last executing test programs: 5.908937197s ago: executing program 2 (id=136): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1f90, @empty}}, 0x24) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1f90, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="c17b5b5785f9e6bb9058629748a7aa1001000001000000010000000000000000"], 0x18}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rxrpc/conns\x00', 0x0, 0x0) read(r3, &(0x7f0000000300), 0x1000) fchown(r0, 0x0, 0xee01) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xa, [0x3, 0x6], 0x1}, 0x10) r4 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = accept4$inet6(r5, &(0x7f0000000580)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000180)=0x6, 0x800) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000480)={r3, &(0x7f0000000380)='proc\x00', 0x161000, &(0x7f00000003c0)={@_ha_fsid={[0xfffffff7, 0x6]}, {0x6, 0xfff8, 0x9, 0x5}}, 0x0, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x9}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000500)={0x9, 0x0, &(0x7f00000004c0)=[r6, r3, r3, r7, r2, r8, r3, r1, r2]}, 0x9) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000540)={0x3, 0x0, [{0x2019bb0f1552dcaa, 0x0, 0x2}, {0xaa6, 0x0, 0x2}, {0xa6c, 0x0, 0x7ff}]}) 5.822989636s ago: executing program 2 (id=137): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000060000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac) 5.820502204s ago: executing program 2 (id=138): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys\x00', 0x1ff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000600)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000000640)=[{{&(0x7f0000000680)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x24000084) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000eb4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f187fc203f787901de99a6a1b", 0xc6}], 0x1}}], 0x1, 0x2090) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000880)="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", 0x54b}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x7ffff003) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$CDROMRESUME(r4, 0x5302) syz_emit_ethernet(0xed, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3a86dd6cf7011e00b72b01fc000000000000000000000000000000ff0200000000000000000000000000012c"], 0x0) 4.932557681s ago: executing program 2 (id=152): r0 = memfd_secret(0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x500, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0xa5edec43aaa83695}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x84}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x3, 0x0, 0x20, 0xa, 0xa}]}]}, 0xa0}}, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f0000000880), &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000980)='./file0\x00') r5 = open(&(0x7f00000009c0)='./file0\x00', 0x1e3342, 0x15b) r6 = creat(&(0x7f0000000a00)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) write$FUSE_INIT(r5, &(0x7f0000000a40)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0x6, 0x10000000, 0x4, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x40, 0x5}}, 0x50) write$P9_RLERROR(r6, &(0x7f0000000ac0)=ANY=[], 0x3f) ioctl$int_in(r5, 0x5452, &(0x7f0000000440)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r7, 0x1269, &(0x7f00000005c0)={0x1, 0x0, 0x98, &(0x7f0000000600)={0x2000, 0x24000, 0x10000e}}) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xa, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) fcntl$getownex(r1, 0x10, &(0x7f0000000480)) open(&(0x7f0000000040)='./file0\x00', 0xa80, 0x0) 4.83289955s ago: executing program 2 (id=153): r0 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f00000003c0)={0x0, "ece87e40023c632c743389e1a465c636258888e050ff6b75d0b1b3652e9b809b9d6d876f206ef0c8bf4aaed4df1c417383d2d6d818e387833a04a39139358ca8", 0x24}, 0x48, 0xfffffffffffffffb) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000440)='.#,[$\x84,\x00', 0x280440, &(0x7f0000000500)={@_ha_fsid={[0x9, 0x2]}, {0xe2d, 0x3, 0x9, 0x7}}, 0x3, &(0x7f0000000540), &(0x7f0000000580)=0x1}) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x23) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000300), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x18a, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @comp={0x1, 0x6, "5a9634", 0x154, 0x6c, 0x1, @private2, @mcast2, {[@hopopts={0x3b}, @fragment={0x2e, 0x0, 0x81, 0x0, 0x0, 0x5, 0x64}, @srh={0x2c, 0x6, 0x4, 0x3, 0x2, 0x8, 0x5, {@ipv4={'\x00', '\xff\xff', @private=0xa010101}, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x17}]}}, @srh={0x87, 0x8, 0x4, 0x3, 0x3, 0x10, 0x9eb, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @mcast1]}}, @routing={0x6, 0x14, 0x1, 0xb, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @local, @remote, @mcast2, @rand_addr=' \x01\x00', @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}, @fragment={0x5e, 0x0, 0xb2, 0x1, 0x0, 0x1, 0x66}, @fragment={0x67, 0x0, 0xc0, 0x1, 0x0, 0x13, 0x68}], {0x33, 0x0, 0x4d3, "c1bf75b055250052"}}}}}}, &(0x7f0000000280)={0x0, 0x2, [0x15d, 0x62c, 0x6d3, 0xd1c]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x25dfdbff, {0x81, 0x0, 0x80}, [@FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x30}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.783114949s ago: executing program 0 (id=155): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x275a, 0x0) syncfs(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060500000000000000000007000000140007800800114000000040080012400000ffff0500010006000800050005000a00000005000400000000000900020073797a310000000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 4.781978359s ago: executing program 0 (id=156): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000ffffffffffffffa0000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac) 4.679719643s ago: executing program 0 (id=157): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000}}}, 0x108) getsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000880), &(0x7f00000008c0)=0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8000000, 'syz1\x00', 0x0}) (async) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r3, 0x8932, &(0x7f0000000080)='veth0') read$FUSE(r2, &(0x7f0000000900)={0x2020}, 0x2020) (async, rerun: 64) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x200, 0x0, 0x3, 0x6c4ba42, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9000000000000000, 0x0, 0x0, 0x5, 0xffffffffffff8001, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x810000000000000, 0x21d, 0x1, 0x0, 0x0, 0x1, 0x3, 0x8000000000000001, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000001, 0x0, 0x10000000000, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000001]}) (rerun: 64) 4.67649351s ago: executing program 0 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0/file0\x00', &(0x7f0000000200)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x125c03, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x989046, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x20000000) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 4.482328815s ago: executing program 2 (id=162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x8008743f, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x19) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x0, 0x1, 0x6, 0x401, 0xfe226735, 0xc000, 0xe9, r6}, 0x20) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r4, 0x5, 0x3}, 0xc) 4.365009575s ago: executing program 32 (id=162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x8008743f, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x19) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x0, 0x1, 0x6, 0x401, 0xfe226735, 0xc000, 0xe9, r6}, 0x20) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r4, 0x5, 0x3}, 0xc) 4.322016798s ago: executing program 0 (id=165): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) recvfrom(r2, 0xffffffffffffffff, 0x0, 0x40010021, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0x80) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r3 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) 4.143018815s ago: executing program 0 (id=166): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000a5000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac) 4.11820063s ago: executing program 33 (id=166): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000a5000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac) 2.562808805s ago: executing program 3 (id=179): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x80, 0x1c, {0x813f, 0x4, 0xa8df, 0x6, 0x1ff, 0x7, 0x4b, 0xdfe, 0x0, 0xeba7, 0x200, 0x80}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmmsg$sock(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="0100000003000000640000000000000000000000000000000000000000000000000000000000000000000000000000000200000001000000020000000100"/72, 0x48}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x5, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 587.997341ms ago: executing program 5 (id=173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x6cd}) (async) r3 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$md_new_array(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net\x00') (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x51) (async) r8 = openat(r4, &(0x7f0000000400)='can/rcvlist_eff\x00', 0x0, 0x0) read(r8, &(0x7f0000000440), 0x1000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x95}, 0x20040000) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r10, 0x891a, &(0x7f0000000800)={'ipvlan0\x00', {0x2, 0x4e24, @rand_addr=0x64010100}}) (async) r11 = openat$md(0xffffffffffffff9c, &(0x7f0000000280)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r11, 0x40480923, &(0x7f00000002c0)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$RUN_ARRAY(r11, 0x400c0930, &(0x7f0000000340)) (async) pwrite64(r11, &(0x7f0000000380)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) (async) ioctl$STOP_ARRAY(r11, 0x932, 0x0) r12 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r10], 0x90}, 0x1, 0x0, 0x0, 0x4000800}, 0xc0) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x4004011}, 0x24004050) recvmsg(r13, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x100) (async) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYRESDEC=r9], 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x90) ioctl$KVM_SET_REGS(r12, 0x4090ae82, 0x0) (async) ioctl$KVM_INTERRUPT(r12, 0x4004ae86, &(0x7f00000001c0)=0x6) 461.96279ms ago: executing program 1 (id=195): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000300)={0x0, 0x800, 0x5, 0xc2a3, 0xe, "0062ba7d8200000016001b000200f705096604"}) r2 = syz_open_pts(r1, 0xa0200) r3 = dup3(r2, r1, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000340)={0x7, 0x4, 0x2, 0x3, 0x16, "e533991cd00ee11a"}) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00') io_setup(0x7, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000400)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x4, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./pipefs\x00', &(0x7f0000000500)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="51e251578851f74182a74b89", 0xc, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000000000/0x400000)=nil) r9 = syz_open_dev$radio(&(0x7f0000000100), 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000000, 0x4008032, 0xffffffffffffffff, 0x97224000) write(r9, &(0x7f00000002c0)="31a97f2e", 0x4) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfe000/0x400000)=nil) r10 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f000086c000/0x400000)=nil) r11 = syz_kvm_add_vcpu$x86(r10, &(0x7f0000000140)={0x0, &(0x7f00000008c0)=[@nested_vmresume={0x130, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @set_irq_handler={0xc8, 0x20, {0x86, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x666, 0x1, 0x511fef4d, 0x4}}, @nested_load_code={0x12e, 0x61, {0x1, "0fc73b360f01df66b8ec000f00d8410f01746c00c401fa5b7100c7442400f3000000c744240200180000c7442406000000000f011c240f07670f188e12904ae90f793166ba410066ed"}}, @wr_crn={0x67, 0x20, {0x0, 0x7}}, @uexit={0x0, 0x18, 0x7}, @nested_amd_invlpga={0x17d, 0x20, {0x1ffe, 0x22b5}}, @nested_load_code={0x12e, 0x59, {0x1, "2e0fc5e61026460f23ca64420f103f3626364c0fc79f07000000430f01c4c483b549d1e0c481f5ecdc0fc77c8104b9800000c00f3235004000000f3066410ffddc"}}, @rdmsr={0x66, 0x18, {0x613}}, @nested_load_code={0x12e, 0x5d, {0x2, "650f78830a00000064430fc77d00c442c5a85f8b66ba610066b8030066ef420f01c4b9250b0000b803000000ba000000000f30f3430f090fc7690044f4410fc7a9e2e3124e"}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0x48b, 0x5}}, @rdmsr={0x66, 0x18, {0x2e9}}, @uexit={0x0, 0x18, 0xf}, @uexit={0x0, 0x18, 0xc4a}, @nested_load_syzos={0x136, 0x58, {0x0, 0xffffffffffffffff, [@in_dx={0x69, 0x20, {0xb528, 0x4}}, @cpuid={0x64, 0x18, {0x3, 0x8}}]}}, @enable_nested={0x12c, 0x18}, @nested_intel_msr_list_add={0x155, 0x30, {0x3, 0x0, 0x2c4, 0x4}}, @wr_drn={0x68, 0x20, {0x6, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x3, 0xffffffffffffffff, 0x1}}, @nested_create_vm={0x12d, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_invlpga={0x17d, 0x20, {0x50000, 0x58c3}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x4, 0x401, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x66, 0x10001}}], 0x447}) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r11, 0x4068aea3, &(0x7f0000000200)={0xc7, 0x0, 0x1}) 456.087256ms ago: executing program 4 (id=196): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000500)={'raw\x00', 0x0, [0xffffffff, 0x7, 0x5, 0x4, 0x4]}, &(0x7f0000000880)=0x54) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x400001}]}, 0x38}}, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ec0), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000f00)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000f40)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=@newtfilter={0x1ac, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff1, 0xb}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x178, 0x2, [@TCA_MATCHALL_ACT={0x174, 0x2, [@m_bpf={0x170, 0x1f, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x14, 0x4, [{0xffff, 0x8, 0x1, 0xd}, {0x5, 0xa3, 0x8, 0x8}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x7014, 0x4, 0x1, 0x9}, {0x8, 0x2, 0x1, 0x8}]}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xa1fb, 0x9, 0x1, 0x8}, {0x31e, 0x3, 0x3, 0x4}]}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1ac}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000001140)={'syzkaller1\x00', 0x1}) write$tun(r3, &(0x7f0000001180)=ANY=[@ANYBLOB="000093009e800002860006000200000108009ed042b10ab306"], 0x2a) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./mnt\x00', 0x149000, 0x19a) lseek(r9, 0x1, 0x4) ioctl$VIDIOC_S_OUTPUT(r9, 0xc004562f, &(0x7f0000000d00)=0x5) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000a40)={'syzkaller0\x00', 0x7101}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000d40), 0x4903, 0x0) ioctl$CDROMVOLCTRL(r11, 0x31f, &(0x7f0000000d80)={0xb0, 0x7, 0x7, 0x3}) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000ac0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r13, {0x4}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) 341.601093ms ago: executing program 3 (id=197): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$vsock_diag(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x14, 