last executing test programs: 39.824152276s ago: executing program 2 (id=568): socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 39.745349006s ago: executing program 2 (id=570): syz_open_dev$rtc(0xfffffffffffffffc, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000002c0)=0x63, 0x2) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES64=r1, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000007000)={0x1, 0x0, [{0xa37}]}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x84814) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x41, 0x0}}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0xaf, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc8, 0x0, 0x6}) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000100)='O', 0x5c8, 0x0, &(0x7f0000000080)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0xffffffffffffff2e, &(0x7f0000000100)=[{&(0x7f00000001c0)="9af4c16085fedbe6cea346cb33ca181348cfcd579deb946e893fc448324932e2807cb114a4decebca66001f57218ca581f5941576106b6b8a1bc44e93698c98430eede8972e87e37ba2183dd3ecea16d463d60355aff995675de65a28f14483df3cacfa874b5d702a718f0871edd72477e888494c58a4f4fedf1eaca", 0x44}], 0x1}}], 0x1, 0x200040d4) 39.495198538s ago: executing program 2 (id=571): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176673d72656c61746901653a38302d3919"]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0x1, r0, 0x80000}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000007c0)={0x8, 0x0, [{0xbae, 0x0, 0xff}, {0x239, 0x0, 0x2}, {0xc0011bf2, 0x0, 0x7}, {0x268, 0x0, 0x2dca}, {0x0, 0x0, 0x4}, {0xa22, 0x0, 0x5}, {0x400000b3, 0x0, 0x1ff}, {0xb92, 0x0, 0x9}]}) mount(&(0x7f00000002c0)=@sg0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000740)='erofs\x00', 0x1000, &(0x7f0000000780)='pedit\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x60, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xffffffff}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x60}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x80, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x13c4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x80}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000b00)='INVITE sip:test@127.0.0.1 SIP/2.0\r\nCall-ID: test12345\r\n\r\n', 0x39, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='active', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/ip_vs_conn\x00', 0x0, 0x0) read(r6, &(0x7f0000000300)=""/1024, 0x400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=@deltaction={0x12c, 0x31, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5fb}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 39.494071428s ago: executing program 2 (id=572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (async) close(0x3) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) close(0x3) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_ENABLE_PPS(r2, 0xc4c03d12, 0x1) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000100000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000014c0)=@newtclass={0x74, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x40, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfdfd, 0x11000}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x2}}]}, 0x74}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x2, 0x3, 0x40002, r3, 0x8, '\x00', r7, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0xe}, 0x50) 39.352348125s ago: executing program 2 (id=573): mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x200013, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x9c}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r2 = syz_clone(0x40200000, &(0x7f00000001c0)="228c0a98272d8a05847d6793be4fa61581cf19ebb645ec79dbc9356e89c565a22cf66319ff1e6fe7f861be08e190aaa8ccf2d69c58e60de3a1bec3f05b35f2b2798813e1c51bce3e7cd7c46d719259ff6a336b0b818499f847", 0x59, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="a5d2e0dbcad5720478379c43ad6e1386318b34554de31106ec62d1873c64a8ca77d2295ccba20bf0ea6f5335d44a3ba1a6aa5281f715c27e729410ee7abeca3ff48b7215c7e1faaa7150e11c7a949f8795173c613eff4edc435d68c12c943b203ee7dc67e637458925554d09a9ebcdd836535d8ec7bc663b25f3ab0f28ec59629f7acd13ae2692e644741e5afd9a137f4ad5be00400ddcf3412069aeb112f8032dcf2b17f72c56a69a5670d0779a4c3cb475576aae78b8e5106461a21609f3f444cc92537ce0b98b56442b95681e2f80e6c02637cee1e984c29bab21300c7dee55b23a2f46026479671104a72ec2391697d5172610e6de4bd09a59e782437cc1037dfbad9a5748308ff12446c5a3bca25d65ea19419e15135ba349920c9d34bdd557a1dfcc09589597e6150c72848082d2779d46625b31d09437d7f6f53d6b203cb0ffae7032d91090aed6451bfabb8a678a2f70bf1516179fd468dc894f0fc003e49e6f389642be01bc26baa271a45fb004cf7f808e158adfc8071fa133e3041c78f741bd1eae23530f1286c230e8dc239100ccc5c3619a9a420995474e5f50ccfd996457fb60f562da905382d5acb411390940a288449ef3618088f5c3734ea5385cfa6dc5549be14003c9cc5e097891be6162cb646d0f1138d71b877bf745f5d785f32de7f16df7ae812a7e89536605aca65171ea6b572ce625772621b83052c21171499df17773fd245e6c00ab10805324112e697134e6d5de9e218ed82b2b22ca8c4538022e127a12318a6e5b3d9e65024aabbfdff5ee7df4f9ad314771de07694fbfea6f1295b0061573cc01d991cf09ff18a39ee5921448ce8debbb615d4766f94631198e4e3c18154b9cd5414b3839ec52499d2e21d244621f4b3b1b31da609a218b7f00fa32fedc69dcd58aae6ff9ef577f9d21b763fe8d458c70dc6795a6c7adc06ed3ea7c5f842ae6d6f468085fd764a5d7a452ca9bbde7bef6eb9beea0f078e8126af4406a2973c29ba9a103c723b7d3007a8f8d4f2cb625c0a9f35ed20f895e4bb1843093d5b59bfa421bb4d7c5010ada338e605d323d768d803630c49d7ec89106ad9cb69c11735d6da5aa2cc0ea018201dcd4a03b685ff4f0dd13a6a0f2e8f5c779116a47bc510fbeec515a986e2fbdc5cabe9b433d085db0efd894484c10384606f22523bbe747de47f52e7a369d353facef988959f08e05578d7ca45661d42dd7b65a0d71498d19c64761a8985b45753298ce24b27f5aaa99ed1705f5abdf341537dfb7e6a0cd0d92ce20c3f6525b1437d128f419d5fc123aae1d692131902dcf8da919880017d767970665ddc4d80ea75358e8d339a6dad80678976ea664d86178853d2e8b1ea7f06a6e217e8d72f133fb5f0c5d57c6b8219945844266f75389a213115d9e02e33af32a98d2eaf8e5f48dc6da2314ebc63fb4182ec062ff3c0d1fb4e008e92a9fba3f716626c26784672e25ab6084c103a602a49a853e9d6441df9d6d9a72d886af3e7672045ff70700502df2c2b49605957145887f609db4734ce919cd906e625c962a0632b867652d2c6a4b4574189aa0596777172714a93dd14e048905000f587b9fab0dc796ba03b5547c9c4975b93b90d4a7e19a8a57ef44c959930ebdf9109b37c3c5d5a0cdb20a308ce82e11ac15fb1edfad6565f1c43ee79cc01aae8ee144ad360dbf162241185c36054361741fce914c97f752264abf68a385a87af11212f3cbe00cd485aba6dba48969a64f8151058fadfd8e6c2331d7c9e833e275281b889c04df87aeb7872f599ecd7b6a79e1bbd85841bee3615412f0c1fa0853cf9e8c7dd498065206a8dc9b9efed5c58e5b30e94e392d5bc5d258996efc2e63066d265b6e85b92cf2910c53925b1ccce4814dffd04f107c379426e28ebcf6b2b96d3646935a932b15d07f26905a11a4932034a9cfc4be1502e4c97bbfa3e2be44cd1951799a29f07ddd0db7647ef5dd23ff1b9194038f0fcc6efd11cdac08620b962942d69e5f54168b880761f1beadd1a4e384d4fd1ca7c0d72dec742f0d59a14376557de3a412e05cc7408c4f20051c5ee80398e1edeed99c25cd80935c28bc80762aa8dc6c84bf19e41b23e05313df2a18e876bf40e9bd8b5dc2445676391ea214fbe20911c53d4c25f19ee5451d234685aace940d573c60a1b859b5a5e2018047999c304f6537ba3de52967d4e15a4836fa23387167cb8ce60a27bca5c530fc7cae77c02a605624deb5f134b450fd4bf168c265d942ce06a369f2953e56bf0f1920eac9350509fd6f49f77a833666d29bf7a89296a04ac9b08710bafacbe404875b6c36492643278f290080a688c0e9679e8f16ff6bd01b4aa7293c05a41b99711ff08c0a8f5ff961bfc564b19ed3501ea9a27353d3a0ffa45598d0541b43fcab163d3b6249d42a2373618ccaaeb208bb8d7c918ce2e32e6151458c5e7881bb0af6cb2e9cf0a42e19c217f54c98b8902757c432345cc989727829e0d963ae16eeddbe178df3f3ed1745f056028b353d81c16148fad60425e8e60c4d742761d07d9369e5b74f6f9996a7fbbb2ac4b193cdde90ef5799259f5ec28ea459e6f44d131607f8be1d0da6306f74cd0c2716358c29ac052d4e912eeec7e9d3aadd6b85e8f548491491cafe5f41366dffb8387be87261a8ad96591ced3043ffce53d5f24f7090afe59d4826654f86e680882614eed59499910ef89cc1fd252ee4acf6e645d5244843f1fcdc6edd024608e9266999426f0108412486dbef7cbb176b0b0a96b203359e68a4202634b0a975e73b78a67adafb50652d9da5e216434a0e7bcb5a3528a58109bff0e6c5d03b6981779c4c9ef95b3e685fa13fe76e1f57572fe2d3fef624874ae75290d469e88eaa08929bc2dbdabf4dca21da8c75fdafa4cfab92ffa5065ada32cb6675352c53908549d4157557d390eb9567173a58e3e64427bd75bbfc7416b309bb81a2e1b838110d368ad647e27ba86b6975c6eb072bc92a306f32beca6b9bb71f8cad2ff0cd23f02fb68a55a151f16cb6b8f7db5001397f1484a3b10ee4509601179718e1289b0bed72a80116b0292f318c0c2cabb085a2c36596bef9e833d652b232da7ee1f7e84f073bfd8b11f79f456172419dc8f93f89830ca406123e93cfd26a00f17d3da7023f449ad6e93255a737efaa7559ecc2d312b12422948cbdc7a563bccc0bf7e26ae94b271052240a980f01d5df851be9bc3d2a04eb9e61c061044c20be2ba84e8b767149f8284a8ca729a4bd03d1a7b4a8d8fd3e249377ed943b183fac62ad8a390f9031e83d09931dab0194a4d44c9040a044114777be04577e0d86f19c776c7f82a8f0593e9f2681e5627b45674effeaf5a1643ad669c0b059ccc9773c694bec92b72c94cf90849d2bda2156529ea084999b41a410ea8813b27422a00294065ea474fa4a3384ae5990bcf0fed676ae22f46b671e24575a9fa65a1954c1e512cc6f6ac30d8b16219e3b85dcb8ea67e0de98504f8f550f56e07ccf72fad544e1b2eb2cb93b602e2cc313d23854c6708c1792ee29371e0f97a42e1d6f339b6eda9867ab43321a304dbbedd34769c2f13db88e328e190d2e93e89b560abf06eeb42b2c3e32460f243db0ddbf638cc9363f008fac10b29c4870c157d319a53f494d2f83d44ea352311ccfaa7f634e272d07bf61b5123ba82ef058ede76b151c70992e3afb8379a719fdecc69e65de207e4b6a76a72f3a419030faeacdf0264ef9e9c2c6cf61b105f7444c26577c6e46e8fb4a91981107c79af6f9d2572db2dc9c73b6f9f06ed290a551a04d0b5709e42a527b1aa1e811fe3c4030fc72742810e3ad38f93c4de3c78fc0d0659161441eec1681fe2e352ea84236ae4b6a76a9dbdb969668eef2a080c2c50fd858207333555866559c3a9e8bf72f435b2bb461f0d25dffc09405da614e4123b15bc91fb93e323f2e26a52b65f18200edc8522861aa4144f38cbea010ac74f55bdcf3d2b846783837d0454485a2f4101adeb1e0ca70387e442982f9e5f1f0a8b102487391011d5fe0a7f6e33010f9c232674b6e460a98f10b89c66460b2c7ff5ac3c7f130062dd6583ee621db677a0238e75c90866e0ac1dbbf9f5885cd37599fa8d0c2ce02a2c1bf05f4f528f28c80656603de1cd1210bdbc2804f115bb8a2fb66fc01fe6cdc13fb0a38e69095fdd0add4fcf48051a9d4240afa26b024be259377b7dc770fcea2da5d77234d87401a9d2f089ead6ad8a8392bc204be2ddf61886cc1c8487c5f3031aa93028b09d57783faf8220739b3fdda50e76e223a50c0004c2a8ad79ff4526a27b32931bbede77dcaaf8b05cb0aa2a9f1343042868fbd86ca803c8f4188da95431b14af678df0c4cdd6c81799f86364f10ba673b16607e3523278505687ca6c6e61a1097c961ec52036e3e26b9a840b23da11137ecbe6967ad10e6083c226249aa2d393f49b62556482cddfe53259158b84f645191858c19b7426c6c56e996dec723ca0f58f8f2cb84d0f0c1b3125950ea8472745c237ffc9b42b0c249183c0eefe287e01b4a689667c1972989b160f7e84dfff8e81c46e12b21d72ccbb1f7b54443cb6e11fa9f2849e06d561d194723c0e7c1a91d46772199d4f86a9b569404b33899fb526b1b9b51f9e65bb335820a07c23a8dca92282db03dd4c5ab5cd9fc361e5aa636a4c3274753a6e85d8ed8fb70b7ab9f28c5379df0fcd771b4d09d0df1fdd727835db28fc745b1726d8f1c887e49cd675766549e4400a1d6fff4dff9f90979da3f5c23397b3234aae56475f7148c2ef4ba048798e40ef2214abc8abb14f4003957eb9aee8a332b9a2c7b5b2e33ab37f07e9f73e49373b13571d6a2a5ad00a9939293236727b3e96ff43b3c2efe5572e909d4092742cde11297b12cd8cf1d8572007f59e4b38fb35a4159c0c86525edb45010e695057ad1f9f6ef355f69f60477990b9accba3398c7c8d97df1bacca09ee3abe51c3466c08772391996631376fa71239cd76f8b921a8b5902cc09a44e457572118b6b71e0a41cf2e6358860db8a6ac57f67fcf842ef52ed9d79ae9110a6988fdc4ea50ec4a3c27b34a06db5801fa0c2982827dbd3850c3863492e3de0a52dabd48e9c5bcd87757099b5b8a6fa5abecfa6042074844d16dda9ee70db3d1ed63f50e5e228bc23e01c16f129b7a7edd331e13291945bb2cb755b9dfe291c7925304832e253374427c5df9cdf7ea1a0df8aec415114ed40bba825b360043bb00410c8569ebcc951dc9b0222490eed4c4af6361c8580e4aabae8736a79d045723069d6f705a997ef7cb3a37af5ae55376a75773ec1e379251f8837fdaece5795fd1525420f16afefb16fb8351574cbf987e67779ed253883a9db9a042ae597c32de110281a105ddb22b757e2ae9194698fee18894cf29b6a558deade738869c3a6b1b69a99c4250ea15aa2e1cd6a0f229127b8162f0264e1cd199ef5983f6ead5617f4320d20467edb904d1671c83933004947367882a770bcf77aa177f324b4fce6fd6631f53a2f99e0c9dffccb8163c3a956a839990109a2b90797a8c556c0a30acfe22f7916008358734d9bc550afc6d7c01f78a3d594c3345e4dd69cd5f9173419305202fbed459ba22ebcd9de6b1c275a4388c357beb6528216be6803a740d29f2a1b87a23f673593885e8a09ad5ddb58612a3133b46ad7d1d7262d9ed3d6de6a0aa28318eb0bb22dd4fe4851ea39108c5d05e876942aed9ea69a885dd5dd910dca37de47c034d6a45911b067984287d5d3b7cd6aa") (async) unshare(0x36040800) fcntl$lock(r1, 0x0, &(0x7f0000001500)={0x2, 0x4, 0x400, 0x0, r2}) write(r1, &(0x7f0000000300)='base=0x0 size=0x40000000 type=write-back', 0x28) (async, rerun: 32) r3 = mmap$IORING_OFF_PBUF_RING(0x0, 0x26a, 0x2000001, 0x13, r1, 0x85f55c6d) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x254802, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000200)={0x100, r5}, 0x0) (async, rerun: 64) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) (rerun: 64) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x100, r6}, 0x0) (async) syz_ublk_setup_io_uring(0x526a, &(0x7f0000001540)={0x0, 0xcec6, 0x80, 0x1, 0x181}, &(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640)=0x0) (async) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_io_uring_submit(0x0, r3, r7, &(0x7f0000001680)=@IORING_OP_RECV_ZC={0x3a, 0x50, 0x29, r8, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) write(r0, &(0x7f0000000100)="d40f968b658dc20db92206d7199e8af9b728a58af3908fd95ec643d40298ce4237418392227b1b26d555133066d47bd4802df2e75c828351007781d7d9175b4c8df74fab0f44314833715eb513a241a912b94525d8c8b6431aa7e19573a7b2b66ab805c7b03aaeaaf2ac0e7412c68567ae9996e2fff2490c2bfd922278a317ad730d3e5331932780d6f9055be31737f807b224", 0x93) 39.22452248s ago: executing program 2 (id=575): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) syz_emit_ethernet(0x76, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x68, 0x64, 0x0, 0x8, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x20, 0x606f, 0x0, 0xe7, {[@exp_fastopen={0xfe, 0x14, 0xf989, "e0625660bac570f7f163f1bb3603f207"}, @timestamp={0x8, 0xa, 0x9, 0x6}, @window={0x3, 0x0, 0x1}, @exp_smc={0xfe, 0x6}, @nop, @mss={0x2, 0x3, 0x200}, @mss={0x2, 0x4, 0x5}, @timestamp={0x8, 0xa, 0xe6, 0x10000}]}}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), 0x0}, 0x20) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000f2}]}) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x201, 0x1, 0x7726}, 0x1c) r6 = socket(0x1e, 0x4, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000040)={@broadcast, @broadcast, 0x0}, &(0x7f0000000100)=0xc) prctl$PR_SET_IO_FLUSHER(0x50, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) ioctl$FBIOBLANK(r9, 0x4611, 0x2) recvmsg$unix(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), 0x1}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a00ffffffff"], 0x5c}}, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000480)=@generic={0x2, 0x5, 0xfff}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4048884) 24.200957402s ago: executing program 32 (id=575): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) syz_emit_ethernet(0x76, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x68, 0x64, 0x0, 0x8, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x20, 0x606f, 0x0, 0xe7, {[@exp_fastopen={0xfe, 0x14, 0xf989, "e0625660bac570f7f163f1bb3603f207"}, @timestamp={0x8, 0xa, 0x9, 0x6}, @window={0x3, 0x0, 0x1}, @exp_smc={0xfe, 0x6}, @nop, @mss={0x2, 0x3, 0x200}, @mss={0x2, 0x4, 0x5}, @timestamp={0x8, 0xa, 0xe6, 0x10000}]}}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), 0x0}, 0x20) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000f2}]}) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x201, 0x1, 0x7726}, 0x1c) r6 = socket(0x1e, 0x4, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000040)={@broadcast, @broadcast, 0x0}, &(0x7f0000000100)=0xc) prctl$PR_SET_IO_FLUSHER(0x50, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) ioctl$FBIOBLANK(r9, 0x4611, 0x2) recvmsg$unix(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), 0x1}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a00ffffffff"], 0x5c}}, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000480)=@generic={0x2, 0x5, 0xfff}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4048884) 11.671919819s ago: executing program 4 (id=844): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mremap(&(0x7f0000e38000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000078a000/0x3000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f00003d6000/0x8000)=nil, 0x8000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (fail_nth: 4) 11.391872101s ago: executing program 4 (id=846): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="0001"], 0x3c}}, 0x54) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x49, 0x0, &(0x7f0000001180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r5, @ANYBLOB="94e40700100c000064001280110001006272696467655f736c617665000000004c0005800800030001000000050021000000000005001b000000000005000c000100000008"], 0x84}}, 0x200088c2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000040)={r8, 0x57b}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={r8, 0x9b5, 0x9, 0x6, 0x8, 0x8}, 0x14) 11.312202951s ago: executing program 4 (id=847): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000900)={0xffffffffffffffff, &(0x7f0000000740)='wlan0\x00', 0x1, 0x0, 0x8, 0x0, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="1400000010000100001f0000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a31000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480200001800700010072740000140002800800014000000015080002400000000024000180090001006861736800000000140002800800024000000017080007"], 0xe4}}, 0x0) 11.276174301s ago: executing program 4 (id=848): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x0, 0x7}, {0x5, 0xe1, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x7, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x2, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x8000, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000006800010000000000000000000000000000000000070100010000000000000200010000000100000002000000fe00000014000c8006000100044000000800030064000000"], 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffff9, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r0], 0xb8}}, 0x2) 11.178630155s ago: executing program 4 (id=850): r0 = socket(0x21, 0xf, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001b40)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x810, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0xffffffff, 0xc000, 0x7ff, r2, r3, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000003480), 0x3f}, 0x801) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)='select \n', 0x10) write(r5, &(0x7f0000000100)='file read /etc/passwd task.uid=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, r7, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x35e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x233}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x185}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x220}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1a}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x40000) setns(0xc9, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r8, &(0x7f0000000040)={&(0x7f0000000580)=@in6={0xa, 0x4e22, 0x81, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x80, 0x0}, 0x44044) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r9, r9, r9, 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000640)='asymmetric\x00', &(0x7f0000000600)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_int(r0, 0x0, 0x22, &(0x7f00000004c0), &(0x7f0000000500)=0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r10, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000020c0)=[{0x0}], 0x1, &(0x7f0000002140), 0x0, 0x4040800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r8, @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) 11.071798287s ago: executing program 4 (id=852): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) write$tun(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x107f) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="7d948cefaf2c957c2338f76629e12f2949f7e99168e82d2c0ed853539d735b88292e5a6e198a528d15faaeea2f1600f40c29e4ab0a31672e060a184bfd047cbfb4ad6b712a8d3f3a7fb798ecd2f70f12e627d4896bf8dc158f53100a160855ca44f366915073f3a90f3b9453bf9fde43a1a75319e499eb79450a26c86a460b35a9aac20dfe1cb3d5c0156162820fd18bfd4a1956fb7710832ac2d35504da15f697f8323701aaa752692e6319c1eb7920fe151bc9d7d6a6781e124092720166a91f85ca6972a0f15c2e5f173c19d4bdb231f8082bab26c88d7d77b0fefede4de1d36ad9886162a81cc273bf18de9c7e", 0xef}, {&(0x7f0000000300)="0305674fc4a20d1b308bdba051392756886eacdba401423d28348529ad720a98684eea7477ca8f131574bcbbd3c67af48656e2e483588cbf773aac27933eb4b72f32ab25e0fd59b2f3a8fd38038c1c35237c475d1b63d8b75127da08f42bca89f698507b02a077b6574964a4150ca0e3712a9f617bf920036b4a2ec8a2697ccc22b300bbe4c495391562589029d9c19e59e60770734ad0e004d27fd43f8f8c9c7aa09f09a05b16466ba4c752295ce0187c17354941e595634529a628abbcac378bdeae", 