689] ? __pfx_ipv4_sysctl_init_net+0x10/0x10 [ 68.765476][ T6689] ops_init+0x1e2/0x5f0 [ 68.765501][ T6689] setup_net+0x118/0x3a0 [ 68.765523][ T6689] ? __pfx_setup_net+0x10/0x10 [ 68.765555][ T6689] copy_net_ns+0x345/0x7a0 [ 68.765572][ T6689] create_new_namespaces+0x3ea/0xac0 [ 68.765588][ T6689] unshare_nsproxy_namespaces+0xf2/0x220 [ 68.765602][ T6689] ksys_unshare+0x4a2/0xa70 [ 68.765615][ T6689] ? __pfx_ksys_unshare+0x10/0x10 [ 68.765633][ T6689] __x64_sys_unshare+0x31/0x40 [ 68.765645][ T6689] do_syscall_64+0x123/0x790 [ 68.765661][ T6689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.765673][ T6689] RIP: 0033:0x7f7176f9e159 [ 68.765684][ T6689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.765694][ T6689] RSP: 002b:00007f7177ed3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 68.765705][ T6689] RAX: ffffffffffffffda RBX: 00007f7177225fa0 RCX: 00007f7176f9e159 [ 68.765712][ T6689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 68.765718][ T6689] RBP: 00007f717703503b R08: 0000000000000000 R09: 0000000000000000 [ 68.765724][ T6689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.765746][ T6689] R13: 00007f7177226038 R14: 00007f7177225fa0 R15: 00007ffe36c64978 [ 68.765761][ T6689] [ 68.766279][ T6689] memory: usage 96kB, limit 96kB, failcnt 36 [ 68.766289][ T6689] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 68.766296][ T6689] kmem: usage 88kB, limit 9007199254740988kB, failcnt 0 [ 68.766303][ T6689] Memory cgroup stats for /syz1/test: [ 68.766404][ T6689] cache 0 [ 68.766409][ T6689] rss 0 [ 68.766413][ T6689] rss_huge 0 [ 68.766417][ T6689] shmem 0 [ 68.766421][ T6689] mapped_file 0 [ 68.766425][ T6689] dirty 0 [ 68.766429][ T6689] writeback 0 [ 68.766432][ T6689] workingset_refault_anon 0 [ 68.766437][ T6689] workingset_refault_file 0 [ 68.766441][ T6689] swap 0 [ 68.766445][ T6689] swapcached 0 [ 68.766449][ T6689] pgpgin 0 [ 68.766453][ T6689] pgpgout 0 [ 68.766457][ T6689] pgfault 0 [ 68.766461][ T6689] pgmajfault 0 [ 68.766465][ T6689] inactive_anon 0 [ 68.766470][ T6689] active_anon 0 [ 68.766474][ T6689] inactive_file 0 [ 68.766478][ T6689] active_file 0 [ 68.766482][ T6689] unevictable 0 [ 68.766486][ T6689] hierarchical_memory_limit 98304 [ 68.766491][ T6689] hierarchical_memsw_limit 9223372036854771712 [ 68.766496][ T6689] total_cache 0 [ 68.766499][ T6689] total_rss 0 [ 68.766503][ T6689] total_rss_huge 0 [ 68.766507][ T6689] total_shmem 0 [ 68.766510][ T6689] total_mapped_file 0 [ 68.766514][ T6689] total_dirty 0 [ 68.766518][ T6689] total_writeback 0 [ 68.766521][ T6689] total_workingset_refault_anon 0 [ 68.766531][ T6689] total_workingset_refault_file 0 [ 68.766536][ T6689] total_swap 0 [ 68.766540][ T6689] total_swapcached 0 [ 68.766544][ T6689] total_pgpgin 0 [ 68.766548][ T6689] total_pgpgout 0 [ 68.766552][ T6689] total_pgfault 0 [ 68.766557][ T6689] total_pgmajfault 0 [ 68.766561][ T6689] total_inactive_anon 0 [ 68.766565][ T6689] total_active_anon 0 [ 68.766569][ T6689] total_inactive_file 0 [ 68.766573][ T6689] total_active_file 0 [ 68.766577][ T6689] total_unevictable 0 [ 68.766581][ T6689] anon_cost 0 [ 68.766585][ T6689] file_cost 0 [ 68.766589][ T6689] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.236,pid=6688,uid=0 [ 68.766757][ T6689] Memory cgroup out of memory: Killed process 6688 (syz.1.236) total-vm:102252kB, anon-rss:1436kB, file-rss:22928kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 68.995406][ T6695] netlink: 'syz.0.239': attribute type 4 has an invalid length. [ 69.099613][ T6706] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 69.099639][ T6706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.126368][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 69.155119][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 69.155134][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 69.301016][ T6722] netlink: 'syz.1.249': attribute type 10 has an invalid length. [ 69.373174][ T6725] netlink: 'syz.0.251': attribute type 18 has an invalid length. [ 69.373193][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'. [ 69.406083][ T5738] Bluetooth: hci3: command 0x0419 tx timeout [ 69.515936][ T6732] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 69.516090][ T6732] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 70.069781][ T1355] Process accounting resumed [ 70.071275][ T6722] team0 (unregistering): Port device team_slave_0 removed [ 70.078282][ T6722] team0 (unregistering): Port device team_slave_1 removed [ 70.093385][ T6725] netlink: 'syz.0.251': attribute type 18 has an invalid length. [ 70.093397][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'. [ 70.105063][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.105100][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.105128][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.106708][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.222153][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'. [ 70.222173][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 70.222198][ T6742] netlink: 'syz.2.254': attribute type 12 has an invalid length. [ 70.458882][ T6770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.262'. [ 70.757356][ T6790] syz_tun: entered allmulticast mode [ 70.764252][ T6790] dvmrp8: entered allmulticast mode [ 70.765219][ T6790] dvmrp8: left allmulticast mode [ 70.848318][ T6789] syz_tun: left allmulticast mode [ 71.173776][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.173829][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.187848][ T3380] cfg80211: failed to load regulatory.db [ 71.205515][ T6804] tipc: Started in network mode [ 71.205532][ T6804] tipc: Node identity 7f, cluster identity 4711 [ 71.205547][ T6804] tipc: Node number set to 127 [ 71.209295][ T43] kauditd_printk_skb: 32 callbacks suppressed [ 71.209310][ T43] audit: type=1400 audit(1789073916.429:488): avc: denied { shutdown } for pid=6803 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.244116][ T43] audit: type=1400 audit(1789073916.459:489): avc: denied { unmount } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 71.352280][ T43] audit: type=1400 audit(1789073916.569:490): avc: denied { mount } for pid=6813 comm="syz.0.282" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 71.484198][ T6837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29501 sclass=netlink_route_socket pid=6837 comm=syz.1.284 [ 71.629162][ T43] audit: type=1400 audit(1789073916.849:491): avc: denied { ioctl } for pid=6855 comm="syz.0.290" path="socket:[22100]" dev="sockfs" ino=22100 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 71.633490][ T6856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.651728][ T43] audit: type=1400 audit(1789073916.869:492): avc: denied { setopt } for pid=6852 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.743545][ T6862] CUSE: unknown device info "" [ 71.743560][ T6862] CUSE: unknown device info "" [ 71.743567][ T6862] CUSE: unknown device info "" [ 71.743574][ T6862] CUSE: unknown device info "" [ 71.743580][ T6862] CUSE: zero length info key specified [ 71.991536][ T6866] netlink: 'syz.3.292': attribute type 1 has an invalid length. [ 72.003006][ T6866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.010884][ T6866] bond1: (slave veth0_to_bond): making interface the new active one [ 72.012502][ T6866] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 72.041360][ T6866] bond1: entered promiscuous mode [ 72.041381][ T6866] veth0_to_bond: entered promiscuous mode [ 72.041593][ T6866] bond1: entered allmulticast mode [ 72.041606][ T6866] veth0_to_bond: entered allmulticast mode [ 72.052309][ T6866] macvlan2: entered promiscuous mode [ 72.052327][ T6866] macvlan2: entered allmulticast mode [ 72.054708][ T6866] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 72.059540][ T6866] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 72.148527][ T67] block nbd2: Receive control failed (result -32) [ 72.151772][ T6811] block nbd2: shutting down sockets [ 72.358114][ T6876] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 72.358826][ T6876] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 72.359563][ T6878] trusted_key: encrypted_key: keylen parameter is missing [ 