0x100, 0x70bd2b, 0x25dfdbff, {0x28, 0x0, 0x0, 0xba}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x24080004) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f00000002c0)="a2ee21aee0a83fa800c7aed3b9f538c2b28ef9675ba9942338ec9e4f46b5a0fba9b85e60332d9e80f5c0c440da6701", &(0x7f0000000300), &(0x7f0000000340)="2707265d2fec205ef56f9d4b2f03c9c09d8ecc2e6dc8e094171ee935c4a44bcad0d94b36930a15eede1ff300e9668c2aa10e1e1bff86d569f898b42b6c7ae5f1967c73fe898b534972fedfef51", &(0x7f00000003c0)="01cf349280e35a9243062a95908240186fb6fae5b275413296a3625819fb57299f073234848017c13e", 0x1, r0, 0x8ae9c7ece7c3c23b}, 0x38) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(r1, &(0x7f0000000100)='1', 0x1) 340.663824ms ago: executing program 1 (id=198): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=[{0x5, 0x2, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000013, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 282.237854ms ago: executing program 1 (id=199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f000000c340)={0x1, &(0x7f000000c380)=[{0x6, 0x0, 0x0, 0x7fff0800}]}) r3 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000040)={0x0, 0x1c3f, 0x0, 0x2, 0x2bf}, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000007c0)=r5, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4db, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000680)=[0x0, 0xee00]) read$msr(r6, &(0x7f00000006c0)=""/43, 0x2b) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) 202.604066ms ago: executing program 3 (id=200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e000000000000000000000000000000611800000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000001d0802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async) r3 = openat$macvtap(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000380)={'veth1_to_team\x00'}) (async, rerun: 32) r4 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x464, 0x2, 0x70bd27, 0xe18, "db99a6998f4a01960d92fd76e7479720e440b3e3cb102577d5598a13c4c2a593b7967564ea5ef0e9fec53b1de705a521a0a17cbcd5", ["", "", "", "", "", "", "", ""]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x6008001) 202.173917ms ago: executing program 1 (id=201): syz_open_dev$vbi(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007c00)=[{{&(0x7f0000001440)=@nfc, 0x80, &(0x7f00000037c0)=[{&(0x7f00000014c0)=""/151, 0x97}, {&(0x7f0000001580)=""/216, 0xd8}, {&(0x7f0000001680)=""/199, 0xc7}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/48, 0x30}, {&(0x7f00000027c0)=""/4096, 0x1000}], 0x6}, 0x2}, {{0x0, 0x0, &(0x7f0000006b40)=[{&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000004840)=""/1, 0x1}, {&(0x7f0000004880)=""/144, 0x90}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/4096, 0x1000}, {&(0x7f0000006940)=""/171, 0xab}, {&(0x7f0000006a00)=""/15, 0xf}, {&(0x7f0000006a40)=""/115, 0x73}, {&(0x7f0000006ac0)=""/76, 0x4c}], 0x9, &(0x7f0000006c00)=""/4096, 0x1000}, 0x80000000}], 0x2, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=ANY=[@ANYBLOB="4400000010000305000000404900000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c000280050003000d00000008000500", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x40000) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0400000000000000280012800e00010083703665727370616e0000001400028008000400000000200600020030000000"], 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/filesystems\x00', 0x28100, 0x0) read(r4, &(0x7f0000000300)=""/4096, 0x1000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 202.021353ms ago: executing program 4 (id=202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) truncate(&(0x7f0000000300)='./file0\x00', 0xcca) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c00000400428014000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) socket(0x2b, 0x80801, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x5c}}, 0x0) 201.870337ms ago: executing program 3 (id=203): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xd) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000020}, 0x48092) r2 = socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0xee01, r3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@can_newroute={0x44, 0x18, 0x1, 0x8ba, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x5, 0x1, 0x0, 0x0, "000000560300"}, 0x1}}, @CGW_MOD_UID={0x8, 0xe, r3}, @CGW_DST_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, 0xee01}]}, 0x44}}, 0x880) 118.080162ms ago: executing program 4 (id=204): unshare(0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@filename='mtd0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000840)='./file0\x00') mknodat$md(0xffffffffffffff9c, &(0x7f0000000880)='./md0\x00', 0x6180, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x128, 0x1170, 0x1398, 0x128, 0x1170, 0x2b0, 0x1398, 0x1398, 0x2b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [0xffffffff], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {}, 0x2b, 0x3b, 0x3}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x2, 0x9, 0x7}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x0, 0x0, 0x0, 0x0, @loopback, @private0, @loopback, [0x0, 0x0, 0x0, 0xff], [], [0xffffff, 0x0, 0xff000000], 0x0, 0x803}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x43c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private1}}, &(0x7f0000000100)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) mount$pvfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x802, &(0x7f0000000240)={[{}, {':}.]'}], [{@smackfshat={'smackfshat', 0x3d, '-)-$[\x89.,'}}, {@smackfsdef={'smackfsdef', 0x3d, ')\xe0.-/(,:S'}}, {@fsname={'fsname', 0x3d, '&})}#^,'}}, {@obj_user={'obj_user', 0x3d, '^[)\\'}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@context={'context', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_gt={'uid>', r4}}, {@smackfshat={'smackfshat', 0x3d, '\x18\x06\r\xd7\x00\x0e\x00'}}]}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_socket_connect_nvme_tcp() syz_clone(0x11a88b100, 0x0, 0x0, 0x0, 0x0, 0x0) 117.100304ms ago: executing program 1 (id=205): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x3000000, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs/dynamic_events\x00', 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)='#', 0x1}, {&(0x7f00000000c0)="703acb93f7ccd8331b2019", 0xb}], 0x2) ioctl$TCFLSH(r0, 0x540b, 0x0) 115.544209ms ago: executing program 1 (id=206): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000340)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104"], 0x48}}, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$DVD_AUTH(r0, 0x5392, &(0x7f0000000140)=@type=0xa) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0xfd, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000700)=r4, 0x4) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="54000000070601bbc01cf9e164fdd0c97195ec08"], 0x14}}, 0x40000) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000480)={0x8, 0x202, 0x1, 0xffffffff, 0x1}, &(0x7f00000004c0)=0x10) setsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(r7, 0x84, 0x85, &(0x7f0000000500)={r8, @in6={{0xa, 0x4e23, 0x400, @empty, 0x7ff}}, 0xfffffff7}, 0x90) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x298203, 0x15d) write(r9, &(0x7f0000000400)='1', 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) 60.739116ms ago: executing program 4 (id=207): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000c80)=0xffdffff8, 0x4) bind$inet6(r1, &(0x7f0000000cc0)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000d00)={0xa, 0x4e20, 0x23e, @empty}, 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000d40)) r2 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='statm\x00') pread64(r3, &(0x7f00000001c0)=""/15, 0xf, 0x4) ioctl$CDROMREADMODE1(r3, 0x530d, &(0x7f0000000200)={0x4, 0x4, 0x3e, 0xdc, 0x10, 0xc3}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000150081054e81f782db44b9040a1d3b020a000000040000a11800020000e9400084150e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6e94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad9561b4a29c828f6a3aa2fcf72baa7ea67e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a753916647f616b762439deec51", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) 60.442028ms ago: executing program 3 (id=208): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r2) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c80)={0x2c, r4, 0x5872f73e48181a1, 0xb6, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x48880) sendmsg$nl_route(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036746e6c300000000000000000001c0012800b000100697036746e6c00000c00028006000f0002"], 0x50}}, 0x0) r5 = memfd_create(&(0x7f0000001500)='\x00', 0x5) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000019c0)={r5, 0x1, 0x8000, 0x4000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b00), 0x102, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000001b40)=0x3) write$FUSE_DIRENT(r7, &(0x7f0000001b80)=ANY=[], 0x128) read(r7, &(0x7f0000001bc0)=""/21, 0x15) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7004fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x400b4) recvmmsg(r6, &(0x7f00000018c0)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000001400)=[{&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f0000000200)=""/75, 0x4b}, {&(0x7f0000000280)=""/113, 0x71}, {&(0x7f0000000300)=""/144, 0x90}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/14, 0xe}], 0x6}, 0xada1}, {{&(0x7f0000001480)=@x25, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000001540)=""/35, 0x23}, 0x84}, {{&(0x7f0000001580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001600)=""/218, 0xda}, {&(0x7f0000001700)=""/80, 0x50}], 0x2, &(0x7f00000017c0)=""/207, 0xcf}, 0xa62}], 0x3, 0x40000000, &(0x7f0000001980)) 2.797127ms ago: executing program 4 (id=209): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021005020202004ff94b69883d1253b139fcf8fc2ecc52149fd87c73455d4163cd40e0ce527e5969ce0146c27cefd36c23b77f9b2ba7bb800fdfe80a5cc07efeae"], 0x10}}, 0x20000000) 2.222325ms ago: executing program 3 (id=210): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./upper\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./lower/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f0000000bc0)='./mnt\x00', &(0x7f0000000c00)='overlay\x00', 0x0, &(0x7f0000000c40)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000cc0)='./mnt/file1\x00', 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth1_macvtap\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}) umount2(&(0x7f0000000d00)='./mnt\x00', 0x0) mount(0x0, &(0x7f0000000d40)='./mnt\x00', &(0x7f0000000d80)='overlay\x00', 0x0, &(0x7f0000000dc0)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') write(r0, &(0x7f0000000040)="2eadf7fff462caf9bcc68b7782d79b74c01afafd13cadaca58d3050f200945be4397ababb24a96e0ee9d6159cd608a8bba74e1b9a95d72f250990b36bc1ae18910683130d62e1aa76d58d1303a6ab4c66fe07b131e7c434d9ffa29bcfb58ddc16317b0433413d552db24d7beae77de21e0d2cc2c357ed255b9201db3e3ce809d742b0cba832f615d0f35ad224924d0de7f1d422a0001f9f3fdb1e7e3de383e09", 0xa0) 0s ago: executing program 4 (id=211): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8000, 0x4, 0x8, 0x8, 0x80, 0x3c, 0x81, 0x2}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x100, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x200, 0x7) ptrace$getregs(0xc, r1, 0x4, &(0x7f00000002c0)=""/202) 0s ago: executing program 3 (id=212): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e63925789381db3fe455e8dadc7dcf81189517730bed5d8036168bd2e27cc611027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc506c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7964a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40000033, r0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x141a82, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r0, r2, 0x0, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000229bd7000fddbdf2557000000060095000600000006009500ffff000006009500060000000600950007000000060095000500000006009500000000000600950001fc0000060095000b0000000600950000010000"], 0x5c}, 0x1, 0x0, 0x0, 0x814}, 0x0) kernel console output (not intermixed with test programs): [ 71.464674][ T25] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:27420' (ED25519) to the list of known hosts. [ 363.534872][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 363.534897][ T43] audit: type=1400 audit(1794328330.782:138): avc: denied { name_bind } for pid=5826 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 363.560162][ T43] audit: type=1400 audit(1794328330.802:139): avc: denied { execute } for pid=5827 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 363.560812][ T43] audit: type=1400 audit(1794328330.802:140): avc: denied { execute_no_trans } for pid=5827 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 365.614252][ T43] audit: type=1400 audit(1794328332.862:141): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 365.617457][ T43] audit: type=1400 audit(1794328332.862:142): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 365.618706][ T5827] cgroup: Unknown subsys name 'net' [ 365.621831][ T43] audit: type=1400 audit(1794328332.862:143): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 365.806358][ T5827] cgroup: Unknown subsys name 'cpuset' [ 365.812979][ T5827] cgroup: Unknown subsys name 'rlimit' [ 365.973364][ T43] audit: type=1400 audit(1794328333.222:144): avc: denied { setattr } for pid=5827 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 365.973727][ T43] audit: type=1400 audit(1794328333.222:145): avc: denied { create } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 365.973926][ T43] audit: type=1400 audit(1794328333.222:146): avc: denied { write } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 365.974165][ T43] audit: type=1400 audit(1794328333.222:147): avc: denied { read } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 366.023115][ T5831] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 366.692252][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 369.572005][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 369.572023][ T43] audit: type=1400 audit(1794328336.822:154): avc: denied { execmem } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 369.806249][ T43] audit: type=1400 audit(1794328337.052:155): avc: denied { create } for pid=5837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 369.806435][ T43] audit: type=1400 audit(1794328337.052:156): avc: denied { read write } for pid=5837 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 369.806798][ T43] audit: type=1400 audit(1794328337.052:157): avc: denied { open } for pid=5837 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 369.814266][ T43] audit: type=1400 audit(1794328337.062:158): avc: denied { ioctl } for pid=5837 comm="syz-executor" path="socket:[6988]" dev="sockfs" ino=6988 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 369.825451][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.826442][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.826856][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.828382][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.828925][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.833683][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 