last executing test programs: 10.699747033s ago: executing program 3 (id=113): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = fanotify_init(0xef0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000040), 0x4) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0xff02, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000380)=""/141, 0x8d}], 0x1) fanotify_mark(r1, 0x105, 0x40009965, r0, 0x0) syz_clone(0x40000, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 10.60973108s ago: executing program 3 (id=117): syz_clone3(&(0x7f0000000500)={0x40040000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r0, 0xa, 0x11) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) (async) syz_emit_ethernet(0x102, &(0x7f0000001a40)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@mpls_mc={0x8848, {[{0x9}, {0x400, 0x0, 0x1}, {0x9}, {0x9}, {0x6}, {0x9}, {0x8, 0x0, 0x1}, {0x1}, {0x1}], @generic="e434db7d603510e27c9b811539eacc758ded0396c18adfbe3a1cbda4b7fc40ae7d49b640671e63dd981fca7b75b847545a2b922d78c472dd040351505244116b594c583cdce02fd47e861e2c49edac59798061c0aa32ff70853b708fc999fbce1a8a1c33b36ce0b7cd3132e7a38921271de7d73cb27d9e06b97772fc4ac02b0e113351b58584cdb59bc5d3b98cb0d0880062efbdda4aff0252ebb3c6dcbb709636ed1452c93f8ad1cbf05db9c74d521265e2fbec0529eefda3fa4c3f588309bf81210cc7574a24566d1df44f8fcef222"}}}}, 0x0) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000580)=""/4096, 0x94}], 0x2}, 0x1) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x6, 0x3, &(0x7f0000001640)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) (async, rerun: 32) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001680)={0x6, 0x3, &(0x7f0000001740)=ANY=[], &(0x7f0000001780)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r2, 0x5, 0xb68, 0x0, &(0x7f0000001840)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) fcntl$setlease(r0, 0x400, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r4 = getpid() (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x108}) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000e36000/0x4000)=nil, &(0x7f000044d000/0x3000)=nil, 0x4000, 0x3}) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r4}) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000180)={0x6, 0x80000001, 0x10001010, 0xdb1, 0x1, "f21059be8b65aca30f3dbbdf7065bfeea59c28", 0x9, 0x1}) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000180005"], 0x2c}}, 0x0) (async) write$UHID_CREATE2(r6, &(0x7f0000001880)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0003006a0500003f000000000000000000000005010905a10105091901290a150025017501950a8102950175068103c0"], 0x135) (async) nanosleep(&(0x7f00000019c0)={0x0, 0x5f5e100}, 0x0) (async) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r7) (async, rerun: 32) truncate(&(0x7f0000000080)='./file0\x00', 0x4) (rerun: 32) fcntl$setlease(r0, 0x400, 0x2) 9.640903321s ago: executing program 3 (id=129): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x1, &(0x7f0000000cc0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x40000, 0x0, 0x0, 0x1000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 9.638179066s ago: executing program 3 (id=132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x17b, 0x0, 0x52}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000100), 0x3) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a4c0000000c0a01010000000000000000010000000900010073797a31000000000900020073797a3100000000200003801c0000800c00018008000100112233440c0002800800010055f492b68f667788140000001100010000000000000000000100000a"], 0x74}}, 0x0) 9.471322317s ago: executing program 3 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) unshare(0x22020600) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000040)=0x3, 0x4) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) creat(&(0x7f0000000080)='./file0\x00', 0x46) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8400, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000000580)='./file0\x00') ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000079f74f4c62d5d891000014000180060000ac1414aaba22f49bcd2f4d538d1671618dfd5d7de61a7c8a804f32119d9f"], 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000240007012ebd7000fbdbdf25027c00000c00018008000271a0183f9be70001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80284511, 0x0) fcntl$addseals(r6, 0x409, 0xa) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r9, &(0x7f0000000280)=[{&(0x7f00000001c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000000000000084000000020000000f0003000104000000000000", @ANYRES32=0x1, @ANYBLOB="20000000000000008400000018000000fe8000000000000000000000000000bb1800000000000000840000000500000010000000090000000a03da7b"], 0x58}], 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x2) 9.409722498s ago: executing program 3 (id=137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800"], 0x30}}], 0x1, 0x4001c00) (async) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='>', 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001380)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000013c0)=[@text32={0x20, &(0x7f0000001400)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001440)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.014053149s ago: executing program 2 (id=186): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x7) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x1000000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x7fff0000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)="306663353a313232373a620afaf6379a24a963651c811b36c7e26230871d681c4d03d67af7bcb309fdb14c38e4fed87579de446dc160b69d6ab2", 0x3a) syz_open_procfs(0x0, 0x0) timer_create(0x2, 0x0, 0x0) setfsgid(0x0) mount$9p_unix(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001380)='.\x00', &(0x7f00000013c0), 0x2000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000001440)={'bond_slave_1\x00', @random="0163014030d9"}) 5.869950843s ago: executing program 2 (id=189): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x44) 5.867138345s ago: executing program 2 (id=191): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x404, &(0x7f0000000140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002200)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002280)=0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002300), 0x8000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000002340)={0xd, 0x80, 0x1, 'queue0\x00', 0xc}) write$FUSE_LK(r0, &(0x7f00000022c0)={0x28, 0x0, r2, {{0x9, 0x8, 0x1, r3}}}, 0x28) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000000)={'bond0\x00', @ifru_names='netdevsim0\x00'}) 5.810623452s ago: executing program 2 (id=193): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x437, 0x1, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 64) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002480), 0x80, 0x0) (rerun: 64) cachestat(r5, &(0x7f00000024c0)={0x95}, &(0x7f0000002500), 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000001c0)="0f2855150f356436640f01c966b9630200000f3236f36cba420066ed2e0f01c2440f20c066350b000000440f22c0f2ad0f75f3", 0x33}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 32) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) syz_usb_connect(0x3, 0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102", @ANYRESHEX], 0x0) (async) mount(0x0, &(0x7f0000000340)='mnt\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='mnt/ttyUSB0\x00', 0x181102, 0x0) bind$inet6(r8, &(0x7f0000002440)={0xa, 0x4e24, 0x0, @mcast1, 0x401}, 0x1c) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) (async, rerun: 32) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, 0x0) (rerun: 32) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) read$FUSE(r8, &(0x7f0000000400)={0x2020}, 0x2020) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 2.068914972s ago: executing program 1 (id=216): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000500)={0x82, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000580)={0x28, 0x2, r2, 0x0, &(0x7f0000004000/0x3000)=nil, 0x3000, 0x200}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000005c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x1000, 0x26}) ioctl$IOMMU_DESTROY$stdev(r1, 0x3b80, &(0x7f0000000b40)={0x8, r3}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e23, 0xa40, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10040}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000380)=""/214, &(0x7f0000000480)=0xd6) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x4001, 0x0) write(r5, &(0x7f0000000100)='measure #', 0x9) socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000a80)=ANY=[], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000ac0)='encrypted\x00', &(0x7f0000000b00), &(0x7f0000000b40), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000b80)='encrypted\x00', &(0x7f0000000bc0), &(0x7f0000000c00), 0xca, 0xfffffffffffffffe) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000980)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000c00)=ANY=[@ANYBLOB="340000001c001289cd8f1fc352dcf34ab8d638d0000000d389f0ff34e82e4a1963529412d40061bfd5d08629113514d8c6c94d175dc58f58416bbbb6e7fe586940e4f9947344a0d38a1fa671043b8f3a367cfa58196a4082938a8bd2371d07848519ca82df1a9a2fc0b3c6ec8a3b293a6eef5b32e64dc6d94f0ecbf918c4a7aca222329dc3bf3e5549d7b559bb231cda3a71fb48010b9e6dc36af8adf9e2", @ANYRES32=r9, @ANYBLOB="0200e4090a000200bbbbbbbbbbbb00000c000e800500010005000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008011}, 0x24040040) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000740)={0x17, 0x88, 0xfa00, {0x0, 0x10, 0x0, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0x14}}}}, 0x90) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 1.840915798s ago: executing program 1 (id=218): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4a4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000002340)={0x0, &(0x7f0000002380)=[@wrmsr={0x65, 0x20, {0x40000000, 0x10000}}, @code={0xa, 0x25, {"48c7c15d00010048c7c2010000000f01c10f01d9"}}], 0x45}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000002400)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000240)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r4, 0x0) listen(r5, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp6\x00') read$FUSE(r6, &(0x7f00000002c0)={0x2020}, 0x18f5) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_POISON(r7, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f00001f8000/0x4000)=nil, 0x4000}, 0x1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r9, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x7cd}]}, 0x34}}, 0x4044890) 1.680919178s ago: executing program 1 (id=219): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = socket(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000480), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaa8aaaaa0180c2000002080045000130000fde20fc0180781c101001e00003000306907800faf88e5ffefff600650005010400030a0101027f0000bc"], 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000500)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r3, &(0x7f0000000540)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) memfd_secret(0x0) r6 = syz_io_uring_setup(0x208c, &(0x7f0000000080)={0x0, 