last executing test programs: 23m34.370327477s ago: executing program 2 (id=420): pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x88880) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r1, r0, 0xff, 0x0) fanotify_init(0x0, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') r4 = socket$netlink(0x10, 0x3, 0x8000000004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) preadv(r3, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/190, 0xbe}], 0x1, 0x8e, 0x80) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x400000c, 0x13012, r8, 0x0) r9 = fsmount(r2, 0x0, 0x1) fchdir(r9) prctl$PR_SET_SECUREBITS(0x1c, 0xd083e057b138d53c) syz_usb_connect(0x4, 0x3f, &(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRES16=r9], 0x0) 23m31.028354567s ago: executing program 2 (id=429): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x107941, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) unshare(0x2c060000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="318325bd700000000000190000000c0001800800030005"], 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0) unshare(0x22020600) r4 = socket$unix(0x1, 0x1, 0x0) listen(r4, 0x0) sync_file_range(r1, 0x2, 0x56, 0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x4001, 0x3, 0x3d8, 0x230, 0x700001b, 0x148, 0x0, 0x148, 0x340, 0x206, 0x240, 0x340, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x230, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}, 0x4}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x4, 0x4], 0x4, 0x2}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x6, 0x2, 0xa, 0x6], 0x2, 0x2}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x8000000000000001, 0x9d5, 0x1, 0x38000000000000, 0x4, 0x6, 0x7fffffffffffffff}, &(0x7f0000000280)={0x2c286030, 0xac0, 0x3ff, 0x102, 0xff, 0x1, 0x9, 0x1}, &(0x7f00000002c0)={0x180000000000, 0xfffffffffffffff9, 0x20, 0x96, 0x100, 0x1, 0x4, 0xba0}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0xea]}, 0x8}) accept$unix(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 23m29.290986953s ago: executing program 2 (id=433): syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800001d0500000000000020020000001831000005000000000000000000000095ecffffff00000088a58de4b4761f7f3370edb36730f4dba2aa06fe13d511f4488a39e6a1c52ba92da9fd423500d1e516a0b5f098aaa90ae4af9488"], &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DONE(r6, 0x29, 0xc9, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000500)=""/236, &(0x7f0000000100)=0xec) unlink(&(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700"/115], 0x84}}, 0x0) 23m28.336735264s ago: executing program 2 (id=435): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') symlinkat(&(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 23m27.311389546s ago: executing program 2 (id=437): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4c8c0) accept$phonet_pipe(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, '\t\x00', "9f1b21bfcdd63f97d0778b079513f25d", "27bbde0a", "bcc42c7cc2eb2a34"}, 0x28) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 23m27.007456902s ago: executing program 2 (id=440): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) r0 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xbb08, 0x30c1, 0x0, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f0000000180)={{0x3, @addr=0x8}, 0x8, 0x401, 0xfc7c}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x7fff, 0x0, 0x0, 0x2}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r6, 0x8010640b, &(0x7f0000000040)={0x0, 0x0}) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045003, &(0x7f0000000000)) 23m26.418942402s ago: executing program 32 (id=440): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) r0 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xbb08, 0x30c1, 0x0, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f0000000180)={{0x3, @addr=0x8}, 0x8, 0x401, 0xfc7c}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x7fff, 0x0, 0x0, 0x2}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r6, 0x8010640b, &(0x7f0000000040)={0x0, 0x0}) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045003, &(0x7f0000000000)) 11m4.581599577s ago: executing program 3 (id=2752): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) listen(0xffffffffffffffff, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = fsmount(r5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x10) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x1, 0x25dfdbff, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x2c}}, 0x0) 11m3.207136236s ago: executing program 3 (id=2762): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b", 0x20}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/11, 0xb}, {&(0x7f0000000540)=""/51, 0x33}], 0x2}, 0x0) 11m2.615674433s ago: executing program 3 (id=2769): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 11m1.517762433s ago: executing program 3 (id=2778): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r0, 0x0, 0x141) 11m1.418549755s ago: executing program 3 (id=2780): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1781, 0x898, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x2, 0x97, {0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0xda8}}, {{{0x9, 0x5, 0x81, 0x3, 0x418, 0x7f, 0x7, 0x8}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002780)={0x24, 0x0, &(0x7f00000026c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x459}}, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000004f00), 0x40, 0x40000) 11m1.066373064s ago: executing program 3 (id=2785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000002c0)="66baf80cb84b50cf8fc744240000800000c74424020eace126c7442406000000000f01142466bafc0cb9950000400f32ee440f20c03509000000440f22c066b804018ed8262e2e440fe8ac0e0068000067360fc71b0fc728c7442400150100008fc860975f342aff1c244530cc0f01c8c46179e7149a", 0x76}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m0.772029508s ago: executing program 33 (id=2785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000002c0)="66baf80cb84b50cf8fc744240000800000c74424020eace126c7442406000000000f01142466bafc0cb9950000400f32ee440f20c03509000000440f22c066b804018ed8262e2e440fe8ac0e0068000067360fc71b0fc728c7442400150100008fc860975f342aff1c244530cc0f01c8c46179e7149a", 0x76}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m49.838529229s ago: executing program 5 (id=2826): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x100) 10m49.544674116s ago: executing program 5 (id=2829): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000300)=""/80, 0x50}], 0x1) 10m49.272095625s ago: executing program 5 (id=2831): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 10m48.15564551s ago: executing program 5 (id=2840): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000180)='./file0\x00', 0x100) 10m47.991422461s ago: executing program 5 (id=2844): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000040)="df00", 0x2) 10m47.539897484s ago: executing program 5 (id=2849): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433", 0x3b}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/69, 0x45}], 0x2}, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/32, 0x20, 0x2, 0x0, 0x0) 10m47.284314608s ago: executing program 34 (id=2849): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433", 0x3b}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/69, 0x45}], 0x2}, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/32, 0x20, 0x2, 0x0, 0x0) 10m32.979333729s ago: executing program 4 (id=2940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m32.769619332s ago: executing program 4 (id=2942): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 10m32.578128254s ago: executing program 4 (id=2944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x44080) socket$inet6_tcp(0xa, 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = openat(0xffffffffffffff9c, 0x0, 0x80880, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fchown(r2, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000000d08000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x400000f1, 0x0, 0x81}]}) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}}}}}}}}, 0x0) 10m32.026748844s ago: executing program 4 (id=2946): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) 10m31.940296969s ago: executing program 4 (id=2948): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x2020) 10m27.999922182s ago: executing program 4 (id=2966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000170a0102"], 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 10m27.851419014s ago: executing program 35 (id=2966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000170a0102"], 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 10m2.46885809s ago: executing program 8 (id=3155): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0x20000000000003b1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 10m2.370362067s ago: executing program 8 (id=3157): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000308000540000000001c0008800c00014000000000000001ff0c000240000000000000ae6014000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x24008861, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000040)) 10m2.26266485s ago: executing program 8 (id=3160): r0 = epoll_create1(0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) close(r1) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000100)="20c0be7a621d7f609303ef5bb9db57f538fe8163433fb97a0aa735c4c17137762c11fc81fb7d98bb250785107f578b8cb7f8fb0d6fd1e4f94302b9d541b011d5b86fd8030da786ad", 0x0, 0x48) 10m1.063597864s ago: executing program 8 (id=3165): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r2, 0x1, 0x8, 0x6, @remote}, 0x14) 10m0.558320273s ago: executing program 8 (id=3167): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setpgid(0x0, r0) open(&(0x7f0000000180)='./bus\x00', 0x741880, 0x9b) 9m59.900193945s ago: executing program 8 (id=3173): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) r1 = userfaultfd(0x80001) set_mempolicy(0x3, &(0x7f0000000080)=0x1fe, 0x5) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 9m43.719860354s ago: executing program 36 (id=3173): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) r1 = userfaultfd(0x80001) set_mempolicy(0x3, &(0x7f0000000080)=0x1fe, 0x5) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 5.59614285s ago: executing program 9 (id=5496): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_setup(0x1, &(0x7f0000000b80)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0xfffffd0c) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x268180, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4008, 0x3, 0x218, 0x0, 0x32, 0x148, 0x0, 0x148, 0x180, 0x240, 0x240, 0x180, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010100, @rand_addr=0x64010102, 0xff, 0xff0000ff, 'syz_tun\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x14}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x1040, 0x224, 0x0, 0x1}}, @common=@unspec=@addrtype1={{0x28}, {0x1109, 0x0, 0x334}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x94}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 'vlan0\x00', 'caif0\x00', {0xff}, {}, 0x2, 0x3, 0x19}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000873797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd00020009000000000000000600000006000000df3d93d861ae4703d0baacdd95dbfe9e21dcc1c41d263712fe625178d3dd04e98187b100b84852fa159fa8c98f8ab14a19d1822543b8753904230ed4b0a677736dd7e3030228afcb2101026ace09e327d82705870ce3909c1b06f2b912e030374fc2733c704323b5236b8ebc27b7b6feb16fdde95bc0857371e9f3f3a8daf2ccfc6cf3d423b046053dc54815b85de9a9c92f7adacebf1e54e562277d05e576d818a0ffc268bafefbe836be7597445bd781c1cd170e225ab8be8f11e7ebe2290293773ef9e7b221a49fae38941d184ad766639f9f96a8d875e673b5097e"], 0x1f5) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000440), 0x80800, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f00000001c0)={0x9bd, 0x1, &(0x7f00000000c0)=[0xabd], 0x0, 0x0, 0x0}) 5.350213439s ago: executing program 9 (id=5497): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) listen(0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = fsmount(r4, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x10) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) 3.283523207s ago: executing program 9 (id=5529): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000900)='ramfs\x00', 0x2210011, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x8) 3.190488925s ago: executing program 9 (id=5530): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0xfffe, 0x7, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="836bb66f", 0x5ac, 0x0, 0x0, 0x0) 3.039113191s ago: executing program 9 (id=5531): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x5, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_setup(0x6, &(0x7f0000000040)) 2.932583129s ago: executing program 1 (id=5533): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 2.651206887s ago: executing program 1 (id=5534): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x2c, r2, 0xb97534d5fe9704cf, 0x70bd3c, 0x25dfdbfc, {{0x12}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44884}, 0xc808) 2.434099764s ago: executing program 1 (id=5538): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', &(0x7f00000002c0)=""/181, 0xb5) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) 2.335091621s ago: executing program 1 (id=5539): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) listen(0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = fsmount(r4, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x10) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) 2.235969162s ago: executing program 0 (id=5540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r1, 0x331, 0x70bd29, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) 2.17348433s ago: executing program 6 (id=5541): r0 = syz_io_uring_setup(0x55b3, &(0x7f0000000040)={0x0, 0xf84, 0x10081, 0x1, 0x10043}, &(0x7f0000000300), &(0x7f0000000200)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r2 = epoll_create(0x9) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r2, r2], 0x2) read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0x2020) 2.139210627s ago: executing program 7 (id=5542): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, 0x0, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x2c2440, 0x59) close(r2) socket$alg(0x26, 0x5, 0x0) userfaultfd(0x80001) unshare(0x28040680) futex_waitv(&(0x7f00000047c0), 0x0, 0x0, 0x0, 0x1) openat$khugepaged_scan(0xffffff9c, &(0x7f00000002c0), 0x1, 0x0) socket(0x10, 0x3, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10) 2.022870698s ago: executing program 0 (id=5543): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) r2 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0xc3, 0x40, {0xffffffffffffffff}, {}, 0x10000, 0x3}) get_robust_list(r4, &(0x7f0000000540)=&(0x7f0000000500)={&(0x7f0000000400)={&(0x7f0000000380)}, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)}}, &(0x7f0000000580)=0x18) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8001}, 0x8) r6 = shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000001, 0x20031, 0xffffffffffffffff, 0xec785000) shmdt(r6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.017302349s ago: executing program 6 (id=5544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x800000001}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.975245714s ago: executing program 0 (id=5545): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x1c, r3, 0x5eae78d9c54e9d3f, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x200440c4) 1.831610098s ago: executing program 0 (id=5546): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x48, 0xfe, 0x0, 0x46}, {0x6, 0x1, 0xfb, 0x2}]}) write(r0, &(0x7f0000000280)="1a7f", 0x2) 1.801209094s ago: executing program 0 (id=5547): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x107941, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) unshare(0x2c060000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="318325bd700000000000190000000c0001800800030005"], 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0) unshare(0x22020600) r4 = socket$unix(0x1, 0x1, 0x0) listen(r4, 0x0) sync_file_range(r1, 0x2, 0x56, 0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x4001, 0x3, 0x3d8, 0x230, 0x700001b, 0x148, 0x0, 0x148, 0x340, 0x206, 0x240, 0x340, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x230, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}, 0x4}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x4, 0x4], 0x4, 0x2}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x6, 0x2, 0xa, 0x6], 0x2, 0x2}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x8000000000000001, 0x9d5, 0x1, 0x38000000000000, 0x4, 0x6, 0x7fffffffffffffff}, &(0x7f0000000280)={0x2c286030, 0xac0, 0x3ff, 0x102, 0xff, 0x1, 0x9, 0x1}, &(0x7f00000002c0)={0x180000000000, 0xfffffffffffffff9, 0x20, 0x96, 0x100, 0x1, 0x4, 0xba0}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0xea]}, 