last executing test programs: 1m20.763613352s ago: executing program 0 (id=824): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00"], 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x20000080) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000008000000000500000a140000001100010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x102080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x6a0}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r6) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r7, 0x301, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c43", 0x8, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x3, &(0x7f0000000040)) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 1m18.214621857s ago: executing program 0 (id=831): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={&(0x7f00000002c0), 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000700)=[@rights={{0xc}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x160) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0x3, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @rand_addr=0x64010102, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x3, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010086bd7000fedbdf2506000000140008007866726d300000000000000000000000bdf1915e1159b7927d3d8df0e60a93f19f31fef22922d42a02810a00000000000000caf76cbc91d7ff8571d6f5c954f45884a1466d6084b2328b539cc3f815266525abbaf1bc741b6706c6fe7a1c417a313ad610a8067dc8c4ebe26516ebb4553e0292107979db102cd08cc05607e649b06c159a555298530100db1c2dcf80b08d71eac756ac40123110db1f4395a3a7e636b060034f6e7634f9ddc4ac3356b34f97c035b5dcaeb01a6f3ee31cbc5f822b093343b9"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) socket(0x400000000010, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 1m14.822075201s ago: executing program 0 (id=838): io_submit(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f00000001c0)={0xb, {{0xa, 0x4e20, 0x5, @mcast2, 0x81}}, {{0xa, 0x4e20, 0xfffffffb, @empty, 0x8000}}}, 0x108) mkdir(&(0x7f0000000480)='./bus\x00', 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) r5 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd27, 0x0, {0x2}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x5, 0xc}}, {0x4}}]}]}, 0x68}}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000002c0)={0x1, 0xff, 0xa, 0x0}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x3]}}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x5}]}}]}, 0x44}}, 0x0) 1m9.11101513s ago: executing program 0 (id=848): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x6a, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4f, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='jfs\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="634a8029adc0f79f1fc031351201000200000008c016e17540000102030109022400010102401fa7e3ad9201010609219fc1c9cb0000000000c62300040c02070000"], &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r7 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r9, @ANYRES64=r8], 0x40}}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300020c00000000000000000000000300060000000000020000000000010038000000000000000200010000000000ffffffff7fffffff030005000000000002000000ac1414aa0000000000000000020008"], 0x60}, 0x1, 0x7}, 0x0) 1m5.060823048s ago: executing program 0 (id=856): openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0x7ff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000"], 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a0506020000000000000000000007140000001100010000000000000000000000000abf08bfba86d940a23b5f8f0800b5c2522473ad089eb3d4040fc86fa5760f8692707c6259e5e1fa5dceca1730e4de7a2786974036740b1deb991601c408dcc2e639f6cb8cedec0dfc688e28b5cbbe662b3e3a36de87224299b6955337562eb68ac0a8c3a022aa45fb3d9a50ac3e88e0ece968fba6f0c908b78c856a05e43bbedc523138c6cdaa615d04187794605d52"], 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a32000000001400000011"], 0x94}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000040)=0x1000) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) 58.348912627s ago: executing program 0 (id=869): r0 = socket(0x400000000010, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="2e010000ed454210cd0c99009bf4000203010902120001000000000904"], 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000f40), 0x0, 0x0, 0x0, r1) add_key$user(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x1}, &(0x7f0000000240)='J', 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001e80)={'syz', 0x1}, 0x0, r2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x200) unshare(0x2c020400) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e80)=@nat={'nat\x00', 0x670, 0x5, 0x690, 0x470, 0x0, 0xfeffffff, 0x348, 0x470, 0x5f8, 0x5f8, 0xffffffff, 0x5f8, 0x5f8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6, 0x0, 0x42}, 0x0, 0x308, 0x348, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x45da745f41602387}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x3c, "672aa37433823e2ec551dffef2f50b7e14d5905c77d37ba9f2eb3a8b53e8"}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x3}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id, @port=0xfffe}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@multicast1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6f0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001e00010002000000fddbdf35020500000000000000000000080001005407d6600800060000010000080001007f000001"], 0x34}, 0x1, 0x0, 0x0, 0x4c806}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x80) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) 58.175374552s ago: executing program 32 (id=869): r0 = socket(0x400000000010, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="2e010000ed454210cd0c99009bf4000203010902120001000000000904"], 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000f40), 0x0, 0x0, 0x0, r1) add_key$user(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x1}, &(0x7f0000000240)='J', 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001e80)={'syz', 0x1}, 0x0, r2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x200) unshare(0x2c020400) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e80)=@nat={'nat\x00', 0x670, 0x5, 0x690, 0x470, 0x0, 0xfeffffff, 0x348, 0x470, 0x5f8, 0x5f8, 0xffffffff, 0x5f8, 0x5f8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6, 0x0, 0x42}, 0x0, 0x308, 0x348, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x45da745f41602387}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x3c, "672aa37433823e2ec551dffef2f50b7e14d5905c77d37ba9f2eb3a8b53e8"}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x3}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id, @port=0xfffe}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@multicast1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6f0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001e00010002000000fddbdf35020500000000000000000000080001005407d6600800060000010000080001007f000001"], 0x34}, 0x1, 0x0, 0x0, 0x4c806}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x80) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) 18.374097136s ago: executing program 5 (id=940): r0 = socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) fanotify_init(0xf00, 0x1000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x2, 0x1, 0x0, 0x0, 0x0, 0xdddd1000}) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, 0x0, 0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000190001090000000000000000021800000000fd010000000008000100ac141400100054800c0001000000000000000fff08000500e000000108000b000c"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) socket(0x40000000015, 0x5, 0x0) 15.568825789s ago: executing program 5 (id=945): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, &(0x7f0000000640)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x8970, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x80, 0x1000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x1, 0x6000000}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000580)=""/90) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, &(0x7f0000000480)) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x8, 0xffffffff}, 0xfc, 0x9}}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xa, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x3000c11, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x33, 0x2d, 0x4e, 0x3a, 0x36, 0x2f, 0x34]}}}, 0x4e}]}) 14.6047544s ago: executing program 2 (id=947): r0 = syz_open_dev$dvb_demux(0x0, 0x7a5966a2, 0x100) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x7f3d, 0xc00, 0xe, 0x42f6}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0x7299, &(0x7f0000000640)={0x0, 0xc43c, 0x200, 0x0, 0x9}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) r4 = io_uring_setup(0x30a9, &(0x7f00000007c0)={0x0, 0x54f8, 0x40, 0x400003, 0x89}) io_uring_setup(0x669, &(0x7f00000002c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x1c, 0x20000048, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0x305, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)={r5}) r6 = dup(r5) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x10000007, 0xfffc, 0xe655, 0x2, 0x85, 0x8, 0xff}, 0x9c) syz_open_dev$video4linux(&(0x7f0000000340), 0x8, 0x802) socket$kcm(0x10, 0x2, 0x0) 13.0311766s ago: executing program 2 (id=948): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000004c0)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @ssrr={0x89, 0x3, 0xb5}]}}}}}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000740), 0x400802, 0x0) r6 = add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000580)="27bbb1597dc47f6337451576aeb8dfb5bd94109520e8e86f17154f1f9cf65ecb99c8d4a09b832e2b06377bd6f3465578f7e4bd03f416c956da02a542dee2d985d0a7b21a2186c034b3296ef41bac2493e03b67e25e", 0x55, 0xfffffffffffffff9) add_key(&(0x7f0000000800)='cifs.idmap\x00', &(0x7f0000000840)={'syz', 0x3}, &(0x7f0000000880)="1121093dbc44dd41e32537265cf5402ba82741e48682c8f7b6e3a1d13fc4edcd38acd989926e2a06e13dcdf04417582edadd7dc15af72575f13779f7daa2900a965bdf2ad4e755bd9339b59a4b7dc646eb8ef500cc38971f5c22d2f65af07cc4877d82d4e0c1a03df0bcf50a0a3aca6024b47ad7dc08bc01228eb525d91ca6f4eebd018861b8c007eeee7050f31ad4e5ce3d074ec5301027", 0x98, r6) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0) r7 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) lstat(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r7, r8, r9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x40}}) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r10, 0xc0945662, &(0x7f0000000100)={0x1000, 0x0, '\x00', {0x0, @bt={0x0, 0x5, 0x0, 0x0, 0x9, 0x9, 0xb, 0x7f, 0xbc, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x14, 0x1b, {0x0, 0x6}, 0x7, 0x40}}}) 12.766302597s ago: executing program 4 (id=950): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x9, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x337a00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e23}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7, 0x0, 0x7, 0x0, 0x7af, 0xfa11, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) r5 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x0, 0xffff}, {0x8, 0xfff3}}}, 0x24}}, 0x4004004) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x1, 0x1}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='lp', 0x2) 12.567201521s ago: executing program 3 (id=951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000740)="59eced8ec6dc3f0adf33c9f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r7, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1c75, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 11.532482229s ago: executing program 3 (id=952): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x9, 0x1000006, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000002, 0x28011, r2, 0xe7ce3000) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xffc, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000340)={0x3, r5, 0xfffffffa, 0x7ffffe02, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f00000000c0)={0x3, r5, 0x10, 0xfffffffb, 0x36f}) ioctl$VHOST_VDPA_GET_IOVA_RANGE(0xffffffffffffffff, 0x8010af78, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, 0x0, 0x0) 11.010966419s ago: executing program 2 (id=953): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='\x00') close(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600)}}, {{0x0, 0x0, &(0x7f0000005c40)}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) unshare(0x62000280) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[], 0x0) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0xe090, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) socket$alg(0x26, 0x5, 0x0) 11.010018925s ago: executing program 1 (id=963): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000d80)={0x10, 0x1401, 0x1, 0x70bf2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000080) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$IMDELTIMER(r4, 0x80044941, &(0x7f00000000c0)=0x2) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {0x1}, 0x7}) r6 = open(&(0x7f00000003c0)='./file0\x00', 0x48040, 0x0) finit_module(r6, 0x0, 0x2) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x9, 0x6}, {0x7, 0x101}]}}) 9.970441691s ago: executing program 4 (id=954): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @remote}, 0x140, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x26}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prlimit64(0xffffffffffffffff, 0xa, &(0x7f00000002c0)={0x8000, 0x3a1e85ad}, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'batadv0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x20, 0x23, "787bfb834421c6f2f60511cd83241cbd19c43ff3856b33078b949f65d9858e77e33dd9"}}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getsig(0x4202, r1, 0x40, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x22c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) listen(0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24044080) 9.86459967s ago: executing program 5 (id=955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r4, &(0x7f00000008c0)={&(0x7f0000000900)=@pppoe={0x18, 0x0, {0x4, @broadcast, 'team0\x00'}}, 0x80, 0x0, 0x0, &(0x7f00000007c0)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x7da92f7c}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}], 0xf0}, 0x20004000) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f00000000c0)) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x5000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r5, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xc, 0x0, 0x1}}, 0x40) get_mempolicy(0x0, 0x0, 0xffffffffffffffff, &(0x7f00008b2000/0x4000)=nil, 0x3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106"], 0x18}], 0x1}, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0) 8.835898764s ago: executing program 3 (id=956): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) r4 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r4, 0x82000000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000002c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6800) ioprio_get$uid(0x3, r6) 8.623729848s ago: executing program 3 (id=957): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = open(0x0, 0x0, 0x22) fcntl$notify(r4, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce846e737358f5", 0x18}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4004550d, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) io_uring_setup(0x483b, &(0x7f0000002fc0)={0x0, 0x6d28, 0x2, 0x0, 0x11f}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x51}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x30}}, 0x0) 8.422549238s ago: executing program 4 (id=958): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f00001d3000/0x4000)=nil, 0x4000, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r2, 0x8}, 0x8) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0xf0ff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x3}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x1) fsmount(0xffffffffffffffff, 0x0, 0x8c) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'vlan0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x400, 0x4, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, [0xfffffffc, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffe]}}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r7, 0x16}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)="270302005902140006008d5988a8", 0xe}], 0x1}, 0x24004080) recvmsg(r5, &(0x7f0000000340)={&(0x7f0000000000)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)=""/230, 0xe6}, {&(0x7f0000000280)=""/121, 0x79}], 0x2}, 0x20) 8.353477574s ago: executing program 5 (id=959): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x200004, 0x9, 0x6, 0x2, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x0, 0xd}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40400, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r4 = socket(0x18, 0x800, 0x0) sendfile(r4, r3, 0x0, 0x8) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x7a) keyctl$invalidate(0x15, r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) 8.183463342s ago: executing program 1 (id=960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x50f4}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x1, 0x8000, 0x4, 0x9, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x65, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010101, {[@lsrr={0x83, 0x17, 0xb5, [@rand_addr=0x64010101, @multicast1, @broadcast, @private=0xa010100, @empty]}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) r6 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x5, 0x4) socket$kcm(0x2, 0x200000000000001, 0x106) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) socket$inet(0x2, 0xa, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x64, 0x30, 0xffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x34, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x404c084) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c000980080001400001"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) 8.001089871s ago: executing program 4 (id=961): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}, @empty=0xe0000001}, {0x4e22, 0x4e20, 0x8}}}}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x408, 0x4e8, 0x0, 0xfeffffff, 0x2f0, 0x0, 0x5a0, 0x5a0, 0xffffffff, 0x5a0, 0x5a0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10, 0x20, 0x7f, 0x5}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002, 0x0, 0x2]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x8, @ipv4=@private=0xa010100, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @port=0x4e21, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x420100, 0x0, 0x28}, &(0x7f0000000240)='./file1\x00', 0x18, 0x0, 0x12345}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x44}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) io_uring_enter(r0, 0x4184, 0x21, 0x1, 0x0, 0x0) 7.46869089s ago: executing program 2 (id=962): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, 0x0, 0x917) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='status\x00') read$FUSE(r3, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) socket$inet_tcp(0x2, 0x1, 0x0) r5 = request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r6, &(0x7f0000000080)=""/72, 0x48) keyctl$clear(0x7, r5) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000000), 0x1001) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x6dd, 0x10, 0x200, 0x10, 0x3, 0x20, 0xffffffff, 0x20, 0x7, &(0x7f00000000c0)=[0x4], 0x1, 0x0}) 5.898969625s ago: executing program 1 (id=964): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x10, 0x101000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setregset(0x4205, r2, 0x4, 0x0) ptrace$pokeuser(0x6, 0x0, 0x118, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e", 0x7a, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r9, 0x89e0, &(0x7f0000000040)={0x1}) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd700ffedbdf252800000005002e000500000008000200", @ANYRES32=r7, @ANYBLOB="05002b0002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x94}, 0xc0) writev(r0, &(0x7f0000002180)=[{&(0x7f0000002080)="4bd7310a", 0x4}], 0x1) 5.849295516s ago: executing program 4 (id=965): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340), &(0x7f0000000480)='system_u:object_r:sudo_exec_t:s0\x00', 0x21, 0x1) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') socket$inet6(0xa, 0x805, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, 0x0, &(0x7f0000000140)) 5.722101581s ago: executing program 2 (id=966): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000580)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r2, &(0x7f0000000640)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x80003, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 4.161687174s ago: executing program 1 (id=967): socket(0x25, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x21, 0x2, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x20400, &(0x7f00000003c0)={[], [], 0x2f}) r4 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0xee) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r4], 0x2b) sendfile(r6, r4, 0x0, 0x4000000053d2) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x10, 0x8, 0xc, 0xc, 0x383, 0x4, 0x401, 0x0, 0x34}}) bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.564277958s ago: executing program 4 (id=968): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x9, 0x1000006, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000002, 0x28011, r2, 0xe7ce3000) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xffc, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000340)={0x3, r5, 0xfffffffa, 0x7ffffe02, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f00000000c0)={0x3, r5, 0x10, 0xfffffffb, 0x36f}) ioctl$VHOST_VDPA_GET_IOVA_RANGE(0xffffffffffffffff, 0x8010af78, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, 0x0, 0x0) 2.457670763s ago: executing program 3 (id=969): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000814) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.308091396s ago: executing program 5 (id=970): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') r4 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000100)=0x20d8, 0x4) preadv(r3, &(0x7f00000026c0)=[{&(0x7f0000002700)=""/4088, 0xff8}], 0x1, 0x15c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f0000004180)={0x1, 0x6, 0x0, 0x0, 0x3, 0x3, 0x0, 0x6, 0x1}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x28}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard') syz_emit_ethernet(0x42, &(0x7f0000000100)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x3, 0x0, 0x34, 0x0, 0x0, 0x2, 0x4, 0x0, @empty, @multicast1, {[@generic={0x4af3dca665480ba0, 0x4, ';m'}, @noop, @generic={0x0, 0x2}]}}, {0x4e23, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0xffffffff}}}}}}, 0x0) 2.148556355s ago: executing program 1 (id=971): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x7f7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f00005ed000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x300}, &(0x7f00000000c0)=0x40) chdir(0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb5", 0x2e}], 0x2}], 0x1, 0x40800) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0xffff, 0x4000, 0x4e22, 0x8001}, {@in=@dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x3}, 0x70bd2d, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'pcbc(fcrypt)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in6=@private2}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21}}]}, 0x170}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r7 = creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r7, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) socket$netlink(0x10, 0x3, 0xf) 2.133006792s ago: executing program 3 (id=972): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0xb3, 0xb319, 0x10003}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@ccm_128={{0x304}, "4f9be93afe4be300", "5e1295211bef75b5e66a00", "40b9a46a", "0b18f4cc16045797"}, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000440)={{0x9, 0xfd}, 'port0\x00', 0x10, 0x11069, 0x3, 0x8000, 0x55814893, 0x80, 0x7fffffff, 0x0, 0x1, 0x3}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) accept4$tipc(0xffffffffffffffff, &(0x7f0000000180)=@id, &(0x7f0000000240)=0x10, 0x8f2eaf272c613c3b) r3 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x1fe, 0x0, 0x10}) bind$tipc(r3, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc040564a, &(0x7f0000000000)={0x1011, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 229.085145ms ago: executing program 5 (id=973): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') fdatasync(r0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000d40)='net/llc/socket\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r6 = accept(r2, 0x0, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) recvmsg(r6, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600), 0x0, 0x0, 0x0, 0x1000000}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='.', 0x1}], 0x1}}], 0x2, 0x8020) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x3, 0x1, [0x2]}, 0xa) 223.00636ms ago: executing program 1 (id=974): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026, r0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x2000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240000012ebd7000fbdbdf25027c00000cb9fd72c32d9e5e2fa29c79"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x100000, 0xdddd1000, 0x0, 0x2, 0x81, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xbf}, {0xb000, 0x3000, 0xc, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0xd, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x0, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x40000, 0x80f3}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf001, 0xd000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) 0s ago: executing program 2 (id=975): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b32000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000002060500000000000000010000031400078008000840000000d10500140004000000"], 0x28}, 0x1, 0x0, 0x0, 0x2404c822}, 0x8000) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0605000000bad775aa1b71da", 0xe, 0xfffffffffffffffe) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000040)=0x80000001, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2e}, 0x28) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x2c, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) madvise(&(0x7f0000735000/0x1000)=nil, 0x1000, 0x65) socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) readv(r7, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/230, 0xe6}, {0x0}, {0x0}, {&(0x7f00000005c0)=""/190, 0xbe}], 0x4) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000380), 0x4401, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000100)="83f7feccb4c1e71a60b7759a045b310a", 0x10) kernel console output (not intermixed with test programs): "devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.577437][ T30] audit: type=1800 audit(1776596434.839:1170): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.184" name="/" dev="tmpfs" ino=27 res=0 errno=0 [ 153.661033][ T6969] syzkaller0: entered promiscuous mode [ 153.683113][ T6969] syzkaller0: entered allmulticast mode [ 155.271474][ T6961] loop6: detected capacity change from 0 to 2640 [ 155.320018][ T6961] buffer_io_error: 60 callbacks suppressed [ 155.320033][ T6961] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.373484][ T6961] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.425010][ T6961] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.449016][ T6961] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.473029][ T30] audit: type=1400 audit(1776596436.829:1171): avc: denied { connect } for pid=6999 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 155.500606][ T6961] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.527369][ T6961] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.548044][ T6961] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.568308][ T6961] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.583914][ T6961] ldm_validate_partition_table(): Disk read failed. [ 155.592510][ T7003] tmpfs: Unknown parameter 'grpq' [ 155.597855][ T6961] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.612962][ T6961] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.652536][ T6961] Dev loop6: unable to read RDB block 0 [ 155.687953][ T6961] loop6: unable to read partition table [ 155.710665][ T6961] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 155.748088][ T7003] /dev/nullb0: Can't open blockdev [ 155.811771][ T30] audit: type=1400 audit(1776596437.169:1172): avc: denied { ioctl } for pid=7004 comm="syz.1.191" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 156.193391][ T7013] netlink: 'syz.1.191': attribute type 1 has an invalid length. [ 156.201131][ T7013] netlink: 760 bytes leftover after parsing attributes in process `syz.1.191'. [ 156.561017][ T7010] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.192' sets config #2 [ 157.798754][ T7027] libceph: resolve '0..' (ret=-3): failed [ 157.875159][ T7027] gfs2: error -5 reading superblock [ 158.473860][ T30] audit: type=1400 audit(1776596439.829:1173): avc: denied { create } for pid=7037 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 158.501248][ T7044] netlink: 'syz.2.198': attribute type 10 has an invalid length. [ 158.531530][ T7040] ISOFS: Unable to identify CD-ROM format. [ 158.537989][ T30] audit: type=1400 audit(1776596439.869:1174): avc: denied { setopt } for pid=7037 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 158.857273][ T7044] team0: Device ipvlan1 failed to register rx_handler [ 158.882918][ T30] audit: type=1400 audit(1776596439.879:1175): avc: denied { read } for pid=7037 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 158.882943][ T30] audit: type=1400 audit(1776596439.889:1176): avc: denied { read } for pid=7045 comm="syz.0.200" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 158.882973][ T30] audit: type=1400 audit(1776596439.889:1177): avc: denied { open } for pid=7045 comm="syz.0.200" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 158.883017][ T30] audit: type=1400 audit(1776596439.899:1178): avc: denied { ioctl } for pid=7045 comm="syz.0.200" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 161.630960][ T7071] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 162.371954][ T7070] ceph: No mds server is up or the cluster is laggy [ 162.395300][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 162.404434][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 162.781719][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 162.820707][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 163.680543][ T30] audit: type=1400 audit(1776596445.039:1179): avc: denied { append } for pid=7085 comm="syz.1.207" name="demux0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 163.722330][ T7095] libceph: resolve '0..' (ret=-3): failed [ 163.759114][ T7095] gfs2: error -5 reading superblock [ 164.069031][ T7106] NILFS (nullb0): couldn't find nilfs on the device [ 164.082975][ T30] audit: type=1400 audit(1776596445.439:1180): avc: denied { read } for pid=7103 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.123332][ T7102] netlink: 'syz.3.209': attribute type 4 has an invalid length. [ 165.828203][ T7137] NILFS (nullb0): couldn't find nilfs on the device [ 166.787463][ T7143] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 166.787463][ T7143] The task syz.4.219 (7143) triggered the difference, watch for misbehavior. [ 167.702412][ T5890] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 168.233219][ T30] audit: type=1400 audit(1776596449.569:1181): avc: denied { ioctl } for pid=7147 comm="syz.3.221" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 168.259865][ T7160] random: crng reseeded on system resumption [ 168.304651][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 168.358075][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 168.369436][ T30] audit: type=1400 audit(1776596449.589:1182): avc: denied { write } for pid=7147 comm="syz.3.221" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 168.406276][ T5890] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 168.664925][ T30] audit: type=1400 audit(1776596449.589:1183): avc: denied { open } for pid=7147 comm="syz.3.221" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 168.846858][ T30] audit: type=1400 audit(1776596449.969:1184): avc: denied { setattr } for pid=7162 comm="syz.2.223" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 169.128279][ T5890] usb 2-1: string descriptor 0 read error: -71 [ 169.149132][ T5890] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 169.343967][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.370561][ T5890] usb 2-1: config 0 descriptor?? [ 169.396523][ T5890] usb 2-1: can't set config #0, error -71 [ 169.412900][ T5890] usb 2-1: USB disconnect, device number 6 [ 169.470253][ T30] audit: type=1400 audit(1776596450.789:1185): avc: denied { append } for pid=7171 comm="syz.2.226" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.804463][ T30] audit: type=1400 audit(1776596450.859:1186): avc: denied { ioctl } for pid=7171 comm="syz.2.226" path="socket:[13569]" dev="sockfs" ino=13569 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 169.878417][ T30] audit: type=1400 audit(1776596450.859:1187): avc: denied { connect } for pid=7171 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 170.254042][ T30] audit: type=1400 audit(1776596451.609:1188): avc: denied { getopt } for pid=7185 comm="syz.2.