0xcb16, 0x2000, 0x3, 0x4001bf}, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/113, 0x71}], 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000440), 0x8) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0xa6}, 0x3) 1.680735456s ago: executing program 1 (id=220): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800") 1.620343867s ago: executing program 1 (id=221): r0 = userfaultfd(0x80801) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000240001002abd7000fedbdf2503000000060003"], 0x54}, 0x1, 0x0, 0x0, 0x4000008}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1, 0x9, 0xfffffffc) 1.559548961s ago: executing program 1 (id=222): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000dc0)={0x1a, {"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", 0x1000}}, 0x1006) r3 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000b40)=0xf) ioctl$TCSBRK(r3, 0x400455c8, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000b80)=0xc0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000bc0)=0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000080)={0x2, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000001c0)={r5, 0xe8, "20e559ac32cd3f58b515e43c24f07c5bd40cfd50d925b36638af9411ea37ff5f9b1dabcd09d11cd6cdc3df0a4d25e941790fc3d8f8d9dfc8a33a7146c57ced7298e0f97891e5f7e70bc377bdc22813568d575972940fdd4bef381e83ecaa6eaefd50078c868e0962e75eb92259f69a3ddb61d1e587ec1d684ad8384f888d1622fcf34feac258284a9c01652a4f347cfa094c1d77411fa107a80a1f936ca140d255c3ee9ee913ccad759ccec36a9d3af693d5c271aa6dd2bf8969fedd42e144abc615a0bf9c14dd3983eee6daa09dd8c4943e64ee5f245c3103a6eea1b7e4b772a4823497e272c11c"}, &(0x7f00000002c0)=0xf0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000cc0)=0x2f) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000d00)=0xcf) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000d40)=0xff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000d80)=0xc0) 549.210692ms ago: executing program 0 (id=225): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x1}) capset(&(0x7f0000000180)={0x19980330}, &(0x7f00000001c0)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048091) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000006c0)='#\\.\x00', &(0x7f0000000700)='./file0\x00', 0xffffffffffffffff) write$selinux_load(r2, &(0x7f0000000380)={0xf97cff8c, 0x8}, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000680)=0x200000f) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000003c0)={0x3a, @broadcast, 0x415, 0x3, 'wrr\x00', 0x2a, 0x8, 0x6f}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000400)={{0x84, @private=0xa010101, 0x4e24, 0x3, 'wlc\x00', 0x39ffc08b9a63492e, 0x8, 0x40000077}, {@private=0xa010102, 0x4e20, 0x4, 0xc, 0x2}}, 0x44) sendmsg$sock(r4, &(0x7f0000000480)={&(0x7f00000004c0)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000580)={&(0x7f00000005c0)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000080)={'syz_tun\x00', 0x1}) socket$igmp6(0xa, 0x3, 0x2) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r8, &(0x7f00000000c0), 0x12) listen(r8, 0x5) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000008050010010b"], 0xa) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="005308050010011b"], 0xa) r9 = socket$inet6(0xa, 0xb, 0xffffffff) setsockopt$inet_int(r9, 0x0, 0xf, &(0x7f0000000a40)=0x200, 0x4) bind$inet6(r9, &(0x7f0000000a80)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) 431.07031ms ago: executing program 0 (id=226): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4a8a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) syz_emit_ethernet(0x36, &(0x7f0000000540)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "00001e", 0x0, 0x2b, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2}}}}, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x0, 'gretap0\x00', {0x4004}, 0x4}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newsa={0x140, 0x10, 0x401, 0x0, 0x0, {{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@private=0xa010100, 0x4d2, 0x32}, @in=@remote, {0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x7}, {0x2}, {}, 0x0, 0x0, 0x2, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x140}}, 0x0) 141.05393ms ago: executing program 0 (id=227): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0xc, 0x2, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x4}]}, 0x20) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x8) 140.754941ms ago: executing program 0 (id=228): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'xfrm0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000001c0)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000440)={0x7, 0x0, [{0x7, 0x4, 0x0, 0x7fff, 0x6000000, 0xe5, 0x2}, {0x19, 0x7, 0x3, 0x3, 0x3, 0x7, 0x10001}, {0x80000019, 0x2116, 0x1, 0x1, 0x4, 0x9, 0x5}, {0x40000001, 0xffffffff, 0x1, 0x5, 0x31, 0x3, 0x1000}, {0xc0000000, 0x4, 0x2, 0x6, 0x1, 0x9}, {0x80000001, 0xa39, 0x4, 0x5, 0x100, 0x8000, 0x101}, {0x0, 0x10001, 0x4, 0x2, 0xc, 0x9, 0x2e67}]}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)) mount$cgroup(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000580)={[{@favordynmods}], [{@flag='nolazytime'}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, 'uid>'}}, {@audit}, {@smackfsroot}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x62, 0x34, 0x66, 0x64, 0x39, 0x64, 0x64], 0x2d, [0x65, 0x38, 0x33, 0x66], 0x2d, [0x33, 0x63, 0x34, 0x30], 0x2d, [0x30, 0x32, 0x62, 0x38], 0x2d, [0x31, 0x31, 0x38, 0x66, 0x36, 0x61, 0x62, 0x33]}}}]}) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 61.340336ms ago: executing program 2 (id=229): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800") 60.013955ms ago: executing program 0 (id=230): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), &(0x7f0000000100)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x4, 0x6, 0x8, @remote, @private2, 0x7800, 0x20, 0x2832, 0x800}}) 57.21184ms ago: executing program 2 (id=231): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000580)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/15, 0xf}], 0x1}, 0x8001}], 0x2, 0x10002, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000380)={0x1fe, 0x2, 0x2ffc, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x10000010) write(r3, &(0x7f0000000340)='252:0 1', 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x8905, &(0x7f00000000c0)) sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x9659bc628a578a55, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1000}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44080}, 0x8c0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000640)={0x1, 0x0, [{0xc0010015, 0x0, 0x6}]}) r10 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x3f, &(0x7f00000005c0)=0x1, 0x4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0xbffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffb}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x80) 0s ago: executing program 0 (id=232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001780), 0x301002, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000018c0)={0x1, &(0x7f0000001900)=[{0x6, 0x0, 0x0, 0xfffffffc}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001a00)='./dev\x00', 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x34, r3, 0x905, 0x0, 0x0, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000001b40)=[{&(0x7f0000001b80)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000001c00)='P', 0x1}], 0x1, &(0x7f0000001c40)=[@init={0x14, 0x84, 0x0, {0x31, 0x9, 0x4, 0xa0}}, @dstaddrv6={0x1c, 0x84, 0x8, @loopback}], 0x30, 0x24004884}], 0x1, 0x4040044) (async) mount(0x0, &(0x7f0000001c80)='./dev\x00', &(0x7f0000001cc0)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000001d40)=@filename='./dev/sda1\x00', &(0x7f0000001d80)='./mnt\x00', &(0x7f0000001dc0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000001e00)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000001e40)='./file0\x00', 0x200) (async) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000001940)) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001980), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) (async) write$cgroup_type(r5, &(0x7f00000019c0), 0x9) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001000)={'tunl0\x00', &(0x7f0000000f80)={'tunl0\x00', 0x0, 0x7, 0x80, 0x1000, 0x7, {{0x14, 0x4, 0x1, 0x5, 0x50, 0x68, 0x0, 0x7, 0x29, 0x0, @local, @rand_addr=0x64010101, {[@lsrr={0x83, 0x17, 0x7f, [@rand_addr=0x64010100, @remote, @empty, @broadcast, @loopback]}, @timestamp_addr={0x44, 0x24, 0x53, 0x1, 0xd, [{@empty, 0x8}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x8}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001100)={'ip_vti0\x00', &(0x7f0000001040)={'gre0\x00', 0x0, 0x700, 0x7, 0x4, 0x8, {{0x1a, 0x4, 0x2, 0x2, 0x68, 0x67, 0x0, 0xf, 0x4, 0x0, @loopback, @multicast2, {[@end, @timestamp={0x44, 0x2c, 0xd, 0x0, 0xd, [0xe9, 0x1, 0x80000000, 0x4, 0x759, 0xd1, 0x7fffffff, 0x7f, 0xfffffff9, 0xa]}, @timestamp_addr={0x44, 0x24, 0xc, 0x1, 0x3, [{@loopback}, {@broadcast, 0x1ff}, {@private=0xa010100, 0x1541b8d1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}]}]}}}}}) (async) r10 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom(r10, &(0x7f0000001600)=""/69, 0x45, 0x2, &(0x7f0000001680)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x4, 0x3}}, 0x80) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001140)={@private2, 0x0}, &(0x7f0000001180)=0x14) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001580)={&(0x7f00000011c0)={0x144, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x401}, @ETHTOOL_A_EEE_MODES_OURS={0x114, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x70, 0x5, "e47d3d78600f1b2aec19d41059b076ed15d38fb9125467c2c1ccb1e29ab8758900d875ac25f40f106bce049e3a520f6c81821240ada15cb7bc7d86c46a379684312c38ebb080a2b58f8b3d795e8c51069723b9a7b198cc809f1a929c9f424fca80125f5ad61e9e6876491573"}, @ETHTOOL_A_BITSET_MASK={0x9e, 0x5, "097c2a0af090fd6acbe67f1219f035fb28949b92b57250be27e1823f78201ae9e33dbc3c79ca9e75fdfd998b75995037aa7697c97417a2970eeecb7428ef8b6f2d29632e1ab29a32649ec38711494f65efe47cac5fa9f852e62603833170c104a0cbb348f4cffb4b3fd9b07fcb35b20268c2dbca87eec7050180ecca3f8d2dde36ddfa82eddce4039ed68cb0c777eacaa5585bb9c9bd125e1a85"}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000091}, 0x840) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001340)={&(0x7f00000013c0)=ANY=[@ANYBLOB="54010000", @ANYRES16=r6, @ANYBLOB="04072dbd7000fcdbdf250d0000003800018008000300010000001400020076657468315f7406666261746164760008000300020000000800010069e7b802e62701cc4282831517151e50ff1c0cb4006bd9ecf226e78647f8f1466c9781161d4c133ab2820f881131341f", @ANYRES32=r7, @ANYBLOB="080003000000000064000180140002006970766c616e31000000000000000000140002006e7230000000000000000000000000001400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r8, @ANYBLOB="0800030003000000140002006e6574706369300000000000000000002000018014000200767863616e3100000000000000000000080003000200000084000180080003000100000008000100", @ANYRES32=r9, @ANYBLOB="08000300020000000800030003000000140002006873723000000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="080003000200000014000200726f7365300000000000000000000000140002006d6163766c616e30000000000000000014000200767863616e3100"/68], 