0x8}) connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept$unix(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 1.741086646s ago: executing program 6 (id=5548): syz_emit_ethernet(0x46, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905243d", @ANYRES8], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x20001) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0xfffffcd9) socket$inet6(0xa, 0x2, 0x0) 1.267777154s ago: executing program 9 (id=5549): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_setup(0x1, &(0x7f0000000b80)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0xfffffd0c) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x268180, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4008, 0x3, 0x218, 0x0, 0x32, 0x148, 0x0, 0x148, 0x180, 0x240, 0x240, 0x180, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010100, @rand_addr=0x64010102, 0xff, 0xff0000ff, 'syz_tun\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x14}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x1040, 0x224, 0x0, 0x1}}, @common=@unspec=@addrtype1={{0x28}, {0x1109, 0x0, 0x334}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x94}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 'vlan0\x00', 'caif0\x00', {0xff}, {}, 0x2, 0x3, 0x19}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000873797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd00020009000000000000000600000006000000df3d93d861ae4703d0baacdd95dbfe9e21dcc1c41d263712fe625178d3dd04e98187b100b84852fa159fa8c98f8ab14a19d1822543b8753904230ed4b0a677736dd7e3030228afcb2101026ace09e327d82705870ce3909c1b06f2b912e030374fc2733c704323b5236b8ebc27b7b6feb16fdde95bc0857371e9f3f3a8daf2ccfc6cf3d423b046053dc54815b85de9a9c92f7adacebf1e54e562277d05e576d818a0ffc268bafefbe836be7597445bd781c1cd170e225ab8be8f11e7ebe2290293773ef9e7b221a49fae38941d184ad766639f9f96a8d875e673b5097e"], 0x1f5) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000440), 0x80800, 0x0) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f00000001c0)={0x9bd, 0x1, &(0x7f00000000c0)=[0xabd], 0x0, 0x0, 0x0}) 1.011199879s ago: executing program 6 (id=5550): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0xb, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x81, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xe, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x40000004, 0x0, 0x5, 0x3c5e, 0x1, 0x24, 0x3, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x9], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0x401, 0x129432e6, 0x40c8, 0xf9, 0x3, 0x6, 0x6c7, 0x8, 0xfff7fff8, 0x3, 0x0, 0x6, 0x108, 0x2f, 0xe, 0x312, 0x5, 0x1, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0x2, 0x8, 0x1, 0x4, 0x6, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x6, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x1, 0x0, 0x5, 0xb, 0x1, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800483, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0x3, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x2, 0x5, 0x1c, 0x8, 0x1, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0xb, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x2, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xfff73441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 568.570945ms ago: executing program 7 (id=5551): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}], 0x2, 0x0) 395.861379ms ago: executing program 7 (id=5552): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) 314.192616ms ago: executing program 0 (id=5553): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x360, &(0x7f0000000780)=ANY=[@ANYBLOB="8b00004ec8b5a1f7bf602234bf77a1e6e3080d49f1cf173e13a5663f4c6e5be41a69f830d53174bed6de11e4d36d83abe6d08312f797d1445ce42713381839a9284c7b4c8fc237831420cdcbf84dd605d3a8167f9cd431c01507cdcaf5e75575f8325c34635f5dfb0829ee2dc2e3c93f81a67c4620b80a85e396b35786f9b58724df0d9780e728dbbc99ccab34f7db00f600004e"]) capset(0xfffffffffffffffd, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x2, 0x1) 295.657514ms ago: executing program 7 (id=5554): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, r2, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}}, 0x0) 198.868829ms ago: executing program 6 (id=5555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) r2 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0xc3, 0x40, {0xffffffffffffffff}, {}, 0x10000, 0x3}) get_robust_list(r4, &(0x7f0000000540)=&(0x7f0000000500)={&(0x7f0000000400)={&(0x7f0000000380)}, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)}}, &(0x7f0000000580)=0x18) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8001}, 0x8) r6 = shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000001, 0x20031, 0xffffffffffffffff, 0xec785000) shmdt(r6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 163.275273ms ago: executing program 7 (id=5556): mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={0x0}) 110.851652ms ago: executing program 6 (id=5557): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000001580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 47.721616ms ago: executing program 1 (id=5558): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r1, 0x1c, 0x3, 0x2}) 22.60463ms ago: executing program 1 (id=5559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000980)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@generic={0x1, 0x6, "11b712", 0x0, 0x11, 0xff, @local, @private1}}}, 0x36) 0s ago: executing program 7 (id=5560): unshare(0x22020600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0xff7ffff7) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x2, 0x1, r2}) kernel console output (not intermixed with test programs): 1317.759990][T19103] usb 8-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1317.790947][T19103] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.217931][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.226230][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.784687][T19103] usb 8-1: Product: syz [ 1318.788890][T19103] usb 8-1: Manufacturer: syz [ 1318.793482][T19103] usb 8-1: SerialNumber: syz [ 1318.831052][T19103] usb 8-1: config 0 descriptor?? [ 1318.863450][T19103] usb 8-1: can't set config #0, error -71 [ 1318.912669][T19103] usb 8-1: USB disconnect, device number 18 [ 1319.053871][T21257] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3901'. [ 1319.123753][ T29] audit: type=1400 audit(2000001624.063:1225): avc: denied { map } for pid=21256 comm="syz.9.3901" path="socket:[78514]" dev="sockfs" ino=78514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1319.280653][ T29] audit: type=1400 audit(2000001624.063:1226): avc: denied { read } for pid=21256 comm="syz.9.3901" path="socket:[78514]" dev="sockfs" ino=78514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1319.308733][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.316876][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.413117][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.663562][T21288] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=21288 comm=syz.0.3917 [ 1321.524940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.533102][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.636765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.668486][T21320] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3923'. [ 1322.682021][ T29] audit: type=1400 audit(2000001627.375:1227): avc: denied { read write } for pid=21315 comm="syz.9.3923" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1323.035688][T21319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3922'. [ 1323.227689][ T29] audit: type=1400 audit(2000001627.375:1228): avc: denied { open } for pid=21315 comm="syz.9.3923" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1323.748585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.756795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.578191][ T5917] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1324.860393][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.868530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.170930][ T5917] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1325.198001][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1325.972211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.231701][ T5917] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1326.634580][ T5917] usb 2-1: string descriptor 0 read error: -71 [ 1326.651234][ T5917] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1326.874930][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.886558][ T5917] usb 2-1: config 0 descriptor?? [ 1326.892115][ T5917] usb 2-1: can't set config #0, error -71 [ 1326.919901][ T5917] usb 2-1: USB disconnect, device number 64 [ 1327.094729][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.102887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.195865][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.307986][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.316257][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1330.126341][ T5917] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1330.289432][ T5917] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1330.312332][ T5917] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.343708][ T5917] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1330.359023][T21393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3941'. [ 1330.388989][ T5917] usb 8-1: config 1 has no interface number 1 [ 1330.407489][ T5917] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1330.430205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1330.438344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1330.566680][ T5917] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1330.591348][ T5917] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.704684][T21399] sp0: Synchronizing with TNC [ 1330.723666][T21399] netlink: 15 bytes leftover after parsing attributes in process `syz.9.3942'. [ 1330.732768][T21399] netlink: 15 bytes leftover after parsing attributes in process `syz.9.3942'. [ 1330.743713][T21399] netlink: 15 bytes leftover after parsing attributes in process `syz.9.3942'. [ 1330.752783][T21399] netlink: 15 bytes leftover after parsing attributes in process `syz.9.3942'. [ 1330.763635][T21399] netlink: 15 bytes leftover after parsing attributes in process `syz.9.3942'. [ 1330.773331][T21399] netlink: 15 bytes leftover after parsing attributes in process `syz.9.3942'. [ 1330.784158][T21399] netlink: 15 bytes leftover after parsing attributes in process `syz.9.3942'. [ 1330.793212][T21399] netlink: 15 bytes leftover after parsing attributes in process `syz.9.3942'. [ 1330.829401][T21399] netlink: 15 bytes leftover after parsing attributes in process `syz.9.3942'. [ 1331.542015][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.653525][ T5917] usb 8-1: Product: syz [ 1332.355207][ T5917] usb 8-1: Manufacturer: syz [ 1332.460071][ T5917] usb 8-1: SerialNumber: syz [ 1332.653842][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.662019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.904920][T21390] kvm: pic: non byte read [ 1332.923386][T21390] kvm: pic: non byte read [ 1332.941289][ T5917] usb 8-1: 2:1 : invalid UAC_AS_GENERAL desc [ 1332.984296][T21390] kvm: pic: non byte read [ 1333.002196][T21390] kvm: pic: non byte read [ 1333.015185][T21390] kvm: pic: non byte read [ 1333.031353][T21390] kvm: pic: non byte read [ 1333.042086][T21390] kvm: pic: non byte read [ 1333.065619][T21390] kvm: pic: non byte read [ 1333.072616][T21390] kvm: pic: non byte read [ 1333.199125][T21390] kvm: pic: non byte read [ 1333.219346][ T5917] usb 8-1: USB disconnect, device number 19 [ 1333.755037][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.866817][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.874987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.237455][ T5124] Bluetooth: Wrong link type (-71) [ 1335.676681][T21428] No control pipe specified [ 1335.989310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.997464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.109278][T21435] syz.0.3951 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1337.090451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.202918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.211076][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.727096][T21452] __nla_validate_parse: 139 callbacks suppressed [ 1338.727126][T21452] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3955'. [ 1339.324780][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.467054][T21464] overlayfs: missing 'lowerdir' [ 1339.557040][ T5883] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1340.436641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.444951][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.543218][ T5883] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1340.619963][ T5883] usb 10-1: config 0 has no interface number 0 [ 1340.777084][ T5883] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1340.788956][ T5883] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1340.815651][ T5883] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1341.248023][ T5883] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 1341.275970][ T5883] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1341.298272][ T5883] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1341.307469][ T5883] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.334757][ T5883] usb 10-1: config 0 descriptor?? [ 1341.537854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.546134][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.748504][T21461] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1341.774125][ T5883] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1342.649640][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.317091][ T29] audit: type=1400 audit(2000001646.691:1229): avc: denied { append } for pid=21480 comm="syz.1.3965" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1343.404097][ T29] audit: type=1400 audit(2000001646.766:1230): avc: denied { getopt } for pid=21457 comm="syz.9.3958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1343.463717][T12792] usb 10-1: USB disconnect, device number 5 [ 1343.480622][ T29] audit: type=1400 audit(2000001646.766:1231): avc: denied { setopt } for pid=21457 comm="syz.9.3958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1343.501259][T12792] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1343.649999][ T5883] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1343.761797][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.769975][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.880371][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1343.906673][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1343.938633][ T5883] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1343.947708][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.968403][ T5883] usb 2-1: config 0 descriptor?? [ 1344.873280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.166044][ T5883] nti 0003:0757:0A00.001B: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.1-1/input0 [ 1345.227291][ T29] audit: type=1800 audit(2000001648.477:1232): pid=21495 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.3964" name="bus" dev="overlay" ino=1277 res=0 errno=0 [ 1345.253197][ T5883] usb 2-1: USB disconnect, device number 65 [ 1345.375310][T21502] fido_id[21502]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1345.985091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.993426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.096901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.105064][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.183751][T21533] netlink: 35 bytes leftover after parsing attributes in process `syz.7.3977'. [ 1348.208667][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.320665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.328818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.443019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.691569][T21565] netlink: 'syz.9.3987': attribute type 4 has an invalid length. [ 1351.544161][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.552340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.573655][T21568] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1351.887234][T21568] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 1352.252696][T21580] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3989'. [ 1352.304947][T21580] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3989'. [ 1352.346588][ T49] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1352.482486][ T49] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1352.583120][ T1158] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1352.666690][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.674870][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.699614][ T1158] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1352.989123][T21578] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3991'. [ 1353.312665][ T29] audit: type=1400 audit(2000001656.045:1233): avc: denied { listen } for pid=21583 comm="syz.9.3993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1353.429452][T21588] overlayfs: failed to clone upperpath [ 1353.767827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.879958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.888139][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1355.991556][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.859368][T21616] hub 2-0:1.0: USB hub found [ 1356.866615][T21616] hub 2-0:1.0: 1 port detected [ 1357.103287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.111444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.267386][ T29] audit: type=1326 audit(2000001658.131:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.1.3998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5319bf79 code=0x7ffc0000 [ 1358.017519][ T29] audit: type=1326 audit(2000001658.131:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.1.3998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5319bf79 code=0x7ffc0000 [ 1358.124297][ T29] audit: type=1326 audit(2000001658.131:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.1.3998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ffb5319bf79 code=0x7ffc0000 [ 1358.191899][ T29] audit: type=1326 audit(2000001658.131:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.1.3998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffb5319bce2 code=0x7ffc0000 [ 1358.216000][ T29] audit: type=1326 audit(2000001658.131:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.1.3998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffb5319bce2 code=0x7ffc0000 [ 1358.225802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.243568][ T29] audit: type=1326 audit(2000001658.131:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.1.3998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5319bf79 code=0x7ffc0000 [ 1358.247406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.317861][ T29] audit: type=1326 audit(2000001658.131:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.1.3998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5319bf79 code=0x7ffc0000 [ 1358.784782][ T29] audit: type=1326 audit(2000001658.131:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.1.3998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7ffb5319bf79 code=0x7ffc0000 [ 1358.808368][ T29] audit: type=1326 audit(2000001658.131:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.1.3998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5319bf79 code=0x7ffc0000 [ 1358.832135][ T29] audit: type=1326 audit(2000001658.131:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.1.3998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5319bf79 code=0x7ffc0000 [ 1358.855926][ T29] audit: type=1326 audit(2000001658.131:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.1.3998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7ffb5319bf79 code=0x7ffc0000 [ 1358.879430][ T29] audit: type=1326 audit(2000001658.411:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.1.3998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5319bf79 code=0x7ffc0000 [ 1358.903000][ T29] audit: type=1326 audit(2000001658.411:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.1.3998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5319bf79 code=0x7ffc0000 [ 1358.926512][ T29] audit: type=1400 audit(2000001660.441:1247): avc: denied { lock } for pid=21604 comm="syz.6.4000" path="socket:[80970]" dev="sockfs" ino=80970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1359.205267][T21635] netlink: 'syz.1.4002': attribute type 4 has an invalid length. [ 1359.337612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.438770][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.446979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.550566][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.371353][T21656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1362.662432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.670642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.784940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.793141][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.793335][T21679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4013'. [ 1364.674072][T21684] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4004'. [ 1364.886045][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.489690][T21692] nbd: must specify a size in bytes for the device [ 1365.997876][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.006027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.036128][T19103] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1366.089442][ T29] audit: type=1326 audit(2000001667.990:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21676 comm="syz.7.4014" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bb379bf79 code=0x0 [ 1366.292738][T19103] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1366.378305][T19103] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1366.533299][T19103] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1366.811510][T19103] usb 10-1: string descriptor 0 read error: -71 [ 1366.964598][T19103] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1367.043048][T19103] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.089676][T19103] usb 10-1: config 0 descriptor?? [ 1367.109682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.137428][T19103] usb 10-1: can't set config #0, error -71 [ 1367.147174][T19103] usb 10-1: USB disconnect, device number 6 [ 1367.410165][T21719] netlink: 35 bytes leftover after parsing attributes in process `syz.6.4017'. [ 1367.778364][T21723] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1367.804202][T21723] cramfs: wrong magic [ 1368.202631][T21722] sp0: Synchronizing with TNC [ 1368.221513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.229805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.333328][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.341470][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.437819][T21748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4031'. [ 1370.445166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.223636][ T29] audit: type=1400 audit(2000001672.742:1249): avc: denied { write } for pid=21750 comm="syz.6.4032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1371.556990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.565127][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.258590][T21759] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4035'. [ 1372.668786][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.974335][T18016] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1373.045307][T21772] netlink: 'syz.6.4036': attribute type 10 has an invalid length. [ 1373.649451][T18016] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1373.675142][T18016] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1373.707688][T18016] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1373.736789][T18016] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1373.746735][T18016] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.773665][T18016] usb 10-1: Product: syz [ 1373.782658][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.790840][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.799531][T18016] usb 10-1: Manufacturer: syz [ 1373.808343][T18016] usb 10-1: SerialNumber: syz [ 1373.824687][T18016] usb 10-1: config 0 descriptor?? [ 1373.842113][T21759] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1374.107851][T18016] usb 10-1: USB disconnect, device number 7 [ 1374.892457][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.900671][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.551933][T21801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4044'. [ 1376.004365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.268199][T21816] overlayfs: metacopy file 'file1' has too small xattr [ 1377.116161][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.124329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.227908][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.746265][T14624] Bluetooth: hci5: command 0x0405 tx timeout [ 1379.411930][T21841] comedi comedi3: comedi_config --init_data is deprecated [ 1382.117333][T21864] can0: slcan on ttyS3. [ 1382.656428][T21861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4062'. [ 1382.693769][T21864] can0 (unregistered): slcan off ttyS3. [ 1383.068225][T18016] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1383.325564][T18016] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1383.339178][T18016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1383.349570][T18016] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1383.507704][T21882] No control pipe specified [ 1383.543063][T21882] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4066'. [ 1383.552269][T21882] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4066'. [ 1383.658961][T18016] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1383.668271][T18016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.709166][T18016] usb 2-1: Product: syz [ 1383.715123][T18016] usb 2-1: Manufacturer: syz [ 1383.719831][T18016] usb 2-1: SerialNumber: syz [ 1383.737933][T18016] usb 2-1: config 0 descriptor?? [ 1383.744241][T21861] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1383.970486][T18016] usb 2-1: USB disconnect, device number 66 [ 1384.416870][T21893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4054'. [ 1385.512782][T10500] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1385.687516][T21913] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1385.847016][ T29] audit: type=1400 audit(2000001686.483:1250): avc: denied { append } for pid=21898 comm="syz.6.4070" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1386.605311][T21914] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4074'. [ 1386.622268][T21914] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4074'. [ 1386.682829][T21903] random: crng reseeded on system resumption [ 1386.778679][T10500] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1386.896261][T10500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.973132][T10500] usb 2-1: config 0 descriptor?? [ 1387.755072][T21930] infiniband syz2: set active [ 1387.759852][T21930] infiniband syz2: added veth1_to_team [ 1387.854541][T21930] RDS/IB: syz2: added [ 1387.858674][T21930] smc: adding ib device syz2 with port count 1 [ 1387.865413][T21930] smc: ib device syz2 port 1 has pnetid S (user defined) [ 1389.014928][T10500] pegasus 2-1:0.0: probe with driver pegasus failed with error -121 [ 1389.294909][T21936] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1389.303422][T21936] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1389.314193][T21936] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1389.326114][ T29] audit: type=1400 audit(2000001945.717:1251): avc: denied { firmware_load } for pid=21934 comm="syz.7.4080" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1389.558331][T21941] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1389.910310][T21938] delete_channel: no stack [ 1390.682420][T21946] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4082'. [ 1390.701124][T12388] usb 2-1: USB disconnect, device number 67 [ 1391.579147][T21951] openvswitch: netlink: Message has 4 unknown bytes. [ 1391.900890][T21957] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1392.667839][ T5124] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1392.920253][T21971] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4090'. [ 1392.938024][T21971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4090'. [ 1393.676188][T12388] IPVS: starting estimator thread 0... [ 1394.866809][T21988] IPVS: using max 49 ests per chain, 117600 per kthread [ 1395.157305][T22000] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4095'. [ 1395.252694][T22004] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4096'. [ 1395.890200][ T5883] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1396.211179][ T5883] usb 10-1: Using ep0 maxpacket: 32 [ 1396.228928][ T5883] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 1396.255539][ T5883] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.285301][ T5883] usb 10-1: config 0 has no interface number 0 [ 1396.297594][ T5883] usb 10-1: config 0 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1396.329558][ T5883] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1396.347158][ T5883] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.369511][ T5883] usb 10-1: Product: syz [ 1396.378692][ T5883] usb 10-1: Manufacturer: syz [ 1396.390850][ T5883] usb 10-1: SerialNumber: syz [ 1396.408566][ T5883] usb 10-1: config 0 descriptor?? [ 1396.436643][ T5883] asix 10-1:0.188: probe with driver asix failed with error -22 [ 1396.629714][T22015] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1396.876815][T22017] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4100'. [ 1396.887100][T22017] overlayfs: missing 'lowerdir' [ 1397.370769][T22023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1398.252695][ T5883] usb 10-1: USB disconnect, device number 8 [ 1402.792831][T22070] fuse: Bad value for 'fd' [ 1403.456070][T22075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4111'. [ 1403.635679][ T29] audit: type=1400 audit(2000001959.119:1252): avc: denied { accept } for pid=22077 comm="syz.6.4115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1406.814813][T22092] trusted_key: encrypted_key: insufficient parameters specified [ 1406.834846][T22114] : Can't lookup blockdev [ 1407.925802][T22126] team0: Port device team_slave_0 removed [ 1409.148252][T22148] openvswitch: netlink: IP tunnel dst address not specified [ 1412.407418][T22175] netlink: 'syz.1.4136': attribute type 3 has an invalid length. [ 1412.417011][T22175] netlink: 'syz.1.4136': attribute type 3 has an invalid length. [ 1412.459545][T22175] Cannot find add_set index 2 as target [ 1413.762610][T22185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4139'. [ 1413.771616][T22185] openvswitch: netlink: Flow actions attr not present in new flow. [ 1413.787166][T22185] overlayfs: failed to clone upperpath [ 1414.183764][T22187] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 1414.192641][T22187] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1414.204266][T22187] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1414.222175][T22187] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1414.299176][T22184] netlink: 592 bytes leftover after parsing attributes in process `syz.9.4137'. [ 1414.328351][T22184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=22184 comm=syz.9.4137 [ 1414.362027][T22184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=22184 comm=syz.9.4137 [ 1414.388594][T22184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=22184 comm=syz.9.4137 [ 1414.471589][T22184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=22184 comm=syz.9.4137 [ 1414.531624][T22184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=22184 comm=syz.9.4137 [ 1414.602497][ T29] audit: type=1400 audit(2000001969.395:1253): avc: denied { read } for pid=22189 comm="syz.0.4140" path="socket:[81888]" dev="sockfs" ino=81888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1416.411212][T22207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4144'. [ 1418.690487][T22225] netlink: 220 bytes leftover after parsing attributes in process `syz.7.4148'. [ 1421.170598][T22241] netlink: 'syz.6.4151': attribute type 1 has an invalid length. [ 1421.180821][T22241] netlink: 'syz.6.4151': attribute type 2 has an invalid length. [ 1421.439934][ T5124] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1422.333589][T22251] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4152'. [ 1422.342978][T22251] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4152'. [ 1422.354295][T22251] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4152'. [ 1422.363535][T22251] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4152'. [ 1422.372888][T22251] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4152'. [ 1422.381929][T22251] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4152'. [ 1422.391299][T22251] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4152'. [ 1422.400365][T22251] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4152'. [ 1422.409581][T22251] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4152'. [ 1422.418681][T22251] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4152'. [ 1425.113123][T22264] 9p: Could not find request transport: tcp*por0000000004e22 [ 1425.137111][T22267] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 1425.171335][T22267] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1425.183382][T22267] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1426.068460][T22273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1427.370170][T22301] 9pnet_virtio: no channels