369.834980][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 369.836948][ T43] audit: type=1400 audit(1794328337.082:159): avc: denied { read } for pid=5837 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 369.837163][ T43] audit: type=1400 audit(1794328337.082:160): avc: denied { open } for pid=5837 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 369.841650][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 369.844191][ T43] audit: type=1400 audit(1794328337.082:161): avc: denied { mounton } for pid=5837 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 369.844373][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.845788][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 369.846026][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.846339][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.846474][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 369.847511][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.847756][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.848440][ T43] audit: type=1400 audit(1794328337.092:162): avc: denied { module_request } for pid=5837 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 369.853925][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 369.862416][ T5142] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 369.865266][ T5142] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.865606][ T43] audit: type=1400 audit(1794328337.112:163): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 369.867386][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.868071][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.048140][ T5837] rxe_eth0 speed is unknown, defaulting to 1000 [ 370.048982][ T5837] rxe_eth0 speed is unknown, defaulting to 1000 [ 370.049344][ T5846] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 370.050200][ T5837] rxe_eth0 speed is unknown, defaulting to 1000 [ 370.073764][ T5841] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 370.073899][ T5842] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 370.135990][ T5837] infiniband rxe0: set active [ 370.136183][ T5837] infiniband rxe0: added rxe_eth0 [ 370.136838][ T1355] rxe_eth0 speed is unknown, defaulting to 1000 [ 370.150818][ T5837] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 370.150838][ T5837] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 370.150858][ T5837] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 370.174008][ T5837] RDS/IB: rxe0: added [ 370.174206][ T5837] smc: adding ib device rxe0 with port count 1 [ 370.174242][ T5837] smc: ib device rxe0 port 1 has no pnetid [ 370.182048][ T11] rxe_eth0 speed is unknown, defaulting to 1000 [ 370.193635][ T5837] rxe_eth0 speed is unknown, defaulting to 1000 [ 370.262435][ T5812] rxe_eth0 speed is unknown, defaulting to 1000 [ 370.264774][ T30] rxe_eth0 speed is unknown, defaulting to 1000 [ 370.324918][ T5837] rxe_eth0 speed is unknown, defaulting to 1000 [ 370.407521][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.407570][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.407661][ T5846] bridge_slave_0: entered allmulticast mode [ 370.408438][ T5846] bridge_slave_0: entered promiscuous mode [ 370.412815][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.412857][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.412910][ T5846] bridge_slave_1: entered allmulticast mode [ 370.413541][ T5846] bridge_slave_1: entered promiscuous mode [ 370.426770][ T5837] rxe_eth0 speed is unknown, defaulting to 1000 [ 370.427167][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.427209][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.427388][ T5842] bridge_slave_0: entered allmulticast mode [ 370.428431][ T5842] bridge_slave_0: entered promiscuous mode [ 370.453707][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.453751][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.453895][ T5842] bridge_slave_1: entered allmulticast mode [ 370.454605][ T5842] bridge_slave_1: entered promiscuous mode [ 370.488665][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.489904][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.498946][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.498990][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.499138][ T5841] bridge_slave_0: entered allmulticast mode [ 370.499838][ T5841] bridge_slave_0: entered promiscuous mode [ 370.502224][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.503209][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.503336][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.503406][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.503863][ T5841] bridge_slave_1: entered allmulticast mode [ 370.505135][ T5841] bridge_slave_1: entered promiscuous mode [ 370.563242][ T5842] team0: Port device team_slave_0 added [ 370.565143][ T5842] team0: Port device team_slave_1 added [ 370.566379][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.568495][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.569367][ T5846] team0: Port device team_slave_0 added [ 370.585872][ T5846] team0: Port device team_slave_1 added [ 370.597252][ T5837] rxe_eth0 speed is unknown, defaulting to 1000 [ 370.605595][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.605605][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.605663][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.606946][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.606954][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.606965][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.620521][ T5841] team0: Port device team_slave_0 added [ 370.622715][ T5841] team0: Port device team_slave_1 added [ 370.623083][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.623091][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.623102][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.623951][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.623958][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.623969][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.653044][ T5842] hsr_slave_0: entered promiscuous mode [ 370.653558][ T5842] hsr_slave_1: entered promiscuous mode [ 370.664993][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.665006][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.665025][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.683260][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.683270][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.683282][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.710043][ T5846] hsr_slave_0: entered promiscuous mode [ 370.710794][ T5846] hsr_slave_1: entered promiscuous mode [ 370.711404][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 370.711415][ T5846] Cannot create hsr debugfs directory [ 370.765721][ T5841] hsr_slave_0: entered promiscuous mode [ 370.766188][ T5841] hsr_slave_1: entered promiscuous mode [ 370.766471][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 370.766479][ T5841] Cannot create hsr debugfs directory [ 370.979646][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 370.984791][ T5842] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 370.985392][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 370.987583][ T5842] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 370.988480][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 370.991129][ T5842] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 370.992321][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 370.996182][ T5842] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 371.057032][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.057085][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.057300][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.057368][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.059355][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 371.060903][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 371.071422][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 371.074505][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 371.074994][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 371.077900][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 371.099670][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 371.102053][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 371.127714][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.127813][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.127961][ T5837] bridge_slave_0: entered allmulticast mode [ 371.128640][ T5837] bridge_slave_0: entered promiscuous mode [ 371.143416][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.143474][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.143524][ T5837] bridge_slave_1: entered allmulticast mode [ 371.144311][ T5837] bridge_slave_1: entered promiscuous mode [ 371.168751][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 371.170506][ T5841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 371.170913][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 371.174166][ T5841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 371.175525][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.175569][ T5846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.175738][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.175809][ T5846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.182214][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.183632][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.183657][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 371.186252][ T5841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 371.187020][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 371.190252][ T5841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 371.217669][ T5837] team0: Port device team_slave_0 added [ 371.222924][ T5837] team0: Port device team_slave_1 added [ 371.224529][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.226072][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.228475][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.230680][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.271749][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.271760][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.271793][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.273423][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.273430][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.273441][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.312439][ T5837] hsr_slave_0: entered promiscuous mode [ 371.312928][ T5837] hsr_slave_1: entered promiscuous mode [ 371.313219][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 371.313228][ T5837] Cannot create hsr debugfs directory [ 371.323987][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.405846][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.412261][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.431990][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.432039][ T5860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.447557][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.447643][ T5860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.449628][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.469581][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.469644][ T5860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.482477][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.483680][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.483722][ T5860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.507999][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 371.509706][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 371.510351][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 371.512791][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 371.519891][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 371.525945][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 371.526771][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 371.528658][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 371.535243][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.546482][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.546526][ T5860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.558810][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.558855][ T5860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.648858][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.666097][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.677062][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.677136][ T5854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.681844][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.681926][ T5856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.711962][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.815251][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.822469][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.856189][ T5842] veth0_vlan: entered promiscuous mode [ 371.860238][ T5846] veth0_vlan: entered promiscuous mode [ 371.863443][ T5839] Bluetooth: hci0: command tx timeout [ 371.864583][ T5842] veth1_vlan: entered promiscuous mode [ 371.866751][ T5846] veth1_vlan: entered promiscuous mode [ 371.872976][ T5839] Bluetooth: hci1: command tx timeout [ 371.897065][ T5846] veth0_macvtap: entered promiscuous mode [ 371.904924][ T5846] veth1_macvtap: entered promiscuous mode [ 371.907784][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.912666][ T5842] veth0_macvtap: entered promiscuous mode [ 371.914520][ T5842] veth1_macvtap: entered promiscuous mode [ 371.926401][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.933655][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.935482][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.941383][ T5839] Bluetooth: hci2: command tx timeout [ 371.941618][ T5839] Bluetooth: hci3: command tx timeout [ 371.946944][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.955097][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.985680][ T5841] veth0_vlan: entered promiscuous mode [ 372.006091][ T5841] veth1_vlan: entered promiscuous mode [ 372.045917][ T5965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.045929][ T5965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.066284][ T5965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.066303][ T5965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.070088][ T5837] veth0_vlan: entered promiscuous mode [ 372.093849][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.093865][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.100841][ T5854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.100856][ T5854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.103853][ T5837] veth1_vlan: entered promiscuous mode [ 372.113953][ T5841] veth0_macvtap: entered promiscuous mode [ 372.115880][ T5841] veth1_macvtap: entered promiscuous mode [ 372.141524][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.142936][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.149637][ T5837] veth0_macvtap: entered promiscuous mode [ 372.153337][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.159081][ T5837] veth1_macvtap: entered promiscuous mode [ 372.164927][ T5947] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.205397][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.215336][ T5842] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 372.216124][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.246525][ T5856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.246541][ T5856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.274772][ T506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.274786][ T506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.309360][ T506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.309374][ T506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.311507][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.311530][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.311546][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.311562][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.311578][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.311595][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.311611][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.311632][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.311655][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.311678][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.311699][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.311722][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.311745][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.311792][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.328912][ T5856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.328929][ T5856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.468479][ T6027] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 372.491228][ T6032] Zero length message leads to an empty skb [ 372.500180][ T6033] program syz.0.