0xc3}, {&(0x7f0000000400)="3739088f5ce56b84738dcb6117bff42092379ff687c9019121c1fc0c8fc07cf89a22f1df97b7b5551e1089f529208f6827a175a559a9e3d70110c7ca6e36047bedace56e364d3be0e5567a69d37c705bbdb44a3901071c37847a2ad11b7eeb", 0x5f}, {&(0x7f0000000140)="2b08b6dbee28b2bb62f1e947844dd8180b20195819b4759f398fa0f10f2b828639d5b6f5244b1c95292056f2b1b1602a6f012ff6b7f2e74c32e16cc6ce62fcc4dd4d88", 0x43}, {&(0x7f0000000500)="bf5779a5c4e6f826d86f1c802a93cd5f048975da12cc8d89d1735708bd8a51cb98d73a3c3d5348f9bf4323447859853602a64a63186e9f7954e82b02d7fc93f43cf80da52ddf442013ae333d9cd7651084b4a1e710125ed039a66e5b31fbf2efaf12c9dc52a14ff79acb8dc72e3b290d2cc7", 0x72}], 0x5}, 0x4040004) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) 3.469897447s ago: executing program 0 (id=910): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c, 0x80800) sendto$inet6(r0, &(0x7f0000000080)="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", 0x1000, 0x4000000, &(0x7f0000001080)={0xa, 0x4e20, 0x9, @mcast1, 0x7}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f00000010c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000001100)=0x28) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000001340)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8014}, 0xc, &(0x7f0000001300)={&(0x7f00000011c0)={0x10c, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0xb}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_WME={0x44, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xe}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xa}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x77, 0xbe, "6bfd13364fb6e58dbeddee7d09e3530fdd8b561c45897019ab11a18613f072e60232e6d9940d0b1aebf9a22db52b12d39da3d695d9d0fa83ff0e0ac1caccc78768542d08febe0d511a9e35b63f48a1f114c73f45fed8391d98d6f5149ed084125b715fea7c6d003483f3d507ac4c7d98d9ea76"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x276}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r3}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) open$dir(&(0x7f0000001380)='./file0\x00', 0xc0100, 0x110) gettid() fcntl$setstatus(r1, 0x4, 0x800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000014c0)={&(0x7f00000013c0), 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x20, r4, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001500)={{0x1, 0x1, 0x18, r0, {0x6a4e}}, './file0\x00'}) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000001540)={0x66ca, 0x4, 0x200, 0x5, 0x80000000}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001580)={0x0, @in6={{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, 0x6, 0x3b, 0xf, 0xe, 0xa, 0x3, 0x9}, 0x9c) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x20, 0x1405, 0x20, 0x70bd2d, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x20}}, 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000001740)={{0x81}, 'port0\x00', 0x20, 0x8, 0x1, 0x0, 0x5, 0x6, 0x4, 0x0, 0x2, 0x9}) syz_emit_vhci(&(0x7f0000001800)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "c0b669"}}}, 0xd) syz_usb_connect$cdc_ecm(0x2, 0xbe, &(0x7f0000001840)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x1, 0x1, 0x1, 0x10, 0x5, "", [{{0x9, 0x4, 0x0, 0xe1, 0x2, 0x2, 0x6, 0x0, 0xf9, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xffff0c05, 0x9, 0x2d03}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0xa9, 0x20, 0x3}, @obex={0x5, 0x24, 0x15, 0xd}, @mdlm_detail={0x55, 0x24, 0x13, 0xa9, "316f38b65bf8df8f821b034beb32d3a3b84dbbaf27172dd553426e15c5a04f9aabe2472cb946c43c78537469617ee60efd030d4d8552f6db6346c808888e7d2ea3533846fa68a83c2a0e88507bc3a85fee"}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x3f, 0x7, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x2, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x78, 0x9, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x1, 0xff}}}}}]}}]}}, &(0x7f0000001b80)={0xa, &(0x7f0000001900)={0xa, 0x6, 0x300, 0x6, 0x8c, 0x2, 0xff, 0x3}, 0x19, &(0x7f0000001940)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "3505ea20ce70072d14c270f26fe6f30b"}]}, 0x5, [{0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x33, &(0x7f0000001a00)=@string={0x33, 0x3, "3719afe28c9e1ffa2a85ae8fdda890ee3cae5760377420ed0b319db8d2dd706684702a4e59d5d90558f5b84929faa4ab47"}}, {0xce, &(0x7f0000001a40)=@string={0xce, 0x3, "b388445021060ad65e4505f041da87f3a4d130085e3b8fc7cc4c163fb4b9b91b2cc242b952a9dda86d6bf689675d336ba3ef811c6f602ddbdd774204e4924f3e6197e9f55394fe4d87b8c765c6346eabb07ff0c30c5a8d74c87c0fae8e920c9b6d5446872c8973375f0fbee988ef732812db67192ea7625587c44f83bdb32f8711c74e4047eea8b66ea5f87f9ea4440fc888000ac20cb74b4be52f0ad1ae79b5e12b168eaf662758b15fcfa0e06a7a0c909e18f435af30c9f6cebde712c947eda01354e5c0aff08d2d5d1c94"}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x1404}}]}) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000001c40)={{0x0, 0xb}, {0x6, 0x9}, 0x2, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001c80)={'wlan1\x00'}) write$fault_inject(r5, &(0x7f0000001cc0)='Y\x00', 0x2) pipe2$watch_queue(&(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001d80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x58, r4, 0x200, 0x70bd28, 0x7fffffff, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xbf29, 0x1d}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x4048800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r7, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x20, r4, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x78}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c8d1}, 0x80) r10 = socket$igmp6(0xa, 0x3, 0x2) accept4(r10, &(0x7f0000001fc0)=@caif=@rfm, &(0x7f0000002040)=0x80, 0x0) 2.209872708s ago: executing program 1 (id=922): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000014c0)=0xfffffffffffffffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x8d, 0x0, 0x1}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet(r4, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000dc0)="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", 0x320}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) r5 = syz_io_uring_setup(0xf06, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x1, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000480)=@IORING_OP_SOCKET={0x2d, 0x40, 0x0, 0x8, 0x9, 0x0, 0x5, 0x0, 0x8286ca8cebed636a, {0x0, 0x0, 0x4a05}}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r9 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) ioctl$SG_SET_RESERVED_SIZE(r9, 0x2275, &(0x7f0000000000)=0x9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) close(0x3) recvmsg(r10, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff1}, 0x40000102) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x110) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000900)=ANY=[@ANYBLOB="0180c200000000000000000086dd6000000000081100002e0000000000000000000000040000ff02000000000000000000000000000100000e2200089078"], 0x0) 2.141496099s ago: executing program 3 (id=923): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711208000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007fe000/0x800000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1, 0xa, 0x20002f7}) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000280)={r0, &(0x7f0000000140)='!@\x00', 0x40, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = open$dir(&(0x7f0000001680)='./file0\x00', 0x101000, 0x80) ioctl$OCFS2_IOC_GROUP_ADD(r5, 0x40186f02, &(0x7f00000016c0)={0x3, 0x3, 0x8, 0x1}) syz_emit_ethernet(0x3e, &(0x7f0000001700)=ANY=[@ANYBLOB="aaaaaaaa1351ffffffffffff86dd60fca33f00087300fe800000000000000000000000000000fe8000000000001c2be5ebb74dc3762a1de80000000000000000aa5c"], 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r6, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_destroy(r6) ioctl$DVB_DVR_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000001300)={0x3, 0x0, r1}) io_submit(r6, 0x6, &(0x7f0000001640)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0xff, r2, &(0x7f0000000100)="3be4fb1e181c2f69c1d7526e576ed78192562ba85d5d7b683eddaac1d9eaf86ff909dd3a49c219187cd3aa671d91989f5ce62022101e82b4befa836999574a0f", 0x40, 0xa519, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x7fff, r1, &(0x7f0000000200)="e9bfb637ce02f8426d71e2e0c6aff5a2b64c2360db9a092a9f2029e179e2723e560c35d08a85100f757587b304e8da07ba", 0x31, 0x100000000, 0x0, 0x2, r3}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x6, 0x1, r4, &(0x7f00000002c0)="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", 0x1000, 0xffffffffffff8001, 0x0, 0x3, r3}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x3, 0x9, r7, &(0x7f0000001340)="40b8815dd9e4bbc8522ee3c97fc1ed42f9cd8294267b9b91b63e95127ffe213ac56c387a2e58563dcdf77b2a94dd64ae996469c400491ba8439a236500863bb9f0cc57ddd4457d7692a74864e4270cecfa9fb62f0a70fadf9eff701bb8bb27e1641ebcdc37b0b5f570e8b257b0bab375d58576c29770fcb9140d39a910adf58e5365edde9a4dd3f4ca764d51daa603067144799355241176f2cdc8e1915ffb2951e7145fc2dc5b6e3182f7c1cfa3c6ee6fef4dc271af3912200c7d853daa1d3835a853bf5c", 0xc5, 0x8000000000000001, 0x0, 0x2, r3}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000001480)="6bae09548f996f5e8a2d9fe332d54794c105954d219e7e7a0a1e122609b62618a3861cf1943ce05e3807bf258c0879003c77e2a4fbd4dee126f47dfcf5ab4338b023753ac17bb26c992667482c47e1068fc3", 0x52, 0xd, 0x0, 0x2, r1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x2, 0x7ef3, r0, &(0x7f0000001540)="1df9164fca05e959ad8a74b526554850074af3759608ab1256fe897eb69046aef779aa81410f2f352de32bd099238677325a1ff69dc0b0cd5a63da6c9f154d6d06c200ef7e97497a3957f91c1fbe441f38a5a3607178c6718a3c702b75e885f735eaa17ecc1381c9932c5196125857674a0037698b1ac7a1", 0x78, 0x3, 0x0, 0x3, r3}]) 2.021522357s ago: executing program 3 (id=924): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000900)={0xffffffffffffffff, &(0x7f0000000740)='wlan0\x00', 0x1, 0x0, 0x8, 0x0, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000040000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a31000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480200001800700010072740000140002800800014000000015080002400000000024000180090001006861736800000000140002800800024000000017080007"], 0xe4}}, 0x0) 1.938695081s ago: executing program 3 (id=925): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) fcntl$setlease(r1, 0x400, 0x2) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0x80, 0x78b}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x47, 0x124, 0x1, 0x401}}, @out_dx={0x6a, 0x28, {0x6003, 0x1, 0x7}}, @code={0xa, 0x59, {"0f01330f784e9eb9800000c00f3235001000000f306466420f3882790066b821000f00d8363667470f017507d9fc420f783ab805000000b9d5bc2ffd0f01d9c441b11688749d1b88"}}, @enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0xfec00000, 0xd057}}, @nested_amd_stgi={0x17e, 0x10}, @enable_nested={0x12c, 0x18}], 0x161}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x3ff, 0x3, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x64, 0x0, 0xfd, 0x29, 0x0, @multicast1, @broadcast}}}}) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b2a, &(0x7f0000000040)) (async) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0xcc9e) 1.720022436s ago: executing program 3 (id=926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) (async) recvmmsg(r4, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/216, 0xd8}], 0x1}, 0x4}], 0x1, 0x1, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5f, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1fe}}}}]}, 0x58}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x10000000, 0x6, 0x401}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) (async) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)="2c548f2664234aea5882c40b008c", 0xe}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r10, 0xc0389423, &(0x7f0000000140)={0xa00000, 0x30, [0xf, 0x2, 0x3, 0x9], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) bind$inet(r12, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) (async) sendmmsg$inet(r12, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) (async) sendto$inet(r12, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 1.32823603s ago: executing program 1 (id=927): r0 = creat(0x0, 0xe5) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c0000000000119078000000000000000000144e2100089078c05efd16abb710f73d4b7e3dbd3a478b6e2054d6a4b5d291a09321d4c23d4defa8"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) renameat2(r4, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000002c0)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') chown(&(0x7f0000000000)='./file7\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="1000000002000000", @ANYBLOB="94d4"], 0x412f00) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x8001, @empty, 0x5}, 0x1c) 1.081356264s ago: executing program 1 (id=928): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10001, &(0x7f0000004380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g\\oup_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000004400)={0x2020, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x4, 0x0, 0x0, 0x4, 0x81}}, 0x50) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x2d, 0x1, 0x220112, 0xc, 0x6, 0xffffffff, 0x81, 0x0, 0x0, 0x110, 0xf}}, 0x50) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200000, 0x21) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x4) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xfffffffffffffffe, r2}, 0x10) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f00000003c0)=[@nested_amd_set_intercept={0x181, 0x30, {0x0, 0x2e, 0x5}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x4000, 0x30af}}, @uexit={0x0, 0x18, 0x40}, @in_dx={0x69, 0x20, {0xa143, 0x2}}, @uexit={0x0, 0x18, 0x401}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3c3, @save_area=0x62a, 0x400, 0x3, 0x5}}, @cpuid={0x64, 0x18, {0x3, 0x4}}, @cpuid={0x64, 0x18, {0xf9110dd, 0x8}}, @wrmsr={0x65, 0x20, {0xa66, 0xa4}}, @nested_amd_vmload={0x182, 0x18}, @nested_create_vm={0x12d, 0x18, 0x3}, @uexit={0x0, 0x18, 0xc}, @out_dx={0x6a, 0x28, {0xb2b8, 0x2, 0x7ff0000000000000}}], 0x1a8}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x5608, 0x3) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f00000002c0)={[0x80a0000, 0x3000, 0xeeee8000, 0x1], 0x7fffffff, 0x0, 0x7}) 1.081073988s ago: executing program 1 (id=929): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000540)={0xe, 0xb76, &(0x7f0000000240)="7b9888f2b9ba92fda594bc0d56ec12a0e2d08ebdd727f65ae2fa54c16fb4947066d6405b1d28845cffe306166255bfdb2c", &(0x7f0000000480)="18db788865099c39da6a285e085a1078b8f9643308a80badc4d4ea47c645ef43cecf66028aba6e59eff815952135cb6f662d22a988301e6d5fe4d2a767330f6efa9aeb5c7cef772ab4bfc5dacf5790a423260c87cf1083271fe03975e74198716d607acb75e6ac4ba111a958ea21bd99d0fd16be3f5a82cb7a68b5ed83bd1c1ed980d39f7d2dc0733f6149bd8d2d4c6b78d0c406faa76fb0ea7a75d1483bc94b722e6c62dd8a2b74158c2a4230b19f342d4d89173397b0b11a", 0x31, 0xb9}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) r6 = dup(r4) syz_open_procfs(0x0, &(0x7f0000000340)='schedstat\x00') (async) r7 = syz_open_procfs(0x0, &(0x7f0000000340)='schedstat\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000001300)=""/4112, 0x1010}], 0x1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x60810}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x11}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}]}, 0x50}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x60810}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x11}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}]}, 0x50}}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x15) readv(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/42, 0x2a}], 0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x5) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f00000001c0)="9776") 981.817245ms ago: executing program 1 (id=930): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UBLK_U_CMD_START_USER_RECOVERY(0xffffffffffffffff, 0xc0207510, &(0x7f0000000180)={0x0}) ioctl$UBLK_U_CMD_STOP_DEV(r2, 0xc0207507, &(0x7f0000000200)={r3}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16) write(r0, &(0x7f0000000000)='\"', 0xfdef) 751.370774ms ago: executing program 3 (id=931): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x0}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)={r1, 0x22}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x8, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000140)={0x0, r2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, r3}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @initdev, @empty}, &(0x7f0000000300)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r5, 0x0, 0x9, 0x1, 0x6, 0x21, @dev={0xfe, 0x80, '\x00', 0x38}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x7800, 0xfff, 0x6}}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000400)=@IORING_OP_LISTEN={0x39, 0x4b, 0x0, r4, 0x0, 0x0, 0xf, 0x0, 0x1, {0x0, r6}}) r7 = syz_io_uring_setup(0x34c, &(0x7f0000000480)={0x0, 0xe5ab, 0x10000, 0x0, 0x1d7}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) io_uring_enter(r7, 0x60c6, 0xebb1, 0x2, &(0x7f00000005c0)={[0x3]}, 0x8) r8 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r8, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/204, 0xcc}, {&(0x7f0000001700)=""/177, 0xb1}, {&(0x7f00000017c0)=""/24, 0x18}, {&(0x7f0000001800)=""/227, 0xe3}, {&(0x7f0000001900)=""/61, 0x3d}, {&(0x7f0000001940)=""/100, 0x64}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/81, 0x51}], 0x9, &(0x7f0000002b00)=""/4096, 0x1000}, 0x2000) r9 = accept$inet(r7, 0x0, &(0x7f0000003b40)) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000003b80)={@broadcast, @dev={0xac, 0x14, 0x14, 0x39}, 0x1, 0x5, [@dev={0xac, 0x14, 0x14, 0x25}, @private=0xa010100, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x24) r10 = syz_open_pts(0xffffffffffffffff, 0x42000) ioctl$EXT4_IOC_GETSTATE(r10, 0x40046629, &(0x7f0000003bc0)) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000003c00)='vegas', 0x5) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000003c40)={0x5}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000003d00)={0xa30000, 0x100, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000003cc0)={0xa10902, 0x80000000, '\x00', @p_u32=&(0x7f0000003c80)=0x806}}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000003fc0)={0x1, 0x0, &(0x7f0000003f80)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000004000)={&(0x7f0000003d40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003d80)=[{}, {}, {}, {}, {}], &(0x7f0000003f00)=[0x0], &(0x7f0000003f40), 0x5, 0x1, 0x4, 0x0, r11}) r12 = dup3(r10, r10, 0x80000) ioctl$TUNSETIFINDEX(r12, 0x400454da, &(0x7f0000004080)=r5) r13 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000040c0)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r13, 0xc020f509, &(0x7f0000004100)={r10, 0x1, 0x401, 0x3}) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000004140)=""/115) 689.061604ms ago: executing program 3 (id=932): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x2, 0x1) syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001040)='./dev/ttyUSB0\x00', 0x106003, 0x1) 420.861278ms ago: executing program 0 (id=933): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r7) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x14, r8, 0x5, 0xf0bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x40800) setsockopt$inet_tcp_TLS_TX(r5, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="8b96529b1b", 0x5, 0x20000081, 0x0, 0x0) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r10, 0x3b86, &(0x7f00000000c0)={0x18, r11, 0x4, 0x2}) r12 = socket$inet6(0x10, 0x1, 0x4) sendto$inet6(r12, &(0x7f0000000180)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 348.400506ms ago: executing program 0 (id=934): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/78, 0x4e}], 0x1) (async) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) (async) syz_clone(0xb8d00, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 343.315021ms ago: executing program 0 (id=935): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/42, &(0x7f00000000c0)=0x2a) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000fffd0200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000800000006000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000020000000000000084010500fc010000000000000000000000000001000000002b00000000000000ac141418000000000000000000000000000000000000fb0000000000493f0d5100000000ffffffff000000000000000000000000000000002b00000002000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ffffffff000000000000000000000000000000000103000000000000d62c000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb00000000000000000000000000000000020000000000000003000000000000007f000001000000000000000000000000000000003c0000000200000000000000000000000000000000000001ffffffff00000000fdffffff00000000000000006401010000000000000000000000000000000000320000000a000000ffffffff0000000000000000000000000000000001028000000000000200000000000000b0f66fc2aac209e376acd40785cff99fa6cd0502805fd4c23fbc192627b077edd154ebacd57039bdccb014543efb01f8c6b67c3b28fe2f2c96a7e26b3831b124701a0a839bd5baa7cbbeadf69f55c729c7588b2bbe6182be9b4463a8657bd02154b2e8a8d22232ab0a8d7f35c8d8c01049eb3d9c682e01c98afebee3a9251171df8ea3226722a74c355a51b2f16678ffb90a245cffa21cb6672a752343da24002c22a4e90449cfe5f5c7ad62b634ae59934cabd05a28c12b571ab55317a21074263f38a24c493bbba1c922c76958df8737702edc07a6b1f9"], 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) 270.985767ms ago: executing program 0 (id=936): creat(&(0x7f0000000300)='./file0\x00', 0xe5) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x42902, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c0000000000119078000000000000000000144e2100089078c05efd16abb710f73d4b7e3dbd3a478b6e2054d6a4b5d291a09321d4c23d4defa8"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) 81.611437ms ago: executing program 1 (id=937): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x200000, 0x1ff) close(r0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x100) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x38, 0xfff, 0x3fff9, 0x17e, 0x2, 0x0, 0xf1, 0x0, 0x81, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xffffffffffffeffd, 0xbdb], 0xdddd0000, 0x1c6017}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 0s ago: executing program 0 (id=938): setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000)=0x9, 0x4) r1 = socket(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) r2 = socket$igmp(0x2, 0x3, 0x2) flistxattr(r2, &(0x7f00000009c0)=""/177, 0xb1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000003c0)={@local, 0x5a6d, 0x0, 0x2, 0x0, 0x0, 0xd4ff}, &(0x7f0000000480)=0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f0000000380)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) syz_emit_ethernet(0x35, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000020000000001002742420300"/56], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x30fd06, 0x0, {0xa, 0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x20000000) write(r0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x440, 0x0, 0x250, 0x2e8, 0x2e8, 0x98, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'bond_slave_1\x00', {0x6}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0x7f, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x5c, 0x2}, 0x0, 0xd8, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x2, [0x0, 0x2, 0x0, 0x4, 0x1], 0x1, 0x6}}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010101, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x89, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x40}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000004c0)={'veth1_to_batadv\x00', @local}) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) kernel console output (not intermixed with test programs): e.79 [ 85.214684][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 85.215118][ T7372] CIFS: VFS: Error connecting to socket. Aborting operation. [ 85.215157][ T7372] CIFS: VFS: cifs_mount failed w/return code = -4 [ 85.216628][ T10] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 85.216640][ T10] usb 7-1: Product: syz [ 85.216647][ T10] usb 7-1: Manufacturer: syz [ 85.216866][ T10] usb 7-1: SerialNumber: syz [ 85.340559][ T7390] [U] [ 85.340590][ T7390] [U] [ 85.340614][ T7390] [U] [ 85.340637][ T7390] [U] [ 85.340753][ T7390] [U] [ 85.340781][ T7390] [U] [ 85.340807][ T7390] [U] [ 85.340833][ T7390] [U] [ 85.341051][ T7390] [U] [ 85.341075][ T7390] [U] [ 85.341099][ T7390] [U] [ 85.341143][ T7390] [U] [ 85.342149][ T7390] [U] [ 85.342183][ T7390] [U] [ 85.342211][ T7390] [U] [ 85.342238][ T7390] [U] [ 85.477075][ T7389] [U] [ 85.547975][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'. [ 85.769855][ T7419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.416'. [ 85.921464][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 86.052024][ T10] usb 8-1: device descriptor read/64, error -71 [ 86.088223][ T7430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.093555][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 86.093574][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 86.105646][ T7430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.108053][ T7430] bond1: (slave bond0): making interface the new active one [ 86.110118][ T7430] bond1: (slave bond0): Enslaving as an active interface with an up link [ 86.113239][ T7430] netlink: 'syz.0.420': attribute type 4 has an invalid length. [ 86.113255][ T7430] netlink: 152 bytes leftover after parsing attributes in process `syz.0.420'. [ 86.116782][ T7430] .`: renamed from bond0 (while UP) [ 86.120836][ T7430] bond1: Primary slave changed to .`, reselecting active slave [ 86.192373][ T12] bond1: (slave .`): link status definitely down, disabling slave [ 86.194141][ T12] bond1: now running without any active interface! [ 86.265232][ T7437] jffs2: notice: (7437) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 86.293378][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 86.343269][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 86.421547][ T10] usb 8-1: device descriptor read/64, error -71 [ 86.532230][ T10] usb usb8-port1: attempt power cycle [ 86.871478][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 86.892206][ T10] usb 8-1: device descriptor read/8, error -71 [ 87.056112][ T5744] Bluetooth: hci0: connection err: -111 [ 87.143049][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 87.144334][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'. [ 87.162742][ T10] usb 8-1: device descriptor read/8, error -71 [ 87.271844][ T10] usb usb8-port1: unable to enumerate USB device [ 87.452122][ T7480] team0: Device gtp0 is of different type [ 87.504699][ T7482] team0: Device gtp0 is of different type [ 87.781614][ T10] usb 7-1: USB disconnect, device number 4 [ 88.025474][ T7498] CIFS: VFS: UNC: missing share name [ 88.025588][ T7498] CIFS: VFS: Malformed UNC in devname [ 88.044917][ T7498] ip_tables: iptables: counters copy to user failed while replacing table [ 88.047947][ T7498] lo: entered allmulticast mode [ 88.048221][ T7498] bond0: entered allmulticast mode [ 88.048462][ T7498] dummy0: entered allmulticast mode [ 88.048635][ T7498] eql: entered allmulticast mode [ 88.048712][ T7498] ifb0: entered allmulticast mode [ 88.048959][ T7498] ifb1: entered allmulticast mode [ 88.055899][ T7498] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 88.063461][ T7498] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 88.066796][ T7498] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 88.067104][ T7498] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 88.067567][ T7498] hwsim0: entered allmulticast mode [ 88.067661][ T7498] ieee802154 phy0 wpan0: entered allmulticast mode [ 88.067873][ T7498] ieee802154 phy1 wpan1: entered allmulticast mode [ 88.068000][ T7498] teql0: entered allmulticast mode [ 88.068083][ T7498] tunl0: entered allmulticast mode [ 88.068173][ T7498] gre0: entered allmulticast mode [ 88.068236][ T7498] gretap0: entered allmulticast mode [ 88.068301][ T7498] erspan0: entered allmulticast mode [ 88.068366][ T7498] ip_vti0: entered allmulticast mode [ 88.068447][ T7498] ip6_vti0: entered allmulticast mode [ 88.068507][ T7498] sit0: entered allmulticast mode [ 88.068570][ T7498] ip6tnl0: entered allmulticast mode [ 88.068635][ T7498] ip6gre0: entered allmulticast mode [ 88.068697][ T7498] lapb0: entered allmulticast mode [ 88.068818][ T7498] lapb1: entered allmulticast mode [ 88.068987][ T7498] lapb2: entered allmulticast mode [ 88.069095][ T7498] lapb3: entered allmulticast mode [ 88.069170][ T7498] lapb4: entered allmulticast mode [ 88.069254][ T7498] lapb5: entered allmulticast mode [ 88.069354][ T7498] lapb6: entered allmulticast mode [ 88.069587][ T7498] lowpan0: entered allmulticast mode [ 88.069712][ T7498] mac80211_hwsim hwsim7 wlan2: entered allmulticast mode [ 88.069868][ T7498] lapb7: entered allmulticast mode [ 88.070924][ T7498] bond1: entered allmulticast mode [ 88.071113][ T7498] lapb8: entered allmulticast mode [ 88.071199][ T7498] bond2: entered allmulticast mode [ 88.071388][ T7498] lapb9: entered allmulticast mode [ 88.072713][ T7498] mac80211_hwsim hwsim13 wlan3: entered allmulticast mode [ 88.072869][ T7498] lapb10: entered allmulticast mode [ 88.361612][ T2398] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 88.514255][ T2398] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 88.515159][ T2398] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 88.515177][ T2398] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 88.515206][ T2398] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.747986][ T7506] netlink: 84 bytes leftover after parsing attributes in process `syz.3.441'. [ 88.843327][ T7515] fuse: Unknown parameter 'ro000000N0100000id' [ 89.144699][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 89.144712][ T43] audit: type=1326 audit(1789765871.307:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.3.451" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe18af9e159 code=0x0 [ 89.169092][ T43] audit: type=1400 audit(1789765871.327:617): avc: denied { ioctl } for pid=7536 comm="syz.2.450" path="socket:[18753]" dev="sockfs" ino=18753 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.086986][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 90.177265][ T7549] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.177757][ T7549] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.198876][ T7552] netlink: 'syz.2.455': attribute type 1 has an invalid length. [ 90.274513][ T7549] batman_adv: batadv0: Interface deactivated: dummy0 [ 90.343954][ T7549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.349307][ T7549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.528007][ T7552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.562808][ T7553] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 90.581437][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.609897][ T5828] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.609939][ T5828] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.609970][ T5828] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.702587][ T7566] __nla_validate_parse: 2 callbacks suppressed [ 90.702606][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 90.705903][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 90.723388][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 90.729203][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 90.737645][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 90.749540][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 90.763466][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 90.776742][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 90.785839][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 90.789886][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 90.983939][ T7585] binfmt_misc: Unknown parameter '-' [ 90.992057][ T3379] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 91.134789][ T10] usb 6-1: USB disconnect, device number 9 [ 91.142429][ T3379] usb 7-1: Using ep0 maxpacket: 16 [ 91.144118][ T3379] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 91.145545][ T3379] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.145570][ T3379] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.145591][ T3379] usb 7-1: config 0 interface 0 has no altsetting 0 [ 91.145615][ T3379] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.237439][ T7598] netlink: 'syz.3.461': attribute type 4 has an invalid length. [ 91.368419][ T7615] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 91.368452][ T7615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.369806][ T43] audit: type=1326 audit(1789765873.527:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7614 comm="syz.3.466" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe18af9e159 code=0x0 [ 91.647972][ T7631] netlink: 'syz.1.470': attribute type 8 has an invalid length. [ 91.926680][ T7643] binder: 7642:7643 ioctl 4008ae8a 2000000001c0 returned -22 [ 92.190337][ T7655] ipt_rpfilter: unknown options [ 92.250538][ T7661] overlayfs: failed to resolve './file0': -2 [ 92.261156][ T7657] wg0 speed is unknown, defaulting to 1000 [ 92.284025][ T7658] syz.0.483 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 92.344445][ T43] audit: type=1400 audit(1789765874.507:619): avc: denied { accept } for pid=7667 comm="syz.0.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 92.474149][ T7671] wg0 speed is unknown, defaulting to 1000 [ 92.597387][ T43] audit: type=1400 audit(1789765874.757:620): avc: denied { create } for pid=7677 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 92.770262][ T7703] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x20bb instead [ 92.770286][ T7703] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x000c instead [ 92.770303][ T7703] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xb0b1 instead [ 92.770768][ T7703] jffs2: notice: (7703) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 92.777815][ T43] audit: type=1400 audit(1789765874.937:621): avc: denied { write } for pid=7702 comm="syz.1.494" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.778064][ T43] audit: type=1400 audit(1789765874.937:622): avc: denied { setattr } for pid=7702 comm="syz.1.494" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.208102][ T7734] futex_wake_op: syz.3.504 tries to shift op by -1; fix this program [ 93.212504][ T7734] ip_tables: iptables: counters copy to user failed while replacing table [ 93.322237][ T43] audit: type=1400 audit(1789765875.477:623): avc: denied { read write } for pid=7743 comm="syz.1.507" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 93.322285][ T43] audit: type=1400 audit(1789765875.477:624): avc: denied { open } for pid=7743 comm="syz.1.507" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 93.496041][ T7752] usb usb8: usbfs: process 7752 (syz.3.510) did not claim interface 0 before use [ 93.572604][ T6260] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 93.665225][ T7762] CacheFiles: Failed to register: -95 [ 93.738640][ T5612] usb 7-1: USB disconnect, device number 5 [ 93.754623][ T6260] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 93.755490][ T6260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 93.755507][ T6260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 93.757188][ T6260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.757201][ T6260] usb 5-1: Product: syz [ 93.757209][ T6260] usb 5-1: Manufacturer: syz [ 93.757217][ T6260] usb 5-1: SerialNumber: syz [ 93.818080][ T43] audit: type=1400 audit(1789765875.977:625): avc: denied { ioctl } for pid=7763 comm="syz.3.515" path="socket:[18894]" dev="sockfs" ino=18894 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 94.082449][ T7782] io-wq is not configured for unbound workers [ 94.094162][ T3379] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 94.254399][ T3379] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 94.258213][ T3379] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.258241][ T3379] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.258270][ T3379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.325413][ T7791] rnbd_client L202: map_device: Unknown parameter or missing value 'p' [ 94.360198][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 94.360215][ T43] audit: type=1400 audit(1789765876.517:630): avc: denied { ioctl } for pid=7790 comm="syz.3.521" path="/dev/usbmon0" dev="devtmpfs" ino=736 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.422454][ T7798] rnbd_client L202: map_device: Unknown parameter or missing value 'p' [ 94.747427][ T43] audit: type=1400 audit(1789765876.907:631): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 94.870240][ T7814] kvm [7813]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800000000000 [ 95.303539][ T7818] macsec0: entered allmulticast mode [ 95.303940][ T7818] veth1_macvtap: entered allmulticast mode [ 95.304053][ T7818] macsec0: left allmulticast mode [ 95.304061][ T7818] veth1_macvtap: left allmulticast mode [ 95.305035][ T7818] netlink: 'syz.3.526': attribute type 1 has an invalid length. [ 95.318774][ T7818] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.334133][ T7818] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 95.340804][ T43] audit: type=1400 audit(1789765877.497:632): avc: denied { mount } for pid=7817 comm="syz.3.526" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 95.419767][ T43] audit: type=1400 audit(1789765877.577:633): avc: denied { write } for pid=7820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.473164][ T43] audit: type=1400 audit(1789765877.637:634): avc: denied { write } for pid=7825 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.626797][ T7835] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.728496][ T7840] Cannot find add_set index 3 as target [ 95.769889][ T7845] overlayfs: missing 'workdir' [ 95.779353][ T43] audit: type=1400 audit(1789765877.937:635): avc: denied { setopt } for pid=7844 comm="syz.3.534" lport=46352 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 95.779665][ T43] audit: type=1400 audit(1789765877.937:636): avc: denied { read } for pid=7844 comm="syz.3.534" lport=46352 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 95.781326][ T7845] ima: rule for LSM 'u' is undefined [ 95.782010][ T43] audit: type=1804 audit(1789765877.937:637): pid=7845 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.3.534" name="ima_policy_written" res=0 errno=-17 [ 95.782046][ T43] audit: type=1807 audit(1789765877.937:638): action=measure func=FILE_CHECK obj_type=u res=0 [ 95.782069][ T43] audit: type=1802 audit(1789765877.937:639): pid=7845 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.3.534" res=0 errno=0 [ 95.796240][ T7844] ima: policy update failed [ 96.333738][ T1347] usb 5-1: USB disconnect, device number 12 [ 96.801711][ T3379] usb 6-1: USB disconnect, device number 10 [ 96.833273][ T7882] __nla_validate_parse: 32 callbacks suppressed [ 96.833296][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 96.856523][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 96.862431][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'. [ 96.912716][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.912744][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.912761][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.912779][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.348159][ T7904] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 97.456030][ T7902] netlink: 'syz.2.553': attribute type 3 has an invalid length. [ 97.456113][ T7902] netlink: 'syz.2.553': attribute type 3 has an invalid length. [ 97.456134][ T7902] netlink: 'syz.2.553': attribute type 3 has an invalid length. [ 97.456153][ T7902] netlink: 'syz.2.553': attribute type 3 has an invalid length. [ 97.456174][ T7902] netlink: 'syz.2.553': attribute type 3 has an invalid length. [ 97.456193][ T7902] netlink: 'syz.2.553': attribute type 3 has an invalid length. [ 97.456212][ T7902] netlink: 'syz.2.553': attribute type 3 has an invalid length. [ 97.456229][ T7902] netlink: 'syz.2.553': attribute type 3 has an invalid length. [ 97.456247][ T7902] netlink: 'syz.2.553': attribute type 3 has an invalid length. [ 97.762792][ T42] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 97.913668][ T42] usb 5-1: not running at top speed; connect to a high speed hub [ 97.913688][ T42] usb 5-1: New USB device found, idVendor=1eda, idProduct=2310, bcdDevice=9c.e5 [ 97.914663][ T42] usb 5-1: config 246 has an invalid interface number: 180 but max is 1 [ 97.914677][ T42] usb 5-1: config 246 has an invalid interface number: 70 but max is 1 [ 97.914688][ T42] usb 5-1: config 246 has no interface number 0 [ 97.914696][ T42] usb 5-1: config 246 has no interface number 1 [ 97.914716][ T42] usb 5-1: config 246 interface 180 altsetting 2 endpoint 0xE has invalid maxpacket 1552, setting to 64 [ 97.914736][ T42] usb 5-1: config 246 interface 70 altsetting 1 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 97.914749][ T42] usb 5-1: config 246 interface 70 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.914764][ T42] usb 5-1: config 246 interface 70 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 97.914775][ T42] usb 