available for device syz [ 1428.201729][T22309] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1428.209939][T22309] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1428.218423][T22309] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1429.348826][T22327] No such timeout policy "syz1" [ 1429.376230][T22327] No control pipe specified [ 1429.384728][T22327] __nla_validate_parse: 217 callbacks suppressed [ 1429.384760][T22327] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4168'. [ 1430.739083][T22323] netlink: 15 bytes leftover after parsing attributes in process `syz.7.4169'. [ 1430.773201][T22323] netlink: 15 bytes leftover after parsing attributes in process `syz.7.4169'. [ 1430.798836][T22323] netlink: 15 bytes leftover after parsing attributes in process `syz.7.4169'. [ 1430.814055][T22323] netlink: 15 bytes leftover after parsing attributes in process `syz.7.4169'. [ 1430.823957][T22323] netlink: 15 bytes leftover after parsing attributes in process `syz.7.4169'. [ 1430.842150][T22323] netlink: 15 bytes leftover after parsing attributes in process `syz.7.4169'. [ 1430.881480][T22323] netlink: 15 bytes leftover after parsing attributes in process `syz.7.4169'. [ 1430.917007][T22323] netlink: 15 bytes leftover after parsing attributes in process `syz.7.4169'. [ 1430.946754][T22323] netlink: 15 bytes leftover after parsing attributes in process `syz.7.4169'. [ 1431.095154][T22323] syzkaller0: left promiscuous mode [ 1434.997474][T22418] netlink: 'syz.0.4179': attribute type 10 has an invalid length. [ 1435.989353][T22430] __nla_validate_parse: 151 callbacks suppressed [ 1435.989373][T22430] netlink: 35 bytes leftover after parsing attributes in process `syz.9.4181'. [ 1437.156624][T22439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4185'. [ 1438.208222][T22450] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4187'. [ 1440.320949][T22466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4190'. [ 1441.322435][T18016] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1441.621349][T18016] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1441.649201][T18016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1442.078059][T18016] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1442.181034][T18016] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1442.206672][T18016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.229805][T18016] usb 2-1: Product: syz [ 1442.238484][T18016] usb 2-1: Manufacturer: syz [ 1442.255443][T18016] usb 2-1: SerialNumber: syz [ 1442.283170][T18016] usb 2-1: config 0 descriptor?? [ 1442.355817][T22471] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1442.702622][ T5883] usb 2-1: USB disconnect, device number 68 [ 1442.781375][T22494] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4197'. [ 1444.025629][T22503] sp0: Synchronizing with TNC [ 1444.032880][T22503] netlink: 15 bytes leftover after parsing attributes in process `syz.9.4199'. [ 1444.042005][T22503] netlink: 15 bytes leftover after parsing attributes in process `syz.9.4199'. [ 1444.051687][T22503] netlink: 15 bytes leftover after parsing attributes in process `syz.9.4199'. [ 1444.060755][T22503] netlink: 15 bytes leftover after parsing attributes in process `syz.9.4199'. [ 1444.070298][T22503] netlink: 15 bytes leftover after parsing attributes in process `syz.9.4199'. [ 1444.079361][T22503] netlink: 15 bytes leftover after parsing attributes in process `syz.9.4199'. [ 1444.088863][T22503] netlink: 15 bytes leftover after parsing attributes in process `syz.9.4199'. [ 1444.097926][T22503] netlink: 15 bytes leftover after parsing attributes in process `syz.9.4199'. [ 1444.107909][T22503] netlink: 15 bytes leftover after parsing attributes in process `syz.9.4199'. [ 1447.631236][T22522] No such timeout policy "syz1" [ 1447.653685][T22522] No control pipe specified [ 1450.543756][T10492] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1451.088385][T10492] usb 2-1: Using ep0 maxpacket: 8 [ 1451.129417][T10492] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1451.141438][T10492] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.156607][T10492] usb 2-1: Product: syz [ 1451.161015][T10492] usb 2-1: Manufacturer: syz [ 1451.172177][T10492] usb 2-1: SerialNumber: syz [ 1451.813354][T19103] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1451.897041][T10492] usb 2-1: config 0 descriptor?? [ 1451.915090][T10492] gspca_main: se401-2.14.0 probing 047d:5003 [ 1452.183006][T19103] usb 10-1: Using ep0 maxpacket: 8 [ 1452.269385][T19103] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1452.567513][T19103] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.578816][T19103] usb 10-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1452.592290][T19103] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1452.603303][T19103] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.622571][T22552] __nla_validate_parse: 150 callbacks suppressed [ 1452.622604][T22552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4212'. [ 1452.650643][T19103] usbtmc 10-1:16.0: bulk endpoints not found [ 1452.845508][T10492] gspca_se401: Bayer format not supported! [ 1454.045443][T12387] usb 2-1: USB disconnect, device number 69 [ 1455.029016][T22579] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1455.413420][T10492] usb 10-1: USB disconnect, device number 9 [ 1455.907284][ T29] audit: type=1400 audit(2000002008.038:1254): avc: denied { setopt } for pid=22582 comm="syz.9.4219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1456.824530][T22600] netlink: 'syz.7.4222': attribute type 10 has an invalid length. [ 1457.332821][T22600] veth1_macvtap: left promiscuous mode [ 1460.466622][T22614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4225'. [ 1460.968904][T22630] Malformed UNC in devname [ 1460.968904][T22630] [ 1460.975676][T22630] CIFS: VFS: Malformed UNC in devname [ 1461.302225][T22629] vivid-007: disconnect [ 1461.902743][T22635] vivid-007: reconnect [ 1462.489606][T22641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4231'. [ 1462.826849][ T29] audit: type=1400 audit(2000002014.412:1255): avc: denied { remount } for pid=22644 comm="syz.9.4233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1462.976256][ T29] audit: type=1400 audit(2000002014.665:1256): avc: denied { unmount } for pid=18798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1463.133496][T22649] overlayfs: failed to clone upperpath [ 1463.798863][ T29] audit: type=1400 audit(2000002015.432:1257): avc: denied { write } for pid=22653 comm="syz.9.4234" name="cgroup.subtree_control" dev="cgroup2" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1464.368086][T22658] SELinux: Context system_u:object_r:initrc_exec_t:s0 is not valid (left unmapped). [ 1464.765111][ T29] audit: type=1400 audit(2000002015.432:1258): avc: denied { open } for pid=22653 comm="syz.9.4234" path="" dev="cgroup2" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1464.842557][ T29] audit: type=1400 audit(2000002015.984:1259): avc: denied { relabelto } for pid=22653 comm="syz.9.4234" name="cgroup.subtree_control" dev="cgroup2" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0" [ 1464.910877][ T29] audit: type=1400 audit(2000002015.984:1260): avc: denied { associate } for pid=22653 comm="syz.9.4234" name="cgroup.subtree_control" dev="cgroup2" ino=642 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:initrc_exec_t:s0" [ 1465.499675][T22674] xt_connbytes: Forcing CT accounting to be enabled [ 1465.507124][T22674] set match dimension is over the limit! [ 1468.582352][ T29] audit: type=1400 audit(2000002019.887:1261): avc: denied { relabelto } for pid=22694 comm="syz.1.4246" name="797" dev="tmpfs" ino=4238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1468.953021][ T29] audit: type=1400 audit(2000002019.887:1262): avc: denied { add_name } for pid=22694 comm="syz.1.4246" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1469.043675][ T29] audit: type=1400 audit(2000002019.887:1263): avc: denied { create } for pid=22694 comm="syz.1.4246" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1469.132921][ T29] audit: type=1400 audit(2000002019.887:1264): avc: denied { associate } for pid=22694 comm="syz.1.4246" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1469.519976][ T29] audit: type=1400 audit(2000002019.906:1265): avc: denied { read append open } for pid=22694 comm="syz.1.4246" path="/797/cpuset.effective_cpus" dev="tmpfs" ino=4243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1470.239138][ T29] audit: type=1400 audit(2000002020.205:1266): avc: denied { create } for pid=22699 comm="syz.6.4247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1470.356861][ T29] audit: type=1400 audit(2000002020.205:1267): avc: denied { write } for pid=22699 comm="syz.6.4247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1470.391829][ T29] audit: type=1400 audit(2000002020.205:1268): avc: denied { nlmsg_write } for pid=22699 comm="syz.6.4247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1471.485857][ T29] audit: type=1400 audit(2000002020.523:1269): avc: denied { remove_name } for pid=5799 comm="syz-executor" name="cpuset.effective_cpus" dev="tmpfs" ino=4243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1471.490720][T18016] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1472.398841][ T29] audit: type=1400 audit(2000002020.523:1270): avc: denied { unlink } for pid=5799 comm="syz-executor" name="cpuset.effective_cpus" dev="tmpfs" ino=4243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1472.462336][T22738] No control pipe specified [ 1473.056694][ T5883] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1473.058683][T18016] usb 2-1: device not accepting address 70, error -71 [ 1473.286028][T22751] random: crng reseeded on system resumption [ 1473.312817][ T5883] usb 10-1: device descriptor read/64, error -71 [ 1474.492910][ T5883] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1474.648594][ T5883] usb 10-1: device descriptor read/64, error -71 [ 1474.802960][ T5883] usb usb10-port1: attempt power cycle [ 1476.259999][ T5883] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1476.480844][T22778] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4261'. [ 1476.490065][ T5883] usb 10-1: device not accepting address 12, error -71 [ 1476.937300][T22787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1477.034480][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1477.034501][ T29] audit: type=1400 audit(2000002027.795:1274): avc: denied { read } for pid=22783 comm="syz.1.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1477.210149][T22779] netdevsim netdevsim7: Direct firmware load for  failed with error -2 [ 1477.233585][T22779] netdevsim netdevsim7: Falling back to sysfs fallback for:  [ 1478.221200][T22792] No control pipe specified [ 1478.260538][T22791] netlink: 15 bytes leftover after parsing attributes in process `syz.9.4266'. [ 1482.708959][ T29] audit: type=1400 audit(2000002033.064:1275): avc: denied { bind } for pid=22829 comm="syz.7.4276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1487.092062][ T29] audit: type=1400 audit(2000002037.229:1276): avc: denied { execute } for pid=22874 comm="syz.1.4286" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1487.314759][T22883] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1491.522116][T22924] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4297'. [ 1491.979777][T19103] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 1492.216244][T19103] usb 10-1: config 4 has an invalid interface number: 3 but max is 0 [ 1492.232621][T19103] usb 10-1: config 4 has an invalid interface number: 3 but max is 0 [ 1492.243694][T22935] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1492.250851][T19103] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1492.267189][T22935] team0: Port device batadv1 added [ 1492.279284][T19103] usb 10-1: config 4 has no interface number 0 [ 1492.289547][T19103] usb 10-1: config 4 interface 3 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1492.324497][T19103] usb 10-1: config 4 interface 3 has no altsetting 0 [ 1492.331227][T19103] usb 10-1: config 4 interface 3 has no altsetting 1 [ 1492.382257][T19103] usb 10-1: New USB device found, idVendor=05ac, idProduct=1204, bcdDevice= 7.6c [ 1492.402703][T19103] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.299273][T19103] apple-mfi-fastcharge 10-1: string descriptor 0 read error: -71 [ 1494.376849][T19103] usb-storage 10-1:4.3: USB Mass Storage device detected [ 1494.565337][T19103] usb-storage 10-1:4.3: Quirks match for vid 05ac pid 1204: 90 [ 1496.016147][T19103] apple-mfi-fastcharge 10-1: USB disconnect, device number 14 [ 1497.442481][T22987] misc userio: Invalid payload size [ 1497.448424][T22987] misc userio: No port type given on /dev/userio [ 1497.465122][T22987] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4311'. [ 1499.799513][ T29] audit: type=1400 audit(2000002048.787:1277): avc: denied { write } for pid=23003 comm="syz.9.4315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1500.604984][T23026] netlink: 'syz.0.4317': attribute type 3 has an invalid length. [ 1500.655626][T23026] overlayfs: failed to clone lowerpath [ 1500.998777][T23027] overlayfs: failed to clone lowerpath [ 1501.809725][T23036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4320'. [ 1501.818757][T23036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4320'. [ 1501.845183][T23036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4320'. [ 1501.854262][T23036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4320'. [ 1501.942974][ T29] audit: type=1326 audit(2000002051.118:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23031 comm="syz.1.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5319bf79 code=0x7ffc0000 [ 1502.212345][ T29] audit: type=1326 audit(2000002051.118:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23031 comm="syz.1.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5319bf79 code=0x7ffc0000 [ 1502.323277][ T29] audit: type=1326 audit(2000002051.127:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23031 comm="syz.1.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ffb5319bf79 code=0x7ffc0000 [ 1502.687864][T23037] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 1503.044227][T23050] fuse: Bad value for 'fd' [ 1503.088128][T23050] fuse: Bad value for 'user_id' [ 1503.093175][T23050] fuse: Bad value for 'user_id' [ 1503.515068][T23055] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4323'. [ 1503.632647][T23057] overlayfs: failed to clone lowerpath [ 1504.659846][T23057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4324'. [ 1504.705541][ T29] audit: type=1400 audit(2000002053.710:1281): avc: denied { map } for pid=23064 comm="syz.7.4326" path="socket:[85463]" dev="sockfs" ino=85463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1504.738002][T23057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4324'. [ 1504.832057][ T29] audit: type=1400 audit(2000002053.710:1282): avc: denied { read accept } for pid=23064 comm="syz.7.4326" path="socket:[85463]" dev="sockfs" ino=85463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1504.952212][T23068] netlink: 35 bytes leftover after parsing attributes in process `syz.7.4326'. [ 1505.622339][T23076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1505.779328][T23073] vivid-007: disconnect [ 1506.323422][T23067] vivid-007: reconnect [ 1508.676449][T23115] netlink: 'syz.1.4335': attribute type 11 has an invalid length. [ 1508.688024][T23115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4335'. [ 1510.302222][T23133] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4339'. [ 1510.311296][T23133] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4339'. [ 1510.732268][ T29] audit: type=1404 audit(2000002059.354:1283): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 1510.804235][ T29] audit: type=1400 audit(2000002059.401:1284): avc: denied { create } for pid=23126 comm="syz.9.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1510.838563][ T29] audit: type=1400 audit(2000002059.410:1285): avc: denied { connect } for pid=23126 comm="syz.9.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=0 [ 1510.951052][ T29] audit: type=1400 audit(2000002059.410:1286): avc: denied { write } for pid=23126 comm="syz.9.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 1511.123549][ T29] audit: type=1400 audit(2000002059.419:1287): avc: denied { write } for pid=23126 comm="syz.9.