72.360823][ T6878] trusted_key: encrypted_key: keylen parameter is missing [ 72.360970][ T6878] trusted_key: encrypted_key: keylen parameter is missing [ 72.361094][ T6878] trusted_key: encrypted_key: keylen parameter is missing [ 72.361209][ T6878] trusted_key: encrypted_key: keylen parameter is missing [ 72.361321][ T6878] trusted_key: encrypted_key: keylen parameter is missing [ 72.362997][ T6878] trusted_key: encrypted_key: keylen parameter is missing [ 72.494127][ T43] audit: type=1400 audit(1789073917.709:493): avc: denied { ioctl } for pid=6882 comm="syz.1.298" path="socket:[21232]" dev="sockfs" ino=21232 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.074884][ T992] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 74.225732][ T992] usb 7-1: Using ep0 maxpacket: 8 [ 74.227562][ T992] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 74.228980][ T992] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.229001][ T992] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 74.229013][ T992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.236494][ T992] usb 7-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 74.236514][ T992] usb 7-1: Product: syz [ 74.236523][ T992] usb 7-1: Manufacturer: syz [ 74.236533][ T992] usb 7-1: SerialNumber: syz [ 74.240659][ T992] usb 7-1: config 0 descriptor?? [ 74.295371][ T992] rc_core: IR keymap rc-imon-rsc not found [ 74.295382][ T992] Registered IR keymap rc-empty [ 74.296378][ T992] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 74.297303][ T992] input: iMON Station as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input9 [ 74.309650][ T43] audit: type=1400 audit(1789073919.529:494): avc: denied { read } for pid=5126 comm="acpid" name="event4" dev="devtmpfs" ino=2861 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.309948][ T43] audit: type=1400 audit(1789073919.529:495): avc: denied { open } for pid=5126 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2861 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.310508][ T43] audit: type=1400 audit(1789073919.529:496): avc: denied { ioctl } for pid=5126 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2861 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.334568][ T7024] pim6reg1: entered promiscuous mode [ 74.334588][ T7024] pim6reg1: entered allmulticast mode [ 74.338138][ T7024] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 74.351245][ T43] audit: type=1400 audit(1789073919.569:497): avc: denied { append } for pid=7020 comm="syz.3.323" name="loop7" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.362766][ T7021] loop7: detected capacity change from 0 to 7 [ 74.380698][ T7021] Dev loop7: unable to read RDB block 7 [ 74.380821][ T7021] loop7: unable to read partition table [ 74.381099][ T7021] loop7: partition table beyond EOD, truncated [ 74.381134][ T7021] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 74.454456][ T5736] usb 7-1: USB disconnect, device number 8 [ 74.595650][ T7035] netlink: 'syz.3.325': attribute type 1 has an invalid length. [ 74.641833][ T7035] bond2: entered promiscuous mode [ 74.641885][ T7035] bond2: entered allmulticast mode [ 74.642168][ T7035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.666927][ T7035] erspan1: entered allmulticast mode [ 74.686176][ T7035] bond2: (slave erspan1): making interface the new active one [ 74.686192][ T7035] erspan1: entered promiscuous mode [ 74.702109][ T7035] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 74.924870][ T992] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 75.075052][ T992] usb 6-1: Using ep0 maxpacket: 32 [ 75.076021][ T992] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 75.077010][ T992] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 75.077029][ T992] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 75.077045][ T992] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 75.077078][ T992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 75.077094][ T992] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 75.077112][ T992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 75.077131][ T992] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 75.077149][ T992] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 75.077178][ T992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.081558][ T992] usb 6-1: config 0 descriptor?? [ 75.082323][ T7042] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.167403][ T5736] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 75.292947][ T992] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 75.491074][ T7042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.491270][ T7042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.495947][ C0] usblp0: nonzero read bulk status received: -71 [ 75.496349][ T7042] usblp0: error -71 reading from printer [ 75.496981][ C0] usblp0: nonzero read bulk status received: -71 [ 75.498379][ T992] usb 6-1: USB disconnect, device number 3 [ 75.507623][ T992] usblp0: removed [ 79.756876][ T43] kauditd_printk_skb: 28 callbacks suppressed [ 79.756893][ T43] audit: type=1400 audit(1789073924.979:526): avc: denied { write } for pid=7099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.808675][ T43] audit: type=1400 audit(1789073925.029:527): avc: denied { write } for pid=7102 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.437968][ T43] audit: type=1400 audit(1789073927.659:528): avc: denied { write } for pid=7105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.487104][ T43] audit: type=1400 audit(1789073927.709:529): avc: denied { write } for pid=7108 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.364841][ T43] audit: type=1400 audit(1789073930.579:530): avc: denied { create } for pid=7116 comm="syz.0.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.374661][ T7122] netlink: 'syz.3.348': attribute type 11 has an invalid length. [ 85.374680][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.348'. [ 85.377964][ T43] audit: type=1400 audit(1789073930.599:531): avc: denied { write } for pid=7119 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.396810][ T7122] netlink: 'syz.3.348': attribute type 11 has an invalid length. [ 85.396823][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.348'. [ 85.405494][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.405626][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.406076][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.411487][ T7122] netlink: 'syz.3.348': attribute type 74 has an invalid length. [ 85.411505][ T7122] netlink: 20 bytes leftover after parsing attributes in process `syz.3.348'. [ 85.414170][ T43] audit: type=1400 audit(1789073930.629:532): avc: denied { ioctl } for pid=7120 comm="syz.3.348" path="socket:[21409]" dev="sockfs" ino=21409 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 85.415606][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.491218][ T43] audit: type=1400 audit(1789073930.709:533): avc: denied { load_policy } for pid=7128 comm="syz.3.352" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 85.508536][ T7130] SELinux: policydb magic number 0x7cff8c does not match expected magic number 0xf97cff8c [ 85.508750][ T7130] SELinux: failed to load policy [ 85.531133][ T7138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.355'. [ 85.580139][ T7140] netdevsim netdevsim1: Direct firmware load for . [ 85.580139][ T7140] failed with error -2 [ 85.582172][ T43] audit: type=1400 audit(1789073930.799:534): avc: denied { firmware_load } for pid=7139 comm="syz.1.357" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 85.582410][ T7140] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 85.582410][ T7140] [ 85.630128][ T7148] ip6gretap1: entered promiscuous mode [ 85.630150][ T7148] ip6gretap1: entered allmulticast mode [ 85.709265][ T7154] netlink: 'syz.3.359': attribute type 3 has an invalid length. [ 85.709278][ T7154] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 85.921784][ T7174] dvmrp0: entered allmulticast mode [ 86.049923][ T43] audit: type=1400 audit(1789073931.269:535): avc: denied { mount } for pid=7176 comm="syz.0.370" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 86.103251][ T43] audit: type=1400 