last executing test programs: 4.731965387s ago: executing program 3 (id=147): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, 0x0, 0x0) 2.702358638s ago: executing program 1 (id=193): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x74) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e746572"], 0xdc}}, 0x0) 2.532127665s ago: executing program 1 (id=194): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.890381169s ago: executing program 0 (id=199): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 1.889951067s ago: executing program 0 (id=201): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x75, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000300)="91f8a9848519def38491bbc46110e4e0a3e2c2227886946806173c3cf90e41f7a34d942225517620514bf62a6f357d027227", 0x32}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c950011822", 0xa0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffff", 0x6}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000001080)="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", 0x2000, 0x0, 0x0, 0x0) 1.682269882s ago: executing program 3 (id=203): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup(r0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb", 0x9}}, 0x24002094) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) 1.681585127s ago: executing program 1 (id=205): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x12) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 1.561360469s ago: executing program 1 (id=208): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x142, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.560464261s ago: executing program 1 (id=210): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 1.482450558s ago: executing program 1 (id=211): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000000)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0xd, {0x3}}, 0x5) 1.31253938s ago: executing program 2 (id=212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000020000000000a03000000"], 0xf8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.250056449s ago: executing program 2 (id=213): r0 = syz_open_procfs(0x0, 0x0) socket(0x24, 0x80801, 0x1) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8, 0x9, r4}]}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@can_delroute={0x24, 0x19, 0x1, 0x70bd28, 0x25dfdbfc, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) 1.249465436s ago: executing program 2 (id=214): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x74) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d697400000050000280"], 0xdc}}, 0x0) 1.172283706s ago: executing program 2 (id=215): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 972.15617ms ago: executing program 0 (id=216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="60000000020605000000000000000000002ac605140007800800064000000125080008400000009005000100060000000500050002000000050004000200000011000300686173683a69702c706f72740000000009"], 0x60}}, 0x0) 970.272413ms ago: executing program 0 (id=217): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x12) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 822.144221ms ago: executing program 0 (id=218): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{0x0}], 0x1}}], 0x1, 0x2090) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b0", 0x6d) 821.236701ms ago: executing program 3 (id=219): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f00000001c0)=ANY=[@ANYBLOB="880c0000000000"], 0x70) 752.157629ms ago: executing program 3 (id=220): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x37, 0x0, 0x9}]}, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 751.978808ms ago: executing program 3 (id=221): umount2(0x0, 0x4) r0 = socket$netlink(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) writev(r0, &(0x7f0000009ac0)=[{&(0x7f0000000180)='X\x00', 0x2}], 0x1) 621.640958ms ago: executing program 3 (id=222): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001800)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x13, 0x2, 0x6, 0x3fc, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x6, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x5, 0x6, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x3, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x3, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ed, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x7, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x9, 0x400001, 0x4d15, 0x1fb, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x1, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x48088}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r6, 0x41}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)='t', 0x1}], 0x1}, 0x0) 299.584331ms ago: executing program 2 (id=223): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x427a7000) write$cgroup_devices(r2, 0x0, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64810100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 505.01µs ago: executing program 2 (id=224): openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000001300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=225): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="500100001000010000000000000000007f0000010000edffffff0000000000007f00000100000000000000000000000000000000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000be3412320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002"], 0x94}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:23145' (ED25519) to the