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 1511.275726][ T29] audit: type=1400 audit(2000002059.494:1288): avc: denied { create } for pid=23137 comm="syz.0.4341" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 1511.443786][ T29] audit: type=1400 audit(2000002059.522:1289): avc: denied { mount } for pid=23135 comm="syz.1.4340" name="/" dev="ramfs" ino=85579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 1511.562973][T23152] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1511.585120][ T29] audit: type=1400 audit(2000002059.616:1290): avc: denied { read write } for pid=18798 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1511.739740][ T29] audit: type=1400 audit(2000002059.625:1291): avc: denied { read } for pid=23135 comm="syz.1.4340" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1511.772799][ T29] audit: type=1400 audit(2000002059.625:1292): avc: denied { prog_load } for pid=23135 comm="syz.1.4340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1513.698196][T23180] netlink: 'syz.7.4352': attribute type 3 has an invalid length. [ 1513.737330][T23180] netlink: 'syz.7.4352': attribute type 3 has an invalid length. [ 1513.763968][T23181] Cannot find add_set index 2 as target [ 1515.287511][ T5917] libceph: connect (1)[c::]:6789 error -101 [ 1515.299872][T23200] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1515.309728][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 1515.636257][ T5917] libceph: connect (1)[c::]:6789 error -101 [ 1515.657879][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 1516.060159][T23213] IPv6: NLM_F_CREATE should be specified when creating new route [ 1516.075708][T23197] ceph: No mds server is up or the cluster is laggy [ 1516.153191][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 1516.153211][ T29] audit: type=1400 audit(2000002064.436:1387): avc: denied { read } for pid=23212 comm="syz.9.4362" dev="nsfs" ino=4026533873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 1516.298173][ T29] audit: type=1400 audit(2000002064.557:1388): avc: denied { prog_load } for pid=23215 comm="syz.7.4363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1516.345465][ T29] audit: type=1400 audit(2000002064.567:1389): avc: denied { execmem } for pid=23215 comm="syz.7.4363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1516.401361][ T29] audit: type=1400 audit(2000002064.651:1390): avc: denied { relabelfrom } for pid=23217 comm="syz.1.4364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=0 [ 1516.482419][ T29] audit: type=1400 audit(2000002064.707:1391): avc: denied { bpf } for pid=23217 comm="syz.1.4364" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 1516.597846][ T29] audit: type=1400 audit(2000002064.726:1392): avc: denied { read write } for pid=17091 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1516.623476][ T29] audit: type=1400 audit(2000002064.726:1393): avc: denied { prog_load } for pid=23217 comm="syz.1.4364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1516.643359][ T29] audit: type=1400 audit(2000002064.782:1394): avc: denied { create } for pid=23217 comm="syz.1.4364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 1516.663318][ T29] audit: type=1400 audit(2000002064.782:1395): avc: denied { read write } for pid=23217 comm="syz.1.4364" name="virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1516.687461][ T29] audit: type=1400 audit(2000002064.782:1396): avc: denied { read } for pid=23217 comm="syz.1.4364" dev="nsfs" ino=4026533085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 1516.695363][ T5917] IPVS: starting estimator thread 0... [ 1516.856032][T23224] IPVS: using max 62 ests per chain, 148800 per kthread [ 1517.584330][T23247] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1518.290558][T23257] netlink: 'syz.7.4376': attribute type 12 has an invalid length. [ 1518.301437][T23257] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4376'. [ 1521.660867][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 1521.660883][ T29] audit: type=1400 audit(2000002069.583:1496): avc: denied { read write } for pid=17091 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1521.796898][ T29] audit: type=1400 audit(2000002069.714:1497): avc: denied { read write } for pid=23287 comm="syz.6.4386" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 1521.857190][T23290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4385'. [ 1521.901757][ T29] audit: type=1400 audit(2000002069.714:1498): avc: denied { read } for pid=23288 comm="syz.1.4385" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 1521.925618][T23291] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1521.975258][ T29] audit: type=1400 audit(2000002069.752:1499): avc: denied { read } for pid=23288 comm="syz.1.4385" dev="nsfs" ino=4026533085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 1522.042854][ T29] audit: type=1400 audit(2000002069.761:1500): avc: denied { create } for pid=23288 comm="syz.1.4385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1522.088579][ T29] audit: type=1400 audit(2000002069.770:1501): avc: denied { execmem } for pid=23287 comm="syz.6.4386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1522.134379][ T29] audit: type=1400 audit(2000002069.770:1502): avc: denied { read } for pid=23288 comm="syz.1.4385" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1522.183578][ T29] audit: type=1400 audit(2000002069.770:1503): avc: denied { read write } for pid=23288 comm="syz.1.4385" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 1522.262235][ T29] audit: type=1400 audit(2000002069.770:1504): avc: denied { read append } for pid=23288 comm="syz.1.4385" name="demux0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 1522.295649][T23298] netlink: 'syz.1.4387': attribute type 10 has an invalid length. [ 1522.307170][T23298] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.460427][ T29] audit: type=1400 audit(2000002069.920:1505): avc: denied { read } for pid=23287 comm="syz.6.4386" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=0 [ 1522.527664][T23298] bond0: (slave team0): Enslaving as an active interface with an up link [ 1523.717805][T23322] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1524.173614][T23324] netlink: 'syz.7.4395': attribute type 10 has an invalid length. [ 1524.197557][T23324] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4395'. [ 1524.233366][T23324] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1524.643070][T23339] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1526.869909][T23366] xt_TCPMSS: Only works on TCP SYN packets [ 1527.046528][T23366] sit1: entered allmulticast mode [ 1527.138216][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 1527.138239][ T29] audit: type=1400 audit(2000002074.693:1596): avc: denied { create } for pid=23361 comm="syz.7.4407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 1527.173135][T23374] x_tables: duplicate underflow at hook 1 [ 1527.187423][T23374] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4408'. [ 1527.196484][ T29] audit: type=1400 audit(2000002074.740:1597): avc: denied { create } for pid=23369 comm="syz.9.4408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 1527.252117][ T29] audit: type=1400 audit(2000002074.749:1598): avc: denied { bpf } for pid=23367 comm="syz.1.4409" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 1527.297197][ T29] audit: type=1400 audit(2000002074.749:1599): avc: denied { create } for pid=23367 comm="syz.1.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1527.362026][ T29] audit: type=1400 audit(2000002074.749:1600): avc: denied { create } for pid=23367 comm="syz.1.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1527.405843][ T29] audit: type=1400 audit(2000002074.749:1601): avc: denied { prog_load } for pid=23367 comm="syz.1.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1527.446933][ T29] audit: type=1400 audit(2000002074.749:1602): avc: denied { prog_load } for pid=23367 comm="syz.1.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1527.502626][ T29] audit: type=1400 audit(2000002074.759:1603): avc: denied { read } for pid=23369 comm="syz.9.4408" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=0 [ 1527.564591][ T29] audit: type=1400 audit(2000002074.852:1604): avc: denied { create } for pid=23367 comm="syz.1.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 1527.590379][ T29] audit: type=1400 audit(2000002074.852:1605): avc: denied { create } for pid=23367 comm="syz.1.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 1528.292371][T23374] vlan2: entered allmulticast mode [ 1528.298689][T23374] macsec0: entered allmulticast mode [ 1528.316755][T23374] veth1_macvtap: entered allmulticast mode [ 1531.899725][T23442] netlink: 'syz.1.4425': attribute type 4 has an invalid length. [ 1531.940230][T23442] netlink: 'syz.1.4425': attribute type 4 has an invalid length. [ 1532.273860][T10500] libceph: connect (1)[c::]:6789 error -13 [ 1532.305771][T10500] libceph: mon0 (1)[c::]:6789 connect error [ 1532.353792][T10500] libceph: connect (1)[c::]:6789 error -13 [ 1532.360355][T10500] libceph: mon0 (1)[c::]:6789 connect error [ 1532.379368][T23452] ceph: No mds server is up or the cluster is laggy [ 1532.631802][T23439] block device autoloading is deprecated and will be removed. [ 1532.646830][T23459] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4430'. [ 1532.757825][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 1532.757838][ T29] audit: type=1400 audit(2000002079.972:1687): avc: denied { prog_load } for pid=23460 comm="syz.7.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1532.820221][ T29] audit: type=1400 audit(2000002080.000:1688): avc: denied { create } for pid=23460 comm="syz.7.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 1532.881436][ T29] audit: type=1400 audit(2000002080.009:1689): avc: denied { read write } for pid=17091 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1532.952270][ T29] audit: type=1400 audit(2000002080.028:1690): avc: denied { create } for pid=23444 comm="syz.9.4427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1533.043878][ T29] audit: type=1400 audit(2000002080.065:1691): avc: denied { create } for pid=23463 comm="syz.6.4432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 1533.142202][ T29] audit: type=1400 audit(2000002080.075:1692): avc: denied { create } for pid=23460 comm="syz.7.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 1533.240983][ T29] audit: type=1400 audit(2000002080.075:1693): avc: denied { create } for pid=23460 comm="syz.7.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 1533.312994][ T29] audit: type=1400 audit(2000002080.075:1694): avc: denied { bpf } for pid=23460 comm="syz.7.4431" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 1533.390233][ T29] audit: type=1400 audit(2000002080.168:1695): avc: denied { create } for pid=23463 comm="syz.6.4432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1533.468993][ T29] audit: type=1400 audit(2000002080.187:1696): avc: denied { read write } for pid=23463 comm="syz.6.4432" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 1534.317519][T23482] sp0: Synchronizing with TNC [ 1534.358772][T23482] netlink: 15 bytes leftover after parsing attributes in process `syz.6.4436'. [ 1534.393415][T23482] netlink: 15 bytes leftover after parsing attributes in process `syz.6.4436'. [ 1534.433011][T23482] netlink: 15 bytes leftover after parsing attributes in process `syz.6.4436'. [ 1534.473674][T23482] netlink: 15 bytes leftover after parsing attributes in process `syz.6.4436'. [ 1534.514899][T23482] netlink: 15 bytes leftover after parsing attributes in process `syz.6.4436'. [ 1534.552947][T23482] netlink: 15 bytes leftover after parsing attributes in process `syz.6.4436'. [ 1534.581124][T23482] netlink: 15 bytes leftover after parsing attributes in process `syz.6.4436'. [ 1534.606452][T23482] netlink: 15 bytes leftover after parsing attributes in process `syz.6.4436'. [ 1534.628819][T23482] netlink: 15 bytes leftover after parsing attributes in process `syz.6.4436'. [ 1535.641717][T23494] vxcan1: entered promiscuous mode [ 1535.687338][T23494] team0: Device vxcan1 is of different type [ 1538.029390][T23525] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1538.108159][ T29] kauditd_printk_skb: 5739 callbacks suppressed [ 1538.108176][ T29] audit: type=1400 audit(2000002084.969:7436): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1538.142110][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1538.148808][ T5468] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 1538.156748][ T5468] audit: backlog limit exceeded [ 1538.161766][T23529] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1538.161788][T23529] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 1538.161801][T23529] audit: backlog limit exceeded [ 1538.171068][T23530] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1538.176932][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1538.195485][ T5468] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 1538.501019][T23538] __nla_validate_parse: 163 callbacks suppressed [ 1538.501039][T23538] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4454'. [ 1540.947209][T23581] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1542.564781][T23596] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1542.808999][T23600] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1543.461718][ T29] kauditd_printk_skb: 15286 callbacks suppressed [ 1543.461732][ T29] audit: type=1400 audit(2000002089.986:19291): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1543.506972][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1543.522466][ T5468] audit: audit_lost=1152 audit_rate_limit=0 audit_backlog_limit=64 [ 1543.552911][ T5468] audit: backlog limit exceeded [ 1543.559461][T23607] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1543.566272][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1543.578826][ T29] audit: type=1400 audit(2000002089.995:19292): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1543.601631][T23607] audit: audit_lost=1153 audit_rate_limit=0 audit_backlog_limit=64 [ 1543.626925][ T5468] audit: audit_lost=1154 audit_rate_limit=0 audit_backlog_limit=64 [ 1543.642682][T23607] audit: backlog limit exceeded [ 1543.881787][ T5917] Process accounting resumed [ 1544.658227][T23626] netlink: 'syz.9.4476': attribute type 5 has an invalid length. [ 1545.295929][T23632] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1546.943553][T23651] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4484'. [ 1547.959143][T23659] serio: Serial port ttyS3 [ 1548.812379][ T29] kauditd_printk_skb: 15919 callbacks suppressed [ 1548.812396][ T29] audit: type=1400 audit(2000002094.993:28374): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1548.894619][ T29] audit: type=1400 audit(2000002095.030:28375): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1548.948309][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1548.955906][ T5468] audit: audit_lost=3434 audit_rate_limit=0 audit_backlog_limit=64 [ 1548.964918][ T29] audit: type=1400 audit(2000002095.030:28376): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1548.965131][ T5468] audit: backlog limit exceeded [ 1549.026507][ T29] audit: type=1400 audit(2000002095.030:28377): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1549.093137][ T5468] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1549.110733][ T5468] audit: audit_lost=3435 audit_rate_limit=0 audit_backlog_limit=64 [ 1549.127278][T23677] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1549.343405][T23682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4495'. [ 1549.365909][T23682] netlink: 'syz.1.4495': attribute type 5 has an invalid length. [ 1549.384989][T23682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4495'. [ 1549.419180][T23682] geneve3: entered promiscuous mode [ 1549.426686][T23682] geneve3: entered allmulticast mode [ 1549.442032][ T1158] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1549.467871][ T1158] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1549.483444][ T1158] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1549.502684][ T1158] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1550.525204][T23693] SET target dimension over the limit! [ 1551.225444][ T5917] Process accounting resumed [ 1552.322396][T23721] geneve3: left promiscuous mode [ 1554.168897][ T29] kauditd_printk_skb: 10051 callbacks suppressed [ 1554.168914][ T29] audit: type=1400 audit(2000002100.000:36290): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1554.204311][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1554.211009][ T5468] audit: audit_lost=4149 audit_rate_limit=0 audit_backlog_limit=64 [ 1554.229032][ T5468] audit: backlog limit exceeded [ 1554.234808][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1554.241908][ T5468] audit: audit_lost=4150 audit_rate_limit=0 audit_backlog_limit=64 [ 1554.271476][ T5468] audit: backlog limit exceeded [ 1554.271967][ T29] audit: type=1400 audit(2000002100.000:36291): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1554.281603][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1554.346683][T23744] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1555.658129][T23760] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1555.826263][T23762] SET target dimension over the limit! [ 1559.386688][T23787] Process accounting resumed [ 1559.520772][ T29] kauditd_printk_skb: 10384 callbacks suppressed [ 1559.520784][ T29] audit: type=1400 audit(2000002105.026:45937): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1559.586973][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1559.608009][ T5468] audit: audit_lost=4398 audit_rate_limit=0 audit_backlog_limit=64 [ 1559.631820][ T29] audit: type=1400 audit(2000002105.044:45938): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1559.659937][ T5468] audit: backlog limit exceeded [ 1559.677572][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1559.714273][ T5468] audit: audit_lost=4399 audit_rate_limit=0 audit_backlog_limit=64 [ 1559.740557][ T29] audit: type=1400 audit(2000002105.044:45939): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1559.762719][ T5468] audit: backlog limit exceeded [ 1559.776427][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1560.824660][T23826] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1560.831190][T23826] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1560.877351][T23826] vhci_hcd vhci_hcd.0: Device attached [ 1560.902221][T23831] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(9) [ 1560.908759][T23831] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1560.950483][T23831] vhci_hcd vhci_hcd.0: Device attached [ 1560.966368][T23826] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(8) [ 1560.972926][T23826] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1561.042655][T23831] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(15) [ 1561.049292][T23831] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1561.072110][T23831] vhci_hcd vhci_hcd.0: Device attached [ 1561.085013][T23826] vhci_hcd vhci_hcd.0: Device attached [ 1561.098920][T23831] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(17) [ 1561.105534][T23831] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1561.132182][T12388] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1561.142957][T23831] vhci_hcd vhci_hcd.0: Device attached [ 1561.152290][T23842] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1561.202598][T23826] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1561.229328][T23826] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1561.259208][T23826] vhci_hcd vhci_hcd.0: port 0 already used [ 1561.301684][T23840] vhci_hcd: connection closed [ 1561.301971][ T1055] vhci_hcd vhci_hcd.6: stop threads [ 1561.313474][ T1055] vhci_hcd vhci_hcd.6: release socket [ 1561.320416][T23829] vhci_hcd: connection reset by peer [ 1561.322774][T23835] vhci_hcd: connection closed [ 1561.327421][T23833] vhci_hcd: connection closed [ 1561.332981][T23838] vhci_hcd: connection closed [ 1561.360942][ T1055] vhci_hcd vhci_hcd.6: disconnect device [ 1561.425445][ T1055] vhci_hcd vhci_hcd.6: stop threads [ 1561.464264][ T1055] vhci_hcd vhci_hcd.6: release socket [ 1561.488816][ T1055] vhci_hcd vhci_hcd.6: disconnect device [ 1561.527028][ T1055] vhci_hcd vhci_hcd.6: stop threads [ 1561.561610][ T1055] vhci_hcd vhci_hcd.6: release socket [ 1561.602410][ T1055] vhci_hcd vhci_hcd.6: disconnect device [ 1561.630072][ T1055] vhci_hcd vhci_hcd.6: stop threads [ 1561.667789][ T1055] vhci_hcd vhci_hcd.6: release socket [ 1561.712426][ T1055] vhci_hcd vhci_hcd.6: disconnect device [ 1561.760698][ T1055] vhci_hcd vhci_hcd.6: stop threads [ 1561.776981][ T1055] vhci_hcd vhci_hcd.6: release socket [ 1561.816458][ T1055] vhci_hcd vhci_hcd.6: disconnect device [ 1562.087903][T23850] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4550'. [ 1562.597338][T18016] Process accounting resumed [ 1563.265239][T23868] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1563.507682][T23872] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 1563.553255][T23872] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1564.872485][ T29] kauditd_printk_skb: 11411 callbacks suppressed [ 1564.872502][ T29] audit: type=1400 audit(2000002110.033:53869): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1564.906781][ T29] audit: type=1400 audit(2000002110.033:53870): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1564.936590][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1564.945520][ T29] audit: type=1400 audit(2000002110.033:53871): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1564.966798][ T5468] audit: audit_lost=5561 audit_rate_limit=0 audit_backlog_limit=64 [ 1564.982746][ T5468] audit: backlog limit exceeded [ 1564.996694][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1565.011848][ T5468] audit: audit_lost=5562 audit_rate_limit=0 audit_backlog_limit=64 [ 1565.019804][ T29] audit: type=1400 audit(2000002110.033:53872): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1565.051470][ T5468] audit: backlog limit exceeded [ 1565.880294][T23893] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1566.656574][T12388] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1566.786248][T23902] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4556'. [ 1567.780439][ T5917] libceph: connect (1)[c::]:6789 error -13 [ 1567.801325][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 1568.120294][ T5917] libceph: connect (1)[c::]:6789 error -13 [ 1568.147145][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 1568.614482][T23916] ceph: No mds server is up or the cluster is laggy [ 1570.225791][ T29] kauditd_printk_skb: 9910 callbacks suppressed [ 1570.225807][ T29] audit: type=1400 audit(2000002115.040:63654): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1570.286337][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1570.312943][ T5468] audit: audit_lost=5606 audit_rate_limit=0 audit_backlog_limit=64 [ 1570.324826][T23954] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1570.331407][T23954] audit: audit_lost=5607 audit_rate_limit=0 audit_backlog_limit=64 [ 1570.342751][ T5468] audit: backlog limit exceeded [ 1570.353659][ T29] audit: type=1400 audit(2000002115.068:63655): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1570.375330][T23954] audit: backlog limit exceeded [ 1570.375606][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1570.400947][ T5468] audit: audit_lost=5608 audit_rate_limit=0 audit_backlog_limit=64 [ 1570.512561][T23950] wireguard0: entered promiscuous mode [ 1570.521690][T23950] wireguard0: entered allmulticast mode [ 1572.696612][T24003] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1572.725074][T24003] block device autoloading is deprecated and will be removed. [ 1572.753475][T24000] futex_wake_op: syz.6.4580 tries to shift op by 144; fix this program [ 1572.905822][T24010] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1574.094870][T24038] netdevsim netdevsim6: Direct firmware load for . [ 1574.094870][T24038] failed with error -2 [ 1574.217360][T24043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4602'. [ 1574.320832][T24049] No such timeout policy "syz1" [ 1575.579013][ T29] kauditd_printk_skb: 10043 callbacks suppressed [ 1575.579031][ T29] audit: type=1400 audit(2000002120.038:73299): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1575.614584][ T29] audit: type=1400 audit(2000002120.047:73300): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1575.636249][ T29] audit: type=1400 audit(2000002120.047:73301): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1575.692157][ T29] audit: type=1400 audit(2000002120.047:73302): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1575.727198][T24087] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1575.731450][ T5468] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1575.743082][T24087] audit: audit_lost=5742 audit_rate_limit=0 audit_backlog_limit=64 [ 1575.751530][ T29] audit: type=1400 audit(2000002120.047:73303): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1575.760888][ T5468] audit: audit_lost=5743 audit_rate_limit=0 audit_backlog_limit=64 [ 1575.777225][T24087] audit: backlog limit exceeded [ 1580.147556][T24226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4679'. [ 1580.939503][ T29] kauditd_printk_skb: 9352 callbacks suppressed [ 1580.939519][ T29] audit: type=1400 audit(2000002125.063:82109): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1580.983247][ T29] audit: type=1400 audit(2000002125.063:82110): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1581.016550][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1581.024551][T24245] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1581.025094][ T29] audit: type=1400 audit(2000002125.063:82111): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1581.053519][ T29] audit: type=1400 audit(2000002125.063:82112): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1581.054684][ T5468] audit: audit_lost=5926 audit_rate_limit=0 audit_backlog_limit=64 [ 1581.083948][T24245] audit: audit_lost=5927 audit_rate_limit=0 audit_backlog_limit=64 [ 1581.085814][ T29] audit: type=1400 audit(2000002125.063:82113): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1581.113682][T24245] audit: backlog limit exceeded [ 1585.858097][T24344] mkiss: ax0: crc mode is auto. [ 1586.033390][T24352] xt_hashlimit: size too large, truncated to 1048576 [ 1586.285504][ T29] kauditd_printk_skb: 15101 callbacks suppressed [ 1586.285520][ T29] audit: type=1400 audit(2000002130.061:92309): avc: denied { read write } for pid=24364 comm="syz.1.4733" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1586.352879][ T29] audit: type=1400 audit(2000002130.070:92310): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1586.388839][ T29] audit: type=1400 audit(2000002130.070:92311): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1586.445805][ T29] audit: type=1400 audit(2000002130.070:92312): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1586.446761][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1586.478854][T17091] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1586.479975][T18798] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1586.507236][T17091] audit: audit_lost=7563 audit_rate_limit=0 audit_backlog_limit=64 [ 1586.529836][T17091] audit: backlog limit exceeded [ 1586.548538][ T29] audit: type=1400 audit(2000002130.070:92313): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1586.698084][T24373] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4736'. [ 1589.025842][T24431] sp0: Synchronizing with TNC [ 1589.072024][T24431] netlink: 15 bytes leftover after parsing attributes in process `syz.9.4759'. [ 1589.102455][T24431] netlink: 15 bytes leftover after parsing attributes in process `syz.9.4759'. [ 1589.135465][T24431] netlink: 15 bytes leftover after parsing attributes in process `syz.9.4759'. [ 1589.200306][T24431] netlink: 15 bytes leftover after parsing attributes in process `syz.9.4759'. [ 1589.222468][T24431] netlink: 15 bytes leftover after parsing attributes in process `syz.9.4759'. [ 1589.259620][T24431] netlink: 15 bytes leftover after parsing attributes in process `syz.9.4759'. [ 1589.303802][T24431] netlink: 15 bytes leftover after parsing attributes in process `syz.9.4759'. [ 1589.358464][T24431] netlink: 15 bytes leftover after parsing attributes in process `syz.9.4759'. [ 1589.398175][T24431] netlink: 15 bytes leftover after parsing attributes in process `syz.9.4759'. [ 1591.655203][ T29] kauditd_printk_skb: 9035 callbacks suppressed [ 1591.655219][ T29] audit: type=1400 audit(2000002135.087:100634): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1591.698079][ T29] audit: type=1400 audit(2000002135.087:100635): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1591.721822][ T29] audit: type=1400 audit(2000002135.087:100636): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1591.781361][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1591.797966][ T29] audit: type=1400 audit(2000002135.087:100637): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1591.819753][ T5468] audit: audit_lost=7803 audit_rate_limit=0 audit_backlog_limit=64 [ 1591.827669][ T5468] audit: backlog limit exceeded [ 1591.844511][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1591.862482][ T29] audit: type=1400 audit(2000002135.087:100638): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1591.887491][ T5468] audit: audit_lost=7804 audit_rate_limit=0 audit_backlog_limit=64 [ 1591.969853][T24456] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1593.995718][T24497] netlink: 'syz.7.4785': attribute type 10 has an invalid length. [ 1594.008672][T24497] __nla_validate_parse: 155 callbacks suppressed [ 1594.008687][T24497] netlink: 55 bytes leftover after parsing attributes in process `syz.7.4785'. [ 1594.794200][T22370] Bluetooth: (null): Invalid header checksum [ 1595.411103][T24527] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1597.003443][ T29] kauditd_printk_skb: 23714 callbacks suppressed [ 1597.003460][ T29] audit: type=1400 audit(2000002140.103:112127): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1597.017698][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1597.032794][T24566] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1597.038181][ T5468] audit: audit_lost=11880 audit_rate_limit=0 audit_backlog_limit=64 [ 1597.052393][ T5468] audit: backlog limit exceeded [ 1597.063332][T24566] audit: audit_lost=11881 audit_rate_limit=0 audit_backlog_limit=64 [ 1597.082939][T24566] audit: backlog limit exceeded [ 1597.085574][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1597.103854][ T29] audit: type=1400 audit(2000002140.103:112128): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1597.105130][ T5468] audit: audit_lost=11882 audit_rate_limit=0 audit_backlog_limit=64 [ 1597.288743][T24576] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1599.699385][T24654] bond0: (slave team0): Releasing backup interface [ 1599.738538][T24654] bond0: (slave bond_slave_0): Releasing backup interface [ 1599.765489][T24654] team0: Port device team_slave_1 removed [ 1599.776790][T24654] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1599.879815][T24657] ip6gre1: entered allmulticast mode [ 1599.907919][T24657] team0: Port device ip6gre1 added [ 1602.358967][ T29] kauditd_printk_skb: 12888 callbacks suppressed [ 1602.358986][ T29] audit: type=1400 audit(2000002145.101:125016): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1602.395493][ T29] audit: type=1400 audit(2000002145.110:125017): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1602.422404][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1602.425209][ T29] audit: type=1400 audit(2000002145.110:125018): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1602.441252][T24742] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1602.454834][T18798] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1602.464125][T18798] audit: audit_lost=11883 audit_rate_limit=0 audit_backlog_limit=64 [ 1602.464349][ T5468] audit: audit_lost=11884 audit_rate_limit=0 audit_backlog_limit=64 [ 1602.472188][T18798] audit: backlog limit exceeded [ 1602.488633][T24742] audit: audit_lost=11885 audit_rate_limit=0 audit_backlog_limit=64 [ 1602.917759][T24764] netlink: 'syz.0.4899': attribute type 4 has an invalid length. [ 1604.787553][T14624] Bluetooth: hci3: command 0x1003 tx timeout [ 1604.799910][ T5124] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1607.581905][T24905] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1607.709375][ T29] kauditd_printk_skb: 10842 callbacks suppressed [ 1607.709400][ T29] audit: type=1400 audit(2000002150.108:134170): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1607.746379][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1607.760145][ T5468] audit: audit_lost=12449 audit_rate_limit=0 audit_backlog_limit=64 [ 1607.777684][ T5468] audit: backlog limit exceeded [ 1607.788901][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1607.795860][ T29] audit: type=1400 audit(2000002150.108:134171): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1607.826775][ T5468] audit: audit_lost=12450 audit_rate_limit=0 audit_backlog_limit=64 [ 1607.844471][ T5468] audit: backlog limit exceeded [ 1607.854977][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1607.863965][ T29] audit: type=1400 audit(2000002150.108:134172): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1608.089900][T24914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4958'. [ 1609.388103][T24937] syzkaller0: entered promiscuous mode [ 1609.393645][T24937] syzkaller0: entered allmulticast mode [ 1609.855613][T24941] netlink: 'syz.0.4968': attribute type 39 has an invalid length. [ 1611.356047][T24971] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1613.060878][ T29] kauditd_printk_skb: 10069 callbacks suppressed [ 1613.060896][ T29] audit: type=1400 audit(2000002155.134:142353): avc: denied { prog_load } for pid=25003 comm="syz.9.4991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1613.151794][ T29] audit: type=1400 audit(2000002155.162:142354): avc: denied { map_create } for pid=25003 comm="syz.9.4991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1613.226060][ T29] audit: type=1400 audit(2000002155.162:142355): avc: denied { create } for pid=25003 comm="syz.9.4991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 