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 170.407604][ T7184] SET target dimension over the limit! [ 171.576155][ T5890] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 171.757457][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 171.766182][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 171.776194][ T5890] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 171.795849][ T5890] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 171.807272][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.837831][ T5890] usb 3-1: Product: syz [ 171.850054][ T5890] usb 3-1: Manufacturer: syz [ 172.392446][ T799] libceph: connect (1)[c::]:6789 error -101 [ 172.452324][ T5890] usb 3-1: SerialNumber: syz [ 172.471315][ T5890] usb 3-1: config 0 descriptor?? [ 172.503491][ T7213] netlink: 27 bytes leftover after parsing attributes in process `syz.4.233'. [ 172.513700][ T799] libceph: mon0 (1)[c::]:6789 connect error [ 172.714258][ T7209] ceph: No mds server is up or the cluster is laggy [ 172.874607][ T7215] capability: warning: `syz.2.230' uses deprecated v2 capabilities in a way that may be insecure [ 173.058056][ T7218] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.234' sets config #2 [ 173.156343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 173.166079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 173.878228][ T30] audit: type=1400 audit(1776596455.179:1189): avc: denied { mount } for pid=7226 comm="syz.3.237" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 174.654047][ T5890] usb 3-1: USB disconnect, device number 4 [ 175.053931][ T30] audit: type=1400 audit(1776596456.409:1190): avc: denied { map } for pid=7230 comm="syz.1.238" path="socket:[13711]" dev="sockfs" ino=13711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.271466][ T30] audit: type=1400 audit(1776596456.409:1191): avc: denied { read accept } for pid=7230 comm="syz.1.238" path="socket:[13711]" dev="sockfs" ino=13711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.558674][ T7240] syzkaller0: entered promiscuous mode [ 175.795563][ T7240] syzkaller0: entered allmulticast mode [ 176.223681][ T7256] netlink: 27 bytes leftover after parsing attributes in process `syz.3.243'. [ 176.271940][ T30] audit: type=1400 audit(1776596457.599:1192): avc: denied { setopt } for pid=7254 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 176.368880][ T30] audit: type=1400 audit(1776596457.599:1193): avc: denied { execute } for pid=7254 comm="syz.3.243" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 176.478702][ T7258] SET target dimension over the limit! [ 176.578081][ T7263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.244'. [ 176.594785][ T7263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.244'. [ 176.706447][ T30] audit: type=1400 audit(1776596458.059:1194): avc: denied { firmware_load } for pid=7259 comm="syz.3.244" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 177.305086][ T7263] syz.3.244 (7263) used greatest stack depth: 17864 bytes left [ 177.349735][ T7273] SET target dimension over the limit! [ 177.517567][ T30] audit: type=1400 audit(1776596458.849:1195): avc: denied { setopt } for pid=7268 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.562299][ T7278] overlayfs: failed to clone upperpath [ 177.956806][ T7286] openvswitch: netlink: Missing key (keys=800040, expected=2000) [ 178.632877][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'. [ 178.673659][ T7291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.251'. [ 178.682995][ T5920] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 178.910705][ T5920] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 178.938837][ T5920] usb 2-1: config 0 has no interface number 0 [ 178.960676][ T5920] usb 2-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.990235][ T30] audit: type=1400 audit(1776596460.339:1196): avc: denied { name_connect } for pid=7294 comm="syz.0.252" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 179.027303][ T5920] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 179.044651][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.061576][ T5920] usb 2-1: Product: syz [ 179.069523][ T5920] usb 2-1: Manufacturer: syz [ 179.079739][ T5920] usb 2-1: SerialNumber: syz [ 179.111831][ T5920] usb 2-1: config 0 descriptor?? [ 179.144533][ T5920] yurex 2-1:0.50: Could not find endpoints [ 179.153840][ T30] audit: type=1400 audit(1776596460.519:1197): avc: denied { read } for pid=7294 comm="syz.0.252" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 179.411304][ T7301] tipc: Enabling of bearer rejected, failed to enable media [ 179.425326][ T7301] syzkaller0: entered promiscuous mode [ 179.437381][ T7301] syzkaller0: entered allmulticast mode [ 179.589702][ T30] audit: type=1400 audit(1776596460.899:1198): avc: denied { accept } for pid=7294 comm="syz.0.252" lport=57837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.114335][ T7323] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.256' sets config #2 [ 181.755020][ C0] blk_print_req_error: 62 callbacks suppressed [ 181.755036][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.770366][ C0] buffer_io_error: 11 callbacks suppressed [ 181.770374][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 181.783971][ C0] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.793078][ C0] Buffer I/O error on dev loop9, logical block 1, async page read [ 181.800935][ C0] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.810071][ C0] Buffer I/O error on dev loop9, logical block 2, async page read [ 181.816176][ C1] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.817919][ C0] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.826994][ C1] Buffer I/O error on dev loop9, logical block 5, async page read [ 181.836075][ C0] Buffer I/O error on dev loop9, logical block 3, async page read [ 181.843889][ C1] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.851701][ C0] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.860768][ C1] Buffer I/O error on dev loop9, logical block 6, async page read [ 181.869879][ C0] Buffer I/O error on dev loop9, logical block 4, async page read [ 181.965549][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.974716][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 181.982560][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.991662][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 181.999473][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.008569][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 182.026821][ T5183] ldm_validate_partition_table(): Disk read failed. [ 182.044454][ T5183] Dev loop9: unable to read RDB block 0 [ 182.060178][ T799] usb 2-1: USB disconnect, device number 7 [ 182.110630][ T5183] loop9: unable to read partition table [ 182.122996][ T5183] loop9: partition table beyond EOD, truncated [ 182.142535][ T7332] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.466763][ T7358] tipc: Enabling of bearer rejected, failed to enable media [ 184.484118][ T7358] syzkaller0: entered promiscuous mode [ 184.495838][ T7358] syzkaller0: entered allmulticast mode [ 184.654224][ T30] audit: type=1400 audit(1776596466.009:1199): avc: denied { mount } for pid=7361 comm="syz.3.266" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 184.677068][ T7362] overlayfs: failed to clone lowerpath [ 184.976190][ T30] audit: type=1400 audit(1776596466.279:1200): avc: denied { connect } for pid=7366 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 185.164584][ T30] audit: type=1400 audit(1776596466.289:1201): avc: denied { write } for pid=7366 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 185.507936][ T7381] 9p: Bad value for 'rfdno' [ 185.515075][ T7381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.141451][ T30] audit: type=1400 audit(1776596467.439:1202): avc: denied { read } for pid=7377 comm="syz.4.271" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 186.321889][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 186.328767][ T5134] Bluetooth: hci2: command 0x0406 tx timeout [ 186.328822][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 186.335376][ T5134] Bluetooth: hci3: command 0x0406 tx timeout [ 186.340874][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 186.382869][ T30] audit: type=1400 audit(1776596467.449:1203): avc: denied { open } for pid=7377 comm="syz.4.271" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 186.478086][ T7387] SET target dimension over the limit! [ 186.882874][ T30] audit: type=1326 audit(1776596468.239:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf34f9c819 code=0x7ffc0000 [ 186.962944][ T30] audit: type=1326 audit(1776596468.239:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fcf34f9c819 code=0x7ffc0000 [ 187.048547][ T7394] SET target dimension over the limit! [ 187.054680][ T30] audit: type=1326 audit(1776596468.239:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf34f9c819 code=0x7ffc0000 [ 187.131115][ T30] audit: type=1326 audit(1776596468.239:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf34f9c819 code=0x7ffc0000 [ 187.204618][ T30] audit: type=1326 audit(1776596468.239:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf34f9c819 code=0x7ffc0000 [ 188.646581][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.656164][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.582998][ T7427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.613368][ T7427] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.664578][ T7427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.685815][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 189.685828][ T30] audit: type=1400 audit(1776596471.049:1225): avc: denied { wake_alarm } for pid=7431 comm="syz.1.281" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 189.860391][ T7437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7437 comm=syz.4.283 [ 189.976172][ T5935] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 190.506459][ T5935] usb 3-1: Using ep0 maxpacket: 8 [ 190.526089][ T5935] usb 3-1: config 0 has an invalid interface number: 176 but max is 0 [ 190.535058][ T5935] usb 3-1: config 0 has no interface number 0 [ 190.547141][ T5935] usb 3-1: config 0 interface 176 has no altsetting 0 [ 190.560887][ T5935] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e006, bcdDevice=33.b4 [ 190.574919][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.586571][ T5935] usb 3-1: Product: syz [ 190.592591][ T5935] usb 3-1: Manufacturer: syz [ 190.602214][ T5935] usb 3-1: SerialNumber: syz [ 190.619709][ T5935] usb 3-1: config 0 descriptor?? [ 190.781407][ T7447] Cannot find add_set index 0 as target [ 190.962212][ T7451] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 191.541019][ T5935] usb 3-1: USB disconnect, device number 5 [ 191.990864][ T30] audit: type=1400 audit(1776596473.249:1226): avc: denied { read } for pid=7454 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 192.045744][ C1] blk_print_req_error: 131 callbacks suppressed [ 192.045764][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.061203][ C1] buffer_io_error: 130 callbacks suppressed [ 192.061212][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 192.075243][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.084372][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 192.092213][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.101318][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 192.109135][ C1] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.118248][ C1] Buffer I/O error on dev loop9, logical block 3, async page read [ 192.126146][ C1] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.135240][ C1] Buffer I/O error on dev loop9, logical block 4, async page read [ 192.143047][ C1] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.152156][ C1] Buffer I/O error on dev loop9, logical block 5, async page read [ 192.159964][ C1] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.169065][ C1] Buffer I/O error on dev loop9, logical block 6, async page read [ 192.227772][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.236932][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 192.244764][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.253876][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 192.261709][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.270827][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 192.298864][ T5183] ldm_validate_partition_table(): Disk read failed. [ 192.323642][ T5183] Dev loop9: unable to read RDB block 0 [ 192.332897][ T5183] loop9: unable to read partition table [ 192.348041][ T5183] loop9: partition table beyond EOD, truncated [ 192.461219][ T7461] tipc: Enabling of bearer rejected, failed to enable media [ 192.504415][ T7461] syzkaller0: entered promiscuous mode [ 192.527350][ T7461] syzkaller0: entered allmulticast mode [ 192.577170][ T30] audit: type=1326 audit(1776596473.919:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51059c819 code=0x7ffc0000 [ 192.653740][ T30] audit: type=1326 audit(1776596473.929:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51059c819 code=0x7ffc0000 [ 192.697710][ T7470] SET target dimension over the limit! [ 192.719638][ T30] audit: type=1326 audit(1776596473.969:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa51059c819 code=0x7ffc0000 [ 192.758715][ T30] audit: type=1326 audit(1776596473.969:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51059c819 code=0x7ffc0000 [ 192.783205][ T30] audit: type=1326 audit(1776596473.969:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa51059c819 code=0x7ffc0000 [ 192.847735][ T30] audit: type=1326 audit(1776596473.979:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51059c819 code=0x7ffc0000 [ 192.890990][ T30] audit: type=1326 audit(1776596473.979:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa51059c819 code=0x7ffc0000 [ 193.396534][ T30] audit: type=1326 audit(1776596473.979:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51059c819 code=0x7ffc0000 [ 194.865491][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 194.874366][ T7499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.298'. [ 194.883405][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 194.892218][ T7499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.298'. [ 195.441698][ T7504] overlayfs: conflicting lowerdir path [ 196.940304][ T7513] tipc: Enabling of bearer rejected, failed to enable media [ 197.063367][ T7522] syzkaller0: entered promiscuous mode [ 197.104888][ T7521] netlink: 16 bytes leftover after parsing attributes in process `syz.1.303'. [ 197.120899][ T7522] syzkaller0: entered allmulticast mode [ 197.255534][ T7525] tipc: Enabling of bearer rejected, failed to enable media [ 197.322146][ T7525] syzkaller0: entered promiscuous mode [ 197.349991][ T7525] syzkaller0: entered allmulticast mode [ 199.582147][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'. [ 199.591365][ T7557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.973439][ T7560] SET target dimension over the limit! [ 200.297592][ T7557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.446827][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 200.446857][ T30] audit: type=1400 audit(1776596481.799:1247): avc: denied { write } for pid=7563 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 201.780038][ T7580] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 201.865712][ T30] audit: type=1400 audit(1776596483.159:1248): avc: denied { connect } for pid=7570 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 202.581595][ T7581] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 202.747946][ T30] audit: type=1400 audit(1776596483.219:1249): avc: denied { bind } for pid=7570 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 202.797763][ T30] audit: type=1400 audit(1776596483.219:1250): avc: denied { name_bind } for pid=7570 comm="syz.1.314" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 202.915040][ T30] audit: type=1400 audit(1776596483.219:1251): avc: denied { node_bind } for pid=7570 comm="syz.1.314" saddr=fc00::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 203.021512][ T7595] SET target dimension over the limit! [ 203.155833][ T7594] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 203.983436][ T30] audit: type=1400 audit(1776596485.339:1252): avc: denied { read } for pid=7604 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 204.787523][ T7622] No such timeout policy "syz1" [ 204.798200][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 204.951679][ T30] audit: type=1326 audit(1776596486.169:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7615 comm="syz.4.324" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e3859c819 code=0x0 [ 205.294946][ T30] audit: type=1400 audit(1776596486.649:1254): avc: denied { block_suspend } for pid=7613 comm="syz.3.323" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 205.501257][ T7631] NILFS (nullb0): couldn't find nilfs on the device [ 205.512094][ T7631] netlink: 'syz.0.325': attribute type 8 has an invalid length. [ 205.813137][ T30] audit: type=1400 audit(1776596487.169:1255): avc: denied { name_bind } for pid=7632 comm="syz.4.326" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 205.863680][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.326'. [ 207.180048][ T7653] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 968 [ 207.470994][ T30] audit: type=1400 audit(1776596488.469:1256): avc: denied { read } for pid=7637 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 208.760714][ T30] audit: type=1400 audit(1776596490.119:1257): avc: denied { read } for pid=5478 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 208.864799][ T7661] Cannot find add_set