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 372.507254][ T6036] netlink: 'syz.3.7': attribute type 4 has an invalid length. [ 372.507322][ T6036] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7'. [ 372.568138][ T6046] bridge_slave_1: left allmulticast mode [ 372.568162][ T6046] bridge_slave_1: left promiscuous mode [ 372.568354][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.574279][ T6046] bridge_slave_0: left allmulticast mode [ 372.574302][ T6046] bridge_slave_0: left promiscuous mode [ 372.574457][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.651585][ T6052] netlink: 'syz.2.11': attribute type 16 has an invalid length. [ 372.651603][ T6052] netlink: 'syz.2.11': attribute type 17 has an invalid length. [ 372.688623][ T6052] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 372.777664][ T6055] syzkaller0: entered promiscuous mode [ 372.777681][ T6055] syzkaller0: entered allmulticast mode [ 372.782068][ T6055] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 372.782079][ T6055] syzkaller0: Linktype set failed because interface is up [ 373.555342][ T6059] netlink: 112 bytes leftover after parsing attributes in process `syz.2.13'. [ 373.791206][ T6066] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 373.941864][ T5839] Bluetooth: hci1: command tx timeout [ 373.941897][ T5839] Bluetooth: hci0: command tx timeout [ 373.955614][ T6069] ======================================================= [ 373.955614][ T6069] WARNING: The mand mount option has been deprecated and [ 373.955614][ T6069] and is ignored by this kernel. Remove the mand [ 373.955614][ T6069] option from the mount to silence this warning. [ 373.955614][ T6069] ======================================================= [ 374.022348][ T5847] Bluetooth: hci2: command tx timeout [ 374.032244][ T5847] Bluetooth: hci3: command tx timeout [ 374.119023][ T6079] syz_tun: entered allmulticast mode [ 374.126399][ T6078] syz_tun: left allmulticast mode [ 374.147706][ T506] IPVS: starting estimator thread 0... [ 374.182079][ T6089] FAULT_INJECTION: forcing a failure. [ 374.182079][ T6089] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 374.182100][ T6089] CPU: 3 UID: 0 PID: 6089 Comm: syz.3.24 Not tainted syzkaller #0 PREEMPT(full) [ 374.182111][ T6089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 374.182131][ T6089] Call Trace: [ 374.182138][ T6089] [ 374.182146][ T6089] dump_stack_lvl+0x100/0x190 [ 374.182180][ T6089] should_fail_ex.cold+0x5/0xa [ 374.182207][ T6089] should_fail_alloc_page+0xeb/0x140 [ 374.182231][ T6089] prepare_alloc_pages+0x1f0/0x5b0 [ 374.182257][ T6089] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 374.182277][ T6089] ? is_bpf_text_address+0x8a/0x1a0 [ 374.182290][ T6089] ? lock_release+0x24d/0x310 [ 374.182303][ T6089] ? bpf_ksym_find+0x128/0x1c0 [ 374.182317][ T6089] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 374.182333][ T6089] ? is_bpf_text_address+0x94/0x1a0 [ 374.182345][ T6089] ? kernel_text_address+0x8d/0x100 [ 374.182357][ T6089] ? __kernel_text_address+0xd/0x30 [ 374.182368][ T6089] ? unwind_get_return_address+0x59/0xa0 [ 374.182379][ T6089] ? arch_stack_walk+0xa6/0xf0 [ 374.182395][ T6089] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 374.182418][ T6089] ? stack_trace_save+0x8e/0xc0 [ 374.182437][ T6089] ? __pfx_stack_trace_save+0x10/0x10 [ 374.182472][ T6089] ? add_lock_to_list+0x9d/0x1d0 [ 374.182519][ T6089] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 374.182550][ T6089] ? policy_nodemask+0xed/0x5e0 [ 374.182574][ T6089] alloc_pages_mpol+0x201/0x560 [ 374.182595][ T6089] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 374.182623][ T6089] alloc_pages_noprof+0x1a/0x160 [ 374.182647][ T6089] get_free_pages_noprof+0x10/0xb0 [ 374.182663][ T6089] __kasan_populate_vmalloc+0xa0/0x210 [ 374.182686][ T6089] alloc_vmap_area+0x963/0x2bc0 [ 374.182712][ T6089] ? kasan_save_track+0x14/0x30 [ 374.182728][ T6089] ? __kasan_kmalloc+0xaa/0xb0 [ 374.182746][ T6089] ? __pfx_alloc_vmap_area+0x10/0x10 [ 374.182764][ T6089] ? __get_vm_area_node+0x124/0x350 [ 374.182783][ T6089] __get_vm_area_node+0x1ed/0x350 [ 374.182807][ T6089] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 374.182829][ T6089] ? alloc_ldt_struct+0x14f/0x1b0 [ 374.182853][ T6089] ? do_syscall_64+0x123/0x7b0 [ 374.182874][ T6089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.182899][ T6089] ? alloc_ldt_struct+0x14f/0x1b0 [ 374.182930][ T6089] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 374.182957][ T6089] ? alloc_ldt_struct+0x14f/0x1b0 [ 374.182978][ T6089] __vmalloc_node_noprof+0xad/0xf0 [ 374.182996][ T6089] ? alloc_ldt_struct+0x14f/0x1b0 [ 374.183021][ T6089] __vmalloc_noprof+0xa3/0x120 [ 374.183038][ T6089] ? __pfx___vmalloc_noprof+0x10/0x10 [ 374.183060][ T6089] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 374.183083][ T6089] ? down_write_killable+0x14d/0x240 [ 374.183107][ T6089] ? alloc_ldt_struct+0x5d/0x1b0 [ 374.183134][ T6089] alloc_ldt_struct+0x14f/0x1b0 [ 374.183157][ T6089] write_ldt+0x62b/0xd40 [ 374.183182][ T6089] ? __pfx_write_ldt+0x10/0x10 [ 374.183208][ T6089] ? xfd_validate_state+0x129/0x190 [ 374.183235][ T6089] __x64_sys_modify_ldt+0xb1/0x170 [ 374.183259][ T6089] do_syscall_64+0x123/0x7b0 [ 374.183282][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.183300][ T6089] RIP: 0033:0x7f611a9a8f19 [ 374.183316][ T6089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.183333][ T6089] RSP: 002b:00007f611b7cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 374.183351][ T6089] RAX: ffffffffffffffda RBX: 00007f611ac25fa0 RCX: 00007f611a9a8f19 [ 374.183363][ T6089] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000001 [ 374.183373][ T6089] RBP: 00007f611aa37f6d R08: 0000000000000000 R09: 0000000000000000 [ 374.183384][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.183395][ T6089] R13: 00007f611ac26038 R14: 00007f611ac25fa0 R15: 00007ffc1237d478 [ 374.183421][ T6089] [ 374.183698][ T6089] syz.3.24: vmalloc error: size 65536, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 374.183861][ T6089] CPU: 3 UID: 0 PID: 6089 Comm: syz.3.24 Not tainted syzkaller #0 PREEMPT(full) [ 374.183883][ T6089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 374.183893][ T6089] Call Trace: [ 374.183899][ T6089] [ 374.183905][ T6089] dump_stack_lvl+0x100/0x190 [ 374.183935][ T6089] warn_alloc.cold+0x9e/0xb2 [ 374.183955][ T6089] ? __pfx_warn_alloc+0x10/0x10 [ 374.183977][ T6089] ? lockdep_hardirqs_on+0x7d/0x110 [ 374.183999][ T6089] ? __get_vm_area_node+0x2f0/0x350 [ 374.184022][ T6089] ? __get_vm_area_node+0x22b/0x350 [ 374.184045][ T6089] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 374.184065][ T6089] ? do_syscall_64+0x123/0x7b0 [ 374.184083][ T6089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.184108][ T6089] ? alloc_ldt_struct+0x14f/0x1b0 [ 374.184138][ T6089] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 374.184166][ T6089] ? alloc_ldt_struct+0x14f/0x1b0 [ 374.184187][ T6089] __vmalloc_node_noprof+0xad/0xf0 [ 374.184205][ T6089] ? alloc_ldt_struct+0x14f/0x1b0 [ 374.184229][ T6089] __vmalloc_noprof+0xa3/0x120 [ 374.184247][ T6089] ? __pfx___vmalloc_noprof+0x10/0x10 [ 374.184265][ T6089] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 374.184291][ T6089] ? down_write_killable+0x14d/0x240 [ 374.184314][ T6089] ? alloc_ldt_struct+0x5d/0x1b0 [ 374.184340][ T6089] alloc_ldt_struct+0x14f/0x1b0 [ 374.184363][ T6089] write_ldt+0x62b/0xd40 [ 374.184393][ T6089] ? __pfx_write_ldt+0x10/0x10 [ 374.184420][ T6089] ? xfd_validate_state+0x129/0x190 [ 374.184451][ T6089] __x64_sys_modify_ldt+0xb1/0x170 [ 374.184485][ T6089] do_syscall_64+0x123/0x7b0 [ 374.184507][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.184523][ T6089] RIP: 0033:0x7f611a9a8f19 [ 374.184539][ T6089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.184556][ T6089] RSP: 002b:00007f611b7cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 374.184573][ T6089] RAX: ffffffffffffffda RBX: 00007f611ac25fa0 RCX: 00007f611a9a8f19 [ 374.184586][ T6089] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000001 [ 374.184598][ T6089] RBP: 00007f611aa37f6d R08: 0000000000000000 R09: 0000000000000000 [ 374.184609][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.184620][ T6089] R13: 00007f611ac26038 R14: 00007f611ac25fa0 R15: 00007ffc1237d478 [ 374.184647][ T6089] [ 374.184655][ T6089] Mem-Info: [ 374.184664][ T6089] active_anon:7597 inactive_anon:0 isolated_anon:0 [ 374.184664][ T6089] active_file:0 inactive_file:55094 isolated_file:0 [ 374.184664][ T6089] unevictable:1000 dirty:1800 writeback:0 [ 374.184664][ T6089] slab_reclaimable:12731 slab_unreclaimable:67806 [ 374.184664][ T6089] mapped:24177 shmem:1557 pagetables:1146 [ 374.184664][ T6089] sec_pagetables:299 bounce:0 [ 374.184664][ T6089] kernel_misc_reclaimable:0 [ 374.184664][ T6089] free:455233 free_pcp:16680 free_cma:0 [ 374.184708][ T6089] Node 0 active_anon:30388kB inactive_anon:0kB active_file:0kB inactive_file:220164kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:96708kB dirty:7192kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12608kB pagetables:4392kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 374.184751][ T6089] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 374.184791][ T6089] Node 0 DMA free:15360kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 374.184839][ T6089] lowmem_reserve[]: 0 1201 1201 1201 1201 [ 374.184868][ T6089] Node 0 DMA32 free:157520kB boost:0kB min:27064kB low:33828kB high:40592kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30388kB inactive_anon:0kB active_file:0kB inactive_file:220164kB unevictable:2000kB writepending:7192kB zspages:0kB present:2080628kB managed:1230580kB mlocked:0kB bounce:0kB free_pcp:63460kB local_pcp:15908kB free_cma:0kB [ 374.184916][ T6089] lowmem_reserve[]: 0 0 0 0 0 [ 374.184942][ T6089] Node 1 Normal free:1648052kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:2000kB writepending:8kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:3260kB local_pcp:564kB free_cma:0kB [ 374.184987][ T6089] lowmem_reserve[]: 0 0 0 0 0 [ 374.185016][ T6089] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 374.185144][ T6089] Node 0 DMA32: 2*4kB (UM) 1*8kB (M) 2*16kB (UE) 1*32kB (U) 2*64kB (UE) 1*128kB (E) 2*256kB (UM) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (E) 37*4096kB (UM) = 157520kB [ 374.185282][ T6089] Node 1 Normal: 1*4kB (M) 1*8kB (U) 2*16kB (UM) 4*32kB (UM) 4*64kB (UM) 4*128kB (UM) 0*256kB 5*512kB (UM) 0*1024kB 1*2048kB (M) 401*4096kB (M) = 1648044kB [ 374.185408][ T6089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 374.185422][ T6089] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 374.185435][ T6089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 374.185447][ T6089] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 374.185467][ T6089] 56647 total pagecache pages [ 374.185512][ T6089] 0 pages in swap cache [ 374.185518][ T6089] Free swap = 124996kB [ 374.185525][ T6089] Total swap = 124996kB [ 374.185533][ T6089] 1048443 pages RAM [ 374.185539][ T6089] 0 pages HighMem/MovableOnly [ 374.185545][ T6089] 291488 pages reserved [ 374.185552][ T6089] 0 pages cma reserved [ 374.189236][ T6089] CIFS: Attempting to mount //127.0.0.1/share [ 374.192280][ T5947] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV [ 374.192297][ T5947] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 374.193294][ T6089] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:5445 failed: -ENODEV [ 374.194992][ T5947] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV [ 374.195005][ T5947] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 374.195029][ T6089] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:445 failed: -ENODEV [ 374.195622][ T6091] capability: warning: `syz.2.25' uses deprecated v2 capabilities in a way that may be insecure [ 374.195733][ T6089] CIFS: VFS: cifs_mount failed w/return code = -2 [ 374.200632][ T6091] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 374.200652][ T6091] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 374.200791][ T6091] overlayfs: failed to set uuid (11/file2, err=-13); falling back to uuid=null. [ 374.241526][ T6085] IPVS: using max 45 ests per chain, 108000 per kthread [ 374.412263][ T6109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=6109 comm=syz.1.32 [ 374.584477][ T43] kauditd_printk_skb: 137 callbacks suppressed [ 374.584490][ T43] audit: type=1400 audit(1794328341.832:301): avc: denied { read } for pid=6131 comm="syz.2.38" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 374.584664][ T43] audit: type=1400 audit(1794328341.832:302): avc: denied { open } for pid=6131 comm="syz.2.38" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 374.586903][ T43] audit: type=1400 audit(1794328341.832:303): avc: denied { ioctl } for pid=6131 comm="syz.2.38" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 374.639069][ T43] audit: type=1400 audit(1794328341.882:304): avc: denied { read } for pid=6131 comm="syz.2.38" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 374.639335][ T43] audit: type=1400 audit(1794328341.882:305): avc: denied { open } for pid=6131 comm="syz.2.38" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 374.641771][ T43] audit: type=1400 audit(1794328341.882:306): avc: denied { create } for pid=6131 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 374.643297][ T43] audit: type=1400 audit(1794328341.882:307): avc: denied { write } for pid=6131 comm="syz.2.38" name="001" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 374.658787][ T43] audit: type=1400 audit(1794328341.902:308): avc: denied { ioctl } for pid=6131 comm="syz.2.38" path="/dev/usbmon0" dev="devtmpfs" ino=736 ioctlcmd=0xc0285628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 374.659464][ T6134] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 374.679600][ T43] audit: type=1400 audit(1794328341.922:309): avc: denied { unmount } for pid=5837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 374.752589][ T43] audit: type=1400 audit(1794328342.002:310): avc: denied { connect } for pid=6138 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 374.931107][ T6151] overlayfs: failed to resolve './bus': -2 [ 374.935718][ T1181] IPVS: starting estimator thread 0... [ 374.944981][ T6152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.43'. [ 375.031416][ T6155] IPVS: using max 44 ests per chain, 105600 per kthread [ 375.110690][ T6159] openvswitch: netlink: IPv6 tunnel dst address is zero [ 375.150126][ T6161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.47'. [ 375.561420][ T5948] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 375.572628][ T6169] bridge0: port 3(syz_tun) entered blocking state [ 375.572709][ T6169] bridge0: port 3(syz_tun) entered disabled state [ 375.572792][ T6169] syz_tun: entered allmulticast mode [ 375.573553][ T6169] syz_tun: entered promiscuous mode [ 375.573870][ T6169] bridge0: port 3(syz_tun) entered blocking state [ 375.573915][ T6169] bridge0: port 3(syz_tun) entered forwarding state [ 375.722001][ T5948] usb 7-1: New USB device found: idVendor=1df7, idProduct=2500, bcdDevice=1.00 [ 375.724419][ T5948] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.724444][ T5948] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.766342][ T5948] msi2500 7-1:1.0: Registered as swradio24 [ 375.766357][ T5948] msi2500 7-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 375.903288][ T5998] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 375.976421][ T6195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.57'. [ 375.976444][ T6195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.57'. [ 375.993210][ T25] usb 7-1: USB disconnect, device number 2 [ 376.031723][ T5847] Bluetooth: hci0: command tx timeout [ 376.031766][ T5847] Bluetooth: hci1: command tx timeout [ 376.051485][ T5998] usb 6-1: Using ep0 maxpacket: 8 [ 376.052790][ T5998] usb 6-1: New USB device found: idVendor=28de, idProduct=1205, bcdDevice=0.00 [ 376.055021][ T5998] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 376.055037][ T5998] usb 6-1: config 0 interface 0 has no altsetting 0 [ 376.055052][ T5998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.057199][ T5998] usb 6-1: config 0 descriptor?? [ 376.086773][ T6203] program syz.0.59 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.090691][ T6203] nvme_fcloop: unknown parameter or missing value 'unlock all' [ 376.092598][ T6203] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 376.101928][ T5847] Bluetooth: hci3: command tx timeout [ 376.102028][ T5847] Bluetooth: hci2: command tx timeout [ 376.267257][ T5998] usbhid 6-1:0.0: can't add hid device: -71 [ 376.267333][ T5998] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 376.271581][ T5998] usb 6-1: USB disconnect, device number 2 [ 376.617452][ T6226] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 376.617475][ T6226] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 376.617497][ T6226] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 376.638688][ T6226] netlink: 14 bytes leftover after parsing attributes in process `syz.2.63'. [ 376.647905][ T6226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.657584][ T65] smbdirect: ib_dev[syz1] removed [ 376.657612][ T6226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.660512][ T6226] bond0 (unregistering): Released all slaves [ 376.797214][ T6234] netlink: 32 bytes leftover after parsing attributes in process `syz.1.66'. [ 376.844778][ T6238] FAULT_INJECTION: forcing a failure. [ 376.844778][ T6238] name failslab, interval 1, probability 0, space 0, times 1 [ 376.844804][ T6238] CPU: 3 UID: 0 PID: 6238 Comm: syz.2.68 Not tainted syzkaller #0 PREEMPT(full) [ 376.844823][ T6238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 376.844844][ T6238] Call Trace: [ 376.844857][ T6238] [ 376.844865][ T6238] dump_stack_lvl+0x100/0x190 [ 376.844910][ T6238] should_fail_ex.cold+0x5/0xa [ 376.844937][ T6238] should_failslab+0xc2/0x120 [ 376.844965][ T6238] kmem_cache_alloc_noprof+0x92/0x6a0 [ 376.844993][ T6238] ? kernfs_root+0x23/0x2a0 [ 376.845019][ T6238] ? __kernfs_new_node+0xd2/0xa10 [ 376.845041][ T6238] __kernfs_new_node+0xd2/0xa10 [ 376.845063][ T6238] ? __pfx___kernfs_new_node+0x10/0x10 [ 376.845084][ T6238] ? lock_acquire+0x1d1/0x380 [ 376.845106][ T6238] ? kernfs_root+0x23/0x2a0 [ 376.845130][ T6238] ? find_held_lock+0x2b/0x80 [ 376.845147][ T6238] ? kernfs_root+0xee/0x2a0 [ 376.845170][ T6238] ? kernfs_root+0xee/0x2a0 [ 376.845198][ T6238] kernfs_create_dir_ns+0xa4/0x2b0 [ 376.845220][ T6238] internal_create_group+0x36f/0xfb0 [ 376.845250][ T6238] ? __pfx_internal_create_group+0x10/0x10 [ 376.845275][ T6238] ? __pfx_internal_create_group+0x10/0x10 [ 376.845299][ T6238] ? bus_add_device+0x2e2/0x6c0 [ 376.845326][ T6238] ? __pfx_bus_add_device+0x10/0x10 [ 376.845345][ T6238] ? __pfx_dev_add_physical_location+0x10/0x10 [ 376.845377][ T6238] dpm_sysfs_add+0x80/0x280 [ 376.845402][ T6238] device_add+0x9f4/0x1970 [ 376.845428][ T6238] ? __pfx_device_add+0x10/0x10 [ 376.845451][ T6238] ? lockdep_init_map_type+0x5c/0x250 [ 376.845475][ T6238] ? __init_waitqueue_head+0xca/0x150 [ 376.845505][ T6238] netdev_register_kobject+0x1df/0x410 [ 376.845527][ T6238] register_netdevice+0x1313/0x26b0 [ 376.845554][ T6238] ? __pfx_register_netdevice+0x10/0x10 [ 376.845585][ T6238] vif_add+0xbb5/0x1180 [ 376.845607][ T6238] ? __pfx_vif_add+0x10/0x10 [ 376.845624][ T6238] ? lock_acquire+0x1d1/0x380 [ 376.845645][ T6238] ? __might_fault+0xc5/0x140 [ 376.845668][ T6238] ? __might_fault+0x60/0x140 [ 376.845698][ T6238] ip_mroute_setsockopt+0x108f/0x12b0 [ 376.845723][ T6238] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 376.845745][ T6238] ? avc_has_perm_noaudit+0x145/0x470 [ 376.845772][ T6238] ? __pfx_avc_has_perm+0x10/0x10 [ 376.845804][ T6238] do_ip_setsockopt+0x382/0x3310 [ 376.845832][ T6238] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 376.845854][ T6238] ? __pfx_sock_has_perm+0x10/0x10 [ 376.845903][ T6238] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 376.845924][ T6238] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 376.845952][ T6238] ip_setsockopt+0x5a/0xf0 [ 376.845976][ T6238] raw_setsockopt+0x60/0x1b0 [ 376.845998][ T6238] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 376.846024][ T6238] do_sock_setsockopt+0xf3/0x1d0 [ 376.846051][ T6238] __sys_setsockopt+0x195/0x220 [ 376.846075][ T6238] __x64_sys_setsockopt+0xbd/0x160 [ 376.846094][ T6238] ? do_syscall_64+0xae/0x7b0 [ 376.846122][ T6238] ? lockdep_hardirqs_on+0x7d/0x110 [ 376.846144][ T6238] do_syscall_64+0x123/0x7b0 [ 376.846165][ T6238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.846183][ T6238] RIP: 0033:0x7ff7c07a8f19 [ 376.846198][ T6238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.846213][ T6238] RSP: 002b:00007ff7c161c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 376.846230][ T6238] RAX: ffffffffffffffda RBX: 00007ff7c0a25fa0 RCX: 00007ff7c07a8f19 [ 376.846241][ T6238] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000005 [ 376.846252][ T6238] RBP: 00007ff7c0837f6d R08: 0000000000000010 R09: 0000000000000000 [ 376.846262][ T6238] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 376.846271][ T6238] R13: 00007ff7c0a26038 R14: 00007ff7c0a25fa0 R15: 00007fffc656c878 [ 376.846293][ T6238] [ 376.872122][ T6241] netlink: 'syz.0.69': attribute type 1 has an invalid length. [ 376.873711][ T6241] team0: entered allmulticast mode [ 376.873727][ T6241] team_slave_0: entered allmulticast mode [ 376.873739][ T6241] team_slave_1: entered allmulticast mode [ 376.897632][ T6243] Bluetooth: ISO socket layer initialized [ 376.946045][ T6249] netlink: 'syz.2.73': attribute type 62 has an invalid length. [ 376.952683][ T6249] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 377.003127][ T6257] device-mapper: ioctl: Empty message received. [ 377.013797][ T6255] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 377.013814][ T6255] overlayfs: missing 'lowerdir' [ 377.168945][ T6266] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 377.168961][ T6266] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 377.182929][ T6266] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 377.182945][ T6266] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 377.188553][ T6266] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 377.188567][ T6266] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 377.201025][ T6266] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 377.201047][ T6266] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 377.291490][ T5940] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 377.345843][ T6280] SELinux: failed to load policy [ 377.384877][ T6286] erspan1: entered promiscuous mode [ 377.464119][ T5940] usb 7-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 377.464927][ T5940] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 377.464949][ T5940] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 377.464960][ T5940] usb 7-1: config 0 interface 0 has no altsetting 0 [ 377.466334][ T6288] netlink: 'syz.0.86': attribute type 268 has an invalid length. [ 377.466413][ T6288] netlink: 'syz.0.86': attribute type 268 has an invalid length. [ 377.466470][ T6288] netlink: 'syz.0.86': attribute type 268 has an invalid length. [ 377.466534][ T6288] netlink: 'syz.0.86': attribute type 268 has an invalid length. [ 377.466605][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 377.466618][ T5940] usb 7-1: Product: syz [ 377.466625][ T5940] usb 7-1: Manufacturer: syz [ 377.466631][ T5940] usb 7-1: SerialNumber: syz [ 377.468018][ T5940] usb 7-1: config 0 descriptor?? [ 377.469379][ T5940] hub 7-1:0.0: bad descriptor, ignoring hub [ 377.469390][ T5940] hub 7-1:0.0: probe with driver hub failed with error -5 [ 377.473642][ T6288] validate_nla: 34 callbacks suppressed [ 377.473654][ T6288] netlink: 'syz.0.86': attribute type 268 has an invalid length. [ 377.473763][ T6288] netlink: 'syz.0.86': attribute type 268 has an invalid length. [ 377.473856][ T6288] netlink: 'syz.0.86': attribute type 268 has an invalid length. [ 377.473942][ T6288] netlink: 'syz.0.86': attribute type 268 has an invalid length. [ 377.474002][ T6288] netlink: 'syz.0.86': attribute type 268 has an invalid length. [ 377.474058][ T6288] netlink: 'syz.0.86': attribute type 268 has an invalid length. [ 377.474115][ T6288] netlink: 'syz.0.86': attribute type 268 has an invalid length. [ 377.474171][ T6288] netlink: 'syz.0.86': attribute type 268 has an invalid length. [ 377.474226][ T6288] netlink: 'syz.0.86': attribute type 268 has an invalid length. [ 377.474280][ T6288] netlink: 'syz.0.86': attribute type 268 has an invalid length. [ 377.475545][ T5940] usb 7-1: selecting invalid altsetting 0 [ 377.596304][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.89'. [ 377.599718][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.89'. [ 377.633823][ T6305] Bluetooth: (null): Invalid header checksum [ 377.746695][ T6311] tmpfs: Bad value for 'mpol' [ 377.754072][ T6313] tmpfs: Bad value for 'mpol' [ 378.042665][ T6340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.99'. [ 378.056254][ T6340] can0: slcan on ttynull. [ 378.097000][ T6340] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 378.268664][ T6340] md/raid1:md1: active with 1 out of 2 mirrors [ 378.269538][ T6340] md1: detected capacity change from 0 to 4096 [ 378.331201][ T6340] md1: detected capacity change from 4096 to 0 [ 378.331222][ T6340] md: md1 stopped. [ 378.373703][ T5940] usb 7-1: USB disconnect, device number 3 [ 378.436401][ T6360] overlayfs: missing 'lowerdir' [ 378.493786][ T6339] can0 (unregistered): slcan off ttynull. [ 378.574963][ T5940] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 378.673796][ T1448] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.673861][ T1448] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.732126][ T5940] usb 7-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 378.733082][ T5940] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 378.733116][ T5940] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 378.733131][ T5940] usb 7-1: config 0 interface 0 has no altsetting 0 [ 378.734966][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 378.734984][ T5940] usb 7-1: Product: syz [ 378.734994][ T5940] usb 7-1: Manufacturer: syz [ 378.735005][ T5940] usb 7-1: SerialNumber: syz [ 378.739172][ T5940] usb 7-1: config 0 descriptor?? [ 378.744909][ T5940] hub 7-1:0.0: bad descriptor, ignoring hub [ 378.744931][ T5940] hub 7-1:0.0: probe with driver hub failed with error -5 [ 378.748024][ T5940] usb 7-1: selecting invalid altsetting 0 [ 378.791250][ T6383] syz.0.108 uses obsolete (PF_INET,SOCK_PACKET) [ 378.908579][ T6388] 9pnet_virtio: no channels available for device syz [ 378.935977][ T6390] jffs2: notice: (6390) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 378.953560][ T6257] macvtap1: entered promiscuous mode [ 378.953679][ T6257] macvtap1: entered allmulticast mode [ 378.953687][ T6257] veth1_vlan: entered allmulticast mode [ 379.071755][ T25] usb 7-1: USB disconnect, device number 4 [ 379.584587][ T6404] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 379.584613][ T6404] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 379.592217][ T43] kauditd_printk_skb: 102 callbacks suppressed [ 379.592235][ T43] audit: type=1400 audit(1794328346.842:413): avc: denied { connect } for pid=6409 comm="syz.0.117" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 379.592550][ T43] audit: type=1400 audit(1794328346.842:414): avc: denied { getopt } for pid=6409 comm="syz.0.117" laddr=::1 lport=7 faddr=::1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 379.687375][ T6430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6430 comm=syz.1.122 [ 379.693150][ T6432] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 379.693163][ T6432] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 379.694082][ T6423] kvm [6419]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 379.694972][ T6423] kvm [6419]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 379.698145][ T6435] overlay: filesystem on ./bus not supported as upperdir [ 379.699501][ T6438] overlay: filesystem on ./bus not supported as upperdir [ 379.747281][ T6443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6443 comm=syz.1.122 [ 379.765145][ T6427] netlink: 'syz.3.121': attribute type 11 has an invalid length. [ 379.765160][ T6427] netlink: 224 bytes leftover after parsing attributes in process `syz.3.121'. [ 379.765890][ T43] audit: type=1400 audit(1794328347.012:415): avc: denied { ioctl } for pid=6426 comm="syz.3.121" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=11219 ioctlcmd=0x6f2a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 379.796294][ T6449] use of bytesused == 0 is deprecated and will be removed in the future, [ 379.796304][ T6449] use the