1613.230068][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1613.264138][T25008] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1613.293736][T17091] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1613.301445][T25008] audit: audit_lost=13081 audit_rate_limit=0 audit_backlog_limit=64 [ 1613.309868][T25014] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1613.316396][T25014] audit: audit_lost=13082 audit_rate_limit=0 audit_backlog_limit=64 [ 1613.336184][T17091] audit: audit_lost=13083 audit_rate_limit=0 audit_backlog_limit=64 [ 1613.406000][T25017] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1614.505829][T25029] syzkaller0: entered promiscuous mode [ 1614.533881][T25029] syzkaller0: entered allmulticast mode [ 1615.011905][T25047] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5005'. [ 1615.047747][T25043] tipc: Resetting bearer [ 1616.429480][T25085] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5022'. [ 1617.297662][T25096] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1618.414423][ T29] kauditd_printk_skb: 4842 callbacks suppressed [ 1618.414434][ T29] audit: type=1400 audit(2000002160.141:147148): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1618.473572][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1618.499794][ T5468] audit: audit_lost=13100 audit_rate_limit=0 audit_backlog_limit=64 [ 1618.531399][ T5468] audit: backlog limit exceeded [ 1618.552351][ T29] audit: type=1400 audit(2000002160.141:147149): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1618.610867][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1618.638862][ T5468] audit: audit_lost=13101 audit_rate_limit=0 audit_backlog_limit=64 [ 1618.662722][ T5468] audit: backlog limit exceeded [ 1618.677815][ T29] audit: type=1400 audit(2000002160.141:147150): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1618.701987][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1620.199746][T25133] netlink: 'syz.0.5040': attribute type 3 has an invalid length. [ 1620.231613][T25133] netlink: 'syz.0.5040': attribute type 3 has an invalid length. [ 1620.321883][T25138] syzkaller0: entered promiscuous mode [ 1620.337163][T25138] syzkaller0: entered allmulticast mode [ 1620.933494][T25152] syzkaller0: entered promiscuous mode [ 1620.958899][T25152] syzkaller0: entered allmulticast mode [ 1621.757541][T25169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1623.772978][ T29] kauditd_printk_skb: 8986 callbacks suppressed [ 1623.772997][ T29] audit: type=1400 audit(2000002164.156:155085): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1623.836242][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1623.850654][ T5468] audit: audit_lost=13453 audit_rate_limit=0 audit_backlog_limit=64 [ 1623.863625][ T5468] audit: backlog limit exceeded [ 1623.870667][T25201] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1623.877587][ T29] audit: type=1400 audit(2000002164.156:155086): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1623.899890][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1623.906663][T25201] audit: audit_lost=13454 audit_rate_limit=0 audit_backlog_limit=64 [ 1623.914761][ T5468] audit: audit_lost=13455 audit_rate_limit=0 audit_backlog_limit=64 [ 1623.925283][T25201] audit: backlog limit exceeded [ 1626.877989][T25247] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5082'. [ 1628.908574][T25274] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5090'. [ 1629.122483][ T29] kauditd_printk_skb: 8492 callbacks suppressed [ 1629.122495][ T29] audit: type=1400 audit(2000002169.163:162336): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1629.265664][ T29] audit: type=1400 audit(2000002169.163:162337): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1629.390917][ T29] audit: type=1400 audit(2000002169.163:162338): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1629.506865][ T29] audit: type=1400 audit(2000002169.163:162339): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1629.633013][ T29] audit: type=1400 audit(2000002169.163:162340): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1629.773932][ T29] audit: type=1400 audit(2000002169.163:162341): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1629.800776][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1629.825534][ T5468] audit: audit_lost=13870 audit_rate_limit=0 audit_backlog_limit=64 [ 1629.889630][ T29] audit: type=1400 audit(2000002169.163:162342): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1629.990058][ T29] audit: type=1400 audit(2000002169.163:162343): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1630.312217][T25285] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5094'. [ 1631.121659][T25295] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1631.134072][T25295] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1632.308624][T25322] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5107'. [ 1632.436792][T25323] netlink: 'syz.1.5106': attribute type 4 has an invalid length. [ 1634.474092][ T29] kauditd_printk_skb: 6959 callbacks suppressed [ 1634.474106][ T29] audit: type=1400 audit(2000002174.170:168240): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1634.528596][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1634.546193][T25353] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1634.563838][T25353] audit: audit_lost=14225 audit_rate_limit=0 audit_backlog_limit=64 [ 1634.574467][ T5468] audit: audit_lost=14226 audit_rate_limit=0 audit_backlog_limit=64 [ 1634.592454][T25354] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1634.606869][T25353] audit: backlog limit exceeded [ 1634.609130][ T5468] audit: backlog limit exceeded [ 1634.619101][T25354] audit: audit_lost=14227 audit_rate_limit=0 audit_backlog_limit=64 [ 1634.633565][ T29] audit: type=1400 audit(2000002174.170:168241): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1637.054120][T25381] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=25381 comm=syz.9.5123 [ 1637.509215][T25385] netlink: 'syz.9.5124': attribute type 4 has an invalid length. [ 1637.972111][T25391] mkiss: ax0: crc mode is auto. [ 1638.927677][T25409] netlink: 'syz.7.5132': attribute type 4 has an invalid length. [ 1639.716712][T25423] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1639.828316][ T29] kauditd_printk_skb: 9538 callbacks suppressed [ 1639.828332][ T29] audit: type=1400 audit(2000002179.187:174248): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1639.881309][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1639.895077][ T5468] audit: audit_lost=15405 audit_rate_limit=0 audit_backlog_limit=64 [ 1639.918238][ T29] audit: type=1400 audit(2000002179.187:174249): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1639.952242][ T29] audit: type=1400 audit(2000002179.187:174250): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1639.981797][ T5468] audit: backlog limit exceeded [ 1640.033333][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1640.050153][ T29] audit: type=1400 audit(2000002179.187:174251): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1640.084216][ T5468] audit: audit_lost=15406 audit_rate_limit=0 audit_backlog_limit=64 [ 1640.092293][ T5468] audit: backlog limit exceeded [ 1640.762895][T25435] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5140'. [ 1642.588744][T25462] SET target dimension over the limit! [ 1645.190579][ T29] kauditd_printk_skb: 6128 callbacks suppressed [ 1645.190596][ T29] audit: type=1400 audit(2000002184.194:179504): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1645.267653][ T29] audit: type=1400 audit(2000002184.203:179505): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1645.303041][ T29] audit: type=1400 audit(2000002184.203:179506): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1645.326117][ T29] audit: type=1400 audit(2000002184.203:179507): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1645.350869][ T29] audit: type=1400 audit(2000002184.203:179508): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1645.372677][ T29] audit: type=1400 audit(2000002184.203:179509): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1645.394265][ T29] audit: type=1400 audit(2000002184.203:179510): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1645.433488][ T29] audit: type=1400 audit(2000002184.203:179511): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1645.501451][ T29] audit: type=1400 audit(2000002184.203:179512): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1645.554735][ T29] audit: type=1400 audit(2000002184.203:179513): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1645.930100][T25503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5158'. [ 1647.669416][T25515] x_tables: duplicate underflow at hook 1 [ 1647.691743][T25515] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5161'. [ 1648.555388][T25530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1648.630981][T25530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1649.021574][T25539] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1649.520994][T25545] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5170'. [ 1650.546603][ T29] kauditd_printk_skb: 7105 callbacks suppressed [ 1650.546621][ T29] audit: type=1400 audit(2000002189.210:186619): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1650.595254][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1650.604464][ T5468] audit: audit_lost=15699 audit_rate_limit=0 audit_backlog_limit=64 [ 1650.614482][T25559] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1650.616800][ T29] audit: type=1400 audit(2000002189.210:186620): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1650.645650][ T5468] audit: backlog limit exceeded [ 1650.652079][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1650.661135][ T5468] audit: audit_lost=15700 audit_rate_limit=0 audit_backlog_limit=64 [ 1650.669200][T25559] audit: audit_lost=15701 audit_rate_limit=0 audit_backlog_limit=64 [ 1650.677743][T25559] audit: backlog limit exceeded [ 1650.960633][T25569] netlink: 'syz.1.5176': attribute type 10 has an invalid length. [ 1653.681851][T25612] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1655.197391][T10500] libceph: connect (1)[c::]:6789 error -101 [ 1655.203711][T10500] libceph: mon0 (1)[c::]:6789 connect error [ 1655.491584][T10500] libceph: connect (1)[c::]:6789 error -101 [ 1655.515981][T10500] libceph: mon0 (1)[c::]:6789 connect error [ 1655.904401][ T29] kauditd_printk_skb: 15141 callbacks suppressed [ 1655.904417][ T29] audit: type=1400 audit(2000002194.227:192545): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1655.944079][ T29] audit: type=1400 audit(2000002194.227:192546): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1656.005268][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1656.009758][T25646] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1656.029441][T25629] ceph: No mds server is up or the cluster is laggy [ 1656.046073][ T29] audit: type=1400 audit(2000002194.227:192547): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1656.087065][T25646] audit: audit_lost=18774 audit_rate_limit=0 audit_backlog_limit=64 [ 1656.087397][ T5468] audit: audit_lost=18775 audit_rate_limit=0 audit_backlog_limit=64 [ 1656.103497][T25646] audit: backlog limit exceeded [ 1656.108430][T25646] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1656.115209][T25646] audit: audit_lost=18776 audit_rate_limit=0 audit_backlog_limit=64 [ 1656.121457][T19103] libceph: connect (1)[c::]:6789 error -101 [ 1656.129234][T19103] libceph: mon0 (1)[c::]:6789 connect error [ 1656.340359][T25654] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5201'. [ 1656.643462][T25659] xt_socket: unknown flags 0x4 [ 1657.057269][T19103] Process accounting resumed [ 1657.368945][T25677] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5210'. [ 1659.467769][T25707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5219'. [ 1661.250027][ T29] kauditd_printk_skb: 19286 callbacks suppressed [ 1661.250046][ T29] audit: type=1400 audit(2000002198.235:203564): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1661.307628][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1661.314894][ T5468] audit: audit_lost=21533 audit_rate_limit=0 audit_backlog_limit=64 [ 1661.323110][ T5468] audit: backlog limit exceeded [ 1661.327374][ T29] audit: type=1400 audit(2000002198.235:203565): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1661.354438][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1661.373123][T25728] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1661.381092][ T5468] audit: audit_lost=21534 audit_rate_limit=0 audit_backlog_limit=64 [ 1661.389292][ T29] audit: type=1400 audit(2000002198.235:203566): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1661.389685][T25728] audit: audit_lost=21535 audit_rate_limit=0 audit_backlog_limit=64 [ 1662.929237][T25750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5231'. [ 1663.937859][T25770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5237'. [ 1666.608188][ T29] kauditd_printk_skb: 5751 callbacks suppressed [ 1666.608200][ T29] audit: type=1400 audit(2000000001.459:208404): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1666.651361][ T29] audit: type=1400 audit(2000000001.459:208405): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1666.673296][ T29] audit: type=1400 audit(2000000001.459:208406): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1666.697821][ T29] audit: type=1400 audit(2000000001.459:208407): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1666.776411][ T29] audit: type=1400 audit(2000000001.459:208408): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1666.824596][ T29] audit: type=1400 audit(2000000001.459:208409): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1666.871881][ T29] audit: type=1400 audit(2000000001.459:208410): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1666.917758][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1666.925842][ T29] audit: type=1400 audit(2000000001.459:208411): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1666.956533][ T5468] audit: audit_lost=21840 audit_rate_limit=0 audit_backlog_limit=64 [ 1667.267866][T25821] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1667.699422][T25828] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5252'. [ 1668.956135][T25851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5261'. [ 1669.017434][T25851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5261'. [ 1669.817005][T25866] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5268'. [ 1670.066672][ T5124] Bluetooth: hci5: unexpected event for opcode 0x0c03 [ 1671.173802][T25882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5276'. [ 1671.889067][T25902] serio: Serial port ttyS3 [ 1671.963243][ T29] kauditd_printk_skb: 7096 callbacks suppressed [ 1671.963261][ T29] audit: type=1400 audit(2000000006.473:215456): avc: denied { prog_load } for pid=25899 comm="syz.6.5282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1672.009398][ T29] audit: type=1400 audit(2000000006.473:215457): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1672.073440][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1672.086897][ T29] audit: type=1400 audit(2000000006.473:215458): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1672.113429][ T5468] audit: audit_lost=21858 audit_rate_limit=0 audit_backlog_limit=64 [ 1672.135892][ T5468] audit: backlog limit exceeded [ 1672.147689][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1672.162113][ T29] audit: type=1400 audit(2000000006.473:215459): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1672.211654][ T5468] audit: audit_lost=21859 audit_rate_limit=0 audit_backlog_limit=64 [ 1672.239330][ T5468] audit: backlog limit exceeded [ 1672.407033][T25908] vlan2: entered allmulticast mode [ 1672.442886][T25908] veth0_to_bond: entered allmulticast mode [ 1673.905763][T25951] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1675.010072][T25960] netlink: 'syz.0.5303': attribute type 12 has an invalid length. [ 1675.613650][T25971] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5308'. [ 1676.136719][T25983] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5314'. [ 1677.314890][ T29] kauditd_printk_skb: 8956 callbacks suppressed [ 1677.314907][ T29] audit: type=1400 audit(2000000011.478:223810): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1677.372087][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1677.390365][ T5468] audit: audit_lost=22062 audit_rate_limit=0 audit_backlog_limit=64 [ 1677.406448][ T5468] audit: backlog limit exceeded [ 1677.417718][T26014] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1677.424528][ T29] audit: type=1400 audit(2000000011.506:223811): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1677.454355][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1677.461257][T26014] audit: audit_lost=22063 audit_rate_limit=0 audit_backlog_limit=64 [ 