index 0 as target [ 209.432748][ T7688] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 210.778803][ T7720] sp0: Synchronizing with TNC [ 213.079608][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 213.101073][ T30] audit: type=1400 audit(1776596494.459:1258): avc: denied { bind } for pid=7736 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 213.449774][ T7738] sp0: Synchronizing with TNC [ 214.162200][ T7753] netlink: 87 bytes leftover after parsing attributes in process `syz.3.344'. [ 214.364222][ T7764] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 214.385330][ T7764] PKCS7: Only support pkcs7_signedData type [ 214.467758][ T7763] SET target dimension over the limit! [ 214.850560][ T7769] tipc: Enabling of bearer rejected, failed to enable media [ 214.895005][ T7770] syzkaller0: entered promiscuous mode [ 214.914237][ T7770] syzkaller0: entered allmulticast mode [ 218.876140][ T799] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 219.073075][ T799] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 219.085619][ T799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.105733][ T799] usb 3-1: Product: syz [ 219.115189][ T799] usb 3-1: Manufacturer: syz [ 219.123127][ T799] usb 3-1: SerialNumber: syz [ 219.146508][ T799] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 219.194512][ T7802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7802 comm=syz.3.354 [ 219.226851][ T29] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 219.445589][ T7785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.474935][ T7785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.291175][ T7808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.305234][ T7808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.324624][ T7808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.348682][ T7808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.409976][ T30] audit: type=1400 audit(1776596501.729:1259): avc: denied { append } for pid=7784 comm="syz.2.350" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 220.500877][ T30] audit: type=1400 audit(1776596501.729:1260): avc: denied { ioctl } for pid=7784 comm="syz.2.350" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 221.156399][ T29] usb 3-1: Service connection timeout for: 256 [ 221.163030][ T29] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 221.208258][ T29] ath9k_htc: Failed to initialize the device [ 221.295334][ T29] usb 3-1: ath9k_htc: USB layer deinitialized [ 221.304827][ T7823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.355'. [ 221.411911][ T30] audit: type=1400 audit(1776596502.769:1261): avc: denied { append } for pid=7821 comm="syz.1.358" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 221.524698][ T30] audit: type=1400 audit(1776596502.809:1262): avc: denied { setopt } for pid=7821 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 221.553565][ T5935] usb 3-1: USB disconnect, device number 6 [ 222.773230][ T7845] SET target dimension over the limit! [ 223.188253][ T7850] mkiss: ax0: crc mode is auto. [ 223.298779][ T30] audit: type=1400 audit(1776596504.659:1263): avc: denied { ioctl } for pid=7847 comm="syz.1.363" path="socket:[14915]" dev="sockfs" ino=14915 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 223.410992][ T30] audit: type=1400 audit(1776596504.739:1264): avc: denied { bind } for pid=7847 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 223.504169][ T30] audit: type=1400 audit(1776596504.829:1265): avc: denied { write } for pid=7847 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 223.539789][ T7856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.364'. [ 223.906371][ T5935] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 224.076091][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 224.098096][ T5935] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 224.116812][ T5935] usb 2-1: config 0 has no interface number 0 [ 224.131854][ T5935] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x3 has invalid maxpacket 12336, setting to 64 [ 224.173509][ T5935] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 224.199310][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 224.222615][ T5935] usb 2-1: Product: syz [ 224.232457][ T5935] usb 2-1: SerialNumber: syz [ 224.251122][ T5935] usb 2-1: config 0 descriptor?? [ 224.270124][ T5935] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 224.478736][ T7865] syzkaller0: entered promiscuous mode [ 224.496194][ T7865] syzkaller0: entered allmulticast mode [ 224.840405][ T30] audit: type=1400 audit(1776596506.199:1266): avc: denied { map } for pid=7847 comm="syz.1.363" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 225.271780][ T30] audit: type=1400 audit(1776596506.629:1267): avc: denied { write } for pid=7882 comm="syz.0.370" name="sg0" dev="devtmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 225.499385][ T5935] IPVS: starting estimator thread 0... [ 226.016183][ T7886] IPVS: using max 45 ests per chain, 108000 per kthread [ 226.528700][ T30] audit: type=1400 audit(1776596507.509:1268): avc: denied { watch } for pid=7888 comm="syz.3.371" path="/73/bus/file1" dev="tmpfs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 226.634866][ T5935] usb 2-1: USB disconnect, device number 8 [ 226.659239][ T30] audit: type=1400 audit(1776596507.509:1269): avc: denied { watch_sb watch_reads } for pid=7888 comm="syz.3.371" path="/73/bus/file1" dev="tmpfs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 227.455458][ T30] audit: type=1400 audit(1776596508.809:1270): avc: denied { bind } for pid=7901 comm="syz.2.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 227.607830][ T30] audit: type=1400 audit(1776596508.829:1271): avc: denied { write } for pid=7901 comm="syz.2.374" path="socket:[14990]" dev="sockfs" ino=14990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 228.842747][ T7924] NILFS (nullb0): couldn't find nilfs on the device [ 229.654277][ T7934] blktrace: Concurrent blktraces are not allowed on loop4 [ 230.314868][ T7933] netlink: 'syz.0.380': attribute type 10 has an invalid length. [ 230.467877][ T7933] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 230.559383][ T7937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.729011][ T7933] syz_tun: entered promiscuous mode [ 230.769411][ T7933] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 230.805479][ T7933] bond1: (slave macvlan0): Enslaving as a backup interface with an up link [ 231.921274][ T7956] overlayfs: missing 'lowerdir' [ 232.301897][ T7964] SET target dimension over the limit! [ 233.229158][ T7975] syzkaller0: entered promiscuous mode [ 233.255726][ T7975] syzkaller0: entered allmulticast mode [ 233.333337][ T7985] netlink: 64 bytes leftover after parsing attributes in process `syz.1.392'. [ 234.585032][ T8006] blktrace: Concurrent blktraces are not allowed on loop4 [ 235.391672][ T5919] IPVS: starting estimator thread 0... [ 235.841937][ T8015] IPVS: using max 77 ests per chain, 184800 per kthread [ 236.365650][ T8020] netlink: 'syz.4.399': attribute type 1 has an invalid length. [ 236.373419][ T8020] netlink: 760 bytes leftover after parsing attributes in process `syz.4.399'. [ 237.185565][ T5823] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 238.077005][ T8046] syzkaller0: entered promiscuous mode [ 238.104015][ T8046] syzkaller0: entered allmulticast mode [ 238.666874][ T8051] SET target dimension over the limit! [ 238.779665][ T30] audit: type=1400 audit(1776596520.139:1272): avc: denied { setopt } for pid=8053 comm="syz.0.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 238.884647][ T8056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.018849][ T30] audit: type=1400 audit(1776596520.319:1273): avc: denied { read } for pid=8053 comm="syz.0.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 239.075486][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 239.229214][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 240.273630][ T8074] can0: slcan on ttyS3. [ 240.316165][ T30] audit: type=1400 audit(1776596521.609:1274): avc: denied { read } for pid=8069 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 240.656662][ T8074] can0 (unregistered): slcan off ttyS3. [ 241.055517][ T30] audit: type=1400 audit(1776596522.409:1275): avc: denied { read } for pid=8078 comm="syz.3.412" lport=33237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 241.147767][ T8086] blktrace: Concurrent blktraces are not allowed on loop4 [ 242.955482][ T8097] netlink: 27 bytes leftover after parsing attributes in process `syz.4.416'. [ 243.202746][ T30] audit: type=1400 audit(1776596524.559:1276): avc: denied { listen } for pid=8098 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 244.758985][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 244.766587][ T5825] Bluetooth: hci5: command 0x1003 tx timeout [ 245.076857][ T8118] netlink: 32 bytes leftover after parsing attributes in process `syz.2.421'. [ 245.152184][ T8119] kernel profiling enabled (shift: 15) [ 245.487293][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 246.595846][ T8136] syzkaller0: entered promiscuous mode [ 246.606827][ T8136] syzkaller0: entered allmulticast mode [ 246.694269][ T8138] ubi16: attaching mtd0 [ 246.778161][ T8139] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 246.779967][ T8138] ubi16: scanning is finished [ 246.784787][ T8139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 246.870957][ T8139] vhci_hcd vhci_hcd.0: Device attached [ 246.894274][ T8146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.426'. [ 246.915757][ T8138] ubi16: empty MTD device detected [ 247.096459][ T5890] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 247.185266][ T8138] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 247.196513][ T29] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 247.205075][ T8138] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 247.214624][ T8138] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 247.221853][ T8138] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 247.229584][ T8138] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 247.237189][ T8138] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 247.245980][ T8138] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1700021438 [ 247.256602][ T8138] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 247.271046][ T8152] ubi16: background thread "ubi_bgt16d" started, PID 8152 [ 247.424718][ T29] usb 5-1: config 0 has no interfaces? [ 247.438799][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 247.477549][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.541572][ T29] usb 5-1: config 0 descriptor?? [ 248.083232][ T8156] Cannot find add_set index 0 as target [ 248.965868][ T8161] bridge1: entered promiscuous mode [ 249.288453][ T8162] overlayfs: failed to clone upperpath [ 249.292696][ T8142] usb 41-1: recv xbuf, 0 [ 249.300048][ T67] vhci_hcd vhci_hcd.4: stop threads [ 249.305434][ T67] vhci_hcd vhci_hcd.4: release socket [ 249.312971][ T67] vhci_hcd vhci_hcd.4: disconnect device [ 249.338609][ T29] usb 5-1: USB disconnect, device number 4 [ 249.368715][ T5890] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 249.481796][ T30] audit: type=1400 audit(1776596530.839:1277): avc: denied { setopt } for pid=8167 comm="syz.0.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 250.211769][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.218114][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.226836][ T30] audit: type=1400 audit(1776596530.969:1278): avc: denied { ioctl } for pid=8165 comm="syz.2.432" path="socket:[16230]" dev="sockfs" ino=16230 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 250.269788][ T30] audit: type=1400 audit(1776596530.979:1279): avc: denied { remove_name } for pid=8165 comm="syz.2.432" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.299039][ T30] audit: type=1400 audit(1776596530.989:1280): avc: denied { unlink } for pid=8165 comm="syz.2.432" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 250.371936][ T30] audit: type=1400 audit(1776596530.999:1281): avc: denied { name_connect } for pid=8165 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 250.750299][ T30] audit: type=1400 audit(1776596532.109:1282): avc: denied { setattr } for pid=8178 comm="syz.1.434" name="tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 251.289571][ T8192] syzkaller0: entered promiscuous mode [ 251.331108][ T8192] syzkaller0: entered allmulticast mode [ 251.391365][ T30] audit: type=1400 audit(1776596532.749:1283): avc: denied { getopt } for pid=8189 comm="syz.4.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 251.430557][ T8194] syzkaller0: entered promiscuous mode [ 251.446173][ T8194] syzkaller0: entered allmulticast mode [ 252.227343][ T8207] FAT-fs (nullb0): bogus number of reserved sectors [ 252.235013][ T8207] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 253.171928][ T8226] netlink: 'syz.2.441': attribute type 2 has an invalid length. [ 253.182403][ T8226] hma224): entered promiscuous mode [ 254.474140][ T30] audit: type=1400 audit(1776596535.829:1284): avc: denied { unmount } for pid=8237 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 255.047257][ T30] audit: type=1400 audit(1776596536.409:1285): avc: denied { ioctl } for pid=8246 comm="syz.0.448" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 255.088475][ T8244] veth3: entered promiscuous mode [ 255.267346][ T30] audit: type=1400 audit(1776596536.549:1286): avc: denied { mount } for pid=8246 comm="syz.0.448" name="/" dev="hugetlbfs" ino=17484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 255.708064][ T8244] veth3: entered allmulticast mode [ 257.705035][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.451'. [ 259.740897][ T30] audit: type=1400 audit(1776596541.089:1287): avc: denied { write } for pid=8286 comm="syz.4.457" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 260.213923][ T8299] netlink: 27 bytes leftover after parsing attributes in process `syz.3.459'. [ 260.659726][ T30] audit: type=1400 audit(1776596542.019:1288): avc: denied { getopt } for pid=8301 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 263.328961][ T29] libceph: connect (1)[c::]:6789 error -101 [ 263.350033][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 263.608243][ T8320] ceph: No mds server is up or the cluster is laggy [ 263.626365][ T29] libceph: connect (1)[c::]:6789 error -101 [ 263.638776][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 263.649605][ T30] audit: type=1400 audit(1776596545.009:1289): avc: denied { mount } for pid=8328 comm="syz.4.466" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 264.221911][ T30] audit: type=1400 audit(1776596545.029:1290): avc: denied { mounton } for pid=8328 comm="syz.4.466" path="/93/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 264.753863][ T8341] netem: incorrect ge model size [ 264.760243][ T8341] netem: change failed [ 264.918576][ T30] audit: type=1400 audit(1776596546.279:1291): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 264.984050][ T8348] netlink: 27 bytes leftover after parsing attributes in process `syz.1.470'. [ 265.060161][ T8351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.473'. [ 265.118372][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 265.141745][ T8354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.473'. [ 265.302154][ T8357] loop4: detected capacity change from 0 to 7 [ 265.322592][ T8357] buffer_io_error: 130 callbacks suppressed [ 265.322603][ T8357] Buffer I/O error on dev loop4, logical block 0, async page read [ 265.375627][ T8357] Buffer I/O error on dev loop4, logical block 0, async page read [ 265.411064][ T8357] Buffer I/O error on dev loop4, logical block 0, async page read [ 265.441343][ T8357] Buffer I/O error on dev loop4, logical block 0, async page read [ 265.455439][ T8357] Buffer I/O error on dev loop4, logical block 0, async page read [ 265.465374][ T8357] Buffer I/O error on dev loop4, logical block 0, async page read [ 265.473843][ T8357] Buffer I/O error on dev loop4, logical block 0, async page read [ 265.482274][ T8357] ldm_validate_partition_table(): Disk read failed. [ 265.489217][ T8357] Buffer I/O error on dev loop4, logical block 0, async page read [ 265.498719][ T8357] Buffer I/O error on dev loop4, logical block 0, async page read [ 265.507101][ T8357] Buffer I/O error on dev loop4, logical block 0, async page read [ 265.515483][ T8357] Dev loop4: unable to read RDB block 0 [ 265.597042][ T8357] loop4: unable to read partition table [ 265.624057][ T8357] loop4: partition table beyond EOD, truncated [ 265.645021][ T8357] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 265.721677][ T8358] ldm_validate_partition_table(): Disk read failed. [ 265.770235][ T8358] Dev loop4: unable to read RDB block 0 [ 265.857863][ T8358] loop4: unable to read partition table [ 265.864394][ T8358] loop4: partition table beyond EOD, truncated [ 267.764423][ T30] audit: type=1400 audit(1776596548.309:1292): avc: denied { write } for pid=8366 comm="syz.0.477" name="file0" dev="tmpfs" ino=568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 