list of known hosts. [ 43.372992][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 43.373096][ T43] audit: type=1400 audit(1788465012.874:141): avc: denied { mounton } for pid=5723 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 43.377465][ T43] audit: type=1400 audit(1788465012.874:142): avc: denied { mount } for pid=5723 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.384946][ T5723] cgroup: Unknown subsys name 'net' [ 43.387187][ T43] audit: type=1400 audit(1788465012.884:143): avc: denied { unmount } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.514166][ T5723] cgroup: Unknown subsys name 'cpuset' [ 43.519845][ T5723] cgroup: Unknown subsys name 'rlimit' [ 43.646364][ T43] audit: type=1400 audit(1788465013.144:144): avc: denied { setattr } for pid=5723 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.646875][ T43] audit: type=1400 audit(1788465013.144:145): avc: denied { create } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.647224][ T43] audit: type=1400 audit(1788465013.144:146): avc: denied { write } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.647630][ T43] audit: type=1400 audit(1788465013.144:147): avc: denied { read } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.675516][ T43] audit: type=1400 audit(1788465013.174:148): avc: denied { read } for pid=5444 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 43.684833][ T43] audit: type=1400 audit(1788465013.184:149): avc: denied { read } for pid=5444 comm="dhcpcd" name="n31" dev="tmpfs" ino=1888 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.684865][ T43] audit: type=1400 audit(1788465013.184:150): avc: denied { open } for pid=5444 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1888 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.738401][ T5727] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.562186][ T5723] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.397204][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 48.400144][ T43] audit: type=1400 audit(1788465017.894:157): avc: denied { create } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.409921][ T43] audit: type=1400 audit(1788465017.894:158): avc: denied { read write } for pid=5733 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.410856][ T43] audit: type=1400 audit(1788465017.894:159): avc: denied { open } for pid=5733 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.410896][ T43] audit: type=1400 audit(1788465017.914:160): avc: denied { ioctl } for pid=5733 comm="syz-executor" path="socket:[4964]" dev="sockfs" ino=4964 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.449218][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.450514][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.454536][ T5746] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.455471][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.457138][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.458005][ T5746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.458447][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.458590][ T5746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.459466][ T5746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.459539][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.460295][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.460566][ T5746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.460975][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.464360][ T5749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.464844][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.465158][ T5746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.466251][ T5746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.466533][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.467072][ T5749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.467306][ T5746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.480178][ T43] audit: type=1400 audit(1788465017.974:161): avc: denied { read } for pid=5734 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.480224][ T43] audit: type=1400 audit(1788465017.974:162): avc: denied { open } for pid=5734 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.480261][ T43] audit: type=1400 audit(1788465017.974:163): avc: denied { mounton } for pid=5734 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.483345][ T43] audit: type=1400 audit(1788465017.984:164): avc: denied { module_request } for pid=5734 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.546472][ T43] audit: type=1400 audit(1788465018.044:165): avc: denied { sys_module } for pid=5734 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.371937][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.376193][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.379269][ T5734] bridge_slave_0: entered allmulticast mode [ 49.380678][ T5734] bridge_slave_0: entered promiscuous mode [ 49.383886][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.384022][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.384375][ T5734] bridge_slave_1: entered allmulticast mode [ 49.385590][ T5734] bridge_slave_1: entered promiscuous mode [ 49.467168][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.467385][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.467484][ T5737] bridge_slave_0: entered allmulticast mode [ 49.468847][ T5737] bridge_slave_0: entered promiscuous mode [ 49.509125][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.509309][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.509592][ T5737] bridge_slave_1: entered allmulticast mode [ 49.511491][ T5737] bridge_slave_1: entered promiscuous mode [ 49.515620][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.515849][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.515932][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.516251][ T5733] bridge_slave_0: entered allmulticast mode [ 49.518733][ T5733] bridge_slave_0: entered promiscuous mode [ 49.521558][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.521642][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.521860][ T5735] bridge_slave_0: entered allmulticast mode [ 49.522848][ T5735] bridge_slave_0: entered promiscuous mode [ 49.531582][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.531662][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.531795][ T5735] bridge_slave_1: entered allmulticast mode [ 49.533680][ T5735] bridge_slave_1: entered promiscuous mode [ 49.537296][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.537627][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.537731][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.537840][ T5733] bridge_slave_1: entered allmulticast mode [ 49.539320][ T5733] bridge_slave_1: entered promiscuous mode [ 49.601658][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.603960][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.618792][ T5734] team0: Port device team_slave_0 added [ 49.622007][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.624013][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.626095][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.627890][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.640470][ T5734] team0: Port device team_slave_1 added [ 49.681285][ T5733] team0: Port device team_slave_0 added [ 49.682819][ T5737] team0: Port device team_slave_0 added [ 49.684180][ T5733] team0: Port device team_slave_1 added [ 49.702091][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.702137][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.702184][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.720479][ T5737] team0: Port device team_slave_1 added [ 49.721153][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.721168][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.721191][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.724304][ T5735] team0: Port device team_slave_0 added [ 49.724651][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.724659][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.724671][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.725350][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.725362][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.725381][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.752091][ T5735] team0: Port device team_slave_1 added [ 49.790949][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.790997][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.791044][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.792191][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.792199][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.792211][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.800297][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.800312][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.800335][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.802123][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.802134][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.802154][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.825634][ T5734] hsr_slave_0: entered promiscuous mode [ 49.826207][ T5734] hsr_slave_1: entered promiscuous mode [ 49.829638][ T5733] hsr_slave_0: entered promiscuous mode [ 49.830080][ T5733] hsr_slave_1: entered promiscuous mode [ 49.830372][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 49.830437][ T5733] Cannot create hsr debugfs directory [ 49.868179][ T5737] hsr_slave_0: entered promiscuous mode [ 49.868905][ T5737] hsr_slave_1: entered promiscuous mode [ 49.869947][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 49.869965][ T5737] Cannot create hsr debugfs directory [ 49.935471][ T5735] hsr_slave_0: entered promiscuous mode [ 49.936503][ T5735] hsr_slave_1: entered promiscuous mode [ 49.937156][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 49.937178][ T5735] Cannot create hsr debugfs directory [ 50.323159][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.331388][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.332344][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.336863][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.337246][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.343953][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.345926][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.350601][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.401949][ T5735] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.408696][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.410625][ T5735] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.414192][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.414740][ T5735] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.418738][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.423004][ T5735] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.427778][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.483412][ T5737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.489523][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.490216][ T5737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.495691][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.501081][ T5737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.508447][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.509396][ T5737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.513627][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.540097][ T5738] Bluetooth: hci3: command tx timeout [ 50.540100][ T5751] Bluetooth: hci0: command tx timeout [ 50.540558][ T5738] Bluetooth: hci2: command tx timeout [ 50.540752][ T66] Bluetooth: hci1: command tx timeout [ 50.597867][ T5733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.607260][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.608472][ T5733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.613716][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.620165][ T5733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.625379][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.626472][ T5733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.631603][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.638015][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.700222][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.715575][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.715753][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.737458][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.737578][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.740754][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.764639][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.787654][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.809246][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.809326][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.816101][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.831951][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.832076][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.847188][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.847274][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.848437][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.848498][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.867488][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.922070][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.930953][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.931031][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.959330][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.959413][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.261060][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.282886][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.314314][ T5734] veth0_vlan: entered promiscuous mode [ 51.335162][ T5734] veth1_vlan: entered promiscuous mode [ 51.349557][ T5735] veth0_vlan: entered promiscuous mode [ 51.358789][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.367660][ T5735] veth1_vlan: entered promiscuous mode [ 51.391101][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.398827][ T5734] veth0_macvtap: entered promiscuous mode [ 51.404050][ T5734] veth1_macvtap: entered promiscuous mode [ 51.435116][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.442248][ T5735] veth0_macvtap: entered promiscuous mode [ 51.445605][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.449332][ T5735] veth1_macvtap: entered promiscuous mode [ 51.476221][ T5737] veth0_vlan: entered promiscuous mode [ 51.497320][ T5733] veth0_vlan: entered promiscuous mode [ 51.502821][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.509554][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.510774][ T5737] veth1_vlan: entered promiscuous mode [ 51.520113][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.525825][ T5733] veth1_vlan: entered promiscuous mode [ 51.569446][ T5584] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.604194][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.604282][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.621060][ T5737] veth0_macvtap: entered promiscuous mode [ 51.626004][ T5733] veth0_macvtap: entered promiscuous mode [ 51.634443][ T5737] veth1_macvtap: entered promiscuous mode [ 51.638323][ T5733] veth1_macvtap: entered promiscuous mode [ 51.667091][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.667157][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.698902][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.703508][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.706526][ T43] audit: type=1400 audit(1788465021.204:166): avc: denied { mount } for pid=5734 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.710752][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.710776][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.726482][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.729976][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.759116][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.759197][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.769847][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.770032][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.770096][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.770149][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.770203][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.795423][ T5734] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.811819][ T5584] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.812387][ T5584] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.812509][ T5584] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.812974][ T5584] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.813352][ T5584] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.912562][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.912630][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.929414][ T5584] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.929768][ T5584] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.929984][ T5584] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.930200][ T5584] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.959898][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.959965][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.999437][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.999524][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.006123][ T5889] ieee802154 phy0 wpan0: encryption failed: -22 [ 52.019172][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.019218][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.026824][ T5890] xt_hashlimit: size too large, truncated to 1048576 [ 52.225515][ T5902] netlink: 'syz.1.7': attribute type 12 has an invalid length. [ 52.225612][ T5902] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7'. [ 52.259370][ T5904] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in; [ 52.259370][ T5904] program syz.2.8 not setting count and/or reply_len properly [ 52.419818][ T5922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15'. [ 52.470986][ T5927] netlink: 'syz.1.18': attribute type 1 has an invalid length. [ 52.613946][ T66] Bluetooth: hci3: command tx timeout [ 52.619484][ T66] Bluetooth: hci2: command tx timeout [ 52.622064][ T66] Bluetooth: hci1: command tx timeout [ 52.622093][ T66] Bluetooth: hci0: command tx timeout [ 52.674111][ T5937] syz.3.22 uses obsolete (PF_INET,SOCK_PACKET) [ 53.428792][ T5927] bridge1: entered promiscuous mode [ 53.429783][ T5927] bridge1: entered allmulticast mode [ 53.570022][ T43] kauditd_printk_skb: 39 callbacks suppressed [ 53.570099][ T43] audit: type=1400 audit(1788465023.064:206): avc: denied { map_create } for pid=5956 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.570163][ T43] audit: type=1400 audit(1788465023.064:207): avc: denied { map_read map_write } for pid=5956 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.573552][ T43] audit: type=1400 audit(1788465023.074:208): avc: denied { prog_run } for pid=5956 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.626585][ T43] audit: type=1400 audit(1788465023.124:209): avc: denied { read } for pid=5956 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.691713][ T5966] ieee802154 phy0 wpan0: encryption failed: -22 [ 54.699444][ T66] Bluetooth: hci1: command tx timeout [ 54.699502][ T5745] Bluetooth: hci2: command tx timeout [ 54.699510][ T66] Bluetooth: hci3: command tx timeout [ 54.702812][ T5738] Bluetooth: hci0: command tx timeout [ 54.951653][ T5987] netlink: 48 bytes leftover after parsing attributes in process `syz.1.38'. [ 55.005926][ T43] audit: type=1400 audit(1788465024.504:210): avc: denied { ioctl } for pid=5988 comm="syz.1.39" path="socket:[9893]" dev="sockfs" ino=9893 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.573836][ T5979] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 55.647784][ T5996] ieee802154 phy0 wpan0: encryption failed: -22 [ 55.670244][ T5998] loop0: detected capacity change from 0 to 32768 [ 55.700974][ T5998] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.542922][ T5951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 56.618518][ T6012] netlink: 48 bytes leftover after parsing attributes in process `syz.0.48'. [ 56.647285][ T43] audit: type=1400 audit(1788465026.144:211): avc: denied { create } for pid=6013 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.650027][ T43] audit: type=1400 audit(1788465026.144:212): avc: denied { setopt } for pid=6013 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.651490][ T43] audit: type=1400 audit(1788465026.144:213): avc: denied { bind } for pid=6013 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.652648][ T43] audit: type=1400 audit(1788465026.144:214): avc: denied { name_bind } for pid=6013 comm="syz.3.49" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 56.652896][ T43] audit: type=1400 audit(1788465026.144:215): avc: denied { node_bind } for pid=6013 comm="syz.3.49" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 56.769151][ T5738] Bluetooth: hci0: command tx timeout [ 56.770720][ T5751] Bluetooth: hci2: command tx timeout [ 56.770747][ T5751] Bluetooth: hci1: command tx timeout [ 56.770766][ T5751] Bluetooth: hci3: command tx timeout [ 56.929700][ T6037] netlink: 48 bytes leftover after parsing attributes in process `syz.2.59'. [ 56.934833][ T6037] Zero length message leads to an empty skb [ 57.027853][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60'. [ 57.238402][ T6065] ieee802154 phy0 wpan0: encryption failed: -22 [ 57.239826][ T6065] ieee802154 phy0 wpan0: encryption failed: -22 [ 57.447943][ T6068] netlink: 48 bytes leftover after parsing attributes in process `syz.2.71'. [ 57.493488][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.72'. [ 58.118715][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.82'. [ 58.127388][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.82'. [ 