5-1: config 246 interface 70 altsetting 1 has an endpoint descriptor with address 0x61, changing to 0x1 [ 97.914787][ T42] usb 5-1: config 246 interface 70 altsetting 1 endpoint 0x1 has invalid maxpacket 58483, setting to 64 [ 97.914800][ T42] usb 5-1: config 246 interface 70 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 97.914811][ T42] usb 5-1: config 246 interface 70 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 97.914821][ T42] usb 5-1: config 246 interface 70 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 97.914832][ T42] usb 5-1: config 246 interface 70 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 97.914843][ T42] usb 5-1: config 246 interface 70 altsetting 1 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 97.914856][ T42] usb 5-1: config 246 interface 70 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 97.914866][ T42] usb 5-1: config 246 interface 70 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 97.914876][ T42] usb 5-1: config 246 interface 70 altsetting 1 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 97.914889][ T42] usb 5-1: config 246 interface 180 has no altsetting 0 [ 97.914898][ T42] usb 5-1: config 246 interface 70 has no altsetting 0 [ 97.916578][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.916590][ T42] usb 5-1: Product: è€é”᧣ힰ섲▒ͣêœå ‡ëŠªë¥ã½ƒçœ…妒ῴ⻜꾪篫唀ꂭ䄾硲䥛ﯿ⨺䆴鯄墒缌渙螷餋瞵樎컂㯜猨塿त䘔Մ쵅嗛묣çŸç‘‹âš¼ä‡ë’šã¹£á‘¬ã®”⑴㑭痆뉢㶛诸⦅꾼ï¡è­é¡à½„⋰ɀ퀜äžà¸·ì²†å²·á—«â¿ã¯‹å ®ç¼“᪛앮఻廙蕅ç–쟱뛹ã±â¡¸ë¤µì‚¡ì¬ºé¶Ÿê›‚땱í«îŽšç…¿â·ˆë§„ï™²æ´‡ï§¤ìž»ìƒ•î¿²ç™€îŸã°çª©ã¥Šâ­’깕 [ 97.916608][ T42] usb 5-1: Manufacturer: Л [ 97.916615][ T42] usb 5-1: SerialNumber: ࡃ [ 98.486539][ T7928] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.486826][ T7928] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.494910][ T7928] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.503171][ T7928] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.504153][ T7928] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.506996][ T7928] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.509635][ T7928] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.509682][ T7928] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.519300][ T7928] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.649003][ T7949] FAULT_INJECTION: forcing a failure. [ 98.649003][ T7949] name failslab, interval 1, probability 0, space 0, times 0 [ 98.649025][ T7949] CPU: 3 UID: 0 PID: 7949 Comm: syz.1.569 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.649042][ T7949] Tainted: [L]=SOFTLOCKUP [ 98.649046][ T7949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.649054][ T7949] Call Trace: [ 98.649058][ T7949] [ 98.649063][ T7949] dump_stack_lvl+0x100/0x190 [ 98.649095][ T7949] should_fail_ex.cold+0x5/0xa [ 98.649113][ T7949] should_failslab+0xc2/0x120 [ 98.649131][ T7949] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 98.649144][ T7949] ? __d_alloc+0x35/0xa50 [ 98.649161][ T7949] __d_alloc+0x35/0xa50 [ 98.649175][ T7949] ? do_raw_spin_lock+0x128/0x260 [ 98.649192][ T7949] d_alloc+0x4a/0x1e0 [ 98.649208][ T7949] d_alloc_name+0x83/0xb0 [ 98.649224][ T7949] ? __pfx_d_alloc_name+0x10/0x10 [ 98.649239][ T7949] ? fast_dput+0x168/0x6f0 [ 98.649256][ T7949] ? dput.part.0+0x4f/0x240 [ 98.649267][ T7949] proc_setup_thread_self+0x3f/0x1e0 [ 98.649284][ T7949] proc_fill_super+0x5d4/0x870 [ 98.649301][ T7949] ? __pfx_proc_fill_super+0x10/0x10 [ 98.649317][ T7949] get_tree_nodev+0xdd/0x190 [ 98.649329][ T7949] vfs_get_tree+0x92/0x320 [ 98.649346][ T7949] path_mount+0x7d0/0x24c0 [ 98.649364][ T7949] ? __pfx_path_mount+0x10/0x10 [ 98.649379][ T7949] ? lockdep_hardirqs_on+0x7d/0x110 [ 98.649398][ T7949] ? putname+0xb1/0x110 [ 98.649411][ T7949] ? kmem_cache_free+0x127/0x6c0 [ 98.649433][ T7949] ? __x64_sys_mount+0x293/0x310 [ 98.649448][ T7949] __x64_sys_mount+0x293/0x310 [ 98.649464][ T7949] ? __pfx___x64_sys_mount+0x10/0x10 [ 98.649485][ T7949] do_syscall_64+0x123/0x790 [ 98.649502][ T7949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.649514][ T7949] RIP: 0033:0x7f1224b9e159 [ 98.649523][ T7949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.649534][ T7949] RSP: 002b:00007f1225b31028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.649545][ T7949] RAX: ffffffffffffffda RBX: 00007f1224e25fa0 RCX: 00007f1224b9e159 [ 98.649553][ T7949] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 98.649560][ T7949] RBP: 00007f1224c3503b R08: 0000000000000000 R09: 0000000000000000 [ 98.649566][ T7949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.649573][ T7949] R13: 00007f1224e26038 R14: 00007f1224e25fa0 R15: 00007ffdaba04708 [ 98.649588][ T7949] [ 98.649592][ T7949] proc_fill_super: can't allocate /proc/thread-self [ 98.907308][ T7958] tmpfs: Bad value for 'mpol' [ 98.911612][ T7958] netlink: 60 bytes leftover after parsing attributes in process `syz.2.571'. [ 99.046173][ T7967] affs: No valid root block on device sr0 [ 99.091404][ T7967] wg0 speed is unknown, defaulting to 1000 [ 99.243823][ T7980] syzkaller0: entered promiscuous mode [ 99.243843][ T7980] syzkaller0: entered allmulticast mode [ 99.761441][ T7990] vlan2: entered allmulticast mode [ 99.761455][ T7990] macsec0: entered allmulticast mode [ 99.761462][ T7990] veth1_macvtap: entered allmulticast mode [ 99.775149][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.497824][ T8026] can: request_module (can-proto-0) failed. [ 100.548797][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 100.548810][ T43] audit: type=1400 audit(1789765882.706:657): avc: denied { setopt } for pid=8030 comm="syz.3.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.549724][ T8031] ip6t_REJECT: ECHOREPLY is not supported [ 100.551209][ T58] usb 5-1: USB disconnect, device number 13 [ 100.573159][ T5744] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.573176][ T5731] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.618061][ T43] audit: type=1400 audit(1789765882.776:658): avc: denied { ioctl } for pid=8035 comm="syz.1.584" path="socket:[28709]" dev="sockfs" ino=28709 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.857155][ T43] audit: type=1400 audit(1789765883.016:659): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 101.053662][ T43] audit: type=1400 audit(1789765883.216:660): avc: denied { connect } for pid=8058 comm="syz.0.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 101.056466][ T43] audit: type=1400 audit(1789765883.216:661): avc: denied { ioctl } for pid=8058 comm="syz.0.591" path="socket:[27184]" dev="sockfs" ino=27184 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 101.065901][ T43] audit: type=1400 audit(1789765883.216:662): avc: denied { name_connect } for pid=8058 comm="syz.0.591" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 101.111986][ T8059] fuse: Bad value for 'fd' [ 101.206060][ T8063] validate_nla: 48 callbacks suppressed [ 101.206078][ T8063] netlink: 'syz.1.590': attribute type 39 has an invalid length. [ 101.281197][ T169] smbdirect: ib_dev[syz2] removed [ 101.287607][ T42] wg0 speed is unknown, defaulting to 1000 [ 101.287651][ T42] syz2: Port: 1 Link DOWN [ 101.515612][ T43] audit: type=1400 audit(1789765883.676:663): avc: denied { listen } for pid=8079 comm="syz.3.597" lport=43031 faddr=::ffff:172.30.0.4 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.518251][ T43] audit: type=1400 audit(1789765883.676:664): avc: denied { accept } for pid=8079 comm="syz.3.597" lport=43031 faddr=::ffff:172.30.0.4 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.544737][ T8082] capability: warning: `syz.3.597' uses 32-bit capabilities (legacy support in use) [ 101.854607][ T5731] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.500763][ T43] audit: type=1400 audit(1789765884.656:665): avc: denied { mac_admin } for pid=8103 comm="syz.3.605" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.500825][ T8105] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 102.501955][ T43] audit: type=1400 audit(1789765884.656:666): avc: denied { relabelto } for pid=8103 comm="syz.3.605" name="166" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 102.525351][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'. [ 102.526737][ T8107] vcan0 speed is unknown, defaulting to 1000 [ 102.527373][ T8107] vcan0 speed is unknown, defaulting to 1000 [ 102.527754][ T8107] vcan0 speed is unknown, defaulting to 1000 [ 102.653390][ T5731] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.658951][ T5612] vcan0 speed is unknown, defaulting to 1000 [ 102.659022][ T8107] infiniband syz1: set active [ 102.659032][ T8107] infiniband syz1: added vcan0 [ 102.663425][ T5731] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.669120][ T8107] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 102.669141][ T8107] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 102.669162][ T8107] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 102.701666][ T8107] RDS/IB: syz1: added [ 102.702098][ T8107] smc: adding ib device syz1 with port count 1 [ 102.702194][ T8107] smc: ib device syz1 port 1 has no pnetid [ 102.709777][ T1347] vcan0 speed is unknown, defaulting to 1000 [ 102.714938][ T8107] vcan0 speed is unknown, defaulting to 1000 [ 102.822865][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.607'. [ 102.927760][ T8107] vcan0 speed is unknown, defaulting to 1000 [ 103.071948][ T8107] vcan0 speed is unknown, defaulting to 1000 [ 103.201104][ T8107] vcan0 speed is unknown, defaulting to 1000 [ 103.498240][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.501666][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.501760][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.501859][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.501935][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.502010][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.502086][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.502158][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.502243][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.502316][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.502390][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.502462][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.502532][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.502605][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.502683][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.502774][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.502862][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.502943][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.503037][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.503114][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.503222][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.503442][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.503532][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.503608][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.506842][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.506923][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.506981][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.507036][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.507096][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.507151][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.507232][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.507287][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.507339][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.507391][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.507445][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.507501][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.507554][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.507607][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.507659][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.507717][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.507777][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.507830][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.507884][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.507936][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.507990][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.508043][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.508097][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.508150][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.508207][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.508261][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.508346][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.508403][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.508456][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.508513][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.511075][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.511194][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.511272][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.511332][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.513753][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.513808][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.513861][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.513916][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.513972][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.514028][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.514080][ T8131] comedi comedi0: Minor 3 could not be opened [ 103.936335][ T5731] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.095107][ T8146] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 104.095132][ T8146] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 104.095223][ T8146] vhci_hcd vhci_hcd.0: Device attached [ 104.098569][ T8145] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 104.098591][ T8145] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 104.098620][ T8149] usbip_core: unknown command [ 104.098633][ T8149] vhci_hcd: unknown pdu 808464432 [ 104.098645][ T8149] usbip_core: unknown command [ 104.098655][ T8145] vhci_hcd vhci_hcd.0: Device attached [ 104.098934][ T5599] vhci_hcd vhci_hcd.3: stop threads [ 104.098947][ T5599] vhci_hcd vhci_hcd.3: release socket [ 104.098962][ T5599] vhci_hcd vhci_hcd.3: disconnect device [ 104.140122][ T8148] vhci_hcd: connection closed [ 104.146839][ T5599] vhci_hcd vhci_hcd.3: stop threads [ 104.146866][ T5599] vhci_hcd vhci_hcd.3: release socket [ 104.146884][ T5599] vhci_hcd vhci_hcd.3: disconnect device [ 104.189300][ T8154] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 104.189336][ T8154] CIFS: VFS: Malformed UNC in devname [ 104.420688][ T8161] macvtap1: entered promiscuous mode [ 104.425324][ T8161] vlan1: entered promiscuous mode [ 104.427052][ T8161] team0: Device macvtap1 failed to register rx_handler [ 104.431586][ T8161] vlan1: left promiscuous mode [ 104.680844][ T8172] netlink: 'syz.0.621': attribute type 1 has an invalid length. [ 104.680875][ T8172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.733819][ T5744] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.733850][ T5731] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.866473][ T8179] netlink: 'syz.1.625': attribute type 1 has an invalid length. [ 104.884892][ T8179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.958686][ T8179] TC_ACT_REPEAT abuse ? [ 105.215972][ T8189] vcan0 speed is unknown, defaulting to 1000 [ 105.768626][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 105.768641][ T43] audit: type=1400 audit(1789765887.925:689): avc: denied { ioctl } for pid=8206 comm="syz.1.631" path="socket:[28236]" dev="sockfs" ino=28236 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.862221][ T43] audit: type=1400 audit(1789765888.015:690): avc: denied { ioctl } for pid=8210 comm="syz.1.632" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.959827][ T43] audit: type=1400 audit(1789765888.115:691): avc: denied { write } for pid=8215 comm="syz.1.633" name="instances" dev="tracefs" ino=5482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 106.016458][ T43] audit: type=1400 audit(1789765888.175:692): avc: denied { write } for pid=8215 comm="syz.1.633" name="instances" dev="tracefs" ino=5482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 106.074343][ T8222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.633'. [ 106.325495][ T8221] netlink: 48 bytes leftover after parsing attributes in process `syz.0.635'. [ 106.367504][ T43] audit: type=1400 audit(1789765888.525:693): avc: denied { write } for pid=8224 comm="syz.3.636" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 106.569235][ T43] audit: type=1400 audit(1789765888.725:694): avc: denied { ioctl } for pid=8236 comm="syz.1.640" path="/dev/ptyq6" dev="devtmpfs" ino=133 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 106.989247][ T8251] binder: 8250:8251 ioctl 4018620d 0 returned -22 [ 107.145299][ T8255] GUP no longer grows the stack in syz.0.646 (8255): 200000004000-20000000a000 (200000002000) [ 107.145327][ T8255] CPU: 3 UID: 0 PID: 8255 Comm: syz.0.646 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.145348][ T8255] Tainted: [L]=SOFTLOCKUP [ 107.145355][ T8255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.145364][ T8255] Call Trace: [ 107.145370][ T8255] [ 107.145377][ T8255] dump_stack_lvl+0x100/0x190 [ 107.145409][ T8255] gup_vma_lookup.cold+0x83/0x96 [ 107.145435][ T8255] __get_user_pages+0x252/0x2c30 [ 107.145464][ T8255] ? lock_acquire+0x1d1/0x380 [ 107.145483][ T8255] ? mtree_load+0xdc/0xb50 [ 107.145508][ T8255] ? __pfx___get_user_pages+0x10/0x10 [ 107.145528][ T8255] ? mtree_load+0x388/0xb50 [ 107.145549][ T8255] ? mtree_load+0x388/0xb50 [ 107.145581][ T8255] get_user_pages_remote+0x3d2/0xb10 [ 107.145603][ T8255] ? mas_prev_setup.constprop.0+0x980/0x9e0 [ 107.145632][ T8255] ? __pfx_get_user_pages_remote+0x10/0x10 [ 107.145664][ T8255] __access_remote_vm+0x3bb/0x890 [ 107.145691][ T8255] ? __pfx___access_remote_vm+0x10/0x10 [ 107.145709][ T8255] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 107.145735][ T8255] ? proc_pid_cmdline_read+0x31b/0x9a0 [ 107.145756][ T8255] ? proc_pid_cmdline_read+0x4aa/0x9a0 [ 107.145783][ T8255] proc_pid_cmdline_read+0x552/0x9a0 [ 107.145815][ T8255] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 107.145841][ T8255] ? rw_verify_area+0xce/0x6d0 [ 107.145869][ T8255] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 107.145891][ T8255] vfs_readv+0x5d8/0x8d0 [ 107.145926][ T8255] ? __pfx_vfs_readv+0x10/0x10 [ 107.145957][ T8255] ? lock_acquire+0x1d1/0x380 [ 107.145976][ T8255] ? __fget_files+0x34/0x3d0 [ 107.146007][ T8255] ? __fget_files+0x21f/0x3d0 [ 107.146035][ T8255] ? do_preadv+0x1ac/0x270 [ 107.146078][ T8255] do_preadv+0x1ac/0x270 [ 107.146107][ T8255] ? __pfx_do_preadv+0x10/0x10 [ 107.146142][ T8255] do_syscall_64+0x123/0x790 [ 107.146168][ T8255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.146186][ T8255] RIP: 0033:0x7f2f0519e159 [ 107.146202][ T8255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.146218][ T8255] RSP: 002b:00007f2f06027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 107.146235][ T8255] RAX: ffffffffffffffda RBX: 00007f2f05426090 RCX: 00007f2f0519e159 [ 107.146248][ T8255] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000006 [ 107.146259][ T8255] RBP: 00007f2f0523503b R08: 00000000fffffff9 R09: 0000000000000000 [ 107.146270][ T8255] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 107.146281][ T8255] R13: 00007f2f05426128 R14: 00007f2f05426090 R15: 00007ffdffa36378 [ 107.146307][ T8255] [ 107.152326][ T43] audit: type=1400 audit(1789765889.305:695): avc: denied { create } for pid=8253 comm="syz.0.