267.798634][ T30] audit: type=1400 audit(1776596548.309:1293): avc: denied { open } for pid=8366 comm="syz.0.477" path="/99/file0" dev="tmpfs" ino=568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 268.438293][ T30] audit: type=1400 audit(1776596549.789:1294): avc: denied { listen } for pid=8375 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 268.555541][ T8382] xt_connbytes: Forcing CT accounting to be enabled [ 268.562428][ T8382] set match dimension is over the limit! [ 268.915274][ T30] audit: type=1400 audit(1776596549.789:1295): avc: denied { accept } for pid=8375 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 269.276223][ T30] audit: type=1400 audit(1776596549.869:1296): avc: denied { ioctl } for pid=8377 comm="syz.0.479" path="/100/file0" dev="tmpfs" ino=574 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 269.300486][ T30] audit: type=1400 audit(1776596549.899:1297): avc: denied { ioctl } for pid=8377 comm="syz.0.479" path="socket:[16752]" dev="sockfs" ino=16752 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 269.325434][ T30] audit: type=1400 audit(1776596549.909:1298): avc: denied { write } for pid=8377 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 269.477027][ T8391] tipc: Started in network mode [ 269.501613][ T8391] tipc: Node identity 96e3fc23a053, cluster identity 4711 [ 269.523020][ T8391] tipc: Enabled bearer , priority 0 [ 269.588319][ T8391] tipc: Resetting bearer [ 269.694578][ T8390] tipc: Disabling bearer [ 270.085569][ T24] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 270.429163][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.461497][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 270.496905][ T24] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 270.604075][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.863980][ T24] usb 2-1: Product: syz [ 270.878163][ T24] usb 2-1: Manufacturer: syz [ 270.888566][ T24] usb 2-1: SerialNumber: syz [ 270.902504][ T24] usb 2-1: config 0 descriptor?? [ 272.248215][ T30] audit: type=1400 audit(1776596553.419:1299): avc: denied { read write } for pid=8396 comm="syz.1.483" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 272.619544][ T30] audit: type=1400 audit(1776596553.429:1300): avc: denied { open } for pid=8396 comm="syz.1.483" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 273.430795][ T24] usb 2-1: USB disconnect, device number 9 [ 275.218549][ T8461] tipc: Enabled bearer , priority 0 [ 275.250483][ T8461] tipc: Resetting bearer [ 275.297709][ T8460] tipc: Disabling bearer [ 277.568808][ T8487] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 278.195803][ T8493] netlink: 'syz.0.502': attribute type 2 has an invalid length. [ 278.210474][ T8493] : entered promiscuous mode [ 278.576290][ T30] audit: type=1400 audit(1776596559.059:1301): avc: denied { mount } for pid=8483 comm="syz.3.501" name="/" dev="configfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 278.685541][ T30] audit: type=1400 audit(1776596559.069:1302): avc: denied { search } for pid=8483 comm="syz.3.501" name="/" dev="configfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 278.857978][ T30] audit: type=1400 audit(1776596559.069:1303): avc: denied { search } for pid=8483 comm="syz.3.501" name="/" dev="configfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 278.972604][ T8500] netlink: 'syz.3.504': attribute type 11 has an invalid length. [ 279.897479][ T30] audit: type=1400 audit(1776596559.069:1304): avc: denied { read open } for pid=8483 comm="syz.3.501" path="/" dev="configfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 279.935342][ T8494] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:64 [ 280.117069][ T30] audit: type=1400 audit(1776596559.079:1305): avc: denied { search } for pid=8483 comm="syz.3.501" name="/" dev="configfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 280.142716][ T30] audit: type=1400 audit(1776596559.079:1306): avc: denied { search } for pid=8483 comm="syz.3.501" name="/" dev="configfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 281.574990][ T8514] tipc: Started in network mode [ 281.595041][ T8514] tipc: Node identity f2d96c7bdc2b, cluster identity 4711 [ 281.618270][ T8514] tipc: Enabled bearer , priority 0 [ 281.662062][ T8514] tipc: Resetting bearer [ 281.789005][ T8513] tipc: Disabling bearer [ 282.356256][ T30] audit: type=1400 audit(1776596563.369:1307): avc: denied { connect } for pid=8518 comm="syz.4.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 282.492082][ T30] audit: type=1400 audit(1776596563.849:1308): avc: denied { connect } for pid=8528 comm="syz.4.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 283.063172][ T8536] 9p: Bad value for 'wfdno' [ 284.801939][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 284.959762][ T8548] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 285.518191][ T8558] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 285.612977][ T8558] PKCS7: Only support pkcs7_signedData type [ 286.632541][ T8566] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.663747][ T8566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.517'. [ 286.681171][ T8566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.517'. [ 287.672685][ T8576] syzkaller0: entered promiscuous mode [ 287.684162][ T8576] syzkaller0: entered allmulticast mode [ 287.730750][ T8577] netlink: 'syz.3.520': attribute type 1 has an invalid length. [ 287.815032][ T8577] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.945369][ T8581] bond1: (slave ip6erspan0): making interface the new active one [ 287.998618][ T8581] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 288.474939][ T8593] dummy0: entered allmulticast mode [ 289.005248][ T30] audit: type=1400 audit(1776596570.359:1309): avc: denied { associate } for pid=8594 comm="syz.0.524" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 289.096357][ T8590] dummy0: left allmulticast mode [ 289.305938][ T30] audit: type=1400 audit(1776596570.659:1310): avc: denied { read } for pid=8594 comm="syz.0.524" lport=53140 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 289.684163][ T30] audit: type=1400 audit(1776596570.729:1311): avc: denied { setopt } for pid=8594 comm="syz.0.524" lport=53140 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 289.810085][ T30] audit: type=1400 audit(1776596571.089:1312): avc: denied { watch watch_reads } for pid=8600 comm="syz.3.525" path="/105" dev="tmpfs" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 291.867551][ T8630] SET target dimension over the limit! [ 292.023860][ T30] audit: type=1400 audit(1776596573.379:1313): avc: denied { write } for pid=8633 comm="syz.3.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 292.973733][ T8651] netlink: 'syz.1.533': attribute type 4 has an invalid length. [ 293.022946][ T8645] netlink: 'syz.1.533': attribute type 4 has an invalid length. [ 294.348001][ T30] audit: type=1400 audit(1776596575.709:1314): avc: denied { ioctl } for pid=8663 comm="syz.4.538" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x4110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 294.434852][ T8670] Cannot find add_set index 0 as target [ 294.896773][ T8675] nbd0: detected capacity change from 0 to 63 [ 294.984222][ T8681] SET target dimension over the limit! [ 295.992535][ T5920] Process accounting resumed [ 296.063950][ T5823] block nbd0: Receive control failed (result -104) [ 297.815326][ T30] audit: type=1400 audit(1776596579.019:1315): avc: denied { listen } for pid=8710 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 299.268353][ T8727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.550'. [ 299.397949][ T8727] netlink: 'syz.3.550': attribute type 7 has an invalid length. [ 299.454031][ T8727] netlink: 'syz.3.550': attribute type 8 has an invalid length. [ 299.609335][ T30] audit: type=1400 audit(1776596580.969:1316): avc: denied { create } for pid=8728 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 300.406274][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'. [ 300.576267][ T30] audit: type=1400 audit(1776596581.929:1317): avc: denied { read } for pid=8739 comm="syz.4.554" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 302.123380][ T8770] Cannot find add_set index 0 as target [ 302.987498][ T5823] Bluetooth: hci2: unexpected event 0x30 length: 255 > 3 [ 303.743665][ T8785] netlink: 'syz.2.563': attribute type 13 has an invalid length. [ 303.779788][ T8785] netlink: 'syz.2.563': attribute type 17 has an invalid length. [ 304.832285][ T30] audit: type=1400 audit(1776596586.189:1318): avc: denied { map } for pid=8800 comm="syz.4.567" path="socket:[18687]" dev="sockfs" ino=18687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 304.872126][ T8785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.964206][ T8785] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.129730][ T30] audit: type=1400 audit(1776596586.489:1319): avc: denied { mount } for pid=8800 comm="syz.4.567" name="/" dev="autofs" ino=19478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 305.202681][ T8785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.535004][ T8812] 9pnet_virtio: no channels available for device syz [ 306.701935][ T8810] overlayfs: failed to clone upperpath [ 307.113980][ T8817] netlink: 'syz.1.568': attribute type 39 has an invalid length. [ 307.604338][ T8834] ubi: mtd0 is already attached to ubi16 [ 307.979605][ T8839] netlink: 27 bytes leftover after parsing attributes in process `syz.2.574'. [ 308.408859][ T8843] tipc: Enabled bearer , priority 0 [ 308.432520][ T8843] syzkaller0: entered promiscuous mode [ 308.459986][ T8843] syzkaller0: entered allmulticast mode [ 308.501445][ T8842] tipc: Resetting bearer [ 308.558028][ T8842] tipc: Disabling bearer [ 308.927430][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.577'. [ 309.613428][ T8858] netlink: 7076 bytes leftover after parsing attributes in process `syz.3.579'. [ 311.484904][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.491306][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.083279][ T8877] Cannot find add_set index 0 as target [ 312.515055][ T8890] netlink: 27 bytes leftover after parsing attributes in process `syz.4.586'. [ 313.424410][ T8901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.754102][ T8900] SET target dimension over the limit! [ 313.868342][ T8905] netlink: 56 bytes leftover after parsing attributes in process `syz.0.590'. [ 313.878711][ T30] audit: type=1400 audit(1776596595.229:1320): avc: denied { write } for pid=8904 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 316.379649][ T30] audit: type=1400 audit(1776596597.729:1321): avc: denied { getopt } for pid=8920 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 317.386119][ T8942] SET target dimension over the limit! [ 317.412957][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.600'. [ 318.881464][ T8966] netlink: 'syz.4.604': attribute type 13 has an invalid length. [ 319.702468][ T8966] netlink: 'syz.4.604': attribute type 1 has an invalid length. [ 319.718592][ T8966] netlink: 280 bytes leftover after parsing attributes in process `syz.4.604'. [ 321.009748][ T8985] netem: incorrect ge model size [ 321.014708][ T8985] netem: change failed [ 321.087383][ T8978] tipc: Enabled bearer , priority 0 [ 321.116314][ T8978] syzkaller0: entered promiscuous mode [ 321.135673][ T8978] syzkaller0: entered allmulticast mode [ 321.191362][ T8978] tipc: Resetting bearer [ 321.223981][ T8976] tipc: Resetting bearer [ 321.367776][ T8993] SET target dimension over the limit! [ 321.377987][ T8976] tipc: Disabling bearer [ 321.501363][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 321.532354][ T8996] ceph: No mds server is up or the cluster is laggy [ 321.545086][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 321.806330][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 321.819036][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 322.606120][ T5920] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 322.752139][ T9016] netlink: 112 bytes leftover after parsing attributes in process `syz.0.614'. [ 322.792299][ T5920] usb 3-1: not running at top speed; connect to a high speed hub [ 322.875857][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.995340][ T5920] usb 3-1: config 0 has no interfaces? [ 323.020878][ T5920] usb 3-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 4.20 [ 323.042667][ T9022] netlink: 'syz.1.616': attribute type 1 has an invalid length. [ 323.104279][ T9023] overlayfs: failed to clone upperpath [ 323.464952][ T9022] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.616'. [ 323.487789][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.496103][ T5920] usb 3-1: Product: syz [ 323.500325][ T5920] usb 3-1: Manufacturer: syz [ 323.504936][ T5920] usb 3-1: SerialNumber: syz [ 323.527146][ T5920] usb 3-1: config 0 descriptor?? [ 324.545338][ T9038] syz.3.621 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 325.239635][ T5919] usb 3-1: USB disconnect, device number 7 [ 325.559223][ T6020] block nbd0: Possible stuck request ffff8880285c0000: control (read@0,1024B). Runtime 30 seconds [ 325.572752][ T6020] block nbd0: Possible stuck request ffff8880285c01c0: control (read@1024,1024B). Runtime 30 seconds [ 325.584425][ T6020] block nbd0: Possible stuck request ffff8880285c0380: control (read@2048,1024B). Runtime 30 seconds [ 325.599269][ T6020] block nbd0: Possible stuck request ffff8880285c0540: control (read@3072,1024B). Runtime 30 seconds [ 325.621835][ T9048] netlink: 'syz.4.622': attribute type 2 has an invalid length. [ 325.677625][ T5919] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 325.719034][ T9049] netlink: 'syz.4.622': attribute type 2 has an invalid length. [ 325.733545][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 325.816174][ T9048] !: entered promiscuous mode [ 325.934682][ T5919] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 325.951444][ T5919] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 325.975027][ T5919] usb 3-1: config 0 has no interface number 0 [ 326.095171][ T9053] overlayfs: failed to clone lowerpath [ 326.170664][ T30] audit: type=1400 audit(1776596607.439:1322): avc: denied { mount } for pid=9050 comm="syz.0.624" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 326.954771][ T5919] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 326.982818][ T5919] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 327.270406][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.287521][ T5919] usb 3-1: config 0 descriptor?? [ 328.216152][ T9061] netlink: 'syz.1.626': attribute type 4 has an invalid length. [ 328.956057][ T10] usb 3-1: USB disconnect, device number 8 [ 329.963363][ T9071] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.629'. [ 331.737936][ T9078] 8021q: VLANs not supported on lo [ 333.704142][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'. [ 333.960057][ T30] audit: type=1400 audit(1776596615.299:1323): avc: denied { getopt } for pid=9109 comm="syz.2.639" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.456071][ T30] audit: type=1400 audit(1776596619.419:1324): avc: denied { ioctl } for pid=9149 comm="syz.3.646" path="socket:[19922]" dev="sockfs" ino=19922 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 338.603000][ T30] audit: type=1400 audit(1776596619.419:1325): avc: denied { bind } for pid=9149 comm="syz.3.