audit(1789073931.319:536): avc: denied { unmount } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 86.133283][ T43] audit: type=1400 audit(1789073931.349:537): avc: denied { mount } for pid=7191 comm="syz.0.375" name="/" dev="rpc_pipefs" ino=21453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 86.163835][ T43] audit: type=1400 audit(1789073931.379:538): avc: denied { unmount } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 86.522760][ T43] audit: type=1400 audit(1789073931.739:539): avc: denied { mount } for pid=7214 comm="syz.1.383" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 86.794059][ T7235] netlink: 'syz.3.390': attribute type 8 has an invalid length. [ 87.091478][ T7251] batman_adv: batadv0: Adding interface: dummy0 [ 87.091489][ T7251] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.091504][ T7251] batman_adv: batadv0: Interface activated: dummy0 [ 87.195447][ T7260] 9p: Invalid gid '0x00000000ffffffff' [ 87.276837][ T7264] FAULT_INJECTION: forcing a failure. [ 87.276837][ T7264] name failslab, interval 1, probability 0, space 0, times 1 [ 87.276858][ T7264] CPU: 0 UID: 0 PID: 7264 Comm: syz.0.402 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.276873][ T7264] Tainted: [L]=SOFTLOCKUP [ 87.276877][ T7264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.276883][ T7264] Call Trace: [ 87.276887][ T7264] [ 87.276891][ T7264] dump_stack_lvl+0x100/0x190 [ 87.276925][ T7264] should_fail_ex.cold+0x5/0xa [ 87.276941][ T7264] should_failslab+0xc2/0x120 [ 87.276958][ T7264] __kmalloc_noprof+0xfc/0x840 [ 87.276969][ T7264] ? rcu_is_watching+0x13/0xc0 [ 87.276985][ T7264] ? tomoyo_realpath_from_path+0xb6/0x690 [ 87.277001][ T7264] tomoyo_realpath_from_path+0xb6/0x690 [ 87.277017][ T7264] tomoyo_path_number_perm+0x23c/0x580 [ 87.277034][ T7264] ? tomoyo_path_number_perm+0x22e/0x580 [ 87.277052][ T7264] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 87.277075][ T7264] ? __lock_acquire+0x5c0/0x1f40 [ 87.277092][ T7264] ? __fget_files+0x34/0x3d0 [ 87.277106][ T7264] ? find_held_lock+0x2b/0x80 [ 87.277121][ T7264] ? hook_file_ioctl_common+0x140/0x440 [ 87.277138][ T7264] ? __fget_files+0x21f/0x3d0 [ 87.277153][ T7264] security_file_ioctl+0xd3/0x230 [ 87.277166][ T7264] __x64_sys_ioctl+0xb7/0x210 [ 87.277178][ T7264] do_syscall_64+0x123/0x790 [ 87.277197][ T7264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.277208][ T7264] RIP: 0033:0x7f614d19e159 [ 87.277218][ T7264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.277228][ T7264] RSP: 002b:00007f614e01d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.277239][ T7264] RAX: ffffffffffffffda RBX: 00007f614d425fa0 RCX: 00007f614d19e159 [ 87.277245][ T7264] RDX: 0000200000000100 RSI: 0000000040047452 RDI: 0000000000000007 [ 87.277252][ T7264] RBP: 00007f614e01d090 R08: 0000000000000000 R09: 0000000000000000 [ 87.277258][ T7264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.277264][ T7264] R13: 00007f614d426038 R14: 00007f614d425fa0 R15: 00007ffee57c11b8 [ 87.277278][ T7264] [ 87.277283][ T7264] ERROR: Out of memory at tomoyo_realpath_from_path. [ 87.278588][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.279624][ T7259] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.296064][ T7265] netlink: 'syz.1.401': attribute type 1 has an invalid length. [ 87.678604][ T7259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.697898][ T7259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 syzkaller syzkaller login: [ 87.846336][ T7259] geneve1: left allmulticast mode [ 87.981134][ T7259] geneve2: left promiscuous mode [ 87.985226][ T7259] bond1: left promiscuous mode [ 87.985238][ T7259] veth0_to_bond: left promiscuous mode [ 87.985324][ T7259] bond1: left allmulticast mode [ 87.985331][ T7259] veth0_to_bond: left allmulticast mode [ 87.993985][ T7259] bond2: left promiscuous mode [ 87.993998][ T7259] erspan1: left promiscuous mode [ 87.994070][ T7259] bond2: left allmulticast mode [ 88.008777][ T7259] erspan1: left allmulticast mode [ 88.013487][ T7259] ip6gretap1: left promiscuous mode [ 88.013499][ T7259] ip6gretap1: left allmulticast mode [ 88.015172][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.015198][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.015230][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.015250][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.015278][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.015298][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.015321][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.015341][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.048729][ T7265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.102596][ T7266] bond1: (slave veth0_to_bond): making interface the new active one [ 88.111588][ T7266] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 88.895457][ T7299] tmpfs: Unknown parameter 'wsrquota_inode_hardlimit' [ 89.332415][ T7317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.419'. [ 89.336131][ T7317] bond0: entered promiscuous mode [ 89.336150][ T7317] bond_slave_0: entered promiscuous mode [ 89.336435][ T7317] bond_slave_1: entered promiscuous mode [ 89.343366][ T7317] bond0: left promiscuous mode [ 89.343379][ T7317] bond_slave_0: left promiscuous mode [ 89.343478][ T7317] bond_slave_1: left promiscuous mode [ 89.427812][ T7319] bond2 (unregistering): Released all slaves [ 89.951478][ T7346] netlink: 60 bytes leftover after parsing attributes in process `syz.2.430'. [ 89.951521][ T7346] IPv6: Can't replace route, no match found [ 90.282440][ T7375] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 90.374842][ T43] kauditd_printk_skb: 66 callbacks suppressed [ 90.374853][ T43] audit: type=1400 audit(1789073935.589:606): avc: denied { create } for pid=7381 comm="syz.0.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 90.391537][ T43] audit: type=1400 audit(1789073935.609:607): avc: denied { read write } for pid=5727 comm="syz-executor" name="loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.396228][ T43] audit: type=1400 audit(1789073935.619:608): avc: denied { create } for pid=7383 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 90.433699][ T43] audit: type=1400 audit(1789073935.649:609): avc: denied { read write } for pid=7386 comm="syz.0.445" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 90.436526][ T43] audit: type=1400 audit(1789073935.659:610): avc: denied { read } for pid=7386 comm="syz.0.445" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 90.437324][ T43] audit: type=1400 audit(1789073935.659:611): avc: denied { read } for pid=7386 comm="syz.0.445" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 90.442135][ T43] audit: type=1400 audit(1789073935.659:612): avc: denied { read write } for pid=5730 comm="syz-executor" name="loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.467614][ T43] audit: type=1400 audit(1789073935.689:613): avc: denied { read write } for pid=5727 comm="syz-executor" name="loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.468435][ T43] audit: type=1400 audit(1789073935.689:614): avc: denied { read } for pid=7389 comm="syz.1.446" dev="nsfs" ino=4026532967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 90.469941][ T43] audit: type=1400 audit(1789073935.689:615): avc: denied { read } for pid=7389 comm="syz.1.446" dev="nsfs" ino=4026532967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 90.591690][ T5738] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 90.591935][ T7401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=7401 comm=syz.0.449 [ 90.807687][ T7413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.454'. [ 91.058908][ T7430] ipt_REJECT: TCP_RESET invalid for non-tcp [ 91.478327][ T7453] netlink: 'syz.1.470': attribute type 16 has an invalid length. [ 91.485360][ T7453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7453 comm=syz.1.470 [ 91.573745][ T5738] Bluetooth: hci2: unexpected event for opcode 0x202d [ 91.748218][ T7469] netlink: 'syz.0.474': attribute type 7 has an invalid length. [ 92.313926][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.484'. [ 92.313946][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.484'. [ 92.367569][ T7492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=7492 comm=syz.3.483 [ 92.421940][ T5738] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 92.516425][ T7499] blkio.reset_stats is deprecated [ 92.615671][ T7503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.488'. [ 93.452858][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 93.515069][ T7547] ªªªªªª: renamed from vlan0 (while UP) [ 93.522751][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.502'. [ 93.937227][ T7568] netlink: 'syz.0.513': attribute type 1 has an invalid length. [ 93.952376][ T7568] bond2: entered promiscuous mode [ 93.952607][ T7568] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.960376][ T7568] netlink: 36 bytes leftover after parsing attributes in process `syz.0.513'. [ 93.979685][ T7568] bond2: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 93.979700][ T7568] bond2: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 93.979722][ T7568] bond2: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 94.310546][ T7601] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 94.310561][ T7601] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.313515][ T7601] vhci_hcd vhci_hcd.0: Device attached [ 94.317574][ T7601] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 94.317607][ T7601] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.318724][ T7601] vhci_hcd vhci_hcd.0: Device attached [ 94.320862][ T7601] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 94.320874][ T7601] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.321020][ T7601] vhci_hcd vhci_hcd.0: Device attached [ 94.322218][ T7601] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10) [ 94.322229][ T7601] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.323769][ T7601] vhci_hcd vhci_hcd.0: Device attached [ 94.327330][ T7601] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(12) [ 94.327342][ T7601] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.330630][ T7601] vhci_hcd vhci_hcd.0: Device attached [ 94.333634][ T7601] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(14) [ 94.333646][ T7601] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.333663][ T7601] vhci_hcd vhci_hcd.0: Device attached [ 94.336382][ T7601] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(16) [ 94.336393][ T7601] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.336412][ T7601] vhci_hcd vhci_hcd.0: Device attached [ 94.342978][ T7601] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(18) [ 94.342991][ T7601] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.343025][ T7601] vhci_hcd vhci_hcd.0: Device attached [ 94.344653][ T7601] vhci_hcd vhci_hcd.0: port 0 already used [ 94.352031][ T7602] usbip_core: unknown command [ 94.352038][ T7602] vhci_hcd: unknown pdu 0 [ 94.352043][ T7602] usbip_core: unknown command [ 94.354741][ T13] vhci_hcd vhci_hcd.3: stop threads [ 94.357017][ T13] vhci_hcd vhci_hcd.3: release socket [ 94.357249][ T7614] vhci_hcd: connection closed [ 94.357528][ T7616] vhci_hcd: connection closed [ 94.357618][ T7612] vhci_hcd: connection closed [ 94.357630][ T7606] vhci_hcd: connection closed [ 94.357690][ T7610] vhci_hcd: connection closed [ 94.357760][ T7608] vhci_hcd: connection closed [ 94.357819][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 94.357928][ T13] vhci_hcd vhci_hcd.3: stop threads [ 94.357936][ T13] vhci_hcd vhci_hcd.3: release socket [ 94.357944][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 94.358073][ T13] vhci_hcd vhci_hcd.3: stop threads [ 94.358081][ T13] vhci_hcd vhci_hcd.3: release socket [ 94.358089][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 94.358557][ T7604] vhci_hcd: connection closed [ 94.358769][ T13] vhci_hcd vhci_hcd.3: stop threads [ 94.358782][ T13] vhci_hcd vhci_hcd.3: release socket [ 94.358796][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 94.358960][ T13] vhci_hcd vhci_hcd.3: stop threads [ 94.358972][ T13] vhci_hcd vhci_hcd.3: release socket [ 94.358985][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 94.359399][ T13] vhci_hcd vhci_hcd.3: stop threads [ 94.359410][ T13] vhci_hcd vhci_hcd.3: release socket [ 94.359482][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 94.359628][ T13] vhci_hcd vhci_hcd.3: stop threads [ 94.359638][ T13] vhci_hcd vhci_hcd.3: release socket [ 94.359652][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 94.361612][ T13] vhci_hcd vhci_hcd.3: stop threads [ 94.361624][ T13] vhci_hcd vhci_hcd.3: release socket [ 94.361695][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 95.218451][ T7650] netlink: 96 bytes leftover after parsing attributes in process `syz.1.532'. [ 95.276003][ T7654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.277363][ T7654] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.281540][ T7654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.324487][ T7654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.326764][ T7654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.332711][ T7654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.332730][ T7654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.340536][ T7654] veth1_vlan: left promiscuous mode [ 95.342801][ T7654] veth0_vlan: left promiscuous mode [ 95.344689][ T7654] veth0_vlan: entered promiscuous mode [ 95.347913][ T7654] veth1_vlan: entered promiscuous mode [ 95.353178][ T7654] veth1_macvtap: left promiscuous mode [ 95.354250][ T7654] veth0_macvtap: left promiscuous mode [ 95.356751][ T7654] veth0_macvtap: entered promiscuous mode [ 95.357675][ T7654] veth1_macvtap: entered promiscuous mode [ 95.371073][ T7654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.372032][ T7654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.373842][ T7654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.381258][ T7654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.384960][ T43] kauditd_printk_skb: 24283 callbacks suppressed [ 95.384973][ T43] audit: type=1400 audit(1789073940.599:24899): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.385007][ T43] audit: type=1400 audit(1789073940.599:24900): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.385039][ T43] audit: type=1400 audit(1789073940.599:24901): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.386389][ T43] audit: type=1400 audit(1789073940.609:24902): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.386559][ T43] audit: type=1400 audit(1789073940.609:24903): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.386716][ T43] audit: type=1400 audit(1789073940.609:24904): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.386963][ T43] audit: type=1400 audit(1789073940.609:24905): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.387130][ T43] audit: type=1400 audit(1789073940.609:24906): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.387483][ T43] audit: type=1400 audit(1789073940.609:24907): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.387519][ T43] audit: type=1400 audit(1789073940.609:24908): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.393018][ T7654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.394633][ T7654] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.405353][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.405373][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.488625][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.488670][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.489591][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.489631][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.537783][ T7662] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 95.574977][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.574997][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.575016][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.575029][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.575045][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.575059][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.591841][ T7665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.537'. [ 95.847650][ T7668] trusted_key: encrypted_key: master key parameter 'defaulttrusted:©ÿ' is invalid [ 96.018815][ T7676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=7676 