actual size instead. [ 379.964885][ T6464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.131'. [ 380.024489][ T43] audit: type=1400 audit(1794328347.272:416): avc: denied { setopt } for pid=6467 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 380.024708][ T43] audit: type=1400 audit(1794328347.272:417): avc: denied { write } for pid=6467 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 380.024716][ T6468] fuse: Bad value for 'fd' [ 380.026100][ T43] audit: type=1400 audit(1794328347.272:418): avc: denied { name_connect } for pid=6467 comm="syz.0.133" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 380.030652][ T43] audit: type=1400 audit(1794328347.272:419): avc: denied { read } for pid=6467 comm="syz.0.133" laddr=172.20.20.170 lport=46324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 380.086456][ T43] audit: type=1400 audit(1794328347.332:420): avc: denied { create } for pid=6473 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 380.087755][ T43] audit: type=1400 audit(1794328347.332:421): avc: denied { setopt } for pid=6473 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 380.088944][ T43] audit: type=1400 audit(1794328347.332:422): avc: denied { ioctl } for pid=6473 comm="syz.0.134" path="socket:[11936]" dev="sockfs" ino=11936 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 380.093242][ T6474] FAULT_INJECTION: forcing a failure. [ 380.093242][ T6474] name failslab, interval 1, probability 0, space 0, times 0 [ 380.093264][ T6474] CPU: 0 UID: 0 PID: 6474 Comm: syz.0.134 Not tainted syzkaller #0 PREEMPT(full) [ 380.093282][ T6474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 380.093305][ T6474] Call Trace: [ 380.093311][ T6474] [ 380.093319][ T6474] dump_stack_lvl+0x100/0x190 [ 380.093352][ T6474] should_fail_ex.cold+0x5/0xa [ 380.093377][ T6474] should_failslab+0xc2/0x120 [ 380.093396][ T6474] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 380.093423][ T6474] ? __d_alloc+0x34/0xad0 [ 380.093449][ T6474] __d_alloc+0x34/0xad0 [ 380.093481][ T6474] __d_alloc_parallel+0x105/0x15e0 [ 380.093507][ T6474] ? lock_acquire+0x1d1/0x380 [ 380.093528][ T6474] ? lookup_slow+0x41/0x80 [ 380.093551][ T6474] ? __pfx___d_alloc_parallel+0x10/0x10 [ 380.093569][ T6474] ? __pfx___might_resched+0x10/0x10 [ 380.093588][ T6474] ? find_held_lock+0x2b/0x80 [ 380.093608][ T6474] ? down_read+0x136/0x4c0 [ 380.093630][ T6474] ? __pfx_down_read+0x10/0x10 [ 380.093652][ T6474] __lookup_slow+0x98/0x320 [ 380.093678][ T6474] lookup_slow+0x54/0x80 [ 380.093700][ T6474] link_path_walk+0x1449/0x1bd0 [ 380.093727][ T6474] path_openat+0x1a7/0x23f0 [ 380.093751][ T6474] ? __pfx_path_openat+0x10/0x10 [ 380.093777][ T6474] do_file_open+0x20e/0x430 [ 380.093798][ T6474] ? __pfx_do_file_open+0x10/0x10 [ 380.093826][ T6474] ? __pfx_kfree_link+0x10/0x10 [ 380.093872][ T6474] ? _raw_spin_unlock+0x28/0x50 [ 380.093891][ T6474] ? alloc_fd+0x471/0x7a0 [ 380.093920][ T6474] do_sys_openat2+0x163/0x1d0 [ 380.093942][ T6474] ? __pfx_do_sys_openat2+0x10/0x10 [ 380.093972][ T6474] __x64_sys_openat+0x12d/0x210 [ 380.093994][ T6474] ? __pfx___x64_sys_openat+0x10/0x10 [ 380.094025][ T6474] do_syscall_64+0x123/0x7b0 [ 380.094046][ T6474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.094063][ T6474] RIP: 0033:0x7f0bff16974e [ 380.094077][ T6474] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 380.094092][ T6474] RSP: 002b:00007f0bfd3f5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 380.094109][ T6474] RAX: ffffffffffffffda RBX: 00007f0bfd3f66c0 RCX: 00007f0bff16974e [ 380.094119][ T6474] RDX: 0000000000000002 RSI: 00007f0bfd3f5f90 RDI: ffffffffffffff9c [ 380.094130][ T6474] RBP: 00007f0bff237f6d R08: 0000000000000000 R09: 0000000000000000 [ 380.094141][ T6474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.094150][ T6474] R13: 00007f0bff426038 R14: 00007f0bff425fa0 R15: 00007ffda6d65eb8 [ 380.094171][ T6474] [ 380.117616][ T6474] device-mapper: table: 248:1: zero-length target [ 380.117630][ T6474] device-mapper: ioctl: error adding target to table [ 380.387809][ T6495] Bluetooth: MGMT ver 1.23 [ 380.439892][ T6503] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 380.588567][ T6511] CacheFiles: Failed to register: -95 [ 380.625009][ T6511] Cache volume key already in use (9p,syz,) [ 380.861776][ T6513] syzkaller1: entered promiscuous mode [ 380.861790][ T6513] syzkaller1: entered allmulticast mode [ 381.033345][ T6521] trusted_key: encrypted_key: insufficient parameters specified [ 381.036094][ T6521] Could not find key with description: [syz] [ 381.036103][ T6521] process_request_key_err: No key [ 381.036107][ T6521] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 381.036112][ T6521] One or more global auth toks could not properly register; rc = [-2] [ 381.036132][ T6521] Error validating options; rc = [-2] [ 381.300266][ T6536] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 381.332634][ T6542] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 381.367183][ T6510] binfmt_misc: register: failed to install interpreter ./file0 [ 381.369831][ T25] rxe_eth0 speed is unknown, defaulting to 1000 [ 381.457398][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.159'. [ 381.488728][ T14] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.524701][ T6560] bond1: option coupled_control: invalid value (46) [ 381.528300][ T6560] bond1 (unregistering): Released all slaves [ 381.598114][ T14] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.616324][ T6570] ip_tables: iptables: counters copy to user failed while replacing table [ 381.617329][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 381.617588][ T6570] netlink: 48 bytes leftover after parsing attributes in process `syz.3.163'. [ 381.649070][ T14] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.698642][ T14] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.833651][ T14] bridge_slave_1: left allmulticast mode [ 381.833693][ T14] bridge_slave_1: left promiscuous mode [ 381.834887][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.841463][ T11] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 381.841934][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.848669][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.850558][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.853128][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.853597][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.854854][ T14] bridge_slave_0: left allmulticast mode [ 381.854868][ T14] bridge_slave_0: left promiscuous mode [ 381.856109][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.870202][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.870446][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.870675][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.875251][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.877522][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.991757][ T11] usb 6-1: Using ep0 maxpacket: 8 [ 381.994196][ T11] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 381.995565][ T11] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 381.995591][ T11] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 381.995611][ T11] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 381.995629][ T11] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.995662][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.079230][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.086118][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.086740][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 382.088021][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.088475][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.205323][ T11] usb 6-1: GET_CAPABILITIES returned 0 [ 382.205360][ T11] usbtmc 6-1:16.0: can't read capabilities [ 382.225462][ T5497] 8021q: adding VLAN 0 to HW filter on device eth2 [ 382.265448][ T6574] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.384550][ T6614] FAULT_INJECTION: forcing a failure. [ 382.384550][ T6614] name fail_futex, interval 1, probability 0, space 0, times 1 [ 382.384569][ T6614] CPU: 2 UID: 0 PID: 6614 Comm: syz.3.170 Not tainted syzkaller #0 PREEMPT(full) [ 382.384581][ T6614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 382.384597][ T6614] Call Trace: [ 382.384612][ T6614] [ 382.384620][ T6614] dump_stack_lvl+0x100/0x190 [ 382.384648][ T6614] should_fail_ex.cold+0x5/0xa [ 382.384666][ T6614] get_futex_key+0x1c9/0x13e0 [ 382.384684][ T6614] ? __pfx_get_futex_key+0x10/0x10 [ 382.384695][ T6614] ? ___sys_sendmsg+0x127/0x1e0 [ 382.384712][ T6614] futex_wake+0xf4/0x5e0 [ 382.384725][ T6614] ? futex_wait+0x11e/0x370 [ 382.384741][ T6614] ? __pfx_futex_wake+0x10/0x10 [ 382.384757][ T6614] ? find_held_lock+0x2b/0x80 [ 382.384772][ T6614] do_futex+0x2b2/0x440 [ 382.384786][ T6614] ? __pfx_do_futex+0x10/0x10 [ 382.384798][ T6614] ? __seccomp_filter+0x896/0x1130 [ 382.384816][ T6614] __x64_sys_futex+0x34f/0x4d0 [ 382.384831][ T6614] ? __pfx___x64_sys_futex+0x10/0x10 [ 382.384848][ T6614] do_syscall_64+0x123/0x7b0 [ 382.384866][ T6614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.384877][ T6614] RIP: 0033:0x7f611a9a8f19 [ 382.384886][ T6614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.384895][ T6614] RSP: 002b:00007f611b7cf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 382.384907][ T6614] RAX: ffffffffffffffda RBX: 00007f611ac25fa8 RCX: 00007f611a9a8f19 [ 382.384913][ T6614] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f611ac25fac [ 382.384919][ T6614] RBP: 00007f611ac25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 382.384925][ T6614] R10: 0000000000000074 R11: 0000000000000246 R12: 0000000000000000 [ 382.384932][ T6614] R13: 00007f611ac26038 R14: 00007ffc1237d390 R15: 00007ffc1237d478 [ 382.384945][ T6614] [ 382.425542][ T35] usb 6-1: USB disconnect, device number 3 [ 382.496890][ T6586] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.524029][ T5497] 8021q: adding VLAN 0 to HW filter on device eth3 [ 382.659746][ T14] hsr_slave_0: left promiscuous mode [ 382.660501][ T14] hsr_slave_1: left promiscuous mode [ 382.661213][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.661237][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.664608][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.664624][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.675135][ T14] veth1_vlan: left allmulticast mode [ 382.675384][ T14] veth1_macvtap: left promiscuous mode [ 382.675457][ T14] veth0_macvtap: left promiscuous mode [ 382.675576][ T14] veth1_vlan: left promiscuous mode [ 382.675644][ T14] veth0_vlan: left promiscuous mode [ 382.697667][ T6627] jffs2: notice: (6627) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 382.853776][ T14] team0 (unregistering): Port device team_slave_1 removed [ 382.858208][ T14] team0 (unregistering): Port device team_slave_0 removed [ 382.979974][ T5497] 8021q: adding VLAN 0 to HW filter on device eth4 [ 383.225696][ T6574] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.225774][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.225837][ T6574] bridge_slave_0: entered allmulticast mode [ 383.227617][ T6574] bridge_slave_0: entered promiscuous mode [ 383.242792][ T6660] jffs2: notice: (6660) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 383.246835][ T6574] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.246915][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.247008][ T6574] bridge_slave_1: entered allmulticast mode [ 383.252969][ T6574] bridge_slave_1: entered promiscuous mode [ 383.294586][ T6574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.306153][ T6574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.337269][ T6668] Bluetooth: MGMT ver 1.23 [ 383.340710][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 383.341181][ T5497] 8021q: adding VLAN 0 to HW filter on device eth5 [ 383.351988][ T6574] team0: Port device team_slave_0 added [ 383.352402][ T6586] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.352761][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.352859][ T6586] bridge_slave_0: entered allmulticast mode [ 383.354134][ T6586] bridge_slave_0: entered promiscuous mode [ 383.356816][ T6586] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.356886][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.356972][ T6586] bridge_slave_1: entered allmulticast mode [ 383.357857][ T6586] bridge_slave_1: entered promiscuous mode [ 383.390658][ T6574] team0: Port device team_slave_1 added [ 383.417594][ T6586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.419087][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.419101][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.419120][ T6574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.434112][ T6586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link syzkaller syzkaller login: [ 383.452039][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.452055][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.452075][ T6574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.454635][ T6674] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 383.463993][ T6586] team0: Port device team_slave_0 added [ 383.477856][ T6586] team0: Port device team_slave_1 added [ 383.500323][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.500339][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.500358][ T6586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.502712][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.502725][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.502742][ T6586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.550116][ T6586] hsr_slave_0: entered promiscuous mode [ 383.550780][ T6586] hsr_slave_1: entered promiscuous mode [ 383.551122][ T6586] debugfs: 'hsr0' already exists in 'hsr' [ 383.551131][ T6586] Cannot create hsr debugfs directory [ 383.556154][ T6574] hsr_slave_0: entered promiscuous mode [ 383.556779][ T6574] hsr_slave_1: entered promiscuous mode [ 383.557342][ T6574] debugfs: 'hsr0' already exists in 'hsr' [ 383.557355][ T6574] Cannot create hsr debugfs directory [ 383.579422][ T14] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.676832][ T14] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.719348][ T6685] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 383.719368][ T6685] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 383.719388][ T6685] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 383.719397][ T6685] One or more global auth toks could not properly register; rc = [-22] [ 383.719421][ T6685] Error validating options; rc = [-22] [ 383.720080][ T6685] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 383.720091][ T6685] PKCS7: Only support pkcs7_signedData type [ 383.761669][ T5940] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 383.764323][ T14] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.818298][ T6586] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 383.820354][ T6586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.820735][ T6586] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 383.831596][ T6586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.848049][ T14] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.860728][ T6586] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 383.869487][ T6586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.870276][ T6586] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 383.874852][ T6586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.912119][ T5940] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 383.915409][ T5940] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.915445][ T5940] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 383.917436][ T5940] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.917457][ T5940] usb 8-1: Product: syz [ 383.917469][ T5940] usb 8-1: Manufacturer: syz [ 383.917481][ T5940] usb 8-1: SerialNumber: syz [ 383.925514][ T5940] cdc_mbim 8-1:1.0: skipping garbage [ 383.929146][ T6586] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.929191][ T6586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.929303][ T6586] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.929348][ T6586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.941511][ T5847] Bluetooth: hci0: command tx timeout [ 383.960559][ T6574] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 383.963110][ T6574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.966953][ T6574] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 383.968958][ T6574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.979480][ T6574] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 383.983245][ T6574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.983658][ T6574] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 383.988075][ T6574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.999313][ T14] bridge_slave_1: left allmulticast mode [ 383.999329][ T14] bridge_slave_1: left promiscuous mode [ 383.999453][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.002834][ T14] bridge_slave_0: left allmulticast mode [ 384.002848][ T14] bridge_slave_0: left promiscuous mode [ 384.002945][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.101490][ T5847] Bluetooth: hci3: command tx timeout [ 384.107936][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.109314][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.110260][ T14] bond0 (unregistering): Released all slaves [ 384.124228][ T6679] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 384.135793][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.136950][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.226284][ T6707] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 384.226307][ T6707] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 384.228091][ T6707] vhci_hcd vhci_hcd.0: Device attached [ 384.237507][ T6586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.252760][ T6708] vhci_hcd: connection closed [ 384.261150][ T13] vhci_hcd vhci_hcd.1: stop threads [ 384.261485][ T6586] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.263791][ T13] vhci_hcd vhci_hcd.1: release socket [ 384.263820][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 384.268176][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.268221][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.299262][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.299341][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.319451][ T6574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.349794][ T6574] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.364279][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.364361][ T5856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.380779][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.380852][ T5856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.442983][ T5497] 8021q: adding VLAN 0 to HW filter on device eth6 [ 384.511167][ T14] hsr_slave_0: left promiscuous mode [ 384.517192][ T14] hsr_slave_1: left promiscuous mode [ 384.517638][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.517649][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.519117][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.519127][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.536298][ T14] veth1_macvtap: left promiscuous mode [ 384.536321][ T14] veth0_macvtap: left promiscuous mode [ 384.536400][ T14] veth1_vlan: left promiscuous mode [ 384.536430][ T14] veth0_vlan: left promiscuous mode [ 384.625208][ T43] kauditd_printk_skb: 70 callbacks suppressed [ 384.625236][ T43] audit: type=1400 audit(1794328351.872:493): avc: denied { write } for pid=6732 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.710919][ T14] team_slave_1 (unregistering): left allmulticast mode [ 384.716991][ T14] team0 (unregistering): Port device team_slave_1 removed [ 384.721138][ T14] team_slave_0 (unregistering): left allmulticast mode [ 384.723944][ T14] team0 (unregistering): Port device team_slave_0 removed [ 384.729592][ T6679] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 384.729921][ T5940] cdc_mbim 8-1:1.0: setting rx_max = 16384 [ 384.787016][ T5497] 8021q: adding VLAN 0 to HW filter on device eth7 [ 384.836778][ T43] audit: type=1400 audit(1794328352.082:494): avc: denied { name_bind } for pid=6745 comm="syz.1.185" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 384.857232][ T43] audit: type=1400 audit(1794328352.102:495): avc: denied { bind } for pid=6745 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 384.893160][ T6586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.893668][ T43] audit: type=1400 audit(1794328352.142:496): avc: denied { write } for pid=6747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.937228][ T5940] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 384.939240][ T43] audit: type=1400 audit(1794328352.182:497): avc: denied { write } for pid=6757 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.946574][ T5940] wwan wwan0: port wwan0mbim0 attached [ 384.957879][ T6760] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 384.966824][ T5940] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 5e:05:df:5e:57:d8 [ 385.000101][ T14] IPVS: stop unused estimator thread 0... [ 385.003557][ T5497] 8021q: adding VLAN 0 to HW filter on device eth8 [ 385.033452][ T43] audit: type=1400 audit(1794328352.282:498): avc: denied { create } for pid=6767 comm="syz.1.187" name="dm0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 385.034795][ T43] audit: type=1400 audit(1794328352.282:499): avc: denied { read write } for pid=6767 comm="syz.1.187" name="dm0" dev="tmpfs" ino=285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 385.034831][ T43] audit: type=1400 audit(1794328352.282:500): avc: denied { open } for pid=6767 comm="syz.1.187" path="/47/dm0" dev="tmpfs" ino=285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 385.053318][ T6574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.080579][ T43] audit: type=1400 audit(1794328352.322:501): avc: denied { write } for pid=6773 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.116949][ T43] audit: type=1400 audit(1794328352.362:502): avc: denied { unlink } for pid=5842 comm="syz-executor" name="dm0" dev="tmpfs" ino=285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 385.126443][ T6586] veth0_vlan: entered promiscuous mode [ 385.136091][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 385.136181][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 385.136874][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 385.136891][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 385.137095][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 385.137110][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 385.137335][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 385.137350][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 385.137551][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 385.137581][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 385.137639][ T6586] veth1_vlan: entered promiscuous mode [ 385.137781][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 385.137796][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 385.138066][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 385.138081][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 385.138279][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 385.138294][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 385.138501][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 385.138515][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 385.138745][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 385.138760][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 385.166460][ T856] usb 8-1: USB disconnect, device number 2 [ 385.167649][ T856] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 385.213187][ T5497] 8021q: adding VLAN 0 to HW filter on device eth9 [ 385.228045][ T856] wwan wwan0: port wwan0mbim0 disconnected [ 385.240602][ T6586] veth0_macvtap: entered promiscuous mode [ 385.247537][ T6586] veth1_macvtap: entered promiscuous mode [ 385.263599][ T6586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.268865][ T6586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.279218][ T6792] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 385.335990][ T5856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.336005][ T5856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.339354][ T6574] veth0_vlan: entered promiscuous mode [ 385.353175][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.353217][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.353243][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.353271][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.360495][ T6574] veth1_vlan: entered promiscuous mode [ 385.360868][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.360880][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.377000][ T6574] veth0_macvtap: entered promiscuous mode [ 385.388759][ T6574] veth1_macvtap: entered promiscuous mode [ 385.404147][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.408606][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.419839][ T6798] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 385.419851][ T6798] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 385.419858][ T6798] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 385.419862][ T6798] One or more global auth toks could not properly register; rc = [-22] [ 385.419877][ T6798] Error validating options; rc = [-22] [ 385.428926][ T6799] Could not find key with description: [syz] [ 385.428935][ T6799] process_request_key_err: No key [ 385.428939][ T6799] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 385.428944][ T6799] One or more global auth toks could not properly register; rc = [-2] [ 385.428958][ T6799] Error validating options; rc = [-2] [ 385.477929][ T5965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.477946][ T5965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.493394][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.493408][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.503686][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.503743][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.503766][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.503783][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.704630][ T6832] validate_nla: 18 callbacks suppressed [ 385.704661][ T6832] netlink: 'syz.4.196': attribute type 1 has an invalid length. [ 385.714418][ T6834] uhci_hcd 0000:00:1d.0: remove, state 4 [ 385.714476][ T6834] usb usb2: USB disconnect, device number 1 [ 385.735695][ T6834] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 385.748696][ T6837] mmap: syz.1.198 (6837) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 385.913846][ T6844] process 'syz.1.201' launched './file2' with NULL argv: empty string added [ 385.914373][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.202'. [ 385.914386][ T6847] openvswitch: netlink: Message has 8 unknown bytes. [ 385.958418][ T6855] ip6t_ah: unknown flags 7 [ 386.021514][ T5847] Bluetooth: hci0: command tx timeout [ 386.024357][ T6865] netlink: 132 bytes leftover after parsing attributes in process `syz.4.207'. [ 386.130368][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.211'. [ 386.130383][ T6873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.211'. [ 386.179625][ T6878] [ 386.180436][ T6878] ====================================================== [ 386.182612][ T6878] WARNING: possible circular locking dependency detected [ 386.184706][ T6878] syzkaller #0 Not tainted [ 386.186344][ T6878] ------------------------------------------------------ [ 386.188476][ T6878] syz.3.212/6878 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 386.190271][ T6878] ffff8880372b9080 (&of->mutex){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 386.191467][ T5847] Bluetooth: hci3: command tx timeout [ 386.194688][ T6878] [ 386.194688][ T6878] but task is already holding lock: [ 386.196956][ T6878] ffff88803f9c5cb8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 386.199547][ T6878] [ 386.199547][ T6878] which lock already depends on the new lock. [ 386.199547][ T6878] [ 386.202629][ T6878] [ 386.202629][ T6878] the existing dependency chain (in reverse order) is: [ 386.205294][ T6878] [ 386.205294][ T6878] -> #3 (&p->lock){+.+.}-{4:4}: [ 386.207962][ T6878] lock_acquire+0x1d1/0x380 [ 386.209673][ T6878] __mutex_lock+0x19f/0x1c10 [ 386.211184][ T6878] seq_read_iter+0xe1/0x1270 [ 386.213150][ T6878] kernfs_fop_read_iter+0x46c/0x610 [ 386.215486][ T6878] copy_splice_read+0x4ba/0xb90 [ 386.217611][ T6878] do_splice_read+0x285/0x370 [ 386.219749][ T6878] splice_file_to_pipe+0x82/0x120 [ 386.221986][ T6878] do_sendfile+0x366/0xe20 [ 386.223972][ T6878] __x64_sys_sendfile64+0x1d8/0x220 [ 386.226248][ T6878] do_syscall_64+0x123/0x7b0 [ 386.228355][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.230937][ T6878] [ 386.230937][ T6878] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 386.233926][ T6878] lock_acquire+0x1d1/0x380 [ 386.236029][ T6878] __mutex_lock+0x19f/0x1c10 [ 386.237751][ T6878] anon_pipe_prefill_and_lock+0x16c/0x580 [ 386.239663][ T6878] anon_pipe_write+0x164/0x1bb0 [ 386.241324][ T6878] __kernel_write_iter+0x6b2/0x920 [ 386.243013][ T6878] __kernel_write+0xf6/0x140 [ 386.244562][ T6878] autofs_notify_daemon+0x51e/0xe00 [ 386.246401][ T6878] autofs_wait+0x10f8/0x1b30 [ 386.248563][ T6878] autofs_mount_wait+0x132/0x3b0 [ 386.250760][ T6878] autofs_d_automount+0x490/0x950 [ 386.252668][ T6878] __traverse_mounts+0x1b9/0x8a0 [ 386.254290][ T6878] step_into_slowpath+0xb7e/0xf90 [ 386.255994][ T6878] path_lookupat+0x58b/0xc40 [ 386.257546][ T6878] filename_lookup+0x202/0x590 [ 386.259156][ T6878] vfs_statx+0xff/0x3f0 [ 386.260586][ T6878] __do_sys_newlstat+0xaa/0x130 [ 386.262199][ T6878] do_syscall_64+0x123/0x7b0 [ 386.263740][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.265634][ T6878] [ 386.265634][ T6878] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 386.267968][ T6878] lock_acquire+0x1d1/0x380 [ 386.269565][ T6878] __mutex_lock+0x19f/0x1c10 [ 386.271103][ T6878] autofs_notify_daemon+0x509/0xe00 [ 386.272816][ T6878] autofs_wait+0x10f8/0x1b30 [ 386.274367][ T6878] autofs_mount_wait+0x132/0x3b0 [ 386.276134][ T6878] autofs_d_automount+0x490/0x950 [ 386.277813][ T6878] __traverse_mounts+0x1b9/0x8a0 [ 386.279498][ T6878] step_into_slowpath+0xb7e/0xf90 [ 386.281483][ T6878] path_lookupat+0x58b/0xc40 [ 386.283398][ T6878] filename_lookup+0x202/0x590 [ 386.285462][ T6878] kern_path+0x37/0x50 [ 386.286871][ T6878] lookup_bdev+0xd8/0x2a0 [ 386.288407][ T6878] resume_store+0x1f5/0x480 [ 386.289932][ T6878] kobj_attr_store+0x58/0x80 [ 386.291719][ T6878] sysfs_kf_write+0xf2/0x150 [ 386.293639][ T6878] kernfs_fop_write_iter+0x3e0/0x5f0 [ 386.295633][ T6878] vfs_write+0x6af/0x1040 [ 386.297588][ T6878] ksys_write+0x12a/0x250 [ 386.299220][ T6878] do_syscall_64+0x123/0x7b0 [ 386.300798][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.303062][ T6878] [ 386.303062][ T6878] -> #0 (&of->mutex){+.