58.164482][ T6095] netlink: 48 bytes leftover after parsing attributes in process `syz.3.83'. [ 58.433007][ T6112] ieee802154 phy0 wpan0: encryption failed: -22 [ 58.435576][ T6112] ieee802154 phy0 wpan0: encryption failed: -22 [ 58.504939][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'. [ 58.512105][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'. [ 58.545604][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'. [ 58.780207][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.103'. [ 58.782718][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.103'. [ 59.636254][ T6181] ieee802154 phy0 wpan0: encryption failed: -22 [ 59.637857][ T6181] ieee802154 phy0 wpan0: encryption failed: -22 [ 60.048638][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 60.048782][ T43] audit: type=1800 audit(1788465029.544:224): pid=6198 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.130" name="file2" dev="sda1" ino=2038 res=0 errno=0 [ 60.123617][ T6050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.560810][ T43] audit: type=1800 audit(1788465030.064:225): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.145" name="file2" dev="sda1" ino=2038 res=0 errno=0 [ 60.803258][ T6260] ieee802154 phy0 wpan0: encryption failed: -22 [ 60.805268][ T6260] ieee802154 phy0 wpan0: encryption failed: -22 [ 61.113524][ T43] audit: type=1800 audit(1788465030.614:226): pid=6267 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.160" name="file2" dev="sda1" ino=2038 res=0 errno=0 [ 61.367016][ T6292] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 61.610772][ T43] audit: type=1800 audit(1788465031.114:227): pid=6298 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.174" name="file2" dev="sda1" ino=2038 res=0 errno=0 [ 62.018162][ T6321] ieee802154 phy0 wpan0: encryption failed: -22 [ 62.021241][ T6321] ieee802154 phy0 wpan0: encryption failed: -22 [ 62.283704][ T43] audit: type=1800 audit(1788465031.784:228): pid=6325 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.185" name="file2" dev="sda1" ino=2038 res=0 errno=0 [ 62.428754][ T6341] Cannot find set identified by id 0 to match [ 62.638326][ T6349] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 62.888187][ T6351] __nla_validate_parse: 15 callbacks suppressed [ 62.888290][ T6351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'. [ 63.232612][ T43] audit: type=1800 audit(1788465032.734:229): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.198" name="file2" dev="sda1" ino=2038 res=0 errno=0 [ 63.326326][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.200'. [ 63.434727][ T6235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 63.490899][ T6374] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.491230][ T6374] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.504098][ T6375] ip_tables: iptables: counters copy to user failed while replacing table [ 63.865345][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.212'. [ 63.951182][ T6400] netlink: 76 bytes leftover after parsing attributes in process `syz.2.214'. [ 64.005487][ T6402] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 64.400060][ T43] audit: type=1400 audit(1788465033.904:230): avc: denied { read write } for pid=6413 comm="syz.3.220" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 64.400331][ T43] audit: type=1400 audit(1788465033.904:231): avc: denied { open } for pid=6413 comm="syz.3.220" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 64.443520][ T6416] FAULT_INJECTION: forcing a failure. [ 64.443520][ T6416] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 64.457359][ T6416] CPU: 3 UID: 0 PID: 6416 Comm: syz.3.221 Not tainted syzkaller #0 PREEMPT(full) [ 64.457407][ T6416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.457422][ T6416] Call Trace: [ 64.457430][ T6416] [ 64.457440][ T6416] dump_stack_lvl+0x100/0x190 [ 64.457588][ T6416] should_fail_ex.cold+0x5/0xa [ 64.457624][ T6416] _copy_from_iter+0x1f4/0x1690 [ 64.457662][ T6416] ? __asan_memset+0x23/0x50 [ 64.457697][ T6416] ? __pfx__copy_from_iter+0x10/0x10 [ 64.457730][ T6416] ? __pfx___alloc_skb+0x10/0x10 [ 64.457773][ T6416] netlink_sendmsg+0x808/0xda0 [ 64.457812][ T6416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.457848][ T6416] ? selinux_socket_sendmsg+0x198/0x2f0 [ 64.457885][ T6416] sock_write_iter+0x53a/0x5b0 [ 64.457912][ T6416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.457944][ T6416] ? __pfx_sock_write_iter+0x10/0x10 [ 64.457979][ T6416] ? __pfx___file_has_perm+0x10/0x10 [ 64.458015][ T6416] do_iter_readv_writev+0x6f7/0x930 [ 64.458050][ T6416] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 64.458080][ T6416] ? selinux_file_permission+0x8f/0x6d0 [ 64.458117][ T6416] ? bpf_lsm_file_permission+0x9/0x10 [ 64.458142][ T6416] ? security_file_permission+0x76/0x210 [ 64.458165][ T6416] ? rw_verify_area+0xce/0x6d0 [ 64.458198][ T6416] vfs_writev+0x360/0xdd0 [ 64.458232][ T6416] ? __lock_acquire+0x4c5/0x1ec0 [ 64.458257][ T6416] ? __pfx_vfs_writev+0x10/0x10 [ 64.458303][ T6416] ? lock_acquire+0x1d1/0x380 [ 64.458324][ T6416] ? __fget_files+0x34/0x3d0 [ 64.458361][ T6416] ? __fget_files+0x21f/0x3d0 [ 64.458393][ T6416] ? do_writev+0x28a/0x340 [ 64.458425][ T6416] do_writev+0x28a/0x340 [ 64.458456][ T6416] ? __pfx_do_writev+0x10/0x10 [ 64.458491][ T6416] do_syscall_64+0x123/0x790 [ 64.458518][ T6416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.458544][ T6416] RIP: 0033:0x7f006759e159 [ 64.458563][ T6416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.458585][ T6416] RSP: 002b:00007f00684f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 64.458607][ T6416] RAX: ffffffffffffffda RBX: 00007f0067825fa0 RCX: 00007f006759e159 [ 64.458622][ T6416] RDX: 0000000000000001 RSI: 0000200000009ac0 RDI: 0000000000000003 [ 64.458636][ T6416] RBP: 00007f0067635024 R08: 0000000000000000 R09: 0000000000000000 [ 64.458649][ T6416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.458661][ T6416] R13: 00007f0067826038 R14: 00007f0067825fa0 R15: 00007ffcd9edab28 [ 64.458689][ T6416] [ 64.510855][ T43] audit: type=1400 audit(1788465034.014:232): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.583947][ T6418] syzkaller0: entered promiscuous mode [ 64.583973][ T6418] syzkaller0: entered allmulticast mode [ 64.590130][ T43] audit: type=1400 audit(1788465034.094:233): avc: denied { write } for pid=6417 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.223209][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 65.223287][ T43] audit: type=1400 audit(1788465034.724:237): avc: denied { create } for pid=6426 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.225849][ T43] audit: type=1400 audit(1788465034.724:238): avc: denied { write } for pid=6426 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.226096][ T43] audit: type=1400 audit(1788465034.724:239): avc: denied { nlmsg_write } for pid=6426 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.315026][ T6430] [ 65.317010][ T6430] ============================= [ 65.320355][ T6430] WARNING: suspicious RCU usage [ 65.322646][ T6430] syzkaller #0 Not tainted [ 65.324675][ T6430] ----------------------------- [ 65.326863][ T6430] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 65.330543][ T6430] [ 65.330543][ T6430] other info that might help us debug this: [ 65.330543][ T6430] [ 65.334962][ T6430] [ 65.334962][ T6430] rcu_scheduler_active = 2, debug_locks = 1 [ 65.338940][ T6430] locks held by syz.0.225/6430: 1, last CPU#0: [ 65.342125][ T6430] #0: ffff888028d64410 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x62/0x90 [ 65.346757][ T6430] [ 65.346757][ T6430] stack backtrace: [ 65.349508][ T6430] CPU: 0 UID: 0 PID: 6430 Comm: syz.0.225 Not tainted syzkaller #0 PREEMPT(full) [ 65.353719][ T6430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.358721][ T6430] Call Trace: [ 65.360316][ T6430] [ 65.361592][ T6430] dump_stack_lvl+0x100/0x190 [ 65.363610][ T6430] lockdep_rcu_suspicious.cold+0x4f/0xb2 [ 65.365992][ T6430] xfrm_do_migrate_state+0x2463/0x2f10 [ 65.368381][ T6430] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 65.370837][ T6430] ? __asan_memset+0x23/0x50 [ 65.372922][ T6430] ? __nla_validate_parse+0x1e7/0x28b0 [ 65.375605][ T6430] ? __nla_parse+0x40/0x60 [ 65.378276][ T6430] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 65.381244][ T6430] ? xfrm_user_rcv_msg+0x483/0xd80 [ 65.383490][ T6430] xfrm_user_rcv_msg+0x483/0xd80 [ 65.385458][ T6430] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 65.387287][ T6430] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.389381][ T6430] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 65.392068][ T6430] ? __lock_acquire+0x4c5/0x1ec0 [ 65.394199][ T6430] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 65.396631][ T6430] ? __mutex_lock+0x829/0x1bd0 [ 65.398883][ T6430] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.401182][ T6430] ? __mutex_lock+0x829/0x1bd0 [ 65.403311][ T6430] ? __mutex_lock+0x26c/0x1bd0 [ 65.405390][ T6430] netlink_rcv_skb+0x159/0x420 [ 65.407249][ T6430] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 65.409549][ T6430] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 65.411862][ T6430] xfrm_netlink_rcv+0x71/0x90 [ 65.414016][ T6430] netlink_unicast+0x585/0x850 [ 65.416012][ T6430] ? __pfx_netlink_unicast+0x10/0x10 [ 65.418043][ T6430] ? __pfx_sock_has_perm+0x10/0x10 [ 65.419800][ T6430] netlink_sendmsg+0x8b0/0xda0 [ 65.421439][ T6430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.423384][ T6430] ? selinux_socket_sendmsg+0x198/0x2f0 [ 65.425698][ T6430] ____sys_sendmsg+0xa4d/0xbe0 [ 65.427844][ T6430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.430274][ T6430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.432207][ T6430] ? find_held_lock+0x2b/0x80 [ 65.433823][ T6430] ___sys_sendmsg+0x190/0x1e0 [ 65.435411][ T6430] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.437159][ T6430] ? find_held_lock+0x2b/0x80 [ 65.438749][ T6430] __sys_sendmsg+0x160/0x210 [ 65.440300][ T6430] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.442334][ T6430] ? kcov_ioctl+0x17a/0x760 [ 65.444498][ T6430] do_syscall_64+0x123/0x790 [ 65.446748][ T6430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.448832][ T6430] RIP: 0033:0x7f0ed719e159 [ 65.450301][ T6430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.457853][ T6430] RSP: 002b:00007f0ed7f8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.461325][ T6430] RAX: ffffffffffffffda RBX: 00007f0ed7426090 RCX: 00007f0ed719e159 [ 65.464552][ T6430] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 65.467851][ T6430] RBP: 00007f0ed7235024 R08: 0000000000000000 R09: 0000000000000000 [ 65.471119][ T6430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.473993][ T6430] R13: 00007f0ed7426128 R14: 00007f0ed7426090 R15: 00007ffc1800cb18 [ 65.477357][ T6430] [ 66.682340][ T6390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 71.492927][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.495865][ T1439] ieee802154 phy1 wpan1: encryption failed: -22