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 107.194729][ T43] audit: type=1400 audit(1789765889.355:696): avc: denied { ioctl } for pid=8258 comm="syz.3.647" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 107.594021][ T3379] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 107.745790][ T3379] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 107.747781][ T3379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 107.747808][ T3379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 107.747826][ T3379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 107.747846][ T3379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 107.750006][ T3379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.750025][ T3379] usb 5-1: Product: syz [ 107.750038][ T3379] usb 5-1: Manufacturer: syz [ 107.750050][ T3379] usb 5-1: SerialNumber: syz [ 108.119021][ T8273] gfs2: error -5 reading superblock [ 108.359998][ T43] audit: type=1400 audit(1789765890.515:697): avc: denied { append } for pid=8283 comm="syz.1.655" name="uprobe_events" dev="tracefs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 108.361294][ T43] audit: type=1400 audit(1789765890.515:698): avc: denied { mounton } for pid=8283 comm="syz.1.655" path="/175/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 108.457629][ T1095] Bluetooth: hci4: Frame reassembly failed (-84) [ 108.584390][ T8297] ima: policy update completed [ 108.683024][ T8297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.685226][ T8297] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.686916][ T8297] batman_adv: batadv0: Interface activated: dummy0 [ 108.686934][ T8297] batadv0: mtu less than device minimum [ 108.687991][ T8297] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.689026][ T8297] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.689985][ T8297] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.690952][ T8297] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.691924][ T8297] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.692864][ T8297] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.693884][ T8297] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.711100][ T8297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.800134][ T8297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.823060][ T8297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.847040][ T8297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.847056][ T8297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.851039][ T8297] veth1_vlan: left promiscuous mode [ 108.851962][ T8297] veth0_vlan: left promiscuous mode [ 108.852822][ T8297] veth0_vlan: entered promiscuous mode [ 108.857485][ T8297] veth1_vlan: entered promiscuous mode [ 108.872071][ T8297] veth0_macvtap: left promiscuous mode [ 108.872688][ T8297] veth0_macvtap: entered promiscuous mode [ 108.882368][ T8297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.883161][ T8297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.883979][ T8297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.892351][ T8297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.912182][ T8297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.927745][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.927834][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.929554][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.929679][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.995735][ T5599] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.995780][ T5599] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.996477][ T5599] bond2: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 108.996746][ T5599] bond2: (slave veth0_to_bond): making interface the new active one [ 109.009945][ T5599] bond2: active interface up! [ 109.034424][ T5599] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.034445][ T5599] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.034507][ T5599] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.034521][ T5599] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.034538][ T5599] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.034552][ T5599] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.686014][ T5599] net_ratelimit: 54 callbacks suppressed [ 109.686034][ T5599] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 109.686053][ T5599] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 109.748300][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.665'. [ 110.194372][ T5599] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 110.194393][ T5599] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 110.380971][ T30] usb 5-1: USB disconnect, device number 14 [ 110.444914][ T8330] nvme_fcloop: unknown parameter or missing value 'syz1' [ 110.448349][ T8330] nvme_fcloop: unknown parameter or missing value 'syz1' [ 110.495122][ T5744] Bluetooth: hci4: command 0x1003 tx timeout [ 110.495233][ T5731] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 110.563727][ T8342] overlayfs: workdir and upperdir must reside under the same mount [ 110.734945][ T5823] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 110.734974][ T5823] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 110.780727][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 110.780801][ T43] audit: type=1800 audit(1789765892.935:723): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4926 res=0 errno=0 [ 111.058977][ T43] audit: type=1800 audit(1789765893.215:724): pid=8353 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.673" name="threaded" dev="sysfs" ino=94372 res=0 errno=0 [ 111.062742][ T43] audit: type=1800 audit(1789765893.215:725): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149385 res=0 errno=0 [ 111.226801][ T43] audit: type=1800 audit(1789765893.385:726): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 111.249854][ T43] audit: type=1800 audit(1789765893.395:727): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 111.254725][ T5823] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 111.254752][ T5823] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 111.302564][ T8356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.674'. [ 111.303670][ T8356] netlink: 52 bytes leftover after parsing attributes in process `syz.1.674'. [ 111.352593][ T43] audit: type=1800 audit(1789765893.505:728): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 111.448288][ T43] audit: type=1800 audit(1789765893.605:729): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 111.594543][ T43] audit: type=1800 audit(1789765893.745:730): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 111.626100][ T43] audit: type=1800 audit(1789765893.785:731): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 111.626900][ T8369] usb 1-1: USB disconnect, device number 2 [ 111.703513][ T43] audit: type=1800 audit(1789765893.855:732): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 111.775670][ T8301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 111.775698][ T8301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 111.800338][ T8377] FAULT_INJECTION: forcing a failure. [ 111.800338][ T8377] name failslab, interval 1, probability 0, space 0, times 0 [ 111.800361][ T8377] CPU: 3 UID: 0 PID: 8377 Comm: syz.1.681 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.800376][ T8377] Tainted: [L]=SOFTLOCKUP [ 111.800380][ T8377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.800387][ T8377] Call Trace: [ 111.800391][ T8377] [ 111.800396][ T8377] dump_stack_lvl+0x100/0x190 [ 111.800426][ T8377] should_fail_ex.cold+0x5/0xa [ 111.800442][ T8377] should_failslab+0xc2/0x120 [ 111.800461][ T8377] kmem_cache_alloc_noprof+0x92/0x6a0 [ 111.800474][ T8377] ? skb_clone+0x190/0x400 [ 111.800493][ T8377] skb_clone+0x190/0x400 [ 111.800506][ T8377] netlink_deliver_tap+0xaed/0xcc0 [ 111.800528][ T8377] netlink_unicast+0x6a5/0x850 [ 111.800541][ T8377] ? __pfx_netlink_unicast+0x10/0x10 [ 111.800558][ T8377] tipc_nl_compat_recv+0x3a1/0xc40 [ 111.800576][ T8377] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 111.800588][ T8377] ? __pfx_tipc_nl_node_set_link+0x10/0x10 [ 111.800616][ T8377] ? __pfx_tipc_nl_compat_link_set+0x10/0x10 [ 111.800631][ T8377] ? lock_acquire+0x1d1/0x380 [ 111.800649][ T8377] ? trace_contention_end+0x126/0x160 [ 111.800662][ T8377] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 111.800680][ T8377] genl_family_rcv_msg_doit+0x214/0x300 [ 111.800695][ T8377] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 111.800708][ T8377] ? genl_get_cmd+0x3e7/0x760 [ 111.800725][ T8377] ? __dev_queue_xmit+0xa33/0x4970 [ 111.800742][ T8377] ? __radix_tree_lookup+0x217/0x2b0 [ 111.800761][ T8377] genl_rcv_msg+0x560/0x800 [ 111.800776][ T8377] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.800789][ T8377] ? __lock_acquire+0x5c0/0x1f40 [ 111.800800][ T8377] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 111.800819][ T8377] netlink_rcv_skb+0x159/0x420 [ 111.800830][ T8377] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.800844][ T8377] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.800862][ T8377] ? netlink_deliver_tap+0x1ae/0xcc0 [ 111.800882][ T8377] genl_rcv+0x28/0x40 [ 111.800893][ T8377] netlink_unicast+0x585/0x850 [ 111.800907][ T8377] ? __pfx_netlink_unicast+0x10/0x10 [ 111.800923][ T8377] netlink_sendmsg+0x8b0/0xda0 [ 111.800937][ T8377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.800951][ T8377] ? selinux_socket_sendmsg+0x198/0x2f0 [ 111.800972][ T8377] ____sys_sendmsg+0xa4d/0xbe0 [ 111.800988][ T8377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.801000][ T8377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.801020][ T8377] ? lock_acquire+0x1d1/0x380 [ 111.801031][ T8377] ? get_pid_task+0x2a/0x250 [ 111.801047][ T8377] ___sys_sendmsg+0x190/0x1e0 [ 111.801065][ T8377] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.801081][ T8377] ? get_pid_task+0x106/0x250 [ 111.801102][ T8377] ? find_held_lock+0x2b/0x80 [ 111.801128][ T8377] __sys_sendmsg+0x160/0x210 [ 111.801228][ T8377] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.801262][ T8377] do_syscall_64+0x123/0x790 [ 111.801286][ T8377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.801298][ T8377] RIP: 0033:0x7f1224b9e159 [ 111.801308][ T8377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.801319][ T8377] RSP: 002b:00007f1225b31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.801331][ T8377] RAX: ffffffffffffffda RBX: 00007f1224e25fa0 RCX: 00007f1224b9e159 [ 111.801338][ T8377] RDX: 75cc12930d826c14 RSI: 0000200000000200 RDI: 0000000000000003 [ 111.801345][ T8377] RBP: 00007f1225b31090 R08: 0000000000000000 R09: 0000000000000000 [ 111.801351][ T8377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.801357][ T8377] R13: 00007f1224e26038 R14: 00007f1224e25fa0 R15: 00007ffdaba04708 [ 111.801373][ T8377] [ 112.698416][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 112.710846][ T8397] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 112.784356][ T8400] comedi comedi3: pcl724: I/O base address or length out of range [ 112.966651][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.688'. [ 113.734368][ T8417] i2c i2c-0: new_device: Missing parameters [ 113.854648][ T8420] netlink: 'syz.1.691': attribute type 10 has an invalid length. [ 113.856677][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.856977][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.976341][ T8420] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.976577][ T8420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.978525][ T8420] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.978625][ T8420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.988020][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.988184][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.133280][ T8437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.698'. [ 114.133297][ T8437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.698'. [ 114.198614][ T8443] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 114.198681][ T8443] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare [ 114.215700][ T8444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.696'. [ 114.217256][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.696'. [ 114.394218][ T5744] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.401889][ T5744] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.403416][ T5744] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.405757][ T5744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.407368][ T5744] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.415954][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 114.422732][ T8454] hsr_slave_0: left promiscuous mode [ 114.442893][ T8454] hsr_slave_1: left promiscuous mode [ 114.748116][ T8450] vcan0 speed is unknown, defaulting to 1000 [ 114.845198][ T5823] net_ratelimit: 76 callbacks suppressed [ 114.845210][ T5823] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 114.845223][ T5823] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 114.986456][ T8471] netlink: 40 bytes leftover after parsing attributes in process `syz.3.706'. [ 115.005275][ T8471] ifb1: left allmulticast mode [ 115.041360][ T8443] CIFS: VFS: Error connecting to socket. Aborting operation. [ 115.041403][ T8443] CIFS: VFS: cifs_mount failed w/return code = -4 [ 115.170513][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.170581][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.170652][ T8450] bridge_slave_0: entered allmulticast mode [ 115.184201][ T8450] bridge_slave_0: entered promiscuous mode [ 115.193137][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.196570][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.196692][ T8450] bridge_slave_1: entered allmulticast mode [ 115.199732][ T8450] bridge_slave_1: entered promiscuous mode [ 115.227151][ T8450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.231354][ T8450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.258890][ T8450] team0: Port device team_slave_0 added [ 115.262599][ T8450] team0: Port device team_slave_1 added [ 115.278904][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.278916][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.278929][ T8450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.279767][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.279774][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.279787][ T8450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.299899][ T8450] hsr_slave_0: entered promiscuous mode [ 115.300327][ T8450] hsr_slave_1: entered promiscuous mode [ 115.300617][ T8450] debugfs: 'hsr0' already exists in 'hsr' [ 115.300628][ T8450] Cannot create hsr debugfs directory [ 115.355189][ T5599] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 115.355217][ T5599] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 115.424346][ T8450] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.427732][ T8450] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.428478][ T8450] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.430267][ T8450] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.430812][ T8450] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.434690][ T8450] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.435882][ T8450] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.439623][ T8450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.464598][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.464681][ T8450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.464946][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.464996][ T5612] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 115.465027][ T8450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.497646][ T8450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.502712][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.513204][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.524014][ T8450] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.528628][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.528739][ T8507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.533115][ T8527] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.533187][ T8527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.615696][ T5612] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.618156][ T5612] usb 6-1: config 0 has no interfaces? [ 115.619408][ T5612] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.619420][ T5612] usb 6-1: Product: syz [ 115.619428][ T5612] usb 6-1: Manufacturer: syz [ 115.844777][ T43] kauditd_printk_skb: 71 callbacks suppressed [ 115.844794][ T43] audit: type=1800 audit(1789765897.994:804): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 115.851988][ T8450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.866516][ T43] audit: type=1400 audit(1789765898.024:805): avc: denied { write } for pid=8573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.875489][ T8301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 115.875516][ T8301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 115.885580][ T8577] program syz.3.712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.942785][ T43] audit: type=1400 audit(1789765898.094:806): avc: denied { write } for pid=8580 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.978938][ T8577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18116 sclass=netlink_route_socket pid=8577 comm=syz.3.712 [ 116.048499][ T43] audit: type=1800 audit(1789765898.204:807): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16914 res=0 errno=0 [ 116.072221][ T43] audit: type=1800 audit(1789765898.224:808): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16914 res=0 errno=0 [ 116.092265][ T43] audit: type=1800 audit(1789765898.244:809): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 116.126277][ T8450] veth0_vlan: entered promiscuous mode [ 116.132428][ T8450] veth1_vlan: entered promiscuous mode [ 116.163350][ T8450] veth0_macvtap: entered promiscuous mode [ 116.170368][ T8450] veth1_macvtap: entered promiscuous mode [ 116.183272][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.203330][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.251588][ T43] audit: type=1800 audit(1789765898.404:810): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158837 res=0 errno=0 [ 116.260408][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.285743][ T8301] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.285782][ T8301] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.285841][ T8301] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.294823][ T8531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.294843][ T8531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.297866][ T43] audit: type=1800 audit(1789765898.454:811): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158963 res=0 errno=0 [ 116.326821][ T8532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.326841][ T8532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.347219][ T43] audit: type=1400 audit(1789765898.504:812): avc: denied { mounton } for pid=8450 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 116.385778][ T8301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 116.385807][ T8301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 116.393171][ T43] audit: type=1800 audit(1789765898.544:813): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 116.495310][ T5731] Bluetooth: hci4: command tx timeout [ 116.665039][ T58] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 116.755061][ T42] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 116.817559][ T58] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 116.820622][ T58] usb 5-1: config index 0 descriptor too short (expected 64906, got 45) [ 116.822578][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.822599][ T58] usb 5-1: Product: syz [ 116.822613][ T58] usb 5-1: Manufacturer: syz [ 116.822625][ T58] usb 5-1: SerialNumber: syz [ 116.885084][ T42] usb 8-1: device descriptor read/64, error -71 [ 116.896036][ T5823] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 116.896064][ T5823] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 117.105151][ T5612] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 117.125116][ T42] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 117.255147][ T42] usb 8-1: device descriptor read/64, error -71 [ 117.255725][ T5612] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 117.256542][ T5612] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 117.257294][ T5612] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 117.258872][ T5612] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.258885][ T5612] usb 9-1: Product: syz [ 117.258892][ T5612] usb 9-1: Manufacturer: syz [ 117.258899][ T5612] usb 9-1: SerialNumber: syz [ 117.365325][ T42] usb usb8-port1: attempt power cycle [ 117.705236][ T42] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 117.725857][ T42] usb 8-1: device descriptor read/8, error -71 [ 117.965234][ T42] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 117.985877][ T42] usb 8-1: device descriptor read/8, error -71 [ 118.095435][ T42] usb usb8-port1: unable to enumerate USB device [ 118.198506][ T5612] usb 6-1: USB disconnect, device number 11 [ 118.513562][ T8625] cgroup: fork rejected by pids controller in /syz1 [ 118.585404][ T5731] Bluetooth: hci4: command tx timeout [ 119.197648][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x2cc8 instead [ 119.197671][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xaf85 instead [ 