0x154}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:38176' (ED25519) to the list of known hosts. [ 39.817057][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 39.817076][ T42] audit: type=1400 audit(1792366146.172:138): avc: denied { name_bind } for pid=5713 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.856205][ T42] audit: type=1400 audit(1792366146.212:139): avc: denied { execute } for pid=5714 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.857104][ T42] audit: type=1400 audit(1792366146.212:140): avc: denied { execute_no_trans } for pid=5714 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.435842][ T42] audit: type=1400 audit(1792366148.792:141): avc: denied { mounton } for pid=5714 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.437441][ T42] audit: type=1400 audit(1792366148.792:142): avc: denied { mount } for pid=5714 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.439198][ T5714] cgroup: Unknown subsys name 'net' [ 42.440420][ T42] audit: type=1400 audit(1792366148.792:143): avc: denied { unmount } for pid=5714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.548818][ T5714] cgroup: Unknown subsys name 'cpuset' [ 42.552613][ T5714] cgroup: Unknown subsys name 'rlimit' [ 42.711959][ T42] audit: type=1400 audit(1792366149.062:144): avc: denied { setattr } for pid=5714 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.712547][ T42] audit: type=1400 audit(1792366149.062:145): avc: denied { create } for pid=5714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.712810][ T42] audit: type=1400 audit(1792366149.062:146): avc: denied { write } for pid=5714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.713244][ T42] audit: type=1400 audit(1792366149.062:147): avc: denied { read } for pid=5714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.771407][ T5719] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.484539][ T5714] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.965636][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 46.965650][ T42] audit: type=1400 audit(1792366153.322:154): avc: denied { execmem } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.162927][ T42] audit: type=1400 audit(1792366153.512:155): avc: denied { create } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.162975][ T42] audit: type=1400 audit(1792366153.512:156): avc: denied { read write } for pid=5726 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.163011][ T42] audit: type=1400 audit(1792366153.512:157): avc: denied { open } for pid=5726 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.172536][ T42] audit: type=1400 audit(1792366153.522:158): avc: denied { ioctl } for pid=5726 comm="syz-executor" path="socket:[7340]" dev="sockfs" ino=7340 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.213447][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.218972][ T5738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.220704][ T5741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.221366][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.222354][ T5741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.222762][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.222996][ T5741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.224330][ T5086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.228694][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.229153][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.230783][ T5740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.231142][ T5740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.234265][ T42] audit: type=1400 audit(1792366153.582:159): avc: denied { read } for pid=5730 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.235064][ T5738] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.235310][ T42] audit: type=1400 audit(1792366153.582:160): avc: denied { open } for pid=5731 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.235766][ T5738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.236690][ T42] audit: type=1400 audit(1792366153.602:161): avc: denied { mounton } for pid=5731 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.237210][ T5741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.237351][ T5738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.237826][ T42] audit: type=1400 audit(1792366153.602:162): avc: denied { open } for pid=5730 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.238209][ T5738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.239968][ T5738] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.240461][ T42] audit: type=1400 audit(1792366153.602:163): avc: denied { module_request } for pid=5731 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.243004][ T5741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.245395][ T5741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.455939][ T5731] rdma_rxe: Failed to create IPv4 UDP tunnel [ 47.465130][ T5726] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.465199][ T5735] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.470409][ T5726] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.484462][ T5726] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.485470][ T5730] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.581088][ T5726] infiniband rxe0: set active [ 47.583129][ T5726] infiniband rxe0: added rxe_eth0 [ 47.592844][ T5726] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 47.592866][ T5726] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 47.592887][ T5726] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 47.595684][ T34] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.602923][ T5726] RDS/IB: rxe0: added [ 47.603033][ T5726] smc: adding ib device rxe0 with port count 1 [ 47.603068][ T5726] smc: ib device rxe0 port 1 has no pnetid [ 47.619799][ T5726] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.636121][ T34] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.746897][ T5726] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.880457][ T5726] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.923818][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.924696][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.924760][ T5735] bridge_slave_0: entered allmulticast mode [ 47.928289][ T5735] bridge_slave_0: entered promiscuous mode [ 47.955165][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.955228][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.955289][ T5731] bridge_slave_0: entered allmulticast mode [ 47.956045][ T5731] bridge_slave_0: entered promiscuous mode [ 47.957729][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.957768][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.957919][ T5731] bridge_slave_1: entered allmulticast mode [ 47.958757][ T5731] bridge_slave_1: entered promiscuous mode [ 47.959557][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.959657][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.959764][ T5735] bridge_slave_1: entered allmulticast mode [ 47.961094][ T5735] bridge_slave_1: entered promiscuous mode [ 47.962785][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.962846][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.963209][ T5730] bridge_slave_0: entered allmulticast mode [ 47.964188][ T5730] bridge_slave_0: entered promiscuous mode [ 47.965544][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.965621][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.965676][ T5730] bridge_slave_1: entered allmulticast mode [ 47.966373][ T5730] bridge_slave_1: entered promiscuous mode [ 48.023063][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.039347][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.043550][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.045860][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.057740][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.082014][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.094048][ T5735] team0: Port device team_slave_0 added [ 48.112225][ T5731] team0: Port device team_slave_0 added [ 48.113633][ T5735] team0: Port device team_slave_1 added [ 48.129996][ T5726] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.132436][ T5730] team0: Port device team_slave_0 added [ 48.134022][ T5731] team0: Port device team_slave_1 added [ 48.148705][ T5730] team0: Port device team_slave_1 added [ 48.169108][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.169119][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.169131][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.179808][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.179823][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.179843][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.180617][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.180625][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.180638][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.185266][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.185275][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.185287][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.186181][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.186189][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.186201][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.190878][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.190886][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.190898][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.249386][ T5735] hsr_slave_0: entered promiscuous mode [ 48.250267][ T5735] hsr_slave_1: entered promiscuous mode [ 48.270636][ T5731] hsr_slave_0: entered promiscuous mode [ 48.271135][ T5731] hsr_slave_1: entered promiscuous mode [ 48.271448][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 48.271512][ T5731] Cannot create hsr debugfs directory [ 48.277639][ T5730] hsr_slave_0: entered promiscuous mode [ 48.278205][ T5730] hsr_slave_1: entered promiscuous mode [ 48.278515][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 48.278527][ T5730] Cannot create hsr debugfs directory [ 48.675725][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.684850][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.686368][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.690841][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.691402][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.693861][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.696338][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.701607][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.833878][ T5731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.840361][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.841763][ T5731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.846349][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.847292][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.847470][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.847801][ T5726] bridge_slave_0: entered allmulticast mode [ 48.849659][ T5726] bridge_slave_0: entered promiscuous mode [ 