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 338.764043][ T30] audit: type=1400 audit(1776596619.879:1326): avc: denied { setopt } for pid=9141 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 338.789523][ T9165] tipc: Enabling of bearer rejected, failed to enable media [ 338.856476][ T30] audit: type=1400 audit(1776596619.879:1327): avc: denied { getopt } for pid=9141 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 340.421418][ T9194] fuse: fd is not a fuse device [ 340.960039][ T9202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.655'. [ 342.420482][ T9218] Cannot find add_set index 0 as target [ 343.223438][ T30] audit: type=1400 audit(1776596624.569:1328): avc: denied { mount } for pid=9211 comm="syz.4.658" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 344.419419][ T9238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.663'. [ 346.163929][ T30] audit: type=1400 audit(1776596627.159:1329): avc: denied { mount } for pid=9253 comm="syz.3.668" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 346.703890][ T30] audit: type=1800 audit(1776596628.059:1330): pid=9272 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.670" name="nullb0" dev="tmpfs" ino=679 res=0 errno=0 [ 346.858211][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'. [ 347.181319][ T9266] @: renamed from veth0_vlan [ 347.259616][ T30] audit: type=1400 audit(1776596628.609:1331): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 348.052090][ T9284] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 349.318908][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.673'. [ 350.678966][ T9307] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 350.698631][ T9307] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 350.961108][ T9310] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 350.969158][ T9310] overlayfs: failed to set xattr on upper [ 350.974900][ T9310] overlayfs: ...falling back to redirect_dir=nofollow. [ 350.981832][ T9310] overlayfs: ...falling back to index=off. [ 350.987748][ T9310] overlayfs: ...falling back to uuid=null. [ 351.519357][ T9311] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 352.283904][ T9329] netlink: 24 bytes leftover after parsing attributes in process `syz.1.678'. [ 352.302535][ T9329] netlink: 'syz.1.678': attribute type 7 has an invalid length. [ 353.019403][ T9329] netlink: 'syz.1.678': attribute type 8 has an invalid length. [ 353.175645][ T9344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.201875][ T9344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.231132][ T9344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.255442][ T9344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.512885][ T9322] netlink: 2 bytes leftover after parsing attributes in process `syz.3.679'. [ 353.606065][ T5920] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 353.786056][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 353.876368][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 354.357271][ T5920] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 354.387349][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.406153][ T5920] usb 5-1: Manufacturer: ࠌ [ 354.422802][ T5920] usb 5-1: SerialNumber: Ṗ矒낆パꤒ堚虗ণ樘泤ᕢ縎짰Ҋ⛀ְ풭㫿窠Ǡ멛烻┬炡홧莆鶰蒡囝 [ 355.284551][ T9370] overlayfs: failed to clone upperpath [ 355.637637][ T6020] block nbd0: Possible stuck request ffff8880285c0000: control (read@0,1024B). Runtime 60 seconds [ 355.648370][ T6020] block nbd0: Possible stuck request ffff8880285c01c0: control (read@1024,1024B). Runtime 60 seconds [ 355.659373][ T6020] block nbd0: Possible stuck request ffff8880285c0380: control (read@2048,1024B). Runtime 60 seconds [ 355.670265][ T6020] block nbd0: Possible stuck request ffff8880285c0540: control (read@3072,1024B). Runtime 60 seconds [ 356.143453][ T5920] kalmia 5-1:1.0: probe with driver kalmia failed with error -22 [ 356.238656][ T5920] usb 5-1: USB disconnect, device number 5 [ 356.387365][ T9383] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 356.477110][ T30] audit: type=1400 audit(1776596637.759:1332): avc: denied { relabelto } for pid=9378 comm="syz.1.699" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 356.706330][ T30] audit: type=1400 audit(1776596637.759:1333): avc: denied { associate } for pid=9378 comm="syz.1.699" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=710 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 357.486369][ T9389] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 357.536083][ T30] audit: type=1400 audit(1776596638.839:1334): avc: denied { unlink } for pid=5808 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 362.910370][ T30] audit: type=1400 audit(1776596644.269:1335): avc: denied { watch } for pid=9447 comm="syz.0.704" path="/143/file0" dev="tmpfs" ino=812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 363.175791][ T9454] fuse: Bad value for 'fd' [ 363.406158][ T9462] o2cb: This node has not been configured. [ 363.412119][ T9462] o2cb: Cluster check failed. Fix errors before retrying. [ 363.420420][ T9462] (syz.4.708,9462,0):user_dlm_register:674 ERROR: status = -22 [ 363.428052][ T9462] (syz.4.708,9462,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 363.516171][ T30] audit: type=1400 audit(1776596644.759:1336): avc: denied { add_name } for pid=9457 comm="syz.4.708" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 363.780959][ T30] audit: type=1400 audit(1776596644.759:1337): avc: denied { create } for pid=9457 comm="syz.4.708" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 363.843223][ T30] audit: type=1400 audit(1776596644.759:1338): avc: denied { associate } for pid=9457 comm="syz.4.708" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 363.895050][ T30] audit: type=1400 audit(1776596644.809:1339): avc: denied { shutdown } for pid=9457 comm="syz.4.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 364.749068][ T9481] SET target dimension over the limit! [ 367.068597][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.719'. [ 367.322794][ T9519] overlayfs: failed to clone lowerpath [ 367.340327][ T9519] overlayfs: missing 'lowerdir' [ 367.355315][ T30] audit: type=1400 audit(1776596648.659:1340): avc: denied { mount } for pid=9515 comm="syz.0.721" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 367.546742][ T30] audit: type=1400 audit(1776596648.909:1341): avc: denied { ioctl } for pid=9511 comm="syz.3.720" path="socket:[20823]" dev="sockfs" ino=20823 ioctlcmd=0x5519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 368.725556][ T9533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.725'. [ 370.115879][ T9548] SET target dimension over the limit! [ 370.244489][ T30] audit: type=1326 audit(1776596651.599:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff289d9c819 code=0x7ffc0000 [ 370.304720][ T30] audit: type=1326 audit(1776596651.649:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff289d9c819 code=0x7ffc0000 [ 370.412692][ T30] audit: type=1326 audit(1776596651.649:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff289d9c819 code=0x7ffc0000 [ 370.530218][ T30] audit: type=1326 audit(1776596651.659:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff289d9c819 code=0x7ffc0000 [ 370.711378][ T30] audit: type=1326 audit(1776596651.689:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff289d9c819 code=0x7ffc0000 [ 370.746291][ T30] audit: type=1326 audit(1776596651.689:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff289d9c819 code=0x7ffc0000 [ 370.993808][ T30] audit: type=1326 audit(1776596651.689:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff289d9c819 code=0x7ffc0000 [ 371.066327][ T30] audit: type=1326 audit(1776596651.689:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff289d9c819 code=0x7ffc0000 [ 371.179186][ T30] audit: type=1326 audit(1776596651.689:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff289d9c819 code=0x7ffc0000 [ 371.231197][ T30] audit: type=1326 audit(1776596651.699:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff289d9c819 code=0x7ffc0000 [ 371.309338][ T9572] SET target dimension over the limit! [ 372.918735][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.925126][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.837021][ T9596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 373.912772][ T9591] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 373.940565][ T9591] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 373.960304][ T9594] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 373.991298][ T9601] kAFS: unable to lookup cell '' [ 374.002685][ T9594] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 374.025230][ T9601] kAFS: unable to lookup cell '(,c' [ 374.534582][ T9610] overlayfs: failed to resolve './bus': -2 [ 374.925658][ T10] IPVS: starting estimator thread 0... [ 375.019069][ T9591] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 375.025970][ T9594] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 375.027720][ T9591] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 375.027882][ T9613] IPVS: using max 78 ests per chain, 187200 per kthread [ 375.051900][ T9594] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 375.075789][ T9594] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 375.078284][ T9591] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 375.108038][ T9594] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 375.120918][ T9591] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 375.164697][ T9594] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 375.181997][ T9591] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 375.198549][ T9594] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 375.215137][ T9591] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 375.261445][ T9591] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 375.283281][ T9591] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 375.583852][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 375.584882][ T30] audit: type=1326 audit(1776596656.939:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff289d9c819 code=0x7ffc0000 [ 375.614574][ T30] audit: type=1326 audit(1776596656.939:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff289d9c819 code=0x7ffc0000 [ 376.754124][ T30] audit: type=1326 audit(1776596656.949:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff289d9c819 code=0x7ffc0000 [ 376.790069][ T30] audit: type=1326 audit(1776596658.139:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff289d9c819 code=0x7ffc0000 [ 376.857574][ T30] audit: type=1326 audit(1776596658.139:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff289d9c819 code=0x7ffc0000 [ 377.471394][ T30] audit: type=1326 audit(1776596658.189:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff289d9c819 code=0x7ffc0000 [ 377.514497][ T30] audit: type=1326 audit(1776596658.189:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff289d9c819 code=0x7ffc0000 [ 377.681351][ T30] audit: type=1326 audit(1776596658.189:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff289d9c819 code=0x7ffc0000 [ 377.895664][ T9636] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 378.248105][ T30] audit: type=1326 audit(1776596658.189:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7ff289d9c819 code=0x7ffc0000 [ 378.272286][ T30] audit: type=1326 audit(1776596658.189:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff289d9c819 code=0x7ffc0000 [ 378.963509][ T9645] SET target dimension over the limit! [ 380.080862][ T9659] SET target dimension over the limit! [ 380.532224][ T9666] SET target dimension over the limit! [ 381.129815][ T9676] tipc: Enabling of bearer rejected, failed to enable media [ 381.369255][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'. [ 381.692858][ T9692] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 381.700494][ T9692] overlayfs: failed to set xattr on upper [ 381.706265][ T9692] overlayfs: ...falling back to redirect_dir=nofollow. [ 381.713132][ T9692] overlayfs: ...falling back to index=off. [ 381.719004][ T9692] overlayfs: ...falling back to uuid=null. [ 381.785597][ T9691] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 382.171409][ T9696] netlink: 32 bytes leftover after parsing attributes in process `syz.2.757'. [ 382.817605][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'. [ 382.993798][ T9717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.336577][ T9712] team0: Port device team_slave_0 removed [ 383.496058][ T5919] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 383.722904][ T5919] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 383.739357][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.771812][ T5919] usb 5-1: Product: syz [ 383.786604][ T5919] usb 5-1: Manufacturer: syz [ 383.801437][ T5919] usb 5-1: SerialNumber: syz [ 383.822344][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 383.822357][ T30] audit: type=1400 audit(1776596665.149:1406): avc: denied { map } for pid=9720 comm="syz.1.763" path="socket:[21173]" dev="sockfs" ino=21173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 383.896546][ T5919] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 383.932310][ T5935] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 384.836032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 385.242124][ T5935] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 385.256555][ T5935] ath9k_htc: Failed to initialize the device [ 385.356013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 385.476010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 386.165961][ T6020] block nbd0: Possible stuck request ffff8880285c0000: control (read@0,1024B). Runtime 90 seconds [ 386.179232][ T6020] block nbd0: Possible stuck request ffff8880285c01c0: control (read@1024,1024B). Runtime 90 seconds [ 386.190640][ T6020] block nbd0: Possible stuck request ffff8880285c0380: control (read@2048,1024B). Runtime 90 seconds [ 386.191411][ T5935] usb 5-1: ath9k_htc: USB layer deinitialized [ 386.201590][ T6020] block nbd0: Possible stuck request ffff8880285c0540: control (read@3072,1024B). Runtime 90 seconds [ 386.315205][ T5919] usb 5-1: USB disconnect, device number 6 [ 386.688850][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 388.404874][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 388.533289][ T9779] fuse: Bad value for 'fd' [ 388.554635][ T9777] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.776'. [ 389.522066][ T9781] infiniband syz2: set down [ 389.526831][ T9781] infiniband syz2: added ipvlan0 [ 389.654048][ T9781] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 389.669783][ T9781] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 389.686996][ T9781] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 389.788500][ T9781] RDS/IB: syz2: added [ 389.794302][ T9781] smc: adding ib device syz2 with port count 1 [ 389.801748][ T9781] smc: ib device syz2 port 1 has no pnetid [ 391.577095][ T9797] random: crng reseeded on system resumption [ 391.717710][ T9797] Restarting kernel threads ... [ 391.723679][ T9797] Done restarting kernel threads. [ 391.743581][ T30] audit: type=1400 audit(1776596673.069:1407): avc: denied { ioctl } for pid=9789 comm="syz.4.777" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 392.145483][ T30] audit: type=1400 audit(1776596673.089:1408): avc: denied { kexec_image_load } for pid=9789 comm="syz.4.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 392.737109][ T30] audit: type=1400 audit(1776596674.099:1409): avc: denied { accept } for pid=9799 comm="syz.1.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 393.234697][ T9807] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 394.497235][ T9829] program syz.4.786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 394.556080][ T30] audit: type=1326 audit(1776596675.909:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9826 comm="syz.1.785" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf34f9c819 code=0x0 [ 394.796054][ T5935] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 395.081960][ T9836] SET target dimension over the limit! [ 395.418306][ T5935] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.431726][ T5935] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 395.450390][ T5935] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 395.479221][ T5935] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 395.494195][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.512274][ T5935] usb 5-1: Product: syz [ 395.521666][ T5935] usb 5-1: Manufacturer: syz [ 395.530992][ T5935] usb 5-1: SerialNumber: syz [ 395.545494][ T5935] usb 5-1: config 0 descriptor?? [ 395.573846][ T5935] uvcvideo 5-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 395.601640][ T5935] uvcvideo 5-1:0.0: No valid video chain found. [ 396.925806][ T9847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9847 comm=syz.4.786 [ 397.275243][ T9849] SET target dimension over the limit! [ 397.737219][ T799] usb 5-1: USB disconnect, device number 7 [ 398.486878][ T9867] netlink: 'syz.3.794': attribute type 1 has an invalid length. [ 398.494582][ T9867] netlink: 96 bytes leftover after parsing attributes in process `syz.3.794'. [ 398.503502][ T9867] netlink: 658 bytes leftover after parsing attributes in process `syz.3.794'. [ 398.512490][ T9867] netlink: 1 bytes leftover after parsing attributes in process `syz.3.794'. [ 399.628087][ T30] audit: type=1400 audit(1776596680.969:1411): avc: denied { audit_write } for pid=9876 comm="syz.3.797" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 399.841564][ T9873] slcan: can't register candev [ 400.536282][ T30] audit: type=1400 audit(1776596681.819:1412): avc: denied { listen } for pid=9882 comm="syz.2.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 401.143416][ T9891] Cannot find add_set index 0 as target [ 402.736801][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.803'. [ 402.784041][ T9908] netlink: 52719 bytes leftover after parsing attributes in process `syz.2.805'. [ 404.566593][ T30] audit: type=1400 audit(1776596685.579:1413): avc: denied { create } for pid=9930 comm="syz.3.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 404.598046][ T30] audit: type=1400 audit(1776596685.589:1414): avc: denied { sys_admin } for pid=9930 comm="syz.3.810" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 405.179859][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.811'. [ 405.211511][ T9943] tipc: Started in network mode [ 405.216453][ T9943] tipc: Node identity , cluster identity 4711 [ 405.222553][ T9943] tipc: Failed to obtain node identity [ 405.228186][ T9943] tipc: Enabling of bearer rejected, failed to enable media [ 406.212038][ T5183] udevd[5183]: worker [7783] /devices/virtual/block/nbd0 is taking a long time [ 406.418051][ T9947] trusted_key: encrypted_key: insufficient parameters specified [ 406.577688][ T30] audit: type=1400 audit(1776596687.939:1415): avc: denied { bind } for pid=9944 comm="syz.3.