119.197687][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xfc23 instead [ 119.197702][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x61ca instead [ 119.197769][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x00f8 instead [ 119.197787][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xd2f9 instead [ 119.197802][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xdad2 instead [ 119.197817][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0xda8e instead [ 119.197832][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x1a04 instead [ 119.197846][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x77e9 instead [ 119.197861][ T8724] jffs2: Further such events for this erase block will not be printed [ 119.198266][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4c4a instead [ 119.198282][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0xa707 instead [ 119.198298][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0xa4bc instead [ 119.198312][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xd45e instead [ 119.198327][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x9743 instead [ 119.198341][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0xd795 instead [ 119.198356][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x01b0 instead [ 119.198371][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0xedfe instead [ 119.198386][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x7d9f instead [ 119.198401][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x3452 instead [ 119.198416][ T8724] jffs2: Further such events for this erase block will not be printed [ 119.198783][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x9a52 instead [ 119.198799][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0xbdd9 instead [ 119.198813][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x9f3c instead [ 119.198828][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0x5b5e instead [ 119.198842][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0xa753 instead [ 119.198857][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0xcc2e instead [ 119.198872][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x3a94 instead [ 119.198886][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x0cf2 instead [ 119.198901][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x1997 instead [ 119.198915][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x207a instead [ 119.198929][ T8724] jffs2: Further such events for this erase block will not be printed [ 119.199310][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x1b7f instead [ 119.199328][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0xe074 instead [ 119.199344][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x32d6 instead [ 119.199359][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0xf5c1 instead [ 119.199375][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x51e3 instead [ 119.199389][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x1161 instead [ 119.199404][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xcc33 instead [ 119.199419][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0x699d instead [ 119.199435][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0x60af instead [ 119.199450][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x65a1 instead [ 119.199465][ T8724] jffs2: Further such events for this erase block will not be printed [ 119.199880][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0xeb73 instead [ 119.199898][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x730c instead [ 119.199913][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x2c8b instead [ 119.199927][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0xc0f5 instead [ 119.199943][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x6201 instead [ 119.199958][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x42ad instead [ 119.199972][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x11c9 instead [ 119.199985][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0x5175 instead [ 119.199999][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x7a91 instead [ 119.200013][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x0d05 instead [ 119.200026][ T8724] jffs2: Further such events for this erase block will not be printed [ 119.200413][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x8505 instead [ 119.200430][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x06c3 instead [ 119.200446][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x1331 instead [ 119.200460][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x23d4 instead [ 119.200476][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0xbf15 instead [ 119.200491][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x5d3c instead [ 119.200507][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x78e8 instead [ 119.200523][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x374f instead [ 119.200538][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x56d2 instead [ 119.200553][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0xcafc instead [ 119.200568][ T8724] jffs2: Further such events for this erase block will not be printed [ 119.200918][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0xd2b1 instead [ 119.200936][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0xc337 instead [ 119.200952][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x4cb8 instead [ 119.200967][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0x351b instead [ 119.200983][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x1259 instead [ 119.200998][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0xf72c instead [ 119.201014][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xa52a instead [ 119.201030][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x5106 instead [ 119.201046][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x80be instead [ 119.201061][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0xacc2 instead [ 119.201076][ T8724] jffs2: Further such events for this erase block will not be printed [ 119.201474][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0xdf5b instead [ 119.201490][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xa689 instead [ 119.201505][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x7bfc instead [ 119.201519][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0xef4a instead [ 119.201534][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0xd8f3 instead [ 119.201549][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x19fb instead [ 119.201563][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xd64b instead [ 119.201577][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0xb614 instead [ 119.201592][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x582e instead [ 119.201608][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x069b instead [ 119.201621][ T8724] jffs2: Further such events for this erase block will not be printed [ 119.201999][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0xf1a5 instead [ 119.202014][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0xa532 instead [ 119.202028][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x3ece instead [ 119.202043][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x1d82 instead [ 119.202058][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x92f7 instead [ 119.202073][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x0d48 instead [ 119.202087][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xbee9 instead [ 119.202102][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xef10 instead [ 119.202122][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x12e8 instead [ 119.202136][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0xb5fc instead [ 119.202151][ T8724] jffs2: Further such events for this erase block will not be printed [ 119.202521][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x56c8 instead [ 119.202536][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x93e7 instead [ 119.202551][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0xecf0 instead [ 119.202565][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0xf1cf instead [ 119.202579][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x050d instead [ 119.202593][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0xb154 instead [ 119.202608][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xcb01 instead [ 119.202622][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x539d instead [ 119.202637][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0x05a4 instead [ 119.202652][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0x4baf instead [ 119.202666][ T8724] jffs2: Further such events for this erase block will not be printed [ 119.203040][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x62ef instead [ 119.203055][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x1d6d instead [ 119.203069][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0x0f6f instead [ 119.203085][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0x009b instead [ 119.203128][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0xa154 instead [ 119.203144][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0xcba1 instead [ 119.203159][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xb909 instead [ 119.203172][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x1181 instead [ 119.203186][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x52ef instead [ 119.203199][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x279d instead [ 119.203212][ T8724] jffs2: Further such events for this erase block will not be printed [ 119.203554][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0xb7d9 instead [ 119.203572][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0xeb2d instead [ 119.203588][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0xcfcf instead [ 119.203601][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x1f4a instead [ 119.203615][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0xf68d instead [ 119.203746][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x0869 instead [ 119.203761][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x1acc instead [ 119.203776][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x57e9 instead [ 119.203790][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0xa20d instead [ 119.203805][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x62e6 instead [ 119.203818][ T8724] jffs2: Further such events for this erase block will not be printed [ 119.204354][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x8685 instead [ 119.204371][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x1406 instead [ 119.204385][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xc547 instead [ 119.204399][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x0ead instead [ 119.204413][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x3e48 instead [ 119.204427][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x3144 instead [ 119.204441][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xe27e instead [ 119.204456][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x6cee instead [ 119.204471][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x99ca instead [ 119.204486][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0xb43c instead [ 119.204501][ T8724] jffs2: Further such events for this erase block will not be printed [ 119.204857][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0xd04a instead [ 119.204874][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x4b8d instead [ 119.204889][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0xfeb0 instead [ 119.204902][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x60d6 instead [ 119.204917][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xf771 instead [ 119.204930][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x8c44 instead [ 119.204944][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x5f46 instead [ 119.204959][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0xbd68 instead [ 119.204973][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x6c8e instead [ 119.204987][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x273d instead [ 119.205001][ T8724] jffs2: Further such events for this erase block will not be printed [ 119.205663][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x1453 instead [ 119.205681][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x8e52 instead [ 119.205695][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x25e4 instead [ 119.205710][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x63d0 instead [ 119.205724][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x8f8b instead [ 119.205738][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x155c instead [ 119.205753][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xd06d instead [ 119.205767][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0xd268 instead [ 119.205781][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x5b03 instead [ 119.205796][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x971d instead [ 119.205809][ T8724] jffs2: Further such events for this erase block will not be printed [ 119.206210][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xd1ef instead [ 119.206227][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x2073 instead [ 119.206241][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0xd240 instead [ 119.206255][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x6bba instead [ 119.206270][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x1169 instead [ 119.206284][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0xdc35 instead [ 119.206299][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x8134 instead [ 119.206313][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x7ac7 instead [ 119.206328][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x8c10 instead [ 119.206341][ T8724] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x2a44 instead [ 119.206354][ T8724] jffs2: Further such events for this erase block will not be printed [ 119.206913][ T8724] jffs2: notice: (8724) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 119.239943][ T6260] usb 5-1: USB disconnect, device number 15 [ 119.270936][ T8727] warning: `syz.0.727' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.619943][ T8740] use of bytesused == 0 is deprecated and will be removed in the future, [ 119.619952][ T8740] use the actual size instead. [ 119.663945][ T1347] vcan0 speed is unknown, defaulting to 1000 [ 119.864994][ T5612] usb 9-1: USB disconnect, device number 2 [ 119.965653][ T5823] net_ratelimit: 11 callbacks suppressed [ 119.965673][ T5823] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 119.965692][ T5823] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 119.994210][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 120.176606][ T8767] ata1.00: invalid multi_count 128 ignored [ 120.263871][ T8772] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 120.330780][ T8778] gadgetfs: bound to dummy_udc driver [ 120.409755][ T8783] kernel read not supported for file /policy (pid: 8783 comm: syz.1.746) [ 120.412235][ T8783] i2c i2c-1: dtv_property_process_set: SET cmd 0xcfdf1f00 undefined [ 120.485540][ T5823] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 120.485562][ T5823] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 120.565532][ T5612] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 120.565776][ C1] gadgetfs: connected [ 120.567405][ T5612] gadgetfs: disconnected [ 120.657108][ T5731] Bluetooth: hci4: command tx timeout [ 120.730576][ T8806] netlink: 'syz.1.755': attribute type 9 has an invalid length. [ 120.850322][ T43] kauditd_printk_skb: 66 callbacks suppressed [ 120.850341][ T43] audit: type=1800 audit(1789765903.004:880): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 120.873701][ T8819] program syz.1.761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.877648][ T43] audit: type=1800 audit(1789765903.034:881): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 120.883366][ T43] audit: type=1800 audit(1789765903.034:882): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159512 res=0 errno=0 [ 120.922973][ T8821] netlink: 40 bytes leftover after parsing attributes in process `syz.3.756'. [ 120.947117][ T43] audit: type=1400 audit(1789765903.104:883): avc: denied { bind } for pid=8813 comm="syz.0.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.948615][ T43] audit: type=1800 audit(1789765903.104:884): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 120.968923][ T43] audit: type=1800 audit(1789765903.124:885): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 120.986310][ T43] audit: type=1800 audit(1789765903.144:886): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159531 res=0 errno=0 [ 120.989271][ T8827] overlayfs: workdir and upperdir must reside under the same mount [ 120.994794][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 121.006878][ T5599] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 121.006935][ T5599] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 121.022796][ T43] audit: type=1800 audit(1789765903.174:887): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 121.035632][ T8832] [U] [ 121.035654][ T8832] [U] [ 121.035671][ T8832] [U] [ 121.035687][ T8832] [U] [ 121.035759][ T8832] [U] [ 121.035774][ T8832] [U] [ 121.035789][ T8832] [U] [ 121.035803][ T8832] [U] [ 121.035887][ T8832] [U] [ 121.035902][ T8832] [U] [ 121.035917][ T8832] [U] [ 121.035931][ T8832] [U] [ 121.036000][ T8832] [U] [ 121.036015][ T8832] [U] [ 121.036030][ T8832] [U] [ 121.036045][ T8832] [U] [ 121.036615][ T8831] [U] [ 121.063944][ T43] audit: type=1800 audit(1789765903.213:888): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 121.080528][ T43] audit: type=1800 audit(1789765903.233:889): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 121.237088][ T8854] No control pipe specified [ 121.263408][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 121.487553][ T8868] netlink: 20 bytes leftover after parsing attributes in process `syz.4.779'. [ 121.508688][ T8868] evm: overlay not supported [ 121.515816][ T5599] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 121.515841][ T5599] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 121.546123][ T8860] IPv4: Oversized IP packet from 127.202.26.0 [ 121.592558][ T8872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8872 comm=syz.0.780 [ 121.593531][ T8874] overlayfs: conflicting options: userxattr,redirect_dir=on [ 121.648479][ T8877] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 121.703834][ T8881] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12311 sclass=netlink_xfrm_socket pid=8881 comm=syz.3.782 [ 121.704234][ T8881] fuse: Unknown parameter 'roo00000000000000040000' [ 122.026801][ T5823] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 122.067166][ T8904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.791'. [ 122.636546][ T1347] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 122.659812][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 122.750981][ T5731] Bluetooth: hci4: command tx timeout [ 122.787180][ T1347] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 122.787970][ T1347] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.787993][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 122.788007][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 122.788020][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 122.788033][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 122.788045][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 122.788057][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 122.788070][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 122.788083][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 122.788095][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 122.788108][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 122.788120][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 122.788132][ T1347] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 122.788144][ T1347] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 122.789899][ T1347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.789912][ T1347] usb 5-1: Product: syz [ 122.789920][ T1347] usb 5-1: Manufacturer: syz [ 122.789928][ T1347] usb 5-1: SerialNumber: syz [ 123.018330][ T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 