comm=syz.1.543 [ 96.131923][ T7687] netlink: 'syz.3.547': attribute type 10 has an invalid length. [ 96.132002][ T7687] netlink: 55 bytes leftover after parsing attributes in process `syz.3.547'. [ 96.652046][ T7717] can0: slcan on ttynull. [ 96.776765][ T7715] can0 (unregistered): slcan off ttynull. [ 97.034128][ T7744] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 97.042475][ T7744] netlink: 'syz.0.568': attribute type 1 has an invalid length. [ 97.200271][ T7752] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 97.439559][ T7772] netlink: 'syz.1.581': attribute type 2 has an invalid length. [ 97.439762][ T7772] netlink: 'syz.1.581': attribute type 2 has an invalid length. [ 97.439883][ T7772] netlink: 'syz.1.581': attribute type 2 has an invalid length. [ 97.440014][ T7772] netlink: 'syz.1.581': attribute type 2 has an invalid length. [ 97.440140][ T7772] netlink: 'syz.1.581': attribute type 2 has an invalid length. [ 97.440351][ T7772] netlink: 'syz.1.581': attribute type 2 has an invalid length. [ 97.440429][ T7772] netlink: 'syz.1.581': attribute type 2 has an invalid length. [ 97.440504][ T7772] netlink: 'syz.1.581': attribute type 2 has an invalid length. [ 97.440576][ T7772] netlink: 'syz.1.581': attribute type 2 has an invalid length. [ 97.441532][ T7772] netlink: 14 bytes leftover after parsing attributes in process `syz.1.581'. [ 97.441583][ T7772] batman_adv: batadv0: Interface deactivated: dummy0 [ 97.461846][ T7772] batman_adv: batadv0: Removing interface: dummy0 [ 97.543244][ T7766] trusted_key: encrypted_key: keylen parameter is missing [ 97.702656][ T7797] IPVS: length: 18 != 8 [ 97.717844][ T7797] ip_tables: iptables: counters copy to user failed while replacing table [ 98.092888][ T7844] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 98.296453][ T7862] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7862 comm=syz.1.612 [ 98.679845][ T7895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.623'. [ 98.936678][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.631'. [ 98.936693][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.631'. [ 98.980717][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 98.980731][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.634'. [ 99.043859][ T5738] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 99.328742][ T7978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.654'. [ 100.394753][ T43] kauditd_printk_skb: 32075 callbacks suppressed [ 100.394768][ T43] audit: type=1400 audit(1789073945.619:56663): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.394913][ T43] audit: type=1400 audit(1789073945.619:56664): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.395042][ T43] audit: type=1400 audit(1789073945.619:56665): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.395175][ T43] audit: type=1400 audit(1789073945.619:56666): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.395308][ T43] audit: type=1400 audit(1789073945.619:56667): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.395457][ T43] audit: type=1400 audit(1789073945.619:56668): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.395591][ T43] audit: type=1400 audit(1789073945.619:56669): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.395720][ T43] audit: type=1400 audit(1789073945.619:56670): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.395853][ T43] audit: type=1400 audit(1789073945.619:56671): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.395992][ T43] audit: type=1400 audit(1789073945.619:56672): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.538356][ T8081] hsr_slave_0: left promiscuous mode [ 100.541318][ T8081] hsr_slave_1: left promiscuous mode [ 100.587159][ T8082] bond0: entered promiscuous mode [ 100.587174][ T8082] bond_slave_0: entered promiscuous mode [ 100.587267][ T8082] bond_slave_1: entered promiscuous mode [ 100.593745][ T8082] gretap0: entered promiscuous mode [ 100.594789][ T8082] dummy0: entered promiscuous mode [ 100.598094][ T8082] netlink: 56 bytes leftover after parsing attributes in process `syz.3.697'. [ 100.607669][ T8084] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44 [ 100.632246][ T8084] 8021q: adding VLAN 0 to HW filter on device bond4 [ 100.634174][ T8084] bond3: (slave bond4): making interface the new active one [ 100.634527][ T8084] bond3: (slave bond4): Enslaving as an active interface with an up link [ 100.752660][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 101.280214][ T8128] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 101.585729][ T8152] xt_TPROXY: Can be used only with -p tcp or -p udp [ 101.825685][ T8156] __nla_validate_parse: 1 callbacks suppressed [ 101.825697][ T8156] netlink: 56 bytes leftover after parsing attributes in process `syz.0.726'. [ 101.825708][ T8156] netlink: 56 bytes leftover after parsing attributes in process `syz.0.726'. [ 102.277407][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'. [ 102.280838][ T8199] bridge1: entered promiscuous mode [ 102.280850][ T8199] bridge1: entered allmulticast mode [ 102.697111][ T8216] serio: Serial port ptm0 [ 103.249293][ T5738] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 104.212219][ T8307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.789'. [ 104.425909][ T8335] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 104.849496][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 105.404448][ T43] kauditd_printk_skb: 36932 callbacks suppressed [ 105.404462][ T43] audit: type=1400 audit(1789073950.619:93560): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 105.404529][ T43] audit: type=1400 audit(1789073950.619:93561): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 105.404627][ T43] audit: type=1400 audit(1789073950.619:93562): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 105.404753][ T43] audit: type=1400 audit(1789073950.619:93563): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 105.404827][ T43] audit: type=1400 audit(1789073950.619:93564): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 105.405332][ T43] audit: type=1400 audit(1789073950.619:93565): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 105.405354][ T43] audit: type=1400 audit(1789073950.619:93566): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 105.405374][ T43] audit: type=1400 audit(1789073950.619:93567): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 105.405393][ T43] audit: type=1400 audit(1789073950.619:93568): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 105.405412][ T43] audit: type=1400 audit(1789073950.619:93569): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 105.740174][ T8408] netlink: 48 bytes leftover after parsing attributes in process `syz.0.825'. [ 106.000035][ T8443] netlink: 17 bytes leftover after parsing attributes in process `syz.1.839'. [ 106.006261][ T8445] netlink: 17 bytes leftover after parsing attributes in process `syz.1.839'. [ 106.082334][ T8450] syzkaller0: entered promiscuous mode [ 106.082356][ T8450] syzkaller0: entered allmulticast mode [ 106.096678][ T8453] xt_bpf: check failed: parse error [ 106.348549][ T8463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.848'. [ 106.522222][ T8479] xt_HMARK: spi-set and port-set can't be combined [ 106.750240][ T8492] bond3: option xmit_hash_policy: invalid value (6) [ 106.758930][ T8492] bond3 (unregistering): Released all slaves [ 106.787507][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.860'. [ 106.877742][ T8490] __nla_validate_parse: 1 callbacks suppressed [ 106.877760][ T8490] netlink: 48 bytes leftover after parsing attributes in process `syz.2.859'. [ 107.036164][ T8509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.867'. [ 107.040375][ T8509] bond1: (slave veth0_to_bond): Releasing active interface [ 107.054873][ T8509] SET target dimension over the limit! [ 107.082494][ T8511] syz.3.868 (8511): /proc/8510/oom_adj is deprecated, please use /proc/8510/oom_score_adj instead. [ 107.427729][ T8544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.882'. [ 107.444481][ T8544] xfrm1: entered promiscuous mode [ 107.444494][ T8544] xfrm1: entered allmulticast mode [ 107.981307][ T8568] netlink: 48 bytes