1677.471916][T26012] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1677.478595][T26012] audit: audit_lost=22064 audit_rate_limit=0 audit_backlog_limit=64 [ 1679.009503][T26009] Process accounting resumed [ 1682.050051][ T5124] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 1682.671248][ T29] kauditd_printk_skb: 12276 callbacks suppressed [ 1682.671267][ T29] audit: type=1400 audit(2000000016.482:234077): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1682.730863][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1682.749006][ T5468] audit: audit_lost=22735 audit_rate_limit=0 audit_backlog_limit=64 [ 1682.758640][ T29] audit: type=1400 audit(2000000016.491:234078): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1682.780172][ T5468] audit: backlog limit exceeded [ 1682.785792][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1682.796261][ T5468] audit: audit_lost=22736 audit_rate_limit=0 audit_backlog_limit=64 [ 1682.807770][ T29] audit: type=1400 audit(2000000016.491:234079): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1682.830709][ T5468] audit: backlog limit exceeded [ 1682.838593][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1682.866411][T26134] netlink: 'syz.6.5372': attribute type 12 has an invalid length. [ 1683.192668][T26145] geneve3: entered promiscuous mode [ 1683.211061][T26145] geneve3: entered allmulticast mode [ 1683.234338][T22370] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 1683.265678][T22370] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 1683.314601][T22370] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 1683.348837][T22370] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 1684.211431][T26165] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5389'. [ 1686.139282][T26233] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1687.940255][ T29] kauditd_printk_skb: 12417 callbacks suppressed [ 1687.940271][ T29] audit: type=1400 audit(2000000789.503:242961): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1688.029144][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1688.042912][ T29] audit: type=1400 audit(2000000789.503:242962): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1688.069705][ T5468] audit: audit_lost=23916 audit_rate_limit=0 audit_backlog_limit=64 [ 1688.099340][ T5468] audit: backlog limit exceeded [ 1688.113671][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1688.126286][ T29] audit: type=1400 audit(2000000789.503:242963): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1688.158146][ T5468] audit: audit_lost=23917 audit_rate_limit=0 audit_backlog_limit=64 [ 1688.175848][ T5468] audit: backlog limit exceeded [ 1688.186134][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1689.776346][T26347] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1691.024157][T26398] sp0: Synchronizing with TNC [ 1691.321523][T26406] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1692.369189][ T5917] libceph: connect (1)[c::]:6789 error -13 [ 1692.375184][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 1692.400973][T26438] ceph: No mds server is up or the cluster is laggy [ 1692.711491][ T29] kauditd_printk_skb: 8927 callbacks suppressed [ 1692.711507][ T29] audit: type=1400 audit(2000000794.500:251472): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1692.727462][ T5468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1692.756379][T26455] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1692.759009][ T29] audit: type=1400 audit(2000000794.500:251473): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1692.798040][T26455] audit: audit_lost=24058 audit_rate_limit=0 audit_backlog_limit=64 [ 1692.807683][ T5468] audit: audit_lost=24059 audit_rate_limit=0 audit_backlog_limit=64 [ 1692.815711][ T5468] audit: backlog limit exceeded [ 1692.823207][T26455] audit: backlog limit exceeded [ 1692.853986][ T29] audit: type=1400 audit(2000000794.500:251474): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1692.883833][T26458] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1693.259252][T26475] erspan0: entered promiscuous mode [ 1695.318231][T26533] xt_socket: unknown flags 0x4 [ 1695.683809][T26538] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1696.850985][T26564] ================================================================== [ 1696.859074][T26564] BUG: KASAN: slab-use-after-free in __list_add_valid_or_report+0x105/0x130 [ 1696.867766][T26564] Read of size 8 at addr ffff88807bc84440 by task syz.7.5560/26564 [ 1696.875661][T26564] [ 1696.877990][T26564] CPU: 1 UID: 0 PID: 26564 Comm: syz.7.5560 Tainted: G L syzkaller #0 PREEMPT(full) [ 1696.878019][T26564] Tainted: [L]=SOFTLOCKUP [ 1696.878027][T26564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1696.878041][T26564] Call Trace: [ 1696.878049][T26564] [ 1696.878057][T26564] dump_stack_lvl+0x100/0x190 [ 1696.878089][T26564] print_report+0x156/0x4c9 [ 1696.878117][T26564] ? __virt_addr_valid+0x81/0x620 [ 1696.878143][T26564] ? __phys_addr+0xe8/0x180 [ 1696.878167][T26564] ? __list_add_valid_or_report+0x105/0x130 [ 1696.878187][T26564] kasan_report+0xdf/0x1a0 [ 1696.878212][T26564] ? __list_add_valid_or_report+0x105/0x130 [ 1696.878237][T26564] __list_add_valid_or_report+0x105/0x130 [ 1696.878259][T26564] clone_mnt+0x633/0x930 [ 1696.878282][T26564] copy_tree+0xfc/0xbf0 [ 1696.878309][T26564] ? __pfx_down_write+0x10/0x10 [ 1696.878338][T26564] copy_mnt_ns+0x2bd/0xc30 [ 1696.878367][T26564] ? trace_kmem_cache_alloc+0x80/0xb0 [ 1696.878391][T26564] ? create_new_namespaces+0x30/0xac0 [ 1696.878418][T26564] create_new_namespaces+0xd3/0xac0 [ 1696.878441][T26564] ? bpf_lsm_capable+0x9/0x10 [ 1696.878465][T26564] ? security_capable+0x80/0x260 [ 1696.878493][T26564] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1696.878513][T26564] ksys_unshare+0x455/0xab0 [ 1696.878538][T26564] ? kfree+0x2a0/0x670 [ 1696.878566][T26564] ? rcu_is_watching+0x12/0xc0 [ 1696.878586][T26564] ? __pfx_ksys_unshare+0x10/0x10 [ 1696.878611][T26564] ? kcov_ioctl+0x16a/0x720 [ 1696.878631][T26564] ? fput+0x79/0x100 [ 1696.878658][T26564] __x64_sys_unshare+0x31/0x40 [ 1696.878680][T26564] do_syscall_64+0x106/0xf80 [ 1696.878700][T26564] ? clear_bhb_loop+0x40/0x90 [ 1696.878719][T26564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.878736][T26564] RIP: 0033:0x7f3bb379bf79 [ 1696.878753][T26564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1696.878771][T26564] RSP: 002b:00007f3bb465d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1696.878789][T26564] RAX: ffffffffffffffda RBX: 00007f3bb3a15fa0 RCX: 00007f3bb379bf79 [ 1696.878802][T26564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 1696.878813][T26564] RBP: 00007f3bb38327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1696.878824][T26564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1696.878835][T26564] R13: 00007f3bb3a16038 R14: 00007f3bb3a15fa0 R15: 00007ffeaaff05c8 [ 1696.878854][T26564] [ 1696.878860][T26564] [ 1697.122718][T26564] Allocated by task 25926: [ 1697.127112][T26564] kasan_save_stack+0x30/0x50 [ 1697.131774][T26564] kasan_save_track+0x14/0x30 [ 1697.136433][T26564] __kasan_slab_alloc+0x89/0x90 [ 1697.141268][T26564] kmem_cache_alloc_noprof+0x241/0x6e0 [ 1697.146706][T26564] alloc_vfsmnt+0x23/0x6a0 [ 1697.151101][T26564] clone_mnt+0x4b/0x930 [ 1697.155243][T26564] vfs_open_tree+0xb02/0x1500 [ 1697.159903][T26564] __x64_sys_open_tree+0xa3/0x150 [ 1697.164913][T26564] do_syscall_64+0x106/0xf80 [ 1697.169488][T26564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.175359][T26564] [ 1697.177660][T26564] Freed by task 0: [ 1697.181352][T26564] kasan_save_stack+0x30/0x50 [ 1697.186010][T26564] kasan_save_track+0x14/0x30 [ 1697.190664][T26564] kasan_save_free_info+0x3b/0x70 [ 1697.195676][T26564] __kasan_slab_free+0x5f/0x80 [ 1697.200423][T26564] kmem_cache_free+0x124/0x670 [ 1697.205161][T26564] rcu_core+0x5a2/0x10d0 [ 1697.209388][T26564] handle_softirqs+0x1ea/0x910 [ 1697.214134][T26564] __irq_exit_rcu+0xef/0x150 [ 1697.218701][T26564] irq_exit_rcu+0x9/0x30 [ 1697.222924][T26564] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1697.228538][T26564] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1697.234499][T26564] [ 1697.236800][T26564] Last potentially related work creation: [ 1697.242492][T26564] kasan_save_stack+0x30/0x50 [ 1697.247151][T26564] kasan_record_aux_stack+0xa7/0xc0 [ 1697.252336][T26564] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 1697.258214][T26564] task_work_run+0x150/0x240 [ 1697.262792][T26564] exit_to_user_mode_loop+0x100/0x4a0 [ 1697.268165][T26564] do_syscall_64+0x67c/0xf80 [ 1697.272738][T26564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.278612][T26564] [ 1697.280914][T26564] Second to last potentially related work creation: [ 1697.287473][T26564] kasan_save_stack+0x30/0x50 [ 1697.292128][T26564] kasan_record_aux_stack+0xa7/0xc0 [ 1697.297312][T26564] task_work_add+0x28b/0x3b0 [ 1697.301887][T26564] mntput_no_expire_slowpath+0x3da/0xb00 [ 1697.307500][T26564] mntput_no_expire+0x1fd/0x220 [ 1697.312331][T26564] mntput+0x6b/0xa0 [ 1697.316120][T26564] vfs_open_tree+0x1235/0x1500 [ 1697.320868][T26564] __x64_sys_open_tree+0xa3/0x150 [ 1697.325877][T26564] do_syscall_64+0x106/0xf80 [ 1697.330449][T26564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.336326][T26564] [ 1697.338631][T26564] The buggy address belongs to the object at ffff88807bc84380 [ 1697.338631][T26564] which belongs to the cache mnt_cache of size 352 [ 1697.352489][T26564] The buggy address is located 192 bytes inside of [ 1697.352489][T26564] freed 352-byte region [ffff88807bc84380, ffff88807bc844e0) [ 1697.366261][T26564] [ 1697.368562][T26564] The buggy address belongs to the physical page: [ 1697.374945][T26564] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807bc84700 pfn:0x7bc84 [ 1697.384984][T26564] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1697.393459][T26564] memcg:ffff8880359d1401 [ 1697.397674][T26564] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1697.406149][T26564] page_type: f5(slab) [ 1697.410108][T26564] raw: 00fff00000000240 ffff88801ce82640 ffffea00007cb890 ffffea0000d39790 [ 1697.418672][T26564] raw: ffff88807bc84700 0000000800120006 00000000f5000000 ffff8880359d1401 [ 1697.427234][T26564] head: 00fff00000000240 ffff88801ce82640 ffffea00007cb890 ffffea0000d39790 [ 1697.435885][T26564] head: ffff88807bc84700 0000000800120006 00000000f5000000 ffff8880359d1401 [ 1697.444533][T26564] head: 00fff00000000001 ffffea0001ef2101 00000000ffffffff 00000000ffffffff [ 1697.453183][T26564] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1697.461825][T26564] page dumped because: kasan: bad access detected [ 1697.468217][T26564] page_owner tracks the page as allocated [ 1697.473908][T26564] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5786, tgid 5786 (syz-executor), ts 65554473941, free_ts 63593718511 [ 1697.495267][T26564] post_alloc_hook+0x153/0x170 [ 1697.500021][T26564] get_page_from_freelist+0x111d/0x3140 [ 1697.505547][T26564] __alloc_frozen_pages_noprof+0x27d/0x2ae0 [ 1697.511417][T26564] new_slab+0xa6/0x6e0 [ 1697.515469][T26564] refill_objects+0x26b/0x400 [ 1697.520120][T26564] __pcs_replace_empty_main+0x19f/0x600 [ 1697.525646][T26564] kmem_cache_alloc_noprof+0x480/0x6e0 [ 1697.531083][T26564] alloc_vfsmnt+0x23/0x6a0 [ 1697.535476][T26564] path_mount+0x1e6b/0x23d0 [ 1697.539963][T26564] __x64_sys_mount+0x293/0x310 [ 1697.544716][T26564] do_syscall_64+0x106/0xf80 [ 1697.549288][T26564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.555158][T26564] page last free pid 5786 tgid 5786 stack trace: [ 1697.561458][T26564] __free_frozen_pages+0x7bb/0x1090 [ 1697.566640][T26564] qlist_free_all+0x47/0xe0 [ 1697.571124][T26564] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1697.576562][T26564] __kasan_slab_alloc+0x69/0x90 [ 1697.581393][T26564] kmem_cache_alloc_noprof+0x241/0x6e0 [ 1697.586828][T26564] vm_area_alloc+0x1f/0x160 [ 1697.591314][T26564] __mmap_region+0x1027/0x2760 [ 1697.596055][T26564] mmap_region+0x180/0x3e0 [ 1697.600451][T26564] do_mmap+0xc63/0x12f0 [ 1697.604588][T26564] vm_mmap_pgoff+0x29e/0x470 [ 1697.609180][T26564] ksys_mmap_pgoff+0x7d/0x5b0 [ 1697.613838][T26564] __x64_sys_mmap+0x125/0x190 [ 1697.618503][T26564] do_syscall_64+0x106/0xf80 [ 1697.623075][T26564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.628947][T26564] [ 1697.631248][T26564] Memory state around the buggy address: [ 1697.636858][T26564] ffff88807bc84300: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 1697.644897][T26564] ffff88807bc84380: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1697.652934][T26564] >ffff88807bc84400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1697.660974][T26564] ^ [ 1697.667109][T26564] ffff88807bc84480: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1697.675148][T26564] ffff88807bc84500: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1697.683181][T26564] ================================================================== [ 1697.702610][ T29] kauditd_printk_skb: 8601 callbacks suppressed [ 1697.702626][ T29] audit: type=1400 audit(2000000799.739:259381): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1697.730154][ T29] audit: type=1400 audit(2000000799.739:259382): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1697.730197][ T29] audit: type=1400 audit(2000000799.739:259383): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1697.730233][ T29] audit: type=1400 audit(2000000799.739:259384): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1697.730270][ T29] audit: type=1400 audit(2000000799.739:259385): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1697.730309][ T29] audit: type=1400 audit(2000000799.739:259386): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1697.730344][ T29] audit: type=1400 audit(2000000799.739:259387): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1697.730380][ T29] audit: type=1400 audit(2000000799.739:259388): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1697.730417][ T29] audit: type=1400 audit(2000000799.739:259389): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1697.730474][ T29] audit: type=1400 audit(2000000799.739:259390): avc: denied { read } for pid=5468 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1697.741909][T26564] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1697.741931][T26564] CPU: 1 UID: 0 PID: 26564 Comm: syz.7.5560 Tainted: G L syzkaller #0 PREEMPT(full) [ 1697.741955][T26564] Tainted: [L]=SOFTLOCKUP [ 1697.741962][T26564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1697.741972][T26564] Call Trace: [ 1697.741978][T26564] [ 1697.741986][T26564] dump_stack_lvl+0x100/0x190 [ 1697.742015][T26564] vpanic+0x552/0x970 [ 1697.742031][T26564] ? __pfx_vpanic+0x10/0x10 [ 1697.742048][T26564] ? __list_add_valid_or_report+0x105/0x130 [ 1697.742066][T26564] panic+0xd1/0xe0 [ 1697.742081][T26564] ? __pfx_panic+0x10/0x10 [ 1697.742097][T26564] ? __list_add_valid_or_report+0x105/0x130 [ 1697.742113][T26564] ? preempt_schedule_common+0x42/0xc0 [ 1697.742137][T26564] check_panic_on_warn.cold+0x19/0x34 [ 1697.742154][T26564] end_report.part.0+0x3a/0x90 [ 1697.742176][T26564] kasan_report.cold+0xe/0x18 [ 1697.742198][T26564] ? __list_add_valid_or_report+0x105/0x130 [ 1697.742217][T26564] __list_add_valid_or_report+0x105/0x130 [ 1697.742234][T26564] clone_mnt+0x633/0x930 [ 1697.742254][T26564] copy_tree+0xfc/0xbf0 [ 1697.742275][T26564] ? __pfx_down_write+0x10/0x10 [ 1697.742300][T26564] copy_mnt_ns+0x2bd/0xc30 [ 1697.742323][T26564] ? trace_kmem_cache_alloc+0x80/0xb0 [ 1697.742344][T26564] ? create_new_namespaces+0x30/0xac0 [ 1697.742365][T26564] create_new_namespaces+0xd3/0xac0 [ 1697.742383][T26564] ? bpf_lsm_capable+0x9/0x10 [ 1697.742404][T26564] ? security_capable+0x80/0x260 [ 1697.742428][T26564] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1697.742448][T26564] ksys_unshare+0x455/0xab0 [ 1697.742468][T26564] ? kfree+0x2a0/0x670 [ 1697.742490][T26564] ? rcu_is_watching+0x12/0xc0 [ 1697.742506][T26564] ? __pfx_ksys_unshare+0x10/0x10 [ 1697.742526][T26564] ? kcov_ioctl+0x16a/0x720 [ 1697.742544][T26564] ? fput+0x79/0x100 [ 1697.742568][T26564] __x64_sys_unshare+0x31/0x40 [ 1697.742587][T26564] do_syscall_64+0x106/0xf80 [ 1697.742607][T26564] ? clear_bhb_loop+0x40/0x90 [ 1697.742626][T26564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.742643][T26564] RIP: 0033:0x7f3bb379bf79 [ 1697.742656][T26564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1697.742670][T26564] RSP: 002b:00007f3bb465d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1697.742687][T26564] RAX: ffffffffffffffda RBX: 00007f3bb3a15fa0 RCX: 00007f3bb379bf79 [ 1697.742698][T26564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 1697.742707][T26564] RBP: 00007f3bb38327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1697.742721][T26564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1697.742731][T26564] R13: 00007f3bb3a16038 R14: 00007f3bb3a15fa0 R15: 00007ffeaaff05c8 [ 1697.742746][T26564] [ 1697.755266][T26564] Kernel Offset: disabled