123.167627][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 123.168217][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.169003][ T10] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 123.169026][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.169037][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.169049][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.169060][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.169079][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.715467][ T8996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.804'. [ 124.234026][ T9008] zram0: detected capacity change from 0 to 65536 [ 124.364461][ T9008] ftl_cs: FTL header not found. [ 124.414010][ T9008] block2mtd: mtd1: [/dev/zram0] erase_size = 64KiB [65536] [ 124.495756][ T9031] autofs4:pid:9031:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 124.617203][ T9042] netlink: 'syz.1.816': attribute type 144 has an invalid length. [ 124.697223][ T9044] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.697370][ T9044] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.697512][ T9044] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 124.697587][ T9044] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 124.702398][ T9044] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 124.819291][ T9051] SELinux: policydb magic number 0x4 does not match expected magic number 0xf97cff8c [ 124.819456][ T9051] SELinux: failed to load policy [ 124.871769][ T9049] FAULT_INJECTION: forcing a failure. [ 124.871769][ T9049] name failslab, interval 1, probability 0, space 0, times 0 [ 124.871789][ T9049] CPU: 1 UID: 0 PID: 9049 Comm: syz.1.818 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.871804][ T9049] Tainted: [L]=SOFTLOCKUP [ 124.871809][ T9049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.871815][ T9049] Call Trace: [ 124.871820][ T9049] [ 124.871824][ T9049] dump_stack_lvl+0x100/0x190 [ 124.871855][ T9049] should_fail_ex.cold+0x5/0xa [ 124.871871][ T9049] should_failslab+0xc2/0x120 [ 124.871889][ T9049] kmem_cache_alloc_noprof+0x92/0x6a0 [ 124.871901][ T9049] ? vm_area_dup+0x27/0x9d0 [ 124.871919][ T9049] vm_area_dup+0x27/0x9d0 [ 124.871934][ T9049] __split_vma+0x19c/0x1de0 [ 124.871952][ T9049] ? is_bpf_text_address+0x25/0x1a0 [ 124.871967][ T9049] ? __pfx___split_vma+0x10/0x10 [ 124.871982][ T9049] ? is_bpf_text_address+0x8a/0x1a0 [ 124.871996][ T9049] ? is_bpf_text_address+0x8a/0x1a0 [ 124.872013][ T9049] ? is_bpf_text_address+0x94/0x1a0 [ 124.872027][ T9049] ? kernel_text_address+0x8d/0x100 [ 124.872044][ T9049] ? __kernel_text_address+0xd/0x30 [ 124.872063][ T9049] vms_gather_munmap_vmas+0x1d2/0x1720 [ 124.872083][ T9049] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 124.872098][ T9049] ? __lock_acquire+0x5c0/0x1f40 [ 124.872110][ T9049] ? _parse_integer_limit+0x1ac/0x220 [ 124.872127][ T9049] ? _kstrtoull+0x144/0x200 [ 124.872140][ T9049] ? __pfx__kstrtoull+0x10/0x10 [ 124.872155][ T9049] ? lock_acquire+0x1d1/0x380 [ 124.872166][ T9049] ? __might_fault+0xc5/0x140 [ 124.872184][ T9049] do_vmi_align_munmap+0x287/0x5f0 [ 124.872203][ T9049] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 124.872224][ T9049] ? __lock_acquire+0x5c0/0x1f40 [ 124.872247][ T9049] ? mas_walk+0x260/0x310 [ 124.872267][ T9049] do_vmi_munmap+0x1f8/0x3e0 [ 124.872286][ T9049] __vm_munmap+0x196/0x390 [ 124.872297][ T9049] ? __pfx___vm_munmap+0x10/0x10 [ 124.872313][ T9049] ? __pfx_ksys_write+0x10/0x10 [ 124.872327][ T9049] __x64_sys_munmap+0x59/0x80 [ 124.872358][ T9049] do_syscall_64+0x123/0x790 [ 124.872374][ T9049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.872385][ T9049] RIP: 0033:0x7f1224b9e159 [ 124.872395][ T9049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.872405][ T9049] RSP: 002b:00007f1225b31028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 124.872417][ T9049] RAX: ffffffffffffffda RBX: 00007f1224e25fa0 RCX: 00007f1224b9e159 [ 124.872424][ T9049] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 00002000003fe000 [ 124.872431][ T9049] RBP: 00007f1225b31090 R08: 0000000000000000 R09: 0000000000000000 [ 124.872437][ T9049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.872443][ T9049] R13: 00007f1224e26038 R14: 00007f1224e25fa0 R15: 00007ffdaba04708 [ 124.872458][ T9049] [ 125.073423][ T9068] vcan0 speed is unknown, defaulting to 1000 [ 125.099550][ T12] net_ratelimit: 11 callbacks suppressed [ 125.099563][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 125.099576][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 125.218651][ T9066] affs: No valid root block on device nullb0 [ 125.413056][ T35] usb 5-1: USB disconnect, device number 17 [ 125.606819][ T5823] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 125.606841][ T5823] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 125.806978][ T35] usb 8-1: USB disconnect, device number 18 [ 125.936823][ T43] kauditd_printk_skb: 89 callbacks suppressed [ 125.936837][ T43] audit: type=1800 audit(1789765908.083:979): pid=9091 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.829" name="new_device" dev="sysfs" ino=27249 res=0 errno=0 [ 125.954482][ T43] audit: type=1800 audit(1789765908.103:980): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 125.997945][ T9091] SELinux: ebitmap start bit (8390656) is beyond the end of the bitmap (1088) [ 125.997993][ T9091] SELinux: invalid class [ 126.002947][ T43] audit: type=1800 audit(1789765908.153:981): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 126.021316][ T9091] SELinux: failed to load policy [ 126.039104][ T43] audit: type=1800 audit(1789765908.193:982): pid=9101 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.831" name="arp_interval" dev="sysfs" ino=92407 res=0 errno=0 [ 126.042787][ T9097] bond0: option arp_interval: invalid value (¹¹‘À0X4‘wH¦fé(4û»éoñ†íÞ©AºiÍäMHë^œ@|=&$ÞÊèA¨¡) [ 126.042802][ T9097] bond0: option arp_interval: allowed values 0 - 2147483647 [ 126.107113][ T43] audit: type=1800 audit(1789765908.253:983): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 126.126602][ T8301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 126.126622][ T8301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 126.134573][ T43] audit: type=1800 audit(1789765908.283:984): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 126.192030][ T43] audit: type=1400 audit(1789765908.343:985): avc: denied { create } for pid=9112 comm="syz.4.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 126.206896][ T43] audit: type=1800 audit(1789765908.363:986): pid=9113 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.833" name="pm_test" dev="sysfs" ino=869 res=0 errno=0 [ 126.236806][ T43] audit: type=1804 audit(1789765908.383:987): pid=9108 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.834" name="/newroot/230/cgroup.controllers" dev="tmpfs" ino=1319 res=1 errno=0 [ 126.240889][ T43] audit: type=1800 audit(1789765908.393:988): pid=9108 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.834" name="cgroup.controllers" dev="tmpfs" ino=1319 res=0 errno=0 [ 126.245718][ T9108] binder: 9107:9108 ioctl 400454d9 2000000001c0 returned -22 [ 126.303391][ T5731] Bluetooth: hci1: ACL packet for unknown connection handle 175 [ 126.491318][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'. [ 126.636271][ T5599] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 126.636291][ T5599] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 126.669995][ T9153] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 126.736275][ T5731] Bluetooth: hci4: command 0x0c1a tx timeout [ 126.736321][ T5731] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.736323][ T5744] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.833597][ T9165] netlink: 'syz.0.845': attribute type 12 has an invalid length. [ 127.048640][ T9174] netlink: 'syz.4.846': attribute type 32 has an invalid length. [ 127.048653][ T9174] netlink: 32 bytes leftover after parsing attributes in process `syz.4.846'. [ 127.156464][ T5599] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 127.156484][ T5599] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 127.168427][ T9186] netlink: 48 bytes leftover after parsing attributes in process `syz.4.848'. [ 127.172491][ T9188] 8021q: VLANs not supported on gre0 [ 127.230257][ T9196] netlink: 'syz.1.851': attribute type 4 has an invalid length. [ 127.234415][ T9198] netlink: 'syz.1.851': attribute type 4 has an invalid length. [ 127.954700][ T9230] PKCS7: Unsupported SignedData version [ 127.966510][ T30] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 127.970598][ T9238] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.018031][ T9245] netlink: 32 bytes leftover after parsing attributes in process `syz.0.864'. [ 128.054391][ T9248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.865'. [ 128.056684][ T9247] netlink: 'syz.0.865': attribute type 1 has an invalid length. [ 128.116491][ T30] usb 8-1: Using ep0 maxpacket: 32 [ 128.118581][ T30] usb 8-1: unable to get BOS descriptor or descriptor too short [ 128.118617][ T30] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 128.119439][ T30] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.122951][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.122972][ T30] usb 8-1: Product: syz [ 128.122985][ T30] usb 8-1: Manufacturer: syz [ 128.122998][ T30] usb 8-1: SerialNumber: syz [ 128.521790][ T9274] vlan3: entered allmulticast mode [ 128.816797][ T66] Bluetooth: hci4: command 0x0c1a tx timeout [ 128.836586][ T42] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 128.859840][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'. [ 128.861006][ T9285] cgroup: Need name or subsystem set [ 128.901729][ T9288] ªªªªª): renamed from hsr0 (while UP) [ 128.906105][ T9288] netlink: 'syz.0.877': attribute type 10 has an invalid length. [ 128.919477][ T9288] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.921992][ T9288] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 128.929501][ T9294] netlink: 'syz.0.877': attribute type 10 has an invalid length. [ 128.986553][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 129.191451][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.191660][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.202909][ T9306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.203138][ T9306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.207075][ T9308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.207391][ T9308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.332083][ T9316] random: crng reseeded on system resumption [ 129.399314][ T42] usb 6-1: unable to get BOS descriptor or descriptor too short [ 129.399340][ T42] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 129.400018][ T42] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 129.400034][ T42] usb 6-1: can't read configurations, error -71 [ 130.204990][ T9325] xt_hashlimit: size too large, truncated to 1048576 [ 130.226705][ T5823] net_ratelimit: 10 callbacks suppressed [ 130.226719][ T5823] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 130.226732][ T5823] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 130.436641][ T42] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 130.546344][ T9332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.884'. [ 130.586580][ T42] usb 6-1: Invalid ep0 maxpacket: 64 [ 130.589043][ T42] usb usb6-port1: attempt power cycle [ 130.737061][ T5823] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 130.737082][ T5823] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 130.752206][ T10] usb 8-1: USB disconnect, device number 19 [ 130.897878][ T66] Bluetooth: hci4: command 0x0c1a tx timeout [ 130.923812][ T9343] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.886'. [ 130.923828][ T9343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.886'. [ 130.926587][ T42] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 130.947191][ T42] usb 6-1: Invalid ep0 maxpacket: 64 [ 130.983337][ T43] kauditd_printk_skb: 48 callbacks suppressed [ 130.983350][ T43] audit: type=1800 audit(1789766169.136:1037): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 131.076588][ T42] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 131.097097][ T42] usb 6-1: Invalid ep0 maxpacket: 64 [ 131.097313][ T42] usb usb6-port1: unable to enumerate USB device [ 131.174621][ T43] audit: type=1800 audit(1789766169.326:1038): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 131.248247][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 131.248267][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 131.539393][ T66] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 131.571104][ T43] audit: type=1400 audit(1789766169.726:1039): avc: denied { bind } for pid=9367 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 131.575128][ T43] audit: type=1400 audit(1789766169.726:1040): avc: denied { accept } for pid=9367 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 131.575437][ T43] audit: type=1400 audit(1789766169.726:1041): avc: denied { write } for pid=9367 comm="syz.0.889" path="socket:[33085]" dev="sockfs" ino=33085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 131.581021][ T43] audit: type=1400 audit(1789766169.736:1042): avc: denied { read } for pid=9367 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 131.756690][ T8301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 131.756720][ T8301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 132.266603][ T8301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 132.266624][ T8301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 132.589743][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.589779][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.697568][ T9439] netlink: 32 bytes leftover after parsing attributes in process `syz.0.892'. [ 132.741371][ T9439] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.743305][ T9439] netlink: 'syz.0.892': attribute type 1 has an invalid length. [ 132.743317][ T9439] netlink: 'syz.0.892': attribute type 2 has an invalid length. [ 133.026277][ T43] audit: type=1800 audit(1789766171.166:1043): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 133.088175][ T43] audit: type=1800 audit(1789766171.236:1044): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 133.106406][ T9477] netlink: 5776 bytes leftover after parsing attributes in process `syz.1.898'. [ 133.347239][ T30] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 133.499179][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 133.499799][ T30] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 133.500630][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.504881][ T43] audit: type=1800 audit(1789766171.656:1045): pid=5733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=165585 res=0 errno=0 [ 133.514540][ T43] audit: type=1800 audit(1789766171.666:1046): pid=5733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=165614 res=0 errno=0 [ 134.931470][ T9561] device-mapper: ioctl: device name cannot contain '/' [ 134.932014][ T9560] device-mapper: ioctl: device name cannot contain '/' [ 134.946172][ T66] Bluetooth: hci2: connection err: -111 [ 135.052637][ T9568] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 135.186589][ T1347] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 135.316651][ T1347] usb 5-1: device descriptor read/64, error -71 [ 135.347356][ T5599] net_ratelimit: 10 callbacks suppressed [ 135.347374][ T5599] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 135.347393][ T5599] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 135.556640][ T1347] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 135.696656][ T1347] usb 5-1: device descriptor read/64, error -71 [ 135.807179][ T1347] usb usb5-port1: attempt power cycle [ 135.867067][ T5599] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 135.867088][ T5599] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 136.113319][ T9590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.919'. [ 136.119270][ T30] usb 6-1: USB disconnect, device number 16 [ 136.132836][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 136.132849][ T43] audit: type=1800 audit(1789766174.286:1069): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 136.146703][ T1347] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 136.168933][ T1347] usb 5-1: device descriptor read/8, error -71 [ 136.183905][ T43] audit: type=1800 audit(1789766174.336:1070): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 136.195600][ T43] audit: type=1800 audit(1789766174.346:1071): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 136.205426][ T43] audit: type=1326 audit(1789766174.356:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.1.922" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1224b9e159 code=0x0 [ 136.252978][ T43] audit: type=1800 audit(1789766174.406:1073): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 136.314845][ T43] audit: type=1400 audit(1789766174.466:1074): avc: denied { read } for pid=9596 comm="syz.1.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 136.377397][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 136.377427][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 136.404624][ T43] audit: type=1800 audit(1789766174.556:1075): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 136.408075][ T1347] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 136.429419][ T1347] usb 5-1: device descriptor read/8, error -71 [ 136.469063][ T43] audit: type=1800 audit(1789766174.626:1076): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 136.516986][ T9606] random: crng reseeded on system resumption [ 136.522935][ T43] audit: type=1400 audit(1789766174.676:1077): avc: denied { ioctl } for pid=9604 comm="syz.3.925" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 136.547093][ T1347] usb usb5-port1: unable to enumerate USB device [ 136.675795][ T43] audit: type=1800 audit(1789766174.826:1078): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 136.764981][ T9616] syzkaller0: entered promiscuous mode [ 136.764995][ T9616] syzkaller0: entered allmulticast mode [ 136.886677][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 136.886706][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 137.319054][ T9624] fuse: Unknown parameter 'g\oup_id' [ 137.396651][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 137.396680][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 137.426733][ T9630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9630 comm=syz.1.930 [ 137.428333][ T9630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9630 comm=syz.1.930 [ 137.428509][ T9630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9630 comm=syz.1.930 [ 137.428836][ T9630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9630 comm=syz.1.930 [ 137.429118][ T9630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9630 comm=syz.1.930 [ 137.429250][ T9630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9630 comm=syz.1.930 [ 137.429327][ T9630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9630 comm=syz.1.930 [ 137.429658][ T9630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9630 comm=syz.1.930 [ 137.429774][ T9630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9630 comm=syz.1.930 [ 137.430100][ T9630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9630 comm=syz.1.930 [ 137.986529][ T1347] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 138.116719][ T1347] usb 8-1: device descriptor read/64, error -71 [ 138.369023][ T1347] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 138.479258][ T9650] bridge0: port 3(syz_tun) entered blocking state [ 138.479516][ T9650] bridge0: port 3(syz_tun) entered disabled state [ 138.479642][ T9650] syz_tun: entered allmulticast mode [ 138.480842][ T9650] syz_tun: entered promiscuous mode [ 138.482894][ T9650] bridge0: port 3(syz_tun) entered blocking state [ 138.482943][ T9650] bridge0: port 3(syz_tun) entered listening state [ 138.492968][ T9650] ipt_ECN: cannot use operation on non-tcp rule [ 138.506789][ T1347] usb 8-1: device descriptor read/64, error -71 [ 138.507698][ C3] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 138.508460][ C3] bridge0: topology change detected, propagating [ 138.509945][ T9650] [ 138.517125][ T9650] ====================================================== [ 138.519339][ T9650] WARNING: possible circular locking dependency detected SYZFAIL: failed to recv rpc [ 138.521541][ T9650] syzkaller #0 Tainted: G L fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 138.523586][ T9650] ------------------------------------------------------ [ 138.525850][ T9650] syz.0.938/9650 is trying to acquire lock: [ 138.527722][ T9650] ffff88803d154270 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 138.531083][ T9650] [ 138.531083][ T9650] but task is already holding lock: [ 138.533412][ T9650] ffffffff90d80da8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 138.536147][ T9650] [ 138.536147][ T9650] which lock already depends on the new lock. [ 138.536147][ T9650] [ 138.539347][ T9650] [ 138.539347][ T9650] the existing dependency chain (in reverse order) is: [ 138.542191][ T9650] [ 138.542191][ T9650] -> #4 (cb_lock){++++}-{4:4}: [ 138.544424][ T9650] lock_acquire+0x1d1/0x380 [ 138.546010][ T9650] down_read+0x99/0x4c0 [ 138.547512][ T9650] genl_release+0x7e/0x1d0 [ 138.549066][ T9650] netlink_release+0x105e/0x2000 [ 138.551372][ T9650] __sock_release+0xb3/0x260 [ 138.553492][ T9650] sock_close+0x1c/0x30 [ 138.555087][ T9650] __fput+0x3ff/0xb50 [ 138.556559][ T9650] fput_close_sync+0x118/0x250 [ 138.558304][ T9650] __x64_sys_close+0x8b/0x120 [ 138.560151][ T9650] do_syscall_64+0x123/0x790 [ 138.561880][ T9650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.564000][ T9650] [ 138.564000][ T9650] -> #3 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 138.567090][ T9650] lock_acquire+0x1d1/0x380 [ 138.568856][ T9650] down_write+0x8b/0x1f0 [ 138.570647][ T9650] __sock_release+0x86/0x260 [ 138.572302][ T9650] sock_close+0x1c/0x30 [ 138.573862][ T9650] __fput+0x3ff/0xb50 [ 138.575334][ T9650] __fput_sync+0xd7/0x100 [ 138.576909][ T9650] nvme_tcp_alloc_queue.isra.0+0xd6d/0x1770 [ 138.578975][ T9650] nvme_tcp_configure_admin_queue+0x26/0x530 [ 138.581078][ T9650] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 138.582841][ T9650] nvme_tcp_create_ctrl+0x970/0xd90 [ 138.584653][ T9650] nvmf_dev_write+0x4ee/0xb60 [ 138.586297][ T9650] vfs_write+0x2aa/0x1050 [ 138.587855][ T9650] ksys_write+0x12a/0x250 [ 138.589396][ T9650] do_syscall_64+0x123/0x790 [ 138.591046][ T9650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.593095][ T9650] [ 138.593095][ T9650] -> #2 (nvmf_dev_mutex){+.