+.}-{4:4}: [ 386.305343][ T6878] check_prev_add+0xeb/0xe60 [ 386.306906][ T6878] __lock_acquire+0x1528/0x1f40 [ 386.308553][ T6878] lock_acquire+0x1d1/0x380 [ 386.310083][ T6878] __mutex_lock+0x19f/0x1c10 [ 386.311629][ T6878] kernfs_seq_start+0x4f/0x2a0 [ 386.313703][ T6878] seq_read_iter+0x2c1/0x1270 [ 386.315524][ T6878] kernfs_fop_read_iter+0x46c/0x610 [ 386.317258][ T6878] copy_splice_read+0x4ba/0xb90 [ 386.318890][ T6878] do_splice_read+0x285/0x370 [ 386.320487][ T6878] splice_file_to_pipe+0x82/0x120 [ 386.322131][ T6878] do_sendfile+0x366/0xe20 [ 386.323588][ T6878] __x64_sys_sendfile64+0x1d8/0x220 [ 386.325278][ T6878] do_syscall_64+0x123/0x7b0 [ 386.326848][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.328839][ T6878] [ 386.328839][ T6878] other info that might help us debug this: [ 386.328839][ T6878] [ 386.331792][ T6878] Chain exists of: [ 386.331792][ T6878] &of->mutex --> &pipe->mutex --> &p->lock [ 386.331792][ T6878] [ 386.335240][ T6878] Possible unsafe locking scenario: [ 386.335240][ T6878] [ 386.337450][ T6878] CPU0 CPU1 [ 386.339056][ T6878] ---- ---- [ 386.340674][ T6878] lock(&p->lock); [ 386.341860][ T6878] lock(&pipe->mutex); [ 386.343828][ T6878] lock(&p->lock); [ 386.345673][ T6878] lock(&of->mutex); [ 386.346912][ T6878] [ 386.346912][ T6878] *** DEADLOCK *** [ 386.346912][ T6878] [ 386.349320][ T6878] locks held by syz.3.212/6878: 2, on CPU#0: [ 386.351090][ T6878] #0: ffff8880220b5060 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 386.353658][ T6878] #1: ffff88803f9c5cb8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 386.356439][ T6878] [ 386.356439][ T6878] stack backtrace: [ 386.358720][ T6878] CPU: 0 UID: 0 PID: 6878 Comm: syz.3.212 Not tainted syzkaller #0 PREEMPT(full) [ 386.362223][ T6878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.366124][ T6878] Call Trace: [ 386.367466][ T6878] [ 386.368685][ T6878] dump_stack_lvl+0x100/0x190 [ 386.370545][ T6878] print_circular_bug.cold+0x178/0x1be [ 386.372694][ T6878] check_noncircular+0x146/0x160 [ 386.374644][ T6878] check_prev_add+0xeb/0xe60 [ 386.376520][ T6878] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 386.378865][ T6878] __lock_acquire+0x1528/0x1f40 [ 386.380838][ T6878] ? kernfs_fop_read_iter+0x46c/0x610 [ 386.383001][ T6878] ? copy_splice_read+0x4ba/0xb90 [ 386.384891][ T6878] lock_acquire+0x1d1/0x380 [ 386.386634][ T6878] ? kernfs_seq_start+0x4f/0x2a0 [ 386.388437][ T6878] ? __pfx___might_resched+0x10/0x10 [ 386.390315][ T6878] __mutex_lock+0x19f/0x1c10 [ 386.391989][ T6878] ? kernfs_seq_start+0x4f/0x2a0 [ 386.393751][ T6878] ? kernfs_seq_start+0x4f/0x2a0 [ 386.395660][ T6878] ? __pfx___mutex_lock+0x10/0x10 [ 386.397593][ T6878] ? __kasan_kmalloc+0xaa/0xb0 [ 386.399457][ T6878] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 386.401524][ T6878] ? kernfs_seq_start+0x4f/0x2a0 [ 386.403052][ T6878] kernfs_seq_start+0x4f/0x2a0 [ 386.404891][ T6878] seq_read_iter+0x2c1/0x1270 [ 386.406707][ T6878] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 386.409021][ T6878] kernfs_fop_read_iter+0x46c/0x610 [ 386.411023][ T6878] copy_splice_read+0x4ba/0xb90 [ 386.412898][ T6878] ? __pfx_copy_splice_read+0x10/0x10 [ 386.414778][ T6878] ? lock_acquire+0x1d1/0x380 [ 386.416339][ T6878] ? __fget_files+0x215/0x3d0 [ 386.418155][ T6878] ? __pfx_copy_splice_read+0x10/0x10 [ 386.420203][ T6878] do_splice_read+0x285/0x370 [ 386.422045][ T6878] splice_file_to_pipe+0x82/0x120 [ 386.424027][ T6878] do_sendfile+0x366/0xe20 [ 386.425770][ T6878] ? __pfx_do_sendfile+0x10/0x10 [ 386.427676][ T6878] ? __pfx___seccomp_filter+0x10/0x10 [ 386.429689][ T6878] __x64_sys_sendfile64+0x1d8/0x220 [ 386.431417][ T6878] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 386.433604][ T6878] do_syscall_64+0x123/0x7b0 [ 386.435407][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.437643][ T6878] RIP: 0033:0x7f611a9a8f19 [ 386.439415][ T6878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.446238][ T6878] RSP: 002b:00007f611b7cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 386.448927][ T6878] RAX: ffffffffffffffda RBX: 00007f611ac25fa0 RCX: 00007f611a9a8f19 [ 386.451771][ T6878] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 386.454294][ T6878] RBP: 00007f611aa37f6d R08: 0000000000000000 R09: 0000000000000000 [ 386.457064][ T6878] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 386.459565][ T6878] R13: 00007f611ac26038 R14: 00007f611ac25fa0 R15: 00007ffc1237d478 [ 386.462407][ T6878] [ 386.597163][ T6516] bridge0: port 3(syz_tun) entered disabled state [ 386.598808][ T6516] syz_tun (unregistering): left allmulticast mode [ 386.598822][ T6516] syz_tun (unregistering): left promiscuous mode [ 386.598848][ T6516] bridge0: port 3(syz_tun) entered disabled state [ 386.851604][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.964305][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.054231][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.145270][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.307356][ T13] bridge_slave_1: left allmulticast mode [ 387.307379][ T13] bridge_slave_1: left promiscuous mode [ 387.307486][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.310201][ T13] bridge_slave_0: left allmulticast mode [ 387.310220][ T13] bridge_slave_0: left promiscuous mode [ 387.310347][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.377349][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.379410][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.380286][ T13] bond0 (unregistering): Released all slaves [ 387.504309][ T5497] 8021q: adding VLAN 0 to HW filter on device eth10 [ 387.589509][ T5497] 8021q: adding VLAN 0 to HW filter on device eth11 [ 387.647407][ T13] hsr_slave_0: left promiscuous mode [ 387.647657][ T13] hsr_slave_1: left promiscuous mode [ 387.648001][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.648012][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.648293][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.648301][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.649442][ T13] veth1_macvtap: left promiscuous mode [ 387.649458][ T13] veth0_macvtap: left promiscuous mode [ 387.649495][ T13] veth1_vlan: left promiscuous mode [ 387.649515][ T13] veth0_vlan: left promiscuous mode [ 387.710393][ T13] team0 (unregistering): Port device team_slave_1 removed [ 387.715000][ T13] team0 (unregistering): Port device team_slave_0 removed [ 387.742990][ T5497] 8021q: adding VLAN 0 to HW filter on device eth12 [ 387.862885][ T5497] 8021q: adding VLAN 0 to HW filter on device eth13 [ 388.047948][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.375166][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.426373][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.475651][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.525098][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.564373][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.606302][ T5497] 8021q: adding VLAN 0 to HW filter on device eth14 [ 388.635275][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.687176][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.701140][ T5497] 8021q: adding VLAN 0 to HW filter on device eth15 [ 388.730877][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.810222][ T5497] 8021q: adding VLAN 0 to HW filter on device eth16 [ 388.827280][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.904878][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.931012][ T5497] 8021q: adding VLAN 0 to HW filter on device eth17 [ 388.945771][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.018210][ T13] bridge_slave_1: left allmulticast mode [ 389.018226][ T13] bridge_slave_1: left promiscuous mode [ 389.018299][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.019679][ T13] bridge_slave_0: left allmulticast mode [ 389.019726][ T13] bridge_slave_0: left promiscuous mode [ 389.019862][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.027252][ T13] bridge_slave_1: left allmulticast mode [ 389.027270][ T13] bridge_slave_1: left promiscuous mode [ 389.027374][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.037210][ T13] bridge_slave_0: left allmulticast mode [ 389.037230][ T13] bridge_slave_0: left promiscuous mode [ 389.037338][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.120009][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.125338][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.129997][ T13] bond0 (unregistering): Released all slaves [ 389.132170][ T13] bond1 (unregistering): Released all slaves [ 389.154979][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.156020][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.156545][ T13] bond0 (unregistering): Released all slaves [ 389.183431][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.184983][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.185851][ T13] bond0 (unregistering): Released all slaves [ 389.188604][ T5497] 8021q: adding VLAN 0 to HW filter on device eth18 [ 389.314287][ T5497] 8021q: adding VLAN 0 to HW filter on device eth19 [ 389.457063][ T5497] 8021q: adding VLAN 0 to HW filter on device eth20 [ 389.564338][ T5497] 8021q: adding VLAN 0 to HW filter on device eth21 [ 389.656476][ T43] kauditd_printk_skb: 51 callbacks suppressed [ 389.656490][ T43] audit: type=1400 audit(1794328356.902:554): avc: denied { write } for pid=6973 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.676371][ T5497] 8021q: adding VLAN 0 to HW filter on device eth22 [ 389.729695][ T13] hsr_slave_0: left promiscuous mode [ 389.730129][ T13] hsr_slave_1: left promiscuous mode [ 389.730505][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.730519][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.730960][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.730974][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.739664][ T43] audit: type=1400 audit(1794328356.982:555): avc: denied { write } for pid=6978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.756668][ T13] hsr_slave_0: left promiscuous mode [ 389.757130][ T13] hsr_slave_1: left promiscuous mode [ 389.757556][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.757569][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.758097][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.758109][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.760668][ T13] hsr_slave_0: left promiscuous mode [ 389.760939][ T13] hsr_slave_1: left promiscuous mode [ 389.761128][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.761136][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.762156][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.762164][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.769546][ T13] veth1_macvtap: left promiscuous mode [ 389.769563][ T13] veth0_macvtap: left promiscuous mode [ 389.769602][ T13] veth1_vlan: left promiscuous mode [ 389.769623][ T13] veth0_vlan: left promiscuous mode [ 389.777175][ T13] veth1_macvtap: left promiscuous mode [ 389.777196][ T13] veth0_macvtap: left promiscuous mode [ 389.777240][ T13] veth1_vlan: left promiscuous mode [ 389.777261][ T13] veth0_vlan: left promiscuous mode [ 389.785602][ T43] audit: type=1400 audit(1794328357.032:556): avc: denied { write } for pid=6981 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.786294][ T13] veth1_macvtap: left promiscuous mode [ 389.786311][ T13] veth0_macvtap: left promiscuous mode [ 389.786356][ T13] veth1_vlan: left promiscuous mode [ 389.786374][ T13] veth0_vlan: left promiscuous mode [ 389.883444][ T13] team0 (unregistering): Port device team_slave_1 removed [ 389.885395][ T13] team0 (unregistering): Port device team_slave_0 removed [ 389.946615][ T13] team0 (unregistering): Port device team_slave_1 removed [ 389.948450][ T13] team0 (unregistering): Port device team_slave_0 removed [ 390.017124][ T13] team0 (unregistering): Port device team_slave_1 removed [ 390.018947][ T13] team0 (unregistering): Port device team_slave_0 removed [ 390.043593][ T5497] 8021q: adding VLAN 0 to HW filter on device eth23 [ 390.099765][ T43] audit: type=1400 audit(1794328357.342:557): avc: denied { write } for pid=6986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.136094][ T43] audit: type=1400 audit(1794328357.382:558): avc: denied { write } for pid=6990 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.167861][ T5497] 8021q: adding VLAN 0 to HW filter on device eth24 [ 390.211092][ T43] audit: type=1400 audit(1794328357.452:559): avc: denied { write } for pid=6993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.240435][ T43] audit: type=1400 audit(1794328357.482:560): avc: denied { write } for pid=6996 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.259869][ T5497] 8021q: adding VLAN 0 to HW filter on device eth25 [ 390.335247][ T43] audit: type=1400 audit(1794328357.582:561): avc: denied { write } for pid=7002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.359052][ T43] audit: type=1400 audit(1794328357.602:562): avc: denied { write } for pid=7005 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.396269][ T43] audit: type=1400 audit(1794328357.642:563): avc: denied { write } for pid=7007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.697625][ T13] IPVS: stop unused estimator thread 0... [ 394.939772][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 394.939790][ T43] audit: type=1400 audit(1794328362.182:569): avc: denied { write } for pid=7051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.979738][ T43] audit: type=1400 audit(1794328362.222:570): avc: denied { write } for pid=7054 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.478839][ T43] audit: type=1400 audit(1794328362.722:571): avc: denied { write } for pid=7059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.508316][ T43] audit: type=1400 audit(1794328362.752:572): avc: denied { write } for pid=7062 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.682032][ T43] audit: type=1400 audit(1794328362.932:573): avc: denied { write } for pid=7067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.716269][ T43] audit: type=1400 audit(1794328362.962:574): avc: denied { write } for pid=7070 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.056203][ T43] audit: type=1400 audit(1794328363.302:575): avc: denied { write } for pid=7075 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.083084][ T43] audit: type=1400 audit(1794328363.332:576): avc: denied { write } for pid=7078 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.128286][ T43] audit: type=1400 audit(1794328363.372:577): avc: denied { write } for pid=7081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.156558][ T43] audit: type=1400 audit(1794328363.402:578): avc: denied { write } for pid=7084 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1