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 407.467460][ T30] audit: type=1400 audit(1776596688.829:1416): avc: denied { connect } for pid=9965 comm="syz.0.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 407.554250][ T30] audit: type=1400 audit(1776596688.909:1417): avc: denied { connect } for pid=9965 comm="syz.0.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 407.738466][ T9977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.818'. [ 407.754684][ T9973] SET target dimension over the limit! [ 407.953524][ T9977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.818'. [ 408.037994][ T9986] overlayfs: failed to clone upperpath [ 408.119118][ T9986] netlink: 'syz.3.820': attribute type 39 has an invalid length. [ 408.923267][ T9988] netlink: 27 bytes leftover after parsing attributes in process `syz.2.821'. [ 410.214682][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 410.918063][T10013] can0: slcan on ttynull. [ 411.566226][T10010] can0 (unregistered): slcan off ttynull. [ 413.630726][T10054] netlink: 'syz.0.831': attribute type 13 has an invalid length. [ 413.999862][ T30] audit: type=1400 audit(1776596695.349:1418): avc: denied { accept } for pid=10051 comm="syz.4.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 416.094939][ T30] audit: type=1326 audit(1776596697.449:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.0.838" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff289d9c819 code=0x0 [ 416.291958][T10099] lo: Caught tx_queue_len zero misconfig [ 416.438700][ T6020] block nbd0: Possible stuck request ffff8880285c0000: control (read@0,1024B). Runtime 120 seconds [ 416.449625][ T6020] block nbd0: Possible stuck request ffff8880285c01c0: control (read@1024,1024B). Runtime 120 seconds [ 416.461083][ T6020] block nbd0: Possible stuck request ffff8880285c0380: control (read@2048,1024B). Runtime 120 seconds [ 416.473597][ T6020] block nbd0: Possible stuck request ffff8880285c0540: control (read@3072,1024B). Runtime 120 seconds [ 416.909603][T10104] input: syz0 as /devices/virtual/input/input12 [ 418.180130][ T30] audit: type=1326 audit(1776596699.539:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3859c819 code=0x7ffc0000 [ 418.560552][T10109] ip6t_REJECT: ECHOREPLY is not supported [ 418.771577][ T30] audit: type=1326 audit(1776596699.539:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3859c819 code=0x7ffc0000 [ 418.864701][ T30] audit: type=1326 audit(1776596699.539:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f0e3859c819 code=0x7ffc0000 [ 418.942621][ T30] audit: type=1326 audit(1776596699.539:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3859c819 code=0x7ffc0000 [ 419.049958][ T30] audit: type=1326 audit(1776596699.539:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3859c819 code=0x7ffc0000 [ 419.160276][ T30] audit: type=1326 audit(1776596699.539:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0e3859c819 code=0x7ffc0000 [ 419.193352][ T30] audit: type=1326 audit(1776596699.539:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3859c819 code=0x7ffc0000 [ 419.217194][ T30] audit: type=1326 audit(1776596699.539:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3859c819 code=0x7ffc0000 [ 419.242711][ T30] audit: type=1326 audit(1776596699.539:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0e3859c819 code=0x7ffc0000 [ 419.291932][T10117] fuse: Bad value for 'fd' [ 419.446077][ T5920] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 419.626595][ T30] audit: type=1400 audit(1776596700.929:1429): avc: denied { bind } for pid=10118 comm="syz.3.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 419.997688][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 420.010105][ T5920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.021290][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 420.035227][ T5920] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 420.044432][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.428861][ T5920] usb 5-1: config 0 descriptor?? [ 420.513578][ T5920] hub 5-1:0.0: bad descriptor, ignoring hub [ 420.524133][ T5920] hub 5-1:0.0: probe with driver hub failed with error -5 [ 420.552189][ T5920] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 421.047271][T10133] 9p: Bad value for 'rfdno' [ 421.398331][T10130] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 422.080651][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 424.102334][T10164] macsec1: left promiscuous mode [ 424.107547][T10164] bridge1: left promiscuous mode [ 424.112697][T10164] veth3: left promiscuous mode [ 424.693143][ T799] usb 5-1: USB disconnect, device number 8 [ 426.174117][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.856'. [ 428.853054][ T30] audit: type=1400 audit(1776596710.209:1430): avc: denied { bind } for pid=10203 comm="syz.1.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 431.452254][T10230] wg1 speed is unknown, defaulting to 1000 [ 431.464910][T10230] wg1 speed is unknown, defaulting to 1000 [ 431.823098][T10230] wg1 speed is unknown, defaulting to 1000 [ 431.873252][T10230] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 431.897246][T10183] bond0: (slave syz_tun): Releasing backup interface [ 431.912879][T10230] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 431.935574][T10230] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 432.066767][T10230] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 432.245589][T10230] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 432.464137][T10230] wg1 speed is unknown, defaulting to 1000 [ 432.481335][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 432.504534][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 432.514828][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 432.525468][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 432.536049][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 432.568703][T10230] wg1 speed is unknown, defaulting to 1000 [ 432.583644][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 432.595562][T10230] wg1 speed is unknown, defaulting to 1000 [ 432.609289][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 432.621089][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 432.629226][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 432.636622][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 432.662287][ T30] audit: type=1400 audit(1776596714.009:1431): avc: denied { mounton } for pid=10238 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 432.740300][T10230] wg1 speed is unknown, defaulting to 1000 [ 432.802283][T10230] wg1 speed is unknown, defaulting to 1000 [ 432.909216][ T164] bridge_slave_1: left allmulticast mode [ 432.918886][ T164] bridge_slave_1: left promiscuous mode [ 432.937573][ T164] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.963033][ T164] bridge_slave_0: left allmulticast mode [ 432.985605][ T164] bridge_slave_0: left promiscuous mode [ 433.010771][ T164] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.360269][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.367129][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.634572][ T164] bond1 (unregistering): (slave macvlan0): Removing an active aggregator [ 434.645943][ T164] bond1 (unregistering): (slave macvlan0): Releasing backup interface [ 434.660538][ T164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.674155][ T164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.682933][ T50] Bluetooth: hci2: command tx timeout [ 434.696685][ T164] bond0 (unregistering): Released all slaves [ 434.714200][ T164] bond1 (unregistering): Released all slaves [ 434.738568][T10230] wg1 speed is unknown, defaulting to 1000 [ 434.831376][T10230] wg1 speed is unknown, defaulting to 1000 [ 434.929391][ T164] : left promiscuous mode [ 436.264208][T10238] chnl_net:caif_netlink_parms(): no params data found [ 436.630660][ T5478] 8021q: adding VLAN 0 to HW filter on device eth1 [ 436.756316][ T50] Bluetooth: hci2: command tx timeout [ 436.842129][T10238] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.891642][T10238] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.928410][T10238] bridge_slave_0: entered allmulticast mode [ 436.987915][T10238] bridge_slave_0: entered promiscuous mode [ 437.034312][ T164] hsr_slave_0: left promiscuous mode [ 437.061880][ T164] hsr_slave_1: left promiscuous mode [ 437.076098][ T164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.106842][ T164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.706453][ T164] team0 (unregistering): Port device team_slave_1 removed [ 437.755360][ T164] team0 (unregistering): Port device team_slave_0 removed [ 438.581699][T10238] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.605202][T10238] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.629424][T10238] bridge_slave_1: entered allmulticast mode [ 438.652723][T10238] bridge_slave_1: entered promiscuous mode [ 438.672612][ T5478] 8021q: adding VLAN 0 to HW filter on device eth3 [ 438.685399][T10317] bridge2: entered promiscuous mode [ 438.690658][T10317] bridge2: entered allmulticast mode [ 438.836139][ T50] Bluetooth: hci2: command tx timeout [ 438.880365][T10238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.907273][T10238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.048622][T10238] team0: Port device team_slave_0 added [ 439.056549][T10238] team0: Port device team_slave_1 added [ 439.612643][T10238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.620784][ T164] IPVS: stop unused estimator thread 0... [ 439.637286][T10238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.679769][T10238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.733428][T10238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.745465][T10238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.857676][T10238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.875810][T10335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.882'. [ 440.506319][T10238] hsr_slave_0: entered promiscuous mode [ 440.512491][T10238] hsr_slave_1: entered promiscuous mode [ 440.527905][T10238] debugfs: 'hsr0' already exists in 'hsr' [ 440.554391][T10238] Cannot create hsr debugfs directory [ 440.847610][T10356] evm: overlay not supported [ 441.645200][ T50] Bluetooth: hci2: command tx timeout [ 441.680151][ T30] audit: type=1400 audit(1776596722.209:1432): avc: denied { watch } for pid=10347 comm="syz.4.885" path="/171/bus/file1" dev="overlay" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 442.366746][T10366] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 442.375537][T10366] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 442.387307][T10366] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 445.877653][ T5478] 8021q: adding VLAN 0 to HW filter on device eth2 [ 445.891808][T10377] wg1 speed is unknown, defaulting to 1000 [ 446.076104][ T30] audit: type=1400 audit(1776596727.429:1433): avc: denied { getopt } for pid=10379 comm="syz.4.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 446.526989][ T6020] block nbd0: Possible stuck request ffff8880285c0000: control (read@0,1024B). Runtime 150 seconds [ 446.537853][ T6020] block nbd0: Possible stuck request ffff8880285c01c0: control (read@1024,1024B). Runtime 150 seconds [ 446.548915][ T6020] block nbd0: Possible stuck request ffff8880285c0380: control (read@2048,1024B). Runtime 150 seconds [ 446.560315][ T6020] block nbd0: Possible stuck request ffff8880285c0540: control (read@3072,1024B). Runtime 150 seconds [ 446.619049][T10238] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 446.634279][T10238] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 446.644332][T10238] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 446.816582][T10238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 446.841540][T10238] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 446.864186][T10238] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 446.880784][T10238] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 446.970744][T10404] netlink: 'syz.1.893': attribute type 39 has an invalid length. [ 447.327480][ T30] audit: type=1326 audit(1776596728.309:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf34f9c819 code=0x7ffc0000 [ 447.390956][T10238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 447.412896][ T30] audit: type=1326 audit(1776596728.309:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf34f9c819 code=0x7ffc0000 [ 447.490435][ T30] audit: type=1326 audit(1776596728.309:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf34f9c819 code=0x7ffc0000 [ 447.656349][ T30] audit: type=1326 audit(1776596728.309:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf34f9c819 code=0x7ffc0000 [ 447.760281][ T30] audit: type=1326 audit(1776596728.319:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf34f9c819 code=0x7ffc0000 [ 447.833852][T10405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 447.886212][ T30] audit: type=1326 audit(1776596728.319:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcf34f9c819 code=0x7ffc0000 [ 447.946342][T10420] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 447.975773][ T30] audit: type=1326 audit(1776596728.319:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf34f9c819 code=0x7ffc0000 [ 448.003070][T10420] netlink: 'syz.1.894': attribute type 2 has an invalid length. [ 448.030962][T10420] netlink: 132 bytes leftover after parsing attributes in process `syz.1.894'. [ 448.055359][ T30] audit: type=1326 audit(1776596728.319:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf34f9c819 code=0x7ffc0000 [ 448.248706][ T30] audit: type=1326 audit(1776596728.329:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcf34f9c819 code=0x7ffc0000 [ 448.815328][ T5478] 8021q: adding VLAN 0 to HW filter on device eth4 [ 448.958305][ T30] audit: type=1326 audit(1776596728.329:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf34f9c819 code=0x7ffc0000 [ 448.976885][T10238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.047816][T10442] tmpfs: Bad value for 'mpol' [ 449.410199][T10238] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.441403][ T6474] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.448513][ T6474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.490123][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.497268][ T6474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.215843][T10238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.235318][T10453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=10453 comm=syz.4.898 [ 450.547584][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'. [ 450.556445][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'. [ 450.640430][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 450.764515][T10238] veth0_vlan: entered promiscuous mode [ 450.786566][T10238] veth1_vlan: entered promiscuous mode [ 450.845787][T10238] veth0_macvtap: entered promiscuous mode [ 450.868519][T10238] veth1_macvtap: entered promiscuous mode [ 450.984658][T10238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.037780][T10238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.095058][ T164] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.118759][ T164] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.154348][ T164] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.175475][ T164] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.333207][ T6474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.346579][ T6474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.371046][ T6474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.380023][ T6474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.436641][ T5919] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 451.511527][T10491] tipc: Started in network mode [ 451.516497][T10491] tipc: Node identity 2, cluster identity 4711 [ 451.522645][T10491] tipc: Node number set to 2 [ 451.617995][ T5919] usb 5-1: unable to get BOS descriptor or descriptor too short [ 451.688370][ T5919] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.687417][T10501] wg1 speed is unknown, defaulting to 1000 [ 452.934994][T10502] Mount JFS Failure: -22 [ 452.939495][T10502] jfs_mount failed w/return code = -22 [ 453.242850][ T5919] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 453.267632][ T5919] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 453.326760][ T5919] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 453.421077][ T5919] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 453.432033][ T5919] usb 5-1: config 1 interface 1 has no altsetting 0 [ 453.441717][ T5919] usb 5-1: string descriptor 0 read error: -22 [ 453.448239][ T5919] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 453.462657][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.497153][ T5919] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 454.583480][ T5919] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 454.614692][ T5919] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 454.637140][ T5919] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 454.982983][ T5919] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 455.097680][ T5919] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 455.183407][ T5919] usb 5-1: USB disconnect, device number 9 [ 455.356805][T10526] netlink: 'syz.2.910': attribute type 39 has an invalid length. [ 455.755575][T10535] vlan0: entered promiscuous mode [ 455.826599][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 455.826632][ T30] audit: type=1400 audit(1776596737.079:1453): avc: denied { write } for pid=10531 comm="syz.1.912" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 456.763624][T10412] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 457.569069][T10534] ISOFS: Unable to identify CD-ROM format. [ 457.588428][T10561] netlink: 'syz.3.916': attribute type 30 has an invalid length. [ 457.694591][T10564] netlink: 'syz.3.916': attribute type 30 has an invalid length. [ 458.556058][ T30] audit: type=1400 audit(1776596739.899:1454): avc: denied { read } for pid=10578 comm="syz.4.917" path="socket:[24959]" dev="sockfs" ino=24959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 458.931058][ T30] audit: type=1400 audit(1776596739.969:1455): avc: denied { map } for pid=10578 comm="syz.4.917" path="socket:[24197]" dev="sockfs" ino=24197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 459.786738][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 460.358336][T10610] Cannot find add_set index 4 as target [ 462.976957][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 462.986405][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 463.160312][T10631] ceph: No mds server is up or the cluster is laggy [ 463.262976][ T5935] libceph: connect (1)[c::]:6789 error -101 [ 464.262238][ T5935] libceph: mon0 (1)[c::]:6789 connect error [ 466.248051][T10675] cgroup2: Unknown parameter 'fO۸javordynmods' [ 466.254925][ T30] audit: type=1400 audit(1776596747.609:1456): avc: denied { mounton } for pid=10674 comm="syz.4.933" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 466.657951][T10679] team_slave_1: Caught tx_queue_len zero misconfig [ 468.025087][T10686] team0: entered allmulticast mode [ 468.031216][T10686] team_slave_0: entered allmulticast mode [ 468.037000][T10686] team_slave_1: entered allmulticast mode [ 468.042993][T10686] netlink: 32 bytes leftover after parsing attributes in process `syz.3.934'. [ 468.051904][T10686] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 468.301470][T10695] netlink: 44 bytes leftover after parsing attributes in process `syz.4.935'. [ 468.633825][T10703] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 468.640921][T10703] overlayfs: failed to set xattr on upper [ 468.646744][T10703] overlayfs: ...falling back to redirect_dir=nofollow. [ 468.653607][T10703] overlayfs: ...falling back to index=off. [ 468.659465][T10703] overlayfs: ...falling back to uuid=null. [ 468.708040][T10704] overlayfs: missing 'workdir' [ 469.486243][T10715] sp0: Synchronizing with TNC [ 469.532441][T10715] netlink: 3 bytes leftover after parsing attributes in process `syz.4.937'. [ 471.241761][T10715] wg1 speed is unknown, defaulting to 1000 [ 472.316044][ T5919] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 472.477650][T10734] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 473.676876][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 473.683807][ T5919] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 473.698924][ T5919] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 473.720691][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 473.740585][ T5919] usb 5-1: Product: syz [ 473.841252][ T5919] usb 5-1: Manufacturer: syz [ 473.846406][ T5919] usb 5-1: SerialNumber: syz [ 473.853024][ T5919] usb 5-1: config 0 descriptor?? [ 473.858938][T10727] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 473.867521][ T5919] hub 5-1:0.0: bad descriptor, ignoring hub [ 473.873499][ T5919] hub 5-1:0.0: probe with driver hub failed with error -5 [ 475.062954][T10727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.087889][T10727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.792447][T10754] Cannot find add_set index 0 as target [ 477.060711][ T6020] block nbd0: Possible stuck request ffff8880285c0000: control (read@0,1024B). Runtime 180 seconds [ 477.071469][ T6020] block nbd0: Possible stuck request ffff8880285c01c0: control (read@1024,1024B). Runtime 180 seconds [ 477.082608][ T6020] block nbd0: Possible stuck request ffff8880285c0380: control (read@2048,1024B). Runtime 180 seconds [ 477.093572][ T6020] block nbd0: Possible stuck request ffff8880285c0540: control (read@3072,1024B). Runtime 180 seconds [ 477.433435][ T30] audit: type=1400 audit(1776596758.789:1457): avc: denied { mount } for pid=10758 comm="syz.3.946" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 477.481226][T10763] 8021q: adding VLAN 0 to HW filter on device bond3 [ 477.605901][T10770] tmpfs: Bad value for 'mpol' [ 477.643050][ T5816] usb 5-1: USB disconnect, device number 10 [ 477.672174][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 478.032432][T10785] netlink: 36 bytes leftover after parsing attributes in process `syz.1.949'. [ 478.485454][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.951'. [ 478.633794][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.951'. [ 478.697920][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.950'. [ 478.719029][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.951'. [ 480.245777][T10807] wg1 speed is unknown, defaulting to 1000 [ 480.314313][T10811] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 481.748887][T10830] netlink: 'syz.3.956': attribute type 4 has an invalid length. [ 481.756628][T10830] netlink: 152 bytes leftover after parsing attributes in process `syz.3.956'. [ 481.768002][T10830] .`: renamed from bond0 (while UP) [ 482.045149][T10835] SET target dimension over the limit! [ 482.241563][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.958'. [ 482.277650][T10838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.670862][T10853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 485.560205][T10868] SELinux: Context system_u:object_r:sudo_exec_t:s0 is not valid (left unmapped). [ 485.830872][ T30] audit: type=1400 audit(1776596766.939:1458): avc: denied { relabelto } for pid=10863 comm="syz.4.965" name="192" dev="tmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:sudo_exec_t:s0" [ 486.911419][ T30] audit: type=1400 audit(1776596766.939:1459): avc: denied { associate } for pid=10863 comm="syz.4.965" name="192" dev="tmpfs" ino=1067 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sudo_exec_t:s0" [ 487.036313][ T30] audit: type=1400 audit(1776596767.629:1460): avc: denied { create } for pid=10863 comm="syz.4.965" name="#23" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 487.057942][ T30] audit: type=1400 audit(1776596767.629:1461): avc: denied { link } for pid=10863 comm="syz.4.965" name="#23" dev="tmpfs" ino=1082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 487.170635][T10875] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 487.561795][ T30] audit: type=1400 audit(1776596767.629:1462): avc: denied { rename } for pid=10863 comm="syz.4.965" name="#24" dev="tmpfs" ino=1082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 487.681419][ T30] audit: type=1400 audit(1776596767.639:1463): avc: denied { getopt } for pid=10863 comm="syz.4.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 488.053129][T10883] tipc: Enabling of bearer rejected, failed to enable media [ 488.536715][T10899] netlink: 'syz.1.971': attribute type 32 has an invalid length. [ 489.440637][T10903] FAT-fs (nullb0): bogus number of reserved sectors [ 489.447546][T10903] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 490.956963][T10909] siw: device registration error -23 [ 490.965083][T10909] smc: removing ib device syz2 [ 490.986478][T10909] smbdirect: ib_dev[syz2] removed [ 491.476664][T10909] ------------[ cut here ]------------ [ 491.482122][T10909] !xa_empty(&pool->xa) [ 491.482128][T10909] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.1.974/10909 [ 491.498423][T10909] Modules linked in: [ 491.502424][T10909] CPU: 0 UID: 0 PID: 10909 Comm: syz.1.974 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.513255][T10909] Tainted: [L]=SOFTLOCKUP [ 491.517567][T10909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 491.527605][T10909] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 491.533461][T10909] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 36 b9 4b f9 5b c3 cc cc cc cc e8 2b b9 4b f9 90 <0f> 0b 90 e8 22 b9 4b f9 5b c3 cc cc cc cc e8 57 8f b8 f9 eb d0 0f [ 491.553077][T10909] RSP: 0018:ffffc90004c971c0 EFLAGS: 00010246 [ 491.559136][T10909] RAX: 0000000000080000 RBX: ffff88802d4b1390 RCX: ffffc900063d9000 [ 491.567629][T10909] RDX: 0000000000080000 RSI: ffffffff88bdb035 RDI: ffff88802d4b1410 [ 491.575572][T10909] RBP: ffffffff88bc12c0 R08: 0000000000000005 R09: 0000000000000001 [ 491.583663][T10909] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88802d4b06a0 [ 491.591672][T10909] R13: ffff88802d4affe0 R14: ffff88802d4affe0 R15: ffff88802d4b10f8 [ 491.599903][T10909] FS: 00007fcf35e586c0(0000) GS:ffff8881242ef000(0000) knlGS:0000000000000000 [ 491.608833][T10909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.615391][T10909] CR2: 0000200000071030 CR3: 0000000053842000 CR4: 00000000003526f0 [ 491.623349][T10909] Call Trace: [ 491.626630][T10909] [ 491.629539][T10909] rxe_dealloc+0x25/0xc0 [ 491.633758][T10909] ib_dealloc_device+0x49/0x230 [ 491.638624][T10909] __ib_unregister_device+0x396/0x480 [ 491.643975][T10909] ib_unregister_device_and_put+0x5a/0x80 [ 491.649681][T10909] nldev_dellink+0x226/0x320 [ 491.654243][T10909] ? __pfx_nldev_dellink+0x10/0x10 [ 491.659367][T10909] ? rcu_is_watching+0x12/0xc0 [ 491.664107][T10909] ? cap_capable+0x10b/0x440 [ 491.668698][T10909] ? bpf_lsm_capable+0x9/0x10 [ 491.673349][T10909] ? security_capable+0x80/0x260 [ 491.678288][T10909] ? ns_capable+0xd2/0xf0 [ 491.682592][T10909] ? __pfx_nldev_dellink+0x10/0x10 [ 491.687692][T10909] rdma_nl_rcv_msg+0x392/0x6f0 [ 491.692430][T10909] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 491.697712][T10909] ? __lock_acquire+0x4a5/0x2630 [ 491.702894][T10909] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 491.709308][T10909] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 491.716244][T10909] ? netlink_deliver_tap+0x1ae/0xcc0 [ 491.721539][T10909] netlink_unicast+0x585/0x850 [ 491.726323][T10909] ? __pfx_netlink_unicast+0x10/0x10 [ 491.731589][T10909] netlink_sendmsg+0x8b0/0xda0 [ 491.736359][T10909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.741632][T10909] ? __might_fault+0xc0/0x140 [ 491.746315][T10909] ____sys_sendmsg+0x9e1/0xb70 [ 491.751070][T10909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.756353][T10909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.761623][T10909] ? __pfx_futex_wake_mark+0x10/0x10 [ 491.766927][T10909] ___sys_sendmsg+0x190/0x1e0 [ 491.771586][T10909] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.776795][T10909] __sys_sendmsg+0x170/0x220 [ 491.781368][T10909] ? __pfx___sys_sendmsg+0x10/0x10 [ 491.786481][T10909] ? __x64_sys_futex+0x34f/0x4d0 [ 491.791401][T10909] ? rcu_is_watching+0x12/0xc0 [ 491.796322][T10909] do_syscall_64+0x10b/0xf80 [ 491.801168][T10909] ? clear_bhb_loop+0x40/0x90 [ 491.805824][T10909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.811706][T10909] RIP: 0033:0x7fcf34f9c819 [ 491.816127][T10909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.835722][T10909] RSP: 002b:00007fcf35e58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.844129][T10909] RAX: ffffffffffffffda RBX: 00007fcf35215fa0 RCX: 00007fcf34f9c819 [ 491.852095][T10909] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 491.860056][T10909] RBP: 00007fcf35032c91 R08: 0000000000000000 R09: 0000000000000000 [ 491.868022][T10909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.875984][T10909] R13: 00007fcf35216038 R14: 00007fcf35215fa0 R15: 00007fff503ee258 [ 491.883947][T10909] [ 491.886967][T10909] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 491.894231][T10909] CPU: 0 UID: 0 PID: 10909 Comm: syz.1.974 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.905063][T10909] Tainted: [L]=SOFTLOCKUP [ 491.909360][T10909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 491.919398][T10909] Call Trace: [ 491.922651][T10909] [ 491.925564][T10909] dump_stack_lvl+0x100/0x190 [ 491.930227][T10909] vpanic+0x552/0x970 [ 491.934183][T10909] ? __pfx_vpanic+0x10/0x10 [ 491.938661][T10909] panic+0xd1/0xe0 [ 491.942356][T10909] ? __pfx_panic+0x10/0x10 [ 491.946749][T10909] check_panic_on_warn.cold+0x19/0x34 [ 491.952096][T10909] ? rxe_pool_cleanup+0x46/0x60 [ 491.956936][T10909] __warn.cold+0x191/0x328 [ 491.961341][T10909] __report_bug+0x296/0x3d0 [ 491.965870][T10909] ? rxe_pool_cleanup+0x46/0x60 [ 491.970697][T10909] ? __pfx___report_bug+0x10/0x10 [ 491.975698][T10909] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 491.981483][T10909] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 491.987285][T10909] ? __flush_workqueue+0x426/0x1200 [ 491.992461][T10909] ? rxe_pool_cleanup+0x46/0x60 [ 491.997284][T10909] report_bug+0xb2/0x220 [ 492.001515][T10909] ? rxe_pool_cleanup+0x46/0x60 [ 492.006339][T10909] handle_bug+0x16a/0x2a0 [ 492.010655][T10909] exc_invalid_op+0x17/0x50 [ 492.015136][T10909] asm_exc_invalid_op+0x1a/0x20 [ 492.019971][T10909] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 492.025412][T10909] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 36 b9 4b f9 5b c3 cc cc cc cc e8 2b b9 4b f9 90 <0f> 0b 90 e8 22 b9 4b f9 5b c3 cc cc cc cc e8 57 8f b8 f9 eb d0 0f [ 492.044996][T10909] RSP: 0018:ffffc90004c971c0 EFLAGS: 00010246 [ 492.051037][T10909] RAX: 0000000000080000 RBX: ffff88802d4b1390 RCX: ffffc900063d9000 [ 492.058985][T10909] RDX: 0000000000080000 RSI: ffffffff88bdb035 RDI: ffff88802d4b1410 [ 492.066931][T10909] RBP: ffffffff88bc12c0 R08: 0000000000000005 R09: 0000000000000001 [ 492.074886][T10909] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88802d4b06a0 [ 492.082833][T10909] R13: ffff88802d4affe0 R14: ffff88802d4affe0 R15: ffff88802d4b10f8 [ 492.090784][T10909] ? __pfx_rxe_dealloc+0x10/0x10 [ 492.095700][T10909] ? rxe_pool_cleanup+0x45/0x60 [ 492.100529][T10909] rxe_dealloc+0x25/0xc0 [ 492.104747][T10909] ib_dealloc_device+0x49/0x230 [ 492.109574][T10909] __ib_unregister_device+0x396/0x480 [ 492.114925][T10909] ib_unregister_device_and_put+0x5a/0x80 [ 492.120623][T10909] nldev_dellink+0x226/0x320 [ 492.125186][T10909] ? __pfx_nldev_dellink+0x10/0x10 [ 492.130297][T10909] ? rcu_is_watching+0x12/0xc0 [ 492.135040][T10909] ? cap_capable+0x10b/0x440 [ 492.139607][T10909] ? bpf_lsm_capable+0x9/0x10 [ 492.144268][T10909] ? security_capable+0x80/0x260 [ 492.149192][T10909] ? ns_capable+0xd2/0xf0 [ 492.153511][T10909] ? __pfx_nldev_dellink+0x10/0x10 [ 492.158596][T10909] rdma_nl_rcv_msg+0x392/0x6f0 [ 492.163336][T10909] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 492.168599][T10909] ? __lock_acquire+0x4a5/0x2630 [ 492.173513][T10909] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 492.179902][T10909] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 492.186835][T10909] ? netlink_deliver_tap+0x1ae/0xcc0 [ 492.192105][T10909] netlink_unicast+0x585/0x850 [ 492.196850][T10909] ? __pfx_netlink_unicast+0x10/0x10 [ 492.202117][T10909] netlink_sendmsg+0x8b0/0xda0 [ 492.206859][T10909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.212116][T10909] ? __might_fault+0xc0/0x140 [ 492.216772][T10909] ____sys_sendmsg+0x9e1/0xb70 [ 492.221522][T10909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.226782][T10909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.232055][T10909] ? __pfx_futex_wake_mark+0x10/0x10 [ 492.237325][T10909] ___sys_sendmsg+0x190/0x1e0 [ 492.241986][T10909] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.247177][T10909] __sys_sendmsg+0x170/0x220 [ 492.251758][T10909] ? __pfx___sys_sendmsg+0x10/0x10 [ 492.256848][T10909] ? __x64_sys_futex+0x34f/0x4d0 [ 492.261769][T10909] ? rcu_is_watching+0x12/0xc0 [ 492.266513][T10909] do_syscall_64+0x10b/0xf80 [ 492.271081][T10909] ? clear_bhb_loop+0x40/0x90 [ 492.275734][T10909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.281609][T10909] RIP: 0033:0x7fcf34f9c819 [ 492.286004][T10909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.305600][T10909] RSP: 002b:00007fcf35e58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.313995][T10909] RAX: ffffffffffffffda RBX: 00007fcf35215fa0 RCX: 00007fcf34f9c819 [ 492.321940][T10909] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 492.329884][T10909] RBP: 00007fcf35032c91 R08: 0000000000000000 R09: 0000000000000000 [ 492.337826][T10909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.345770][T10909] R13: 00007fcf35216038 R14: 00007fcf35215fa0 R15: 00007fff503ee258 [ 492.353732][T10909] [ 492.357071][T10909] Kernel Offset: disabled [ 492.361373][T10909] Rebooting in 86400 seconds..