leftover after parsing attributes in process `syz.3.891'. [ 108.468330][ T8616] netlink: 32 bytes leftover after parsing attributes in process `syz.1.911'. [ 108.697044][ T8638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8638 comm=syz.3.921 [ 108.697097][ T8639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8639 comm=syz.3.921 [ 109.134994][ T8679] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 109.135009][ T8679] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 109.135060][ T8679] vhci_hcd vhci_hcd.0: Device attached [ 109.135320][ T8682] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 109.135333][ T8682] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 109.135359][ T8682] vhci_hcd vhci_hcd.0: Device attached [ 109.374245][ T851] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 109.565026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 109.611151][ T8714] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 110.008964][ T8721] netlink: 14 bytes leftover after parsing attributes in process `syz.2.951'. [ 110.179785][ T8685] vhci_hcd: connection closed [ 110.180512][ T8684] vhci_hcd: connection reset by peer [ 110.182071][ T5782] vhci_hcd vhci_hcd.1: stop threads [ 110.182087][ T5782] vhci_hcd vhci_hcd.1: release socket [ 110.182297][ T5782] vhci_hcd vhci_hcd.1: disconnect device [ 110.182352][ T5782] vhci_hcd vhci_hcd.1: stop threads [ 110.182360][ T5782] vhci_hcd vhci_hcd.1: release socket [ 110.182369][ T5782] vhci_hcd vhci_hcd.1: disconnect device [ 110.414294][ T43] kauditd_printk_skb: 30779 callbacks suppressed [ 110.414309][ T43] audit: type=1400 audit(1789073955.630:124349): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.414468][ T43] audit: type=1400 audit(1789073955.630:124350): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.414642][ T43] audit: type=1400 audit(1789073955.630:124351): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.414820][ T43] audit: type=1400 audit(1789073955.630:124352): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.415030][ T43] audit: type=1400 audit(1789073955.630:124353): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.415207][ T43] audit: type=1400 audit(1789073955.630:124354): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.415375][ T43] audit: type=1400 audit(1789073955.630:124355): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.415543][ T43] audit: type=1400 audit(1789073955.630:124356): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.416467][ T43] audit: type=1400 audit(1789073955.630:124357): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.416620][ T43] audit: type=1400 audit(1789073955.630:124358): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.852320][ T8746] netlink: 48 bytes leftover after parsing attributes in process `syz.0.957'. [ 110.939664][ T8755] netlink: 112 bytes leftover after parsing attributes in process `syz.1.961'. [ 111.055212][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 111.055233][ T8761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.964'. [ 111.344302][ T5738] Bluetooth: hci1: unexpected cc 0x0c05 length: 4 > 1 [ 111.344324][ T5738] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 112.015792][ T8837] validate_nla: 16 callbacks suppressed [ 112.015804][ T8837] netlink: 'syz.2.993': attribute type 10 has an invalid length. [ 112.076494][ T8837] team0: Port device dummy0 added [ 112.189482][ T8850] __nla_validate_parse: 3 callbacks suppressed [ 112.189499][ T8850] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1000'. [ 112.197124][ T8853] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1000'. [ 112.365253][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 112.413479][ T8865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.698833][ T8868] cgroup: fork rejected by pids controller in /syz2 [ 112.900530][ T992] libceph: connect (2)127.0.0.1:6789 error -101 [ 112.900835][ T992] libceph: ceph_tcp_connect failed: -101 [ 112.900849][ T992] libceph: mon0 (2)127.0.0.1:6789 connect error [ 112.911421][ T992] libceph: connect (2)127.0.0.1:6789 error -101 [ 112.917988][ T992] libceph: ceph_tcp_connect failed: -101 [ 112.918008][ T992] libceph: mon0 (2)127.0.0.1:6789 connect error [ 113.149867][ T5878] libceph: mon0 (1)[c::]:6789 socket error on write [ 113.172175][ T8947] ceph: No mds server is up or the cluster is laggy [ 113.175600][ T992] libceph: connect (2)127.0.0.1:6789 error -101 [ 113.175743][ T992] libceph: ceph_tcp_connect failed: -101 [ 113.175757][ T992] libceph: mon0 (2)127.0.0.1:6789 connect error [ 113.549432][ T5738] Bluetooth: hci3: unexpected event for opcode 0x2023 [ 113.646753][ T8987] netlink: 'syz.2.1032': attribute type 4 has an invalid length. [ 113.681873][ T8921] ceph: No mds server is up or the cluster is laggy [ 113.684155][ T992] libceph: connect (2)127.0.0.1:6789 error -101 [ 113.684295][ T992] libceph: ceph_tcp_connect failed: -101 [ 113.684309][ T992] libceph: mon0 (2)127.0.0.1:6789 connect error [ 113.894205][ T9005] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 113.929154][ T9009] netlink: 'syz.0.1041': attribute type 4 has an invalid length. [ 113.940983][ T9009] netlink: 'syz.0.1041': attribute type 4 has an invalid length. [ 113.941044][ T9009] netlink: 'syz.0.1041': attribute type 4 has an invalid length. [ 113.941145][ T9009] netlink: 'syz.0.1041': attribute type 4 has an invalid length. [ 113.941201][ T9009] netlink: 'syz.0.1041': attribute type 4 has an invalid length. [ 113.941251][ T9009] netlink: 'syz.0.1041': attribute type 4 has an invalid length. [ 113.941423][ T9009] netlink: 'syz.0.1041': attribute type 4 has an invalid length. [ 113.941555][ T9009] netlink: 'syz.0.1041': attribute type 4 has an invalid length. [ 113.942252][ T9012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9012 comm=syz.0.1041 [ 114.283016][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'. [ 114.297566][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'. [ 114.462555][ T5738] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 114.514102][ T851] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 114.515570][ T9064] FAULT_INJECTION: forcing a failure. [ 114.515570][ T9064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.515589][ T9064] CPU: 1 UID: 0 PID: 9064 Comm: syz.0.1061 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.515605][ T9064] Tainted: [L]=SOFTLOCKUP [ 114.515609][ T9064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.515615][ T9064] Call Trace: [ 114.515620][ T9064] [ 114.515624][ T9064] dump_stack_lvl+0x100/0x190 [ 114.515644][ T9064] should_fail_ex.cold+0x5/0xa [ 114.515660][ T9064] _copy_to_user+0x32/0xd0 [ 114.515672][ T9064] simple_read_from_buffer+0xcb/0x170 [ 114.515688][ T9064] proc_fail_nth_read+0x1af/0x230 [ 114.515702][ T9064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.515716][ T9064] ? rw_verify_area+0xce/0x6d0 [ 114.515732][ T9064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.515745][ T9064] vfs_read+0x1e4/0xb40 [ 114.515756][ T9064] ? lock_acquire+0x1d1/0x380 [ 114.515768][ T9064] ? __fget_files+0x34/0x3d0 [ 114.515782][ T9064] ? __pfx_vfs_read+0x10/0x10 [ 114.515793][ T9064] ? find_held_lock+0x2b/0x80 [ 114.515809][ T9064] ? __fget_files+0x215/0x3d0 [ 114.515841][ T9064] ? __fget_files+0x21f/0x3d0 [ 114.515858][ T9064] ksys_read+0x12a/0x250 [ 114.515869][ T9064] ? __pfx_ksys_read+0x10/0x10 [ 114.515884][ T9064] do_syscall_64+0x123/0x790 [ 114.515900][ T9064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.515912][ T9064] RIP: 0033:0x7f614d15e98e [ 114.515922][ T9064] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 114.515933][ T9064] RSP: 002b:00007f614e01cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.515944][ T9064] RAX: ffffffffffffffda RBX: 00007f614e01d6c0 RCX: 00007f614d15e98e [ 114.515951][ T9064] RDX: 000000000000000f RSI: 00007f614e01d0a0 RDI: 0000000000000003 [ 114.515958][ T9064] RBP: 00007f614e01d090 R08: 0000000000000000 R09: 0000000000000000 [ 114.515964][ T9064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.515971][ T9064] R13: 00007f614d426038 R14: 00007f614d425fa0 R15: 00007ffee57c11b8 [ 114.515985][ T9064] [ 115.424067][ T43] kauditd_printk_skb: 29498 callbacks suppressed [ 115.424135][ T43] audit: type=1400 audit(1789073960.640:153539): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.424174][ T43] audit: type=1400 audit(1789073960.640:153540): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.424308][ T43] audit: type=1400 audit(1789073960.640:153541): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.424344][ T43] audit: type=1400 audit(1789073960.640:153542): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.424444][ T43] audit: type=1400 audit(1789073960.640:153543): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.424522][ T43] audit: type=1400 audit(1789073960.640:153544): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.424601][ T43] audit: type=1400 audit(1789073960.640:153545): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.425699][ T43] audit: type=1400 audit(1789073960.640:153546): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.425740][ T43] audit: type=1400 audit(1789073960.640:153547): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.425778][ T43] audit: type=1400 audit(1789073960.640:153548): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.591906][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1081'. [ 115.657755][ T9127] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 116.149358][ T9153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65532 sclass=netlink_route_socket pid=9153 comm=syz.2.1090 [ 116.164057][ T9153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1090'. [ 116.279552][ T9165] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 116.280454][ T5090] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 116.321173][ T9167] syzkaller0: entered promiscuous mode [ 116.321194][ T9167] syzkaller0: entered allmulticast mode [ 116.764683][ T5090] Bluetooth: hci3: command 0x0419 tx timeout [ 117.403889][ T9221] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(70) [ 117.403905][ T9221] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 117.403960][ T9221] vhci_hcd vhci_hcd.0: Device attached [ 117.460030][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 117.460050][ T9225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1112'. [ 117.506647][ T9227] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1113'. [ 117.513852][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 117.513880][ T9225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1112'. [ 117.524376][ T9227] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1113'. [ 117.527567][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 117.527593][ T9231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1112'. [ 117.528177][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 117.528196][ T9231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1112'. [ 117.663889][ T10] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 117.696512][ T9243] validate_nla: 26 callbacks suppressed [ 117.696524][ T9243] netlink: 'syz.3.1119': attribute type 16 has an invalid length. [ 117.698242][ T9244] netlink: 'syz.3.1119': attribute type 16 has an invalid length. [ 117.732148][ T9246] sctp: [Deprecated]: syz.0.1120 (pid 9246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.732148][ T9246] Use struct sctp_sack_info instead [ 117.773096][ T9243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9243 comm=syz.3.1119 [ 117.953700][ T9222] vhci_hcd: connection reset by peer [ 117.956060][ T5782] vhci_hcd vhci_hcd.2: stop threads [ 117.956095][ T5782] vhci_hcd vhci_hcd.2: release socket [ 117.957914][ T5782] vhci_hcd vhci_hcd.2: disconnect device [ 117.986682][ T9277] netlink: 'syz.0.1131': attribute type 21 has an invalid length. [ 118.066305][ T9277] netlink: 'syz.0.1131': attribute type 6 has an invalid length. [ 118.070215][ T9281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=9281 comm=syz.3.1130 [ 118.277548][ T9292] pimreg: tun_chr_ioctl cmd 1074025672 [ 118.277561][ T9292] pimreg: ignored: set checksum enabled [ 118.517146][ T9303] syzkaller0: entered promiscuous mode [ 118.517160][ T9303] syzkaller0: entered allmulticast mode [ 118.831087][ T9321] Cannot find del_set index 0 as target [ 118.853829][ T5090] Bluetooth: hci3: command 0x0419 tx timeout [ 118.942231][ T9333] CUSE: info not properly terminated [ 119.578883][ T9379] geneve1: entered allmulticast mode [ 119.894889][ T5808] [ 119.895962][ T5808] ============================================ [ 119.898549][ T5808] WARNING: possible recursive locking detected [ 119.901073][ T5808] syzkaller #0 Tainted: G L [ 119.903571][ T5808] -------------------------------------------- [ 119.906086][ T5808] kworker/u32:3/5808 is trying to acquire lock: [ 119.908633][ T5808] ffff8880361bc158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x3b5/0xc70 [ 119.912630][ T5808] [ 119.912630][ T5808] but task is already holding lock: [ 119.915637][ T5808] ffff88802d4b7558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x3b5/0xc70 [ 119.919697][ T5808] [ 119.919697][ T5808] other info that might help us debug this: [ 119.922869][ T5808] Possible unsafe locking scenario: [ 119.922869][ T5808] [ 119.925789][ T5808] CPU0 [ 119.927141][ T5808] ---- [ 119.928494][ T5808] lock(&qdisc_xmit_lock_key#4); [ 119.930466][ T5808] lock(&qdisc_xmit_lock_key#4); [ 119.932492][ T5808] [ 119.932492][ T5808] *** DEADLOCK *** [ 119.932492][ T5808] [ 119.935665][ T5808] May be due to missing lock nesting notation [ 119.935665][ T5808] [ 119.938993][ T5808] locks held by kworker/u32:3/5808: 11, last CPU#1: [ 119.941671][ T5808] #0: ffff888056ff8140 ((wq_completion)bond2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 119.945874][ T5808] #1: ffffc90003bafd08 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 119.950818][ T5808] #2: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xec/0x1750 [ 119.954639][ T5808] #3: ffffffff8edec3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x296/0x4970 [ 119.958593][ T5808] #4: ffff888055b93228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x2504/0x4970 [ 119.963456][ T5808] #5: ffff88802d4b7558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x3b5/0xc70 [ 119.967405][ T5808] #6: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: ip_output+0xb3/0xc10 [ 119.970806][ T5808] #7: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x356/0x2400 [ 119.974565][ T5808] #8: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x26/0x2e0 [ 119.978094][ T5808] #9: ffffffff8edec3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x296/0x4970 [ 119.982052][ T5808] #10: ffff888055e5a228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x2504/0x4970 [ 119.987040][ T5808] [ 119.987040][ T5808] stack backtrace: [ 119.989422][ T5808] CPU: 1 UID: 0 PID: 5808 Comm: kworker/u32:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.993698][ T5808] Tainted: [L]=SOFTLOCKUP [ 119.995414][ T5808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.999399][ T5808] Workqueue: bond2 bond_alb_monitor [ 120.001459][ T5808] Call Trace: [ 120.002817][ T5808] [ 120.003991][ T5808] dump_stack_lvl+0x100/0x190 [ 120.005869][ T5808] print_deadlock_bug.cold+0xbd/0xca [ 120.007964][ T5808] __lock_acquire+0x13f4/0x1f40 [ 120.009986][ T5808] ? __alloc_skb+0x185/0x710 [ 120.011787][ T5808] ? arp_create+0x1f2/0xa30 [ 120.013605][ T5808] lock_acquire+0x1d1/0x380 [ 120.015419][ T5808] ? sch_direct_xmit+0x3b5/0xc70 [ 120.017457][ T5808] ? __lock_acquire+0x5c0/0x1f40 [ 120.019422][ T5808] _raw_spin_lock+0x2e/0x40 [ 120.021096][ T5808] ? sch_direct_xmit+0x3b5/0xc70 [ 120.023046][ T5808] sch_direct_xmit+0x3b5/0xc70 [ 120.024936][ T5808] ? lock_acquire+0x1d1/0x380 [ 120.026796][ T5808] ? __pfx_sch_direct_xmit+0x10/0x10 [ 120.028894][ T5808] ? __pfx_do_raw_spin_trylock+0x10/0x10 [ 120.031055][ T5808] __dev_queue_xmit+0x27ac/0x4970 [ 120.033035][ T5808] ? __pfx_arpt_do_table+0x10/0x10 [ 120.035038][ T5808] ? __pfx___dev_queue_xmit+0x10/0x10 [ 120.037176][ T5808] ? lock_acquire+0x1d1/0x380 [ 120.039079][ T5808] ? nf_hook.constprop.0+0xa5/0x760 [ 120.041215][ T5808] ? find_held_lock+0x2b/0x80 [ 120.043137][ T5808] ? nf_hook.constprop.0+0x2f0/0x760 [ 120.045295][ T5808] ? nf_hook.constprop.0+0x2f0/0x760 [ 120.047351][ T5808] ? nf_hook.constprop.0+0x2fa/0x760 [ 120.049457][ T5808] ? __pfx_arp_xmit_finish+0x10/0x10 [ 120.051530][ T5808] arp_xmit+0x106/0x2e0 [ 120.053188][ T5808] arp_send_dst+0x200/0x280 [ 120.054966][ T5808] arp_solicit+0x672/0x1070 [ 120.056797][ T5808] ? trace_kmem_cache_alloc+0xdd/0x100 [ 120.058969][ T5808] ? __pfx_arp_solicit+0x10/0x10 [ 120.061055][ T5808] ? neigh_probe+0x72/0x110 [ 120.062934][ T5808] ? __pfx_arp_solicit+0x10/0x10 [ 120.064991][ T5808] neigh_probe+0xce/0x110 [ 120.066796][ T5808] __neigh_event_send+0xabe/0x13d0 [ 120.069056][ T5808] neigh_resolve_output+0x550/0x8f0 [ 120.071235][ T5808] ? __pfx____neigh_create+0x10/0x10 [ 120.073431][ T5808] ip_finish_output2+0x851/0x2400 [ 120.075521][ T5808] ? __pfx_ip_finish_output2+0x10/0x10 [ 120.077766][ T5808] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 120.080196][ T5808] ? nf_nat_ipv4_out+0xb2/0x510 [ 120.082245][ T5808] ? find_held_lock+0x2b/0x80 [ 120.084226][ T5808] __ip_finish_output.part.0+0x444/0x6f0 [ 120.086528][ T5808] ip_output+0x39b/0xc10 [ 120.088305][ T5808] ? __pfx_ip_output+0x10/0x10 [ 120.090295][ T5808] ? __pfx_get_random_u32+0x10/0x10 [ 120.092470][ T5808] ? __pfx_ip_finish_output+0x10/0x10 [ 120.094692][ T5808] ? __pfx_ip_output+0x10/0x10 [ 120.096701][ T5808] ip_local_out+0x193/0x1f0 [ 120.098595][ T5808] iptunnel_xmit+0x722/0xd30 [ 120.100579][ T5808] ip_tunnel_xmit+0x1b91/0x3210 [ 120.102607][ T5808] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 120.104740][ T5808] ? lockdep_hardirqs_on+0x7d/0x110 [ 120.106876][ T5808] ? __pfx_skb_free_head+0x10/0x10 [ 120.109007][ T5808] ? skb_free_head+0xb9/0x160 [ 120.110991][ T5808] ? skb_free_head+0xbe/0x160 [ 120.112963][ T5808] ? skb_headers_offset_update+0x129/0x260 [ 120.115365][ T5808] __gre_xmit+0x91a/0xc90 [ 120.117181][ T5808] ? __pfx___gre_xmit+0x10/0x10 [ 120.119205][ T5808] erspan_xmit+0x1041/0x1f10 [ 120.121153][ T5808] ? validate_xmit_xfrm+0x457/0x13c0 [ 120.123208][ T5808] ? __pfx_erspan_xmit+0x10/0x10 [ 120.125220][ T5808] ? stack_depot_save_flags+0x27/0x9f0 [ 120.127331][ T5808] dev_hard_start_xmit+0x121/0x760 [ 120.129483][ T5808] sch_direct_xmit+0x1b2/0xc70 [ 120.131368][ T5808] ? lock_acquire+0x1d1/0x380 [ 120.133339][ T5808] ? __pfx_sch_direct_xmit+0x10/0x10 [ 120.135526][ T5808] ? __pfx_do_raw_spin_trylock+0x10/0x10 [ 120.137850][ T5808] __dev_queue_xmit+0x27ac/0x4970 [ 120.139953][ T5808] ? __pfx___dev_queue_xmit+0x10/0x10 [ 120.142164][ T5808] ? kmem_cache_alloc_node_noprof+0x210/0x6e0 [ 120.144666][ T5808] ? kmalloc_reserve+0xf9/0x350 [ 120.146688][ T5808] ? __asan_memset+0x23/0x50 [ 120.148613][ T5808] ? __alloc_skb+0x4e9/0x710 [ 120.150608][ T5808] ? __netdev_alloc_skb+0x10d/0x980 [ 120.152769][ T5808] ? __mod_timer+0x409/0xca0 [ 120.154685][ T5808] alb_send_lp_vid+0x31e/0x540 [ 120.156680][ T5808] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 120.158879][ T5808] alb_send_learning_packets+0xe0/0x2f0 [ 120.161229][ T5808] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 120.163774][ T5808] ? bond_alb_monitor+0xec/0x1750 [ 120.165879][ T5808] bond_alb_monitor+0x997/0x1750 [ 120.167936][ T5808] ? lock_acquire+0x1d1/0x380 [ 120.169931][ T5808] ? process_one_work+0xa2c/0x1b10 [ 120.172046][ T5808] ? __pfx_bond_alb_monitor+0x10/0x10 [ 120.174262][ T5808] ? process_one_work+0x906/0x1b10 [ 120.176377][ T5808] ? process_one_work+0x906/0x1b10 [ 120.178497][ T5808] process_one_work+0xac7/0x1b10 [ 120.180589][ T5808] ? __pfx_process_one_work+0x10/0x10 [ 120.182815][ T5808] ? lock_acquire+0x1d1/0x380 [ 120.184796][ T5808] ? __pfx_bond_alb_monitor+0x10/0x10 [ 120.187094][ T5808] worker_thread+0x5ef/0xe50 [ 120.189085][ T5808] ? __pfx_worker_thread+0x10/0x10 [ 120.191233][ T5808] ? kthread+0x13a/0x450 [ 120.193070][ T5808] ? __pfx_worker_thread+0x10/0x10 [ 120.195223][ T5808] kthread+0x373/0x450 [ 120.196932][ T5808] ? __pfx_kthread+0x10/0x10 [ 120.198861][ T5808] ret_from_fork+0x730/0xd60 [ 120.200809][ T5808] ? __pfx_ret_from_fork+0x10/0x10 [ 120.202930][ T5808] ? __switch_to+0x800/0x10f0 [ 120.204896][ T5808] ? __pfx_kthread+0x10/0x10 [ 120.206818][ T5808] ret_from_fork_asm+0x1a/0x30 [ 120.208736][ T5808] [ 120.262966][ T9395] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.263082][ T9395] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.312605][ T9395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.318944][ T9395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.376232][ T9404] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 120.376348][ T9404] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 120.403646][ T5808] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.403677][ T5808] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.403706][ T5808] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.403727][ T5808] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.403752][ T5808] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.403774][ T5808] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.403795][ T5808] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.403818][ T5808] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.434238][ T43] kauditd_printk_skb: 33407 callbacks suppressed [ 120.434254][ T43] audit: type=1400 audit(1789073965.650:182855): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 120.434283][ T43] audit: type=1326 audit(1789073965.650:182856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.1174" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614d19e159 code=0x50000 [ 120.434312][ T43] audit: type=1326 audit(1789073965.650:182857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.1174" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614d19e159 code=0x50000 [ 120.434333][ T43] audit: type=1326 audit(1789073965.650:182858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.1174" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614d19e159 code=0x50000 [ 120.434356][ T43] audit: type=1326 audit(1789073965.650:182859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.1174" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614d19e159 code=0x50000 [ 120.434384][ T43] audit: type=1400 audit(1789073965.650:182860): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 120.434411][ T43] audit: type=1326 audit(1789073965.650:182861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.1174" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614d19e159 code=0x50000 [ 120.434438][ T43] audit: type=1326 audit(1789073965.650:182862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.1174" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614d19e159 code=0x50000 [ 120.434466][ T43] audit: type=1326 audit(1789073965.650:182863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.1174" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614d19e159 code=0x50000 [ 120.434495][ T43] audit: type=1326 audit(1789073965.650:182864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.1174" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614d19e159 code=0x50000 [ 122.753461][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 125.443290][ T43] kauditd_printk_skb: 84148 callbacks suppressed [ 125.443309][ T43] audit: type=1400 audit(1789073970.651:266851): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.443366][ T43] audit: type=1400 audit(1789073970.661:266852): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.443463][ T43] audit: type=1400 audit(1789073970.661:266853): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.443581][ T43] audit: type=1400 audit(1789073970.661:266854): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.443696][ T43] audit: type=1400 audit(1789073970.661:266855): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.443794][ T43] audit: type=1400 audit(1789073970.661:266856): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.443913][ T43] audit: type=1400 audit(1789073970.661:266857): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.444059][ T43] audit: type=1400 audit(1789073970.661:266858): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.444147][ T43] audit: type=1400 audit(1789073970.661:266859): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.444206][ T43] audit: type=1400 audit(1789073970.661:266860): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0