48.852325][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.852399][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.852813][ T5726] bridge_slave_1: entered allmulticast mode [ 48.857280][ T5726] bridge_slave_1: entered promiscuous mode [ 48.863166][ T5731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.869445][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.899982][ T5731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.904449][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.917611][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.927917][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.959015][ T5726] team0: Port device team_slave_0 added [ 48.962180][ T5726] team0: Port device team_slave_1 added [ 48.968685][ T5730] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.974542][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.975485][ T5730] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.978764][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.988468][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.988477][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.988489][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.989914][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.989922][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.989934][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.990631][ T5730] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.995487][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.995870][ T5730] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.997643][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.035497][ T5726] hsr_slave_0: entered promiscuous mode [ 49.035923][ T5726] hsr_slave_1: entered promiscuous mode [ 49.036252][ T5726] debugfs: 'hsr0' already exists in 'hsr' [ 49.036264][ T5726] Cannot create hsr debugfs directory [ 49.113759][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.144254][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.163184][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.163282][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.179160][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.179245][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.221430][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.226537][ T5726] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.230134][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.230867][ T5726] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.234258][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.235348][ T5726] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.241165][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.242199][ T5726] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.248535][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.255282][ T5738] Bluetooth: hci3: command tx timeout [ 49.255288][ T5734] Bluetooth: hci1: command tx timeout [ 49.255600][ T5738] Bluetooth: hci2: command tx timeout [ 49.264481][ T66] Bluetooth: hci0: command tx timeout [ 49.276661][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.296854][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.299351][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.299396][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.317320][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.317405][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.351837][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.364859][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.364950][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.393872][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.394039][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.462386][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.475112][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.481720][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.481766][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.494741][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.494825][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.602885][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.640256][ T5735] veth0_vlan: entered promiscuous mode [ 49.653244][ T5735] veth1_vlan: entered promiscuous mode [ 49.686314][ T5735] veth0_macvtap: entered promiscuous mode [ 49.688561][ T5735] veth1_macvtap: entered promiscuous mode [ 49.695044][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.707058][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.711884][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.749240][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.780263][ T5730] veth0_vlan: entered promiscuous mode [ 49.805871][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.805889][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.808378][ T5730] veth1_vlan: entered promiscuous mode [ 49.839139][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.839154][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.845539][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.862799][ T5730] veth0_macvtap: entered promiscuous mode [ 49.866223][ T5731] veth0_vlan: entered promiscuous mode [ 49.871630][ T5730] veth1_macvtap: entered promiscuous mode [ 49.879272][ T5731] veth1_vlan: entered promiscuous mode [ 49.901481][ T5735] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.913880][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.914266][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.918226][ T5726] veth0_vlan: entered promiscuous mode [ 49.928616][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.936639][ T5726] veth1_vlan: entered promiscuous mode [ 49.944928][ T5731] veth0_macvtap: entered promiscuous mode [ 49.949928][ T5731] veth1_macvtap: entered promiscuous mode [ 49.954556][ T5800] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.975175][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.978604][ T5726] veth0_macvtap: entered promiscuous mode [ 49.994335][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.994364][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.994383][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.994400][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.994418][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.994436][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.995176][ T5726] veth1_macvtap: entered promiscuous mode [ 49.997575][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.021414][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.036800][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.036819][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.040052][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.068344][ T5800] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.068384][ T5800] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.070272][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.070283][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.092603][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.092616][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.130028][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.130043][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.159148][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.159167][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.177388][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.177408][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.194560][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.194951][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.194982][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.195010][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.195037][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.195065][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.299563][ T5895] MTRR 1 not used [ 50.347958][ T5899] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8'. [ 50.354543][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 50.359367][ T1162] IPVS: starting estimator thread 0... [ 50.393422][ T5905] capability: warning: `syz.1.9' uses deprecated v2 capabilities in a way that may be insecure [ 50.401691][ T5905] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 50.401706][ T5905] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 50.401771][ T5905] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 50.402622][ T5900] team0: entered allmulticast mode [ 50.402633][ T5900] team_slave_0: entered allmulticast mode [ 50.402643][ T5900] team_slave_1: entered allmulticast mode [ 50.402967][ T5900] team0: Cannot enslave team device to itself [ 50.454098][ T5902] IPVS: using max 43 ests per chain, 103200 per kthread [ 50.480219][ T5900] Zero length message leads to an empty skb [ 50.688855][ T5934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5934 comm=syz.0.18 [ 50.689434][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 50.805792][ T5954] mmap: syz.0.21 (5954) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.809015][ T5950] ======================================================= [ 50.809015][ T5950] WARNING: The mand mount option has been deprecated and [ 50.809015][ T5950] and is ignored by this kernel. Remove the mand [ 50.809015][ T5950] option from the mount to silence this warning. [ 50.809015][ T5950] ======================================================= [ 50.809344][ T5950] fuseblk: Bad value for 'fd' qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 51.090597][ T5984] netlink: 'syz.3.30': attribute type 1 has an invalid length. [ 51.091215][ T5984] netlink: 'syz.3.30': attribute type 1 has an invalid length. [ 51.127826][ T5987] bond0: invalid ARP target specified [ 51.137889][ T5986] uprobe: syz.3.32:5986 failed to unregister, leaking uprobe [ 51.215111][ T6002] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 51.219312][ T6002] syzkaller0: entered promiscuous mode [ 51.219326][ T6002] syzkaller0: entered allmulticast mode [ 51.224261][ T6004] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 51.334260][ T66] Bluetooth: hci1: command tx timeout [ 51.334283][ T66] Bluetooth: hci3: command tx timeout [ 51.344408][ T5734] Bluetooth: hci0: command tx timeout [ 51.344426][ T5734] Bluetooth: hci2: command tx timeout [ 51.509376][ T6028] netlink: 52 bytes leftover after parsing attributes in process `syz.2.42'. [ 51.572920][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 51.761616][ T6038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=6038 comm=syz.1.43 [ 51.797708][ T6040] process 'syz.1.44' launched './file1' with NULL argv: empty string added [ 51.799289][ T6040] hid-generic 0003:0627:0001.0001: pid 6040 passed too short report [ 51.930383][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.45'. [ 51.989133][ T42] kauditd_printk_skb: 132 callbacks suppressed [ 51.989146][ T42] audit: type=1400 audit(1792366158.342:296): avc: denied { mounton } for pid=6048 comm="syz.3.47" path="/8/file0" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 52.116940][ T42] audit: type=1400 audit(1792366158.472:297): avc: denied { write } for pid=6048 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.135316][ T42] audit: type=1400 audit(1792366158.492:298): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 52.163730][ T42] audit: type=1400 audit(1792366158.512:299): avc: denied { ioctl } for pid=6057 comm="syz.3.49" path="socket:[10701]" dev="sockfs" ino=10701 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.165853][ T6059] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 52.166398][ T6058] : renamed from vlan0 (while UP) [ 52.252221][ T42] audit: type=1400 audit(1792366158.602:300): avc: denied { read } for pid=6064 comm="syz.3.51" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 52.252548][ T42] audit: type=1400 audit(1792366158.602:301): avc: denied { open } for pid=6064 comm="syz.3.51" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 52.253043][ T42] audit: type=1400 audit(1792366158.602:302): avc: denied { append } for pid=6064 comm="syz.3.51" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 52.253635][ T42] audit: type=1400 audit(1792366158.602:303): avc: denied { ioctl } for pid=6064 comm="syz.3.51" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 52.282785][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 52.284916][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.440015][ T42] audit: type=1400 audit(1792366158.792:304): avc: denied { listen } for pid=6073 comm="syz.3.53" lport=41903 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.440207][ T42] audit: type=1400 audit(1792366158.792:305): avc: denied { accept } for pid=6073 comm="syz.3.53" lport=41903 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.598625][ T6084] netlink: 32 bytes leftover after parsing attributes in process `syz.0.56'. [ 52.602517][ T2319] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 52.644811][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 52.644830][ T6087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.55'. [ 52.663909][ T6089] /dev/sg0: Can't lookup blockdev [ 52.666455][ T6089] SELinux: Context system_u:object_r:sshd_var_run_t:s0 is not valid (left unmapped). [ 52.855692][ T2319] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 52.970284][ T6094] cgroup: fork rejected by pids controller in /syz0 [ 53.375187][ T2319] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 53.424176][ T5734] Bluetooth: hci0: command tx timeout [ 53.424199][ T5734] Bluetooth: hci3: command tx timeout [ 53.424211][ T5734] Bluetooth: hci1: command tx timeout [ 53.424289][ T66] Bluetooth: hci2: command tx timeout [ 53.425959][ T6080] ceph: No mds server is up or the cluster is laggy [ 53.508946][ T6143] could not allocate digest TFM handle blake2s-128-generic [ 53.531056][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.531069][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.531140][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.531146][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.531213][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.531220][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.531285][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.531292][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.531360][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.531366][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.531435][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.531441][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.531509][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.531516][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.531582][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.531589][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.531708][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.531715][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.531782][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.531788][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.531854][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.531861][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.531935][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.531942][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.532007][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.532013][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.532080][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.532087][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.532153][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.532160][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.532227][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.532234][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.532299][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.532306][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.532375][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.532381][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.532447][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.532454][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.532520][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.532526][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.532593][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.532600][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.532669][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.532676][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.532741][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.532748][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.532814][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.532821][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.532894][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.532901][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.532972][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.532978][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.533051][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.533058][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.533128][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.540045][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.540131][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.540138][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.540204][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.540211][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.540278][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.540285][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.540352][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.540359][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.540419][ T6155] binder: BINDER_SET_CONTEXT_MGR already set [ 53.540426][ T6155] binder: 6153:6155 ioctl 4018620d 2000000007c0 returned -16 [ 53.542345][ T66] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 53.547021][ T6157] Illegal XDP return value 65535 on prog (id 12) dev N/A, expect packet loss! [ 53.552270][ T6158] vcan0: tx address claim with dlc 30 [ 53.653057][ T6161] FAULT_INJECTION: forcing a failure. [ 53.653057][ T6161] name failslab, interval 1, probability 0, space 0, times 1 [ 53.653090][ T6161] CPU: 1 UID: 0 PID: 6161 Comm: syz.0.67 Tainted: G L syzkaller #0 PREEMPT(full) [ 53.653106][ T6161] Tainted: [L]=SOFTLOCKUP [ 53.653110][ T6161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.653116][ T6161] Call Trace: [ 53.653128][ T6161] [ 53.653133][ T6161] dump_stack_lvl+0x100/0x190 [ 53.653154][ T6161] should_fail_ex.cold+0x5/0xa [ 53.653171][ T6161] should_failslab+0xc2/0x120 [ 53.653189][ T6161] kmem_cache_alloc_noprof+0x92/0x6a0 [ 53.653204][ T6161] ? security_file_alloc+0x34/0x2c0 [ 53.653227][ T6161] security_file_alloc+0x34/0x2c0 [ 53.653245][ T6161] init_file+0x95/0x480 [ 53.653262][ T6161] alloc_empty_file+0x79/0x1c0 [ 53.653273][ T6161] alloc_file_pseudo+0x183/0x290 [ 53.653284][ T6161] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 53.653295][ T6161] ? alloc_fd+0x471/0x7a0 [ 53.653315][ T6161] sock_alloc_file+0x50/0x210 [ 53.653329][ T6161] __sys_socket+0x1c0/0x260 [ 53.653344][ T6161] ? __pfx___sys_socket+0x10/0x10 [ 53.653364][ T6161] __x64_sys_socket+0x72/0xb0 [ 53.653378][ T6161] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.653396][ T6161] do_syscall_64+0x123/0x790 [ 53.653420][ T6161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.653432][ T6161] RIP: 0033:0x7f01aeb9e559 [ 53.653442][ T6161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.653453][ T6161] RSP: 002b:00007f01acdd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 53.653466][ T6161] RAX: ffffffffffffffda RBX: 00007f01aee26090 RCX: 00007f01aeb9e559 [ 53.653474][ T6161] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000023 [ 53.653481][ T6161] RBP: 00007f01aec35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 53.653488][ T6161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.653495][ T6161] R13: 00007f01aee26128 R14: 00007f01aee26090 R15: 00007fff0c4d0938 [ 53.653511][ T6161] [ 54.880544][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.880558][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.880629][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.880636][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.880703][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.880710][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.880776][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.880783][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.880853][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.880860][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.880936][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.880943][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.881014][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.881020][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.881089][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.881096][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.881168][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.881175][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.881246][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.881253][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.881323][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.881330][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.881399][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.881406][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.881479][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.881486][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.881563][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.881571][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.881640][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.881648][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.881716][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.881723][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.881809][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.881816][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.881886][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.881929][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.881998][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.882005][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.882073][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.882081][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.882226][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.882233][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.882304][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.882311][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.882380][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.882388][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.882457][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.882464][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.883681][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.883691][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.883764][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.883771][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.883840][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.883847][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.885011][ T6169] WARNING! power/level is deprecated; use power/control instead [ 54.885116][ T6169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56316 sclass=netlink_route_socket pid=6169 comm=syz.0.69 [ 54.885223][ T6169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56316 sclass=netlink_route_socket pid=6169 comm=syz.0.69 [ 54.885263][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.885271][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.885298][ T6169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56316 sclass=netlink_route_socket pid=6169 comm=syz.0.69 [ 54.885348][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.885355][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.885367][ T6169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56316 sclass=netlink_route_socket pid=6169 comm=syz.0.69 [ 54.885424][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.885431][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.885435][ T6169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56316 sclass=netlink_route_socket pid=6169 comm=syz.0.69 [ 54.885499][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.885503][ T6169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56316 sclass=netlink_route_socket pid=6169 comm=syz.0.69 [ 54.885506][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.885571][ T6169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56316 sclass=netlink_route_socket pid=6169 comm=syz.0.69 [ 54.885577][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 54.885584][ T6168] binder: 6167:6168 ioctl 4018620d 200000000200 returned -16 [ 54.885643][ T6169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56316 sclass=netlink_route_socket pid=6169 comm=syz.0.69 [ 55.062720][ T6193] binder: 6181:6193 ioctl c0306201 200000000100 returned -14 [ 55.068747][ T6193] binder: BINDER_SET_CONTEXT_MGR already set [ 55.068758][ T6193] binder: 6181:6193 ioctl 4018620d 200000000200 returned -16 [ 55.068923][ T6193] binder: 6181:6193 ioctl c0306201 200000000240 returned -14 [ 55.180280][ T6201] usb 1-1: usbfs: process 6201 (syz.1.77) did not claim interface 0 before use [ 55.344098][ T6216] ima: Unable to open file: / (-22) [ 55.396531][ T6215] ima: policy update failed [ 55.501363][ T6225] netlink: 'syz.2.86': attribute type 8 has an invalid length. [ 55.504090][ T66] Bluetooth: hci2: command tx timeout [ 55.504106][ T5738] Bluetooth: hci0: command tx timeout [ 55.609919][ T6236] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 55.618731][ T6236] __nla_validate_parse: 5 callbacks suppressed [ 55.618747][ T6236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.89'. [ 55.618761][ T6236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.89'. [ 55.895387][ T6251] Bluetooth: MGMT ver 1.23 [ 55.925147][ T6256] ip_tables: iptables: counters copy to user failed while replacing table [ 55.929542][ T6255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.929647][ T6255] syz.1.98 uses obsolete (PF_INET,SOCK_PACKET) [ 56.562234][ T6268] syzkaller0: entered promiscuous mode [ 56.562250][ T6268] syzkaller0: entered allmulticast mode [ 56.565822][ T6268] tipc: Started in network mode [ 56.565849][ T6268] tipc: Node identity 1ebd7968f5e3, cluster identity 4711 [ 56.566021][ T6268] tipc: Enabled bearer , priority 0 [ 56.615895][ T6268] tipc: Resetting bearer [ 56.629140][ T6267] tipc: Resetting bearer [ 56.638136][ T6267] tipc: Disabling bearer [ 56.760594][ T6274] __find_get_block_slow() failed. block=72057594037927937, b_blocknr=1, b_state=0x0022601b, b_size=4096, device sda1 blocksize: 4096 [ 56.760626][ T6274] grow_buffers: requested out-of-range block 72057594037927937 for device sda1 [ 56.760641][ T6274] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 56.885780][ T6283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.108'. [ 56.891562][ T6283] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 57.056341][ T42] kauditd_printk_skb: 96 callbacks suppressed [ 57.056354][ T42] audit: type=1400 audit(1792366163.412:402): avc: denied { audit_write } for pid=6295 comm="syz.3.113" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.103447][ T6301] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 57.103463][ T6301] device-mapper: ioctl: error adding target to table [ 57.111015][ T42] audit: type=1400 audit(1792366163.462:403): avc: denied { watch } for pid=6295 comm="syz.3.113" path="/31/bus" dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.111586][ T42] audit: type=1400 audit(1792366163.462:404): avc: denied { watch_sb watch_reads } for pid=6295 comm="syz.3.113" path="/31/bus" dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.160215][ T6305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.116'. [ 57.217409][ T42] audit: type=1400 audit(1792366163.572:405): avc: denied { ioctl } for pid=6306 comm="syz.3.117" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11860 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.218295][ T42] audit: type=1400 audit(1792366163.572:406): avc: denied { read write } for pid=6306 comm="syz.3.117" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 57.218520][ T42] audit: type=1400 audit(1792366163.572:407): avc: denied { open } for pid=6306 comm="syz.3.117" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 57.233238][ T6307] rxe_eth0 speed is unknown, defaulting to 1000 [ 57.257194][ T2319] wacom 0003:056A:003F.0002: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 57.399605][ T42] audit: type=1400 audit(1792366163.752:408): avc: denied { read } for pid=6318 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.408403][ T42] audit: type=1400 audit(1792366163.762:409): avc: denied { cmd } for pid=6318 comm="syz.1.119" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 57.456297][ T6324] netlink: 72 bytes leftover after parsing attributes in process `syz.1.120'. [ 57.458800][ T42] audit: type=1400 audit(1792366163.812:410): avc: denied { ioctl } for pid=6323 comm="syz.1.120" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.510700][ T42] audit: type=1400 audit(1792366163.862:411): avc: denied { bind } for pid=6323 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.554631][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 57.554662][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 57.554670][ T6327] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 57.555056][ T6327] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 57.555482][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'. [ 57.555492][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 57.608694][ T6329] loop8: detected capacity change from 0 to 16384 [ 57.617931][ T5800] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.617956][ T5800] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.617973][ T5800] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.617990][ T5800] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.716022][ T6333] netlink: 'syz.0.124': attribute type 9 has an invalid length. [ 57.726480][ T6333] program syz.0.124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.786270][ T6336] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 57.786285][ T6336] device-mapper: ioctl: error adding target to table [ 57.927246][ T6334] loop8: detected capacity change from 16384 to 16383 [ 58.011749][ T6342] sg_write: process 104 (syz.2.127) changed security contexts after opening file descriptor, this is not allowed. [ 58.324898][ T6368] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 58.324914][ T6368] device-mapper: ioctl: error adding target to table [ 58.366610][ T6366] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 58.366782][ T6366] SELinux: failed to load policy [ 58.382187][ T6372] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 58.382333][ T6372] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 58.382343][ T6372] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 58.382350][ T6372] UDF-fs: Scanning with blocksize 512 failed [ 58.383044][ T6372] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 58.383104][ T6372] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 58.383114][ T6372] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 58.383120][ T6372] UDF-fs: Scanning with blocksize 1024 failed [ 58.383590][ T6372] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 58.383639][ T6372] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 58.383648][ T6372] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 58.383654][ T6372] UDF-fs: Scanning with blocksize 2048 failed [ 58.383865][ T6372] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 58.383906][ T6372] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 58.383915][ T6372] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 58.383921][ T6372] UDF-fs: Scanning with blocksize 4096 failed [ 58.383926][ T6372] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 58.390041][ T6372] openvswitch: netlink: IP tunnel dst address not specified [ 58.390055][ T6372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 58.428095][ T6375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.138'. [ 58.484729][ T6383] tmpfs: Using encoding : utf8-12.1.0 [ 58.494933][ T6384] tmpfs: Using encoding : utf8-12.1.0 [ 58.579216][ T6393] selinux_netlink_send: 57 callbacks suppressed [ 58.579229][ T6393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6393 comm=syz.1.142 [ 58.609429][ T6397] syzkaller0: entered promiscuous mode [ 58.609443][ T6397] syzkaller0: entered allmulticast mode [ 58.634849][ T955] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 58.677447][ T6405] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 58.677462][ T6405] device-mapper: ioctl: error adding target to table [ 58.738352][ T5830] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.784021][ T955] usb 7-1: Using ep0 maxpacket: 8 [ 58.784973][ T6412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 58.784983][ T6412] IPv6: NLM_F_CREATE should be set when creating new route [ 58.786361][ T955] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.789105][ T955] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 58.789121][ T955] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 58.791405][ T955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.791417][ T955] usb 7-1: Product: syz [ 58.791424][ T955] usb 7-1: Manufacturer: syz [ 58.791431][ T955] usb 7-1: SerialNumber: syz [ 59.203258][ T955] cdc_ncm 7-1:1.0: bind() failure [ 59.212726][ T955] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 59.212748][ T955] cdc_ncm 7-1:1.1: bind() failure [ 59.218409][ T955] usb 7-1: USB disconnect, device number 2 [ 59.652485][ T6415] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 59.652610][ T6415] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.661290][ T6415] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.665139][ T6415] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 59.665234][ T6415] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.671389][ T6415] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.673571][ T6415] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 59.673640][ T6415] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.681130][ T6415] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.681936][ T6415] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 59.682126][ T6415] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 59.683739][ T6415] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 59.913663][ T6435] tipc: Started in network mode [ 59.913688][ T6435] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 59.913797][ T6435] tipc: Enabled bearer , priority 0 [ 59.917924][ T6434] tipc: Enabling of bearer rejected, already enabled [ 59.942915][ T6443] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 59.942930][ T6443] device-mapper: ioctl: error adding target to table [ 60.054490][ T6451] overlayfs: failed to resolve './bus': -2 [ 60.086376][ T5441] veth1_vlan: left promiscuous mode [ 60.214275][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 60.289173][ T6473] bridge_slave_1: left allmulticast mode [ 60.289192][ T6473] bridge_slave_1: left promiscuous mode [ 60.290002][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.291792][ T6473] bridge_slave_0: left allmulticast mode [ 60.291806][ T6473] bridge_slave_0: left promiscuous mode [ 60.291920][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.373753][ T6481] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 60.373768][ T6481] device-mapper: ioctl: error adding target to table [ 60.385016][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 60.387034][ T34] usb 7-1: New USB device found, idVendor=0b39, idProduct=0901, bcdDevice=64.aa [ 60.390326][ T34] usb 7-1: config 252 has an invalid interface number: 76 but max is 0 [ 60.390368][ T34] usb 7-1: config 252 has no interface number 0 [ 60.390412][ T34] usb 7-1: config 252 interface 76 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 60.390427][ T34] usb 7-1: config 252 interface 76 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 60.390441][ T34] usb 7-1: config 252 interface 76 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 60.390456][ T34] usb 7-1: config 252 interface 76 altsetting 6 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 60.390474][ T34] usb 7-1: config 252 interface 76 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 60.390488][ T34] usb 7-1: config 252 interface 76 altsetting 6 has an endpoint descriptor with address 0x14, changing to 0x4 [ 60.390505][ T34] usb 7-1: config 252 interface 76 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 60.390519][ T34] usb 7-1: config 252 interface 76 altsetting 6 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 60.390536][ T34] usb 7-1: config 252 interface 76 has no altsetting 0 [ 60.397056][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.397068][ T34] usb 7-1: Product: 횒穟걫俟㓅厰ꏼ⒦認┄㋔㵁䗖ћﲕ攳춮탤頥쨮࠾塟俊ꫪ㋼஧兏㻯䑉蜚古ꭘ쎡鎗錵펾扼祳ᦠԅ溂嘨┶偷惜팽ϋ왣౵횩喆쓱㯇 [ 60.397081][ T34] usb 7-1: Manufacturer: ࠉ [ 60.397088][ T34] usb 7-1: SerialNumber: ﭘ릗ɚ䘔㰿璸盒驛쐉援伀檨샖ぱᗉ罖踾⎽䑲鲘㠤ઈⳊ阙ꓸ텈ﻦ鼖楙醸莶盧㾼蒪怶炖ፆ疡艀ⓖ㽧珦괚牔赠뺐郞碣ꮓﾥ⡾쳇냣❄ៗ쾠ꯌ᜜凈츒答祉궦 [ 60.421674][ T6491] netlink: 'syz.0.164': attribute type 39 has an invalid length. [ 60.663628][ T34] pegasus 7-1:252.76: Missing or invalid endpoints [ 60.679443][ T34] usb 7-1: USB disconnect, device number 3 [ 60.873512][ T6507] ceph: No source [ 60.905977][ T34] tipc: Node number set to 43690 [ 60.934058][ T5738] Bluetooth: hci0: command 0x0c1a tx timeout [ 60.949240][ T6518] FAULT_INJECTION: forcing a failure. [ 60.949240][ T6518] name failslab, interval 1, probability 0, space 0, times 0 [ 60.949272][ T6518] CPU: 3 UID: 0 PID: 6518 Comm: syz.0.170 Tainted: G L syzkaller #0 PREEMPT(full) [ 60.949288][ T6518] Tainted: [L]=SOFTLOCKUP [ 60.949292][ T6518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.949299][ T6518] Call Trace: [ 60.949312][ T6518] [ 60.949317][ T6518] dump_stack_lvl+0x100/0x190 [ 60.949373][ T6518] should_fail_ex.cold+0x5/0xa [ 60.949389][ T6518] should_failslab+0xc2/0x120 [ 60.949420][ T6518] __kmalloc_cache_noprof+0x91/0x6d0 [ 60.949433][ T6518] ? xfd_validate_state+0x129/0x190 [ 60.949445][ T6518] ? __do_sys_memfd_create+0x170/0x3d0 [ 60.949465][ T6518] __do_sys_memfd_create+0x170/0x3d0 [ 60.949478][ T6518] do_syscall_64+0x123/0x790 [ 60.949545][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.949557][ T6518] RIP: 0033:0x7f01aeb9e559 [ 60.949566][ T6518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.949577][ T6518] RSP: 002b:00007f01acdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 60.949596][ T6518] RAX: ffffffffffffffda RBX: 00007f01aee25fa0 RCX: 00007f01aeb9e559 [ 60.949603][ T6518] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000004180 [ 60.949609][ T6518] RBP: 00007f01aec35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 60.949616][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.949622][ T6518] R13: 00007f01aee26038 R14: 00007f01aee25fa0 R15: 00007fff0c4d0938 [ 60.949637][ T6518] [ 61.041407][ T6528] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 61.041437][ T6528] device-mapper: ioctl: error adding target to table [ 61.087272][ T5738] Bluetooth: hci3: unexpected event for opcode 0x041b [ 61.089211][ T6531] sctp: [Deprecated]: syz.0.173 (pid 6531) Use of struct sctp_assoc_value in delayed_ack socket option. [ 61.089211][ T6531] Use struct sctp_sack_info instead [ 61.212338][ T6538] netlink: 'syz.1.176': attribute type 12 has an invalid length. [ 61.212634][ T6538] __nla_validate_parse: 3 callbacks suppressed [ 61.212643][ T6538] netlink: 132 bytes leftover after parsing attributes in process `syz.1.176'. [ 61.257231][ T6543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 61.257520][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 61.257976][ T6543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 61.258237][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 61.261424][ T6543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 61.261688][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 61.262213][ T6543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 61.262499][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 61.263011][ T6543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 61.337028][ T6552] netlink: 'syz.1.178': attribute type 1 has an invalid length. [ 61.450426][ T6561] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 61.450441][ T6561] device-mapper: ioctl: error adding target to table [ 61.473753][ T6563] fuse: Unknown parameter '+YQu' [ 61.543352][ T6567] binder: 6564:6567 ioctl c0306201 200000000280 returned -22 [ 61.735762][ T5738] Bluetooth: hci2: command 0x0c1a tx timeout [ 61.735802][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 61.801583][ T6582] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 61.803298][ T6582] @0: renamed from bond_slave_1 (while UP) [ 61.895815][ T6593] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 61.895831][ T6593] device-mapper: ioctl: error adding target to table [ 61.907021][ T6595] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 62.174157][ T2319] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 62.324630][ T2319] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 62.325498][ T2319] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.325514][ T2319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 62.325526][ T2319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 62.325537][ T2319] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 62.325556][ T2319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.327216][ T2319] usb 6-1: config 0 descriptor?? [ 62.745234][ T2319] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 62.809214][ T42] kauditd_printk_skb: 42 callbacks suppressed [ 62.809232][ T42] audit: type=1400 audit(1792366169.162:452): avc: denied { create } for pid=6612 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.811776][ T42] audit: type=1400 audit(1792366169.162:453): avc: denied { bind } for pid=6612 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.811815][ T42] audit: type=1400 audit(1792366169.162:454): avc: denied { listen } for pid=6612 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.812926][ T42] audit: type=1400 audit(1792366169.162:455): avc: denied { write } for pid=6612 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.886072][ T6622] netlink: 'syz.0.196': attribute type 1 has an invalid length. [ 62.906347][ T6622] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.924218][ T6622] bond1: (slave veth3): Enslaving as an active interface with a down link [ 62.928523][ T6622] bond1: (slave macvlan0): making interface the new active one [ 62.929314][ T6622] macvlan0: entered promiscuous mode [ 62.929958][ T6622] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 62.934470][ T6624] netlink: 'syz.0.196': attribute type 1 has an invalid length. [ 62.979466][ T6625] bond1: (slave veth5): Enslaving as an active interface with a down link [ 63.007160][ T5800] bond1: (slave macvlan0): link status definitely down, disabling slave [ 63.007466][ T5800] macvlan0: left promiscuous mode [ 63.009219][ T5800] bond1: now running without any active interface! [ 63.014058][ T5738] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.250341][ T42] audit: type=1400 audit(1792366169.602:456): avc: denied { mounton } for pid=6631 comm="syz.0.198" path="/51/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 63.263410][ T42] audit: type=1326 audit(1792366169.612:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.0.198" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01aeb9e559 code=0x0 [ 63.815943][ T5738] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.827455][ T5738] Bluetooth: hci2: command 0x0c1a tx timeout [ 63.996878][ T42] audit: type=1400 audit(1792366170.352:458): avc: denied { read write } for pid=6640 comm="syz.0.199" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 63.997038][ T42] audit: type=1400 audit(1792366170.352:459): avc: denied { open } for pid=6640 comm="syz.0.199" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 64.032485][ T6645] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 64.032507][ T6645] device-mapper: ioctl: error