+.}-{4:4}: [ 138.595487][ T9650] lock_acquire+0x1d1/0x380 [ 138.597082][ T9650] __mutex_lock+0x1a4/0x1bd0 [ 138.598686][ T9650] nvmf_dev_show+0x26/0x210 [ 138.600276][ T9650] seq_read_iter+0x32f/0x1270 [ 138.601960][ T9650] seq_read+0x344/0x4d0 [ 138.603449][ T9650] vfs_read+0x1e4/0xb40 [ 138.604945][ T9650] ksys_read+0x12a/0x250 [ 138.606455][ T9650] do_syscall_64+0x123/0x790 [ 138.608144][ T9650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.610212][ T9650] [ 138.610212][ T9650] -> #1 (&p->lock){+.+.}-{4:4}: [ 138.612516][ T9650] lock_acquire+0x1d1/0x380 [ 138.614235][ T9650] __mutex_lock+0x1a4/0x1bd0 [ 138.615897][ T9650] seq_read_iter+0xe1/0x1270 [ 138.617554][ T9650] kernfs_fop_read_iter+0x46c/0x610 [ 138.619403][ T9650] __kernel_read+0x397/0xad0 [ 138.621046][ T9650] integrity_kernel_read+0x7e/0xb0 [ 138.622893][ T9650] ima_calc_file_hash_tfm+0x25e/0x350 [ 138.625014][ T9650] ima_calc_file_hash+0x1e3/0x380 [ 138.626780][ T9650] ima_collect_measurement+0x94f/0xb30 [ 138.628733][ T9650] process_measurement+0xdfe/0x2350 [ 138.630565][ T9650] ima_file_check+0xc3/0x110 [ 138.632239][ T9650] security_file_post_open+0xc4/0x210 [ 138.634125][ T9650] path_openat+0x5cd/0x2440 [ 138.636048][ T9650] do_file_open+0x20e/0x430 [ 138.637665][ T9650] do_sys_openat2+0x10f/0x1e0 [ 138.639363][ T9650] __x64_sys_openat+0x12d/0x210 [ 138.641095][ T9650] do_syscall_64+0x123/0x790 [ 138.642723][ T9650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.644735][ T9650] [ 138.644735][ T9650] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 138.647365][ T9650] check_prev_add+0xeb/0xe60 [ 138.648985][ T9650] __lock_acquire+0x1528/0x1f40 [ 138.650678][ T9650] lock_acquire+0x1d1/0x380 [ 138.652334][ T9650] __mutex_lock+0x1a4/0x1bd0 [ 138.654007][ T9650] process_measurement+0x5ab/0x2350 [ 138.655868][ T9650] ima_file_check+0xc3/0x110 [ 138.657534][ T9650] security_file_post_open+0xc4/0x210 [ 138.659476][ T9650] path_openat+0x5cd/0x2440 [ 138.661127][ T9650] do_file_open+0x20e/0x430 [ 138.662769][ T9650] file_open_name+0x1c3/0x3e0 [ 138.664479][ T9650] filp_open+0x2e/0x50 [ 138.665973][ T9650] kernel_read_file_from_path_initns+0xec/0x240 [ 138.668164][ T9650] _request_firmware+0x733/0x13c0 [ 138.669927][ T9650] request_firmware+0x35/0x50 [ 138.671652][ T9650] reg_reload_regdb+0x85/0x460 [ 138.673361][ T9650] genl_family_rcv_msg_doit+0x214/0x300 [ 138.675335][ T9650] genl_rcv_msg+0x560/0x800 [ 138.676964][ T9650] netlink_rcv_skb+0x159/0x420 [ 138.679076][ T9650] genl_rcv+0x28/0x40 [ 138.680959][ T9650] netlink_unicast+0x585/0x850 [ 138.683133][ T9650] netlink_sendmsg+0x8b0/0xda0 [ 138.685322][ T9650] ____sys_sendmsg+0xa4d/0xbe0 [ 138.687543][ T9650] ___sys_sendmsg+0x190/0x1e0 [ 138.689684][ T9650] __sys_sendmsg+0x160/0x210 [ 138.691895][ T9650] do_syscall_64+0x123/0x790 [ 138.694042][ T9650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.696735][ T9650] [ 138.696735][ T9650] other info that might help us debug this: [ 138.696735][ T9650] [ 138.700909][ T9650] Chain exists of: [ 138.700909][ T9650] &ima_iint_mutex_key[depth] --> &sb->s_type->i_mutex_key#13 --> cb_lock [ 138.700909][ T9650] [ 138.706773][ T9650] Possible unsafe locking scenario: [ 138.706773][ T9650] [ 138.709869][ T9650] CPU0 CPU1 [ 138.712112][ T9650] ---- ---- [ 138.714204][ T9650] rlock(cb_lock); [ 138.715862][ T9650] lock(&sb->s_type->i_mutex_key#13); [ 138.719133][ T9650] lock(cb_lock); [ 138.721557][ T9650] lock(&ima_iint_mutex_key[depth]); [ 138.723661][ T9650] [ 138.723661][ T9650] *** DEADLOCK *** [ 138.723661][ T9650] [ 138.726982][ T9650] locks held by syz.0.938/9650: 1, last CPU#2: [ 138.729254][ T9650] #0: ffffffff90d80da8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 138.732300][ T9650] [ 138.732300][ T9650] stack backtrace: [ 138.734466][ T9650] CPU: 2 UID: 0 PID: 9650 Comm: syz.0.938 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.738229][ T9650] Tainted: [L]=SOFTLOCKUP [ 138.739601][ T9650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.742716][ T9650] Call Trace: [ 138.743922][ T9650] [ 138.745031][ T9650] dump_stack_lvl+0x100/0x190 [ 138.746563][ T9650] print_circular_bug.cold+0x178/0x1be [ 138.748271][ T9650] check_noncircular+0x146/0x160 [ 138.749817][ T9650] check_prev_add+0xeb/0xe60 [ 138.751308][ T9650] __lock_acquire+0x1528/0x1f40 [ 138.752788][ T9650] ? genl_family_rcv_msg_doit+0x214/0x300 [ 138.754522][ T9650] ? genl_rcv_msg+0x560/0x800 [ 138.755963][ T9650] lock_acquire+0x1d1/0x380 [ 138.757369][ T9650] ? process_measurement+0x5ab/0x2350 [ 138.759020][ T9650] ? __pfx___might_resched+0x10/0x10 [ 138.760667][ T9650] __mutex_lock+0x1a4/0x1bd0 [ 138.762147][ T9650] ? process_measurement+0x5ab/0x2350 [ 138.763832][ T9650] ? process_measurement+0x5ab/0x2350 [ 138.765493][ T9650] ? __pfx___mutex_lock+0x10/0x10 [ 138.767077][ T9650] ? rcu_is_watching+0x13/0xc0 [ 138.768577][ T9650] ? trace_kmem_cache_alloc+0xdd/0x100 [ 138.770276][ T9650] ? __kasan_slab_alloc+0x89/0x90 [ 138.771886][ T9650] ? process_measurement+0x5ab/0x2350 [ 138.773554][ T9650] process_measurement+0x5ab/0x2350 [ 138.775192][ T9650] ? find_held_lock+0x2b/0x80 [ 138.776676][ T9650] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 138.778350][ T9650] ? __pfx_process_measurement+0x10/0x10 [ 138.780107][ T9650] ? lock_acquire+0x1d1/0x380 [ 138.781614][ T9650] ? fscrypt_file_open+0xf7/0x5c0 [ 138.783202][ T9650] ? find_held_lock+0x2b/0x80 [ 138.784688][ T9650] ? fscrypt_file_open+0x48f/0x5c0 [ 138.786305][ T9650] ? fscrypt_file_open+0x48f/0x5c0 [ 138.787949][ T9650] ? __pfx___fsnotify_parent+0x10/0x10 [ 138.789656][ T9650] ima_file_check+0xc3/0x110 [ 138.791137][ T9650] ? __pfx_ima_file_check+0x10/0x10 [ 138.792796][ T9650] ? vfs_open+0x2e3/0x3f0 [ 138.794157][ T9650] security_file_post_open+0xc4/0x210 [ 138.795844][ T9650] path_openat+0x5cd/0x2440 [ 138.797277][ T9650] ? __pfx_path_openat+0x10/0x10 [ 138.798827][ T9650] ? kasan_save_stack+0x3f/0x50 [ 138.800367][ T9650] ? kasan_save_stack+0x30/0x50 [ 138.801942][ T9650] ? kasan_save_track+0x14/0x30 [ 138.803486][ T9650] ? __kasan_slab_alloc+0x89/0x90 [ 138.805074][ T9650] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 138.806827][ T9650] ? do_getname_kernel+0x5d/0x250 [ 138.808423][ T9650] ? filp_open+0x1d/0x50 [ 138.809763][ T9650] ? kernel_read_file_from_path_initns+0xec/0x240 [ 138.811815][ T9650] do_file_open+0x20e/0x430 [ 138.813251][ T9650] ? netlink_sendmsg+0x8b0/0xda0 [ 138.814778][ T9650] ? __pfx_do_file_open+0x10/0x10 [ 138.816350][ T9650] ? rcu_is_watching+0x13/0xc0 [ 138.817851][ T9650] file_open_name+0x1c3/0x3e0 [ 138.819347][ T9650] ? __pfx_file_open_name+0x10/0x10 [ 138.821000][ T9650] ? do_getname_kernel+0x5d/0x250 [ 138.822618][ T9650] ? __asan_memcpy+0x3c/0x60 [ 138.824094][ T9650] ? do_getname_kernel+0x1be/0x250 [ 138.825698][ T9650] filp_open+0x2e/0x50 [ 138.826998][ T9650] kernel_read_file_from_path_initns+0xec/0x240 [ 138.828985][ T9650] _request_firmware+0x733/0x13c0 [ 138.830582][ T9650] ? __pfx__request_firmware+0x10/0x10 [ 138.832321][ T9650] ? __pfx_netdev_run_todo+0x10/0x10 [ 138.833978][ T9650] ? rcu_is_watching+0x13/0xc0 [ 138.835492][ T9650] ? trace_kmalloc+0xeb/0x110 [ 138.836976][ T9650] request_firmware+0x35/0x50 [ 138.838457][ T9650] reg_reload_regdb+0x85/0x460 [ 138.839988][ T9650] ? __pfx_reg_reload_regdb+0x10/0x10 [ 138.841665][ T9650] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 138.843354][ T9650] ? nl80211_pre_doit+0x19a/0xae0 [ 138.844944][ T9650] genl_family_rcv_msg_doit+0x214/0x300 [ 138.846680][ T9650] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 138.848586][ T9650] ? bpf_lsm_capable+0x9/0x10 [ 138.850070][ T9650] ? security_capable+0x80/0x260 [ 138.851663][ T9650] genl_rcv_msg+0x560/0x800 [ 138.853101][ T9650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.854681][ T9650] ? __lock_acquire+0x5c0/0x1f40 [ 138.856248][ T9650] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 138.857940][ T9650] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 138.859723][ T9650] ? __pfx_nl80211_post_doit+0x10/0x10 [ 138.861472][ T9650] netlink_rcv_skb+0x159/0x420 [ 138.862976][ T9650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.864560][ T9650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.866218][ T9650] ? netlink_deliver_tap+0x1ae/0xcc0 [ 138.867886][ T9650] genl_rcv+0x28/0x40 [ 138.869158][ T9650] netlink_unicast+0x585/0x850 [ 138.870680][ T9650] ? __pfx_netlink_unicast+0x10/0x10 [ 138.872365][ T9650] netlink_sendmsg+0x8b0/0xda0 [ 138.873883][ T9650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.875548][ T9650] ? selinux_socket_sendmsg+0x198/0x2f0 [ 138.877285][ T9650] ____sys_sendmsg+0xa4d/0xbe0 [ 138.878798][ T9650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.880460][ T9650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.882124][ T9650] ___sys_sendmsg+0x190/0x1e0 [ 138.883607][ T9650] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.885245][ T9650] ? futex_wait+0x11e/0x370 [ 138.886684][ T9650] ? find_held_lock+0x2b/0x80 [ 138.888185][ T9650] __sys_sendmsg+0x160/0x210 [ 138.889640][ T9650] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.891283][ T9650] do_syscall_64+0x123/0x790 [ 138.892748][ T9650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.894593][ T9650] RIP: 0033:0x7f2f0519e159 [ 138.896004][ T9650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.901915][ T9650] RSP: 002b:00007f2f06027028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.904505][ T9650] RAX: ffffffffffffffda RBX: 00007f2f05426090 RCX: 00007f2f0519e159 [ 138.906964][ T9650] RDX: 0000000020008004 RSI: 0000200000000600 RDI: 0000000000000009 [ 138.909411][ T9650] RBP: 00007f2f0523503b R08: 0000000000000000 R09: 0000000000000000 [ 138.911883][ T9650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.914349][ T9650] R13: 00007f2f05426128 R14: 00007f2f05426090 R15: 00007ffdffa36378 [ 138.916836][ T9650] [ 138.918170][ T1347] usb usb8-port1: attempt power cycle [ 138.922299][ T9650] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 138.922316][ T9650] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 138.922981][ T9650] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 139.044167][ T9650] bridge0: port 3(syz_tun) entered disabled state [ 139.045152][ T9650] syz_tun (unregistering): left allmulticast mode [ 139.045164][ T9650] syz_tun (unregistering): left promiscuous mode [ 139.045190][ T9650] bridge0: port 3(syz_tun) entered disabled state [ 139.193576][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.231125][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.262402][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.321137][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.393157][ T12] bridge_slave_1: left allmulticast mode [ 139.393173][ T12] bridge_slave_1: left promiscuous mode [ 139.393281][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.394238][ T12] bridge_slave_0: left allmulticast mode [ 139.394250][ T12] bridge_slave_0: left promiscuous mode [ 139.394313][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.449971][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.451412][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.452170][ T12] bond0 (unregistering): Released all slaves [ 139.561304][ T5441] 8021q: adding VLAN 0 to HW filter on device eth2 [ 139.669223][ T5441] 8021q: adding VLAN 0 to HW filter on device eth3 [ 139.717237][ T12] hsr_slave_0: left promiscuous mode [ 139.718482][ T12] hsr_slave_1: left promiscuous mode [ 139.718944][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.718959][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.719848][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.719861][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.724477][ T12] veth1_macvtap: left promiscuous mode [ 139.724499][ T12] veth0_macvtap: left promiscuous mode [ 139.724545][ T12] veth1_vlan: left promiscuous mode [ 139.724578][ T12] veth0_vlan: left promiscuous mode [ 139.805152][ T12] team0 (unregistering): Port device team_slave_1 removed [ 139.810951][ T12] team0 (unregistering): Port device team_slave_0 removed [ 139.831598][ T5441] 8021q: adding VLAN 0 to HW filter on device eth4 [ 139.988593][ T5441] 8021q: adding VLAN 0 to HW filter on device eth5 [ 140.070543][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.070575][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.130121][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.130153][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.206991][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.207049][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.277072][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.277110][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.344354][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.344377][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.385637][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.385659][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.444730][ T5441] 8021q: adding VLAN 0 to HW filter on device eth6 [ 140.458926][ T5599] net_ratelimit: 10 callbacks suppressed [ 140.458941][ T5599] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 140.458953][ T5599] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 140.459870][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.459890][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.514806][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.514827][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.562191][ T5441] 8021q: adding VLAN 0 to HW filter on device eth7 [ 140.576734][ T12] bridge_slave_1: left allmulticast mode [ 140.576756][ T12] bridge_slave_1: left promiscuous mode [ 140.576866][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.578957][ T12] bridge_slave_0: left allmulticast mode [ 140.578974][ T12] bridge_slave_0: left promiscuous mode [ 140.579130][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.596673][ T12] bridge_slave_1: left allmulticast mode [ 140.596695][ T12] bridge_slave_1: left promiscuous mode [ 140.596804][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.597681][ T12] bridge_slave_0: left allmulticast mode [ 140.597696][ T12] bridge_slave_0: left promiscuous mode [ 140.597806][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.683085][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.684355][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.684935][ T12] bond0 (unregistering): Released all slaves [ 140.686063][ T12] bond1 (unregistering): Released all slaves [ 140.696384][ T12] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 140.702600][ T12] bond2 (unregistering): Released all slaves [ 140.765762][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.769802][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.770434][ T12] bond0 (unregistering): Released all slaves [ 140.771639][ T12] bond1 (unregistering): Released all slaves [ 140.773545][ T12] bond2 (unregistering): Released all slaves [ 140.905764][ T5441] 8021q: adding VLAN 0 to HW filter on device eth8 [ 140.969190][ T8301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 140.969219][ T8301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 141.054009][ T5441] 8021q: adding VLAN 0 to HW filter on device eth9 [ 141.141811][ T43] kauditd_printk_skb: 90 callbacks suppressed [ 141.141824][ T43] audit: type=1400 audit(1789766179.296:1169): avc: denied { write } for pid=9711 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.168750][ T5441] 8021q: adding VLAN 0 to HW filter on device eth10 [ 141.229060][ T43] audit: type=1400 audit(1789766179.386:1170): avc: denied { write } for pid=9714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.265016][ T43] audit: type=1400 audit(1789766179.416:1171): avc: denied { write } for pid=9717 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.289449][ T5441] 8021q: adding VLAN 0 to HW filter on device eth12 [ 141.324520][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.324534][ T12] batadv0: mtu less than device minimum [ 141.324761][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.324975][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.325187][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.325403][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.325621][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.340462][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.344702][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.349189][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.351565][ T12] batman_adv: batadv0: Interface deactivated: dummy0 [ 141.351576][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 141.360356][ T12] hsr_slave_0: left promiscuous mode [ 141.360683][ T12] hsr_slave_1: left promiscuous mode [ 141.360917][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.360927][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.361279][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.361288][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.363677][ T12] veth1_macvtap: left promiscuous mode [ 141.363716][ T12] veth0_macvtap: left promiscuous mode [ 141.363750][ T12] veth1_vlan: left promiscuous mode [ 141.363769][ T12] veth0_vlan: left promiscuous mode [ 141.364915][ T43] audit: type=1400 audit(1789766179.516:1172): avc: denied { write } for pid=9721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.368382][ T12] veth1_macvtap: left allmulticast mode [ 141.368394][ T12] veth1_macvtap: left promiscuous mode [ 141.368435][ T12] veth0_macvtap: left promiscuous mode [ 141.368468][ T12] veth1_vlan: left promiscuous mode [ 141.368494][ T12] veth0_vlan: left promiscuous mode [ 141.394717][ T43] audit: type=1400 audit(1789766179.546:1173): avc: denied { write } for pid=9724 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.474871][ T12] team0 (unregistering): Port device team_slave_1 removed [ 141.479317][ T12] team0 (unregistering): Port device team_slave_0 removed [ 141.603756][ T12] team0 (unregistering): Port device team_slave_1 removed [ 141.605893][ T12] team0 (unregistering): Port device team_slave_0 removed [ 141.641062][ T5441] 8021q: adding VLAN 0 to HW filter on device eth11 [ 141.716114][ T43] audit: type=1400 audit(1789766179.866:1174): avc: denied { write } for pid=9728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.770029][ T43] audit: type=1400 audit(1789766179.926:1175): avc: denied { write } for pid=9731 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.805418][ T5441] 8021q: adding VLAN 0 to HW filter on device eth13