adding target to table [ 64.129081][ T6655] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 64.129104][ T6655] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 64.131115][ T6655] vhci_hcd vhci_hcd.0: Device attached [ 64.131673][ T6657] vhci_hcd: connection closed [ 64.134386][ T5800] vhci_hcd vhci_hcd.0: stop threads [ 64.134721][ T5800] vhci_hcd vhci_hcd.0: release socket [ 64.134740][ T5800] vhci_hcd vhci_hcd.0: disconnect device [ 64.454761][ T63] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 64.661158][ T42] audit: type=1400 audit(1792366171.012:460): avc: denied { accept } for pid=6660 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 64.661483][ T42] audit: type=1400 audit(1792366171.012:461): avc: denied { create } for pid=6660 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.808351][ T6670] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 65.042448][ T6676] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 65.042472][ T6676] device-mapper: ioctl: error adding target to table [ 65.094076][ T5738] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.368882][ T6689] SELinux: policydb version 0 does not match my version range 15-35 [ 65.368910][ T6689] SELinux: failed to load policy [ 65.652436][ T6693] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 65.662781][ T6693] ima: policy update failed [ 65.663889][ T6693] trusted_key: encrypted_key: insufficient parameters specified [ 65.674561][ T6693] trusted_key: encrypted_key: insufficient parameters specified [ 65.729603][ T6659] usb 6-1: USB disconnect, device number 2 [ 65.894752][ T5738] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.894790][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.080520][ T6703] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 66.080541][ T6703] device-mapper: ioctl: error adding target to table [ 66.224428][ T6710] Bluetooth: Short BCSP packet [ 66.251264][ T6712] __nla_validate_parse: 127 callbacks suppressed [ 66.251277][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'. [ 66.251284][ T6712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.223'. [ 67.185058][ T6722] capability: warning: `syz.0.225' uses 32-bit capabilities (legacy support in use) [ 67.187089][ T6722] SELinux: policydb version 0 does not match my version range 15-35 [ 67.187126][ T6722] SELinux: failed to load policy [ 67.311930][ T6728] netlink: 'syz.0.226': attribute type 1 has an invalid length. [ 67.332490][ T6728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.338796][ T6729] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 67.613565][ T6746] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 67.672276][ T6748] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 67.672291][ T6748] device-mapper: ioctl: error adding target to table [ 67.760312][ T6752] [ 67.761132][ T6752] ====================================================== [ 67.763352][ T6752] WARNING: possible circular locking dependency detected [ 67.765474][ T6752] syzkaller #0 Tainted: G L [ 67.767486][ T6752] ------------------------------------------------------ [ 67.769925][ T6752] syz.2.231/6752 is trying to acquire lock: [ 67.771867][ T6752] ffffffff8ffcb300 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x63/0x6a0 [ 67.775045][ T6752] [ 67.775045][ T6752] but task is already holding lock: [ 67.777509][ T6752] ffff888029b48d30 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 [ 67.780494][ T6752] [ 67.780494][ T6752] which lock already depends on the new lock. [ 67.780494][ T6752] [ 67.783704][ T6752] [ 67.783704][ T6752] the existing dependency chain (in reverse order) is: [ 67.786770][ T6752] [ 67.786770][ T6752] -> #2 (&q->blkcg_mutex){+.+.}-{4:4}: [ 67.789287][ T6752] lock_acquire+0x1d1/0x380 [ 67.791248][ T6752] __mutex_lock+0x1a4/0x1bd0 [ 67.792947][ T6752] blkcg_activate_policy+0x34f/0xbf0 [ 67.794916][ T6752] blk_throtl_init+0x39a/0x5b0 [ 67.796600][ T6752] tg_set_conf.isra.0+0x252/0x500 [ 67.798379][ T6752] cgroup_file_write+0x1e6/0x8a0 [ 67.800337][ T6752] kernfs_fop_write_iter+0x3e0/0x5f0 [ 67.802741][ T6752] vfs_write+0x6af/0x1050 [ 67.804558][ T6752] ksys_write+0x12a/0x250 [ 67.806147][ T6752] do_syscall_64+0x123/0x790 [ 67.807806][ T6752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.810148][ T6752] [ 67.810148][ T6752] -> #1 (&q->q_usage_counter(io)#65){++++}-{0:0}: [ 67.812992][ T6752] lock_acquire+0x1d1/0x380 [ 67.814681][ T6752] blk_alloc_queue+0x610/0x790 [ 67.817242][ T6752] __blk_alloc_disk+0xa0/0x170 [ 67.818952][ T6752] zram_add+0x1bf/0x5d0 [ 67.820492][ T6752] zram_init+0x11c/0x160 [ 67.822224][ T6752] do_one_initcall+0x11c/0x6f0 [ 67.823877][ T6752] kernel_init_freeable+0x6ea/0x7b0 [ 67.825602][ T6752] kernel_init+0x21/0x1e0 [ 67.827208][ T6752] ret_from_fork+0x730/0xd60 [ 67.828790][ T6752] ret_from_fork_asm+0x1a/0x30 [ 67.830594][ T6752] [ 67.830594][ T6752] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 67.833008][ T6752] check_prev_add+0xeb/0xe60 [ 67.834639][ T6752] __lock_acquire+0x1528/0x1f40 [ 67.836327][ T6752] lock_acquire+0x1d1/0x380 [ 67.838246][ T6752] fs_reclaim_acquire+0xc4/0x100 [ 67.840029][ T6752] kmem_cache_alloc_noprof+0x63/0x6a0 [ 67.841897][ T6752] __radix_tree_preload+0x333/0x820 [ 67.843696][ T6752] blkg_conf_prep+0x489/0xf10 [ 67.845336][ T6752] tg_set_conf.isra.0+0x1ed/0x500 [ 67.847176][ T6752] cgroup_file_write+0x1e6/0x8a0 [ 67.848947][ T6752] kernfs_fop_write_iter+0x3e0/0x5f0 [ 67.850977][ T6752] vfs_write+0x6af/0x1050 [ 67.852534][ T6752] ksys_write+0x12a/0x250 [ 67.854089][ T6752] do_syscall_64+0x123/0x790 [ 67.855712][ T6752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.857887][ T6752] [ 67.857887][ T6752] other info that might help us debug this: [ 67.857887][ T6752] [ 67.861055][ T6752] Chain exists of: [ 67.861055][ T6752] fs_reclaim --> &q->q_usage_counter(io)#65 --> &q->blkcg_mutex [ 67.861055][ T6752] [ 67.865386][ T6752] Possible unsafe locking scenario: [ 67.865386][ T6752] [ 67.867714][ T6752] CPU0 CPU1 [ 67.869705][ T6752] ---- ---- [ 67.871527][ T6752] lock(&q->blkcg_mutex); [ 67.872937][ T6752] lock(&q->q_usage_counter(io)#65); [ 67.875388][ T6752] lock(&q->blkcg_mutex); [ 67.877728][ T6752] lock(fs_reclaim); [ 67.879088][ T6752] [ 67.879088][ T6752] *** DEADLOCK *** [ 67.879088][ T6752] [ 67.882202][ T6752] locks held by syz.2.231/6752: 6, last CPU#2: [ 67.884132][ T6752] #0: ffff88803e1322b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 67.886968][ T6752] #1: ffff888037d60460 (sb_writers#11){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 67.889895][ T6752] #2: ffff8880574c5c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 67.892913][ T6752] #3: ffff88805a579b48 (kn->active#76){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 67.896112][ T6752] #4: ffff888029b48bb0 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x253/0x410 [ 67.899315][ T6752] #5: ffff888029b48d30 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 [ 67.902018][ T6752] [ 67.902018][ T6752] stack backtrace: [ 67.903835][ T6752] CPU: 2 UID: 0 PID: 6752 Comm: syz.2.231 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.907266][ T6752] Tainted: [L]=SOFTLOCKUP [ 67.908675][ T6752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.912191][ T6752] Call Trace: [ 67.913274][ T6752] [ 67.914228][ T6752] dump_stack_lvl+0x100/0x190 [ 67.915968][ T6752] print_circular_bug.cold+0x178/0x1be [ 67.917916][ T6752] check_noncircular+0x146/0x160 [ 67.919544][ T6752] check_prev_add+0xeb/0xe60 [ 67.921008][ T6752] ? check_noncircular+0x97/0x160 [ 67.922612][ T6752] __lock_acquire+0x1528/0x1f40 [ 67.924160][ T6752] lock_acquire+0x1d1/0x380 [ 67.925692][ T6752] ? kmem_cache_alloc_noprof+0x63/0x6a0 [ 67.927552][ T6752] fs_reclaim_acquire+0xc4/0x100 [ 67.929240][ T6752] ? kmem_cache_alloc_noprof+0x63/0x6a0 [ 67.931023][ T6752] kmem_cache_alloc_noprof+0x63/0x6a0 [ 67.932713][ T6752] ? __radix_tree_preload+0x2f4/0x820 [ 67.934546][ T6752] ? __radix_tree_preload+0x333/0x820 [ 67.936266][ T6752] __radix_tree_preload+0x333/0x820 [ 67.937912][ T6752] blkg_conf_prep+0x489/0xf10 [ 67.939481][ T6752] tg_set_conf.isra.0+0x1ed/0x500 [ 67.941072][ T6752] ? __pfx_tg_set_conf.isra.0+0x10/0x10 [ 67.942823][ T6752] ? kernfs_root+0xf8/0x2a0 [ 67.944266][ T6752] cgroup_file_write+0x1e6/0x8a0 [ 67.945835][ T6752] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 67.947557][ T6752] ? __pfx_cgroup_file_write+0x10/0x10 [ 67.949393][ T6752] ? __kmalloc_noprof+0x350/0x840 [ 67.951098][ T6752] kernfs_fop_write_iter+0x3e0/0x5f0 [ 67.952773][ T6752] ? __pfx_cgroup_file_write+0x10/0x10 [ 67.954495][ T6752] vfs_write+0x6af/0x1050 [ 67.955879][ T6752] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 67.957730][ T6752] ? __pfx_vfs_write+0x10/0x10 [ 67.959297][ T6752] ? find_held_lock+0x2b/0x80 [ 67.960944][ T6752] ksys_write+0x12a/0x250 [ 67.962335][ T6752] ? __pfx_ksys_write+0x10/0x10 [ 67.963883][ T6752] do_syscall_64+0x123/0x790 [ 67.965352][ T6752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.967220][ T6752] RIP: 0033:0x7f70ed39e559 [ 67.968662][ T6752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.974903][ T6752] RSP: 002b:00007f70eb5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.977672][ T6752] RAX: ffffffffffffffda RBX: 00007f70ed625fa0 RCX: 00007f70ed39e559 [ 67.980195][ T6752] RDX: 0000000000000007 RSI: 0000200000000340 RDI: 0000000000000005 [ 67.982580][ T6752] RBP: 00007f70ed435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 67.985061][ T6752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.987699][ T6752] R13: 00007f70ed626038 R14: 00007f70ed625fa0 R15: 00007ffca4482fc8 [ 67.990202][ T6752] [ 68.294152][ T5738] Bluetooth: hci4: command 0x1003 tx timeout [ 68.294269][ T66] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 68.529667][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 68.529679][ T42] audit: type=1400 audit(1792366174.882:485): avc: denied { write } for pid=6762 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.568782][ T42] audit: type=1400 audit(1792366174.922:486): avc: denied { write } for pid=6765 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.533099][ T42] audit: type=1400 audit(1792366175.882:487): avc: denied { write } for pid=6768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.563020][ T42] audit: type=1400 audit(1792366175.912:488): avc: denied { write } for pid=6771 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.179891][ T42] audit: type=1400 audit(1792366176.532:489): avc: denied { write } for pid=6774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.206246][ T42] audit: type=1400 audit(1792366176.562:490): avc: denied { write } for pid=6777 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.999354][ T42] audit: type=1400 audit(1792366177.352:491): avc: denied { write } for pid=6780 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.030123][ T42] audit: type=1400 audit(1792366177.382:492): avc: denied { write } for pid=6783 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.254528][ T50] cfg80211: failed to load regulatory.db [ 71.254895][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.254919][ T1441] ieee802154 phy1 wpan1: encryption failed: -22