last executing test programs: 23m33.2784856s ago: executing program 0 (id=223): lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000003}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r2}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x7fff7ffc}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close_range(r5, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) 23m30.941568955s ago: executing program 0 (id=228): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xb02, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)=0x1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)) bind$nfc_llcp(r4, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r6, 0x0, 0x0) close(r5) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 23m28.461767197s ago: executing program 0 (id=233): openat$kvm(0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @empty, 0x2, 0x3}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x24040040) 23m27.180520138s ago: executing program 0 (id=235): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x22}, 0x20000008}]}, &(0x7f0000000140)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) clock_getres(0xa, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'lblcr\x00', 0x28, 0x5, 0x72}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 23m25.222335044s ago: executing program 0 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) socket$kcm(0x21, 0x2, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) 23m23.622706192s ago: executing program 0 (id=242): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 23m8.095487467s ago: executing program 32 (id=242): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 22m47.96274326s ago: executing program 2 (id=309): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x49f0, 0x20, 0x8001, 0x48024e}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_msg=0x7}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) utimes(&(0x7f0000000100)='./file0\x00', 0x0) writev(r0, 0x0, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0xfffffffc, 0x1003, 0x4, {0x6, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000200)) 22m44.038533143s ago: executing program 2 (id=312): capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) syz_io_uring_setup(0x18da, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x3, 0xb5}, &(0x7f00000000c0), &(0x7f0000ffe000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$key(0xf, 0x3, 0x2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x20d0}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x2c, 0x0, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x70) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 22m33.926608468s ago: executing program 2 (id=334): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/stat\x00') fchdir(r0) exit(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) r7 = socket$inet(0x2, 0xa, 0x0) sendmmsg$sock(r7, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x2200890, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x6, 0x4}, {0x2}}}}, 0x11) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYRES8=r7, @ANYRES16=r5, @ANYRESHEX=r3, @ANYRESDEC=r5, @ANYRES16=r2, @ANYRES16=r4, @ANYBLOB="621072c037dd3c085aaa414590d42deea6f637801143795258b0d4eaac7b5595f2037c99939f5623ca420e6ffcc308f258301b20ac4bcfa328611cdb181b04d17e85e23ec55df8c2a313ab3e862445ee8448f06295568185a82e5c3a48600acb5620e5f9407f06c04c185dd7367bb8947ec95f341c8f0e11a255f9328183e4add065c641fb44ac9d70dff74e5564df6157688db7dcce065247c2f781c8e38177735a2fd2678a6e365c565170e310ff58a699c31db769922b7be26c3fd16c59dd4747620239d205f1d898c85eaa3a5026bf0d4e9af26872bfebdfb607166348f2388cd187b79611dd2135dd", @ANYRESHEX=r8, @ANYRES8], 0x5c}}, 0x0) 22m32.373590291s ago: executing program 2 (id=337): futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r6, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x34}}, 0x0) io_submit(r5, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r4, 0x0, 0x0, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x453, r4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3}]) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 22m29.006132048s ago: executing program 2 (id=344): recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440), 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580), 0x902, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, 0x0) 22m27.91348888s ago: executing program 2 (id=348): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={0x0}}, 0x44014) pipe2$watch_queue(0x0, 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) shmget$private(0x0, 0x800000, 0xfbe4e6017db4dfac, &(0x7f0000173000/0x800000)=nil) socket$netlink(0x10, 0x3, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = io_uring_setup(0x7625, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = syz_open_dev$loop(&(0x7f0000002280), 0xffff, 0x121ac3) faccessat(0xffffffffffffff9c, 0x0, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 22m12.378509406s ago: executing program 33 (id=348): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={0x0}}, 0x44014) pipe2$watch_queue(0x0, 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) shmget$private(0x0, 0x800000, 0xfbe4e6017db4dfac, &(0x7f0000173000/0x800000)=nil) socket$netlink(0x10, 0x3, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = io_uring_setup(0x7625, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = syz_open_dev$loop(&(0x7f0000002280), 0xffff, 0x121ac3) faccessat(0xffffffffffffff9c, 0x0, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 15m40.894077734s ago: executing program 1 (id=1263): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) ioctl$KVM_TDX_FINALIZE_VM(0xffffffffffffffff, 0xc008aeba, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) getrlimit(0xa, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\t'], 0xa) mount$fuse(0x0, 0x0, 0x0, 0x100809, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') statx(r3, 0x0, 0x400, 0x100, &(0x7f0000000540)) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100000014000700000000000000000500000000000000010800"], 0x74}}, 0x24005000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15m40.329766645s ago: executing program 1 (id=1264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xbbf6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) 15m38.866246739s ago: executing program 1 (id=1267): io_uring_setup(0x20ba, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x0, 0xfff7fffc}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000003c0)={0x2, 0x3, "d1c236566863f1bd3f54e05cc46654796a3b800413745c40579438931fffaa91", 0x8001, 0x4, 0xc, 0x9, 0x1980}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x2000000, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$packet(0x11, 0x2, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x1b, 0x0, 0x1, 0xf9, 0x6, @remote}, 0x14) 15m33.058392367s ago: executing program 1 (id=1279): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xb02, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)=0x1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)) bind$nfc_llcp(r4, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r6, 0x0, 0x0) close(r5) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 15m32.088328482s ago: executing program 1 (id=1281): socket$nl_rdma(0x10, 0x3, 0x14) r0 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400cc04}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000002b40), 0x24, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r5, &(0x7f0000000080)={0x233, 0x7d, 0x2, {{0x500, 0xf2, 0x0, 0x4, {0x0, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0xf, '\xcf\xc2m\xd7\xc5\xb4\x99\xbf\xb4+\x93\x80~\x8bZ', 0x5d, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\xa6\x1dR\xc3l\xde{\a\xdb\xda\xb2\x88K\xaf\x05\x00~\x04\xe6\x9d\xb0\xc3\xca\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x9e\x95?\xa5\xe0R\x15t\x80\xe8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\xff\xff\xff\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4U\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0xee01}}, 0x233) getdents(r0, 0x0, 0x0) 15m31.129456281s ago: executing program 1 (id=1284): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400003366"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x24008001) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x1000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0x3, 0xfa11, 0xfffffffe}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 15m15.850273999s ago: executing program 34 (id=1284): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400003366"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x24008001) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x1000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0x3, 0xfa11, 0xfffffffe}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 23.788029176s ago: executing program 6 (id=3273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400882, 0x125) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec61060004400004000005000700"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r6, 0x106, 0x1, 0x0, &(0x7f0000000080)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r7, &(0x7f0000000900)='B', 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r3, 0x58, &(0x7f0000000600)}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) close(r7) 22.440321523s ago: executing program 6 (id=3274): ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) eventfd(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="35f9f7fd3ade877adc201ea6595baa51893b3d8d80454698572d70a1f5fc7b4a7472ced195919ee0199deb9e1ea0f9f78bc28927c5dca1de79aee8cda6d62da0d47bb58d6e4be0cb6538682d5822c957092a960a4d746882465f3df021a84b", 0x5f, r5) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@allocspi={0x14c, 0x16, 0x61bb1f11be440ab3, 0x70bd26, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@empty, 0x4e23, 0x8, 0x4e20, 0x2, 0xa, 0xa0, 0x1a0, 0x76}, {@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4d5, 0x33}, @in=@local, {0x0, 0x6, 0xfffffffffffffff9, 0x3, 0x2, 0x35, 0x9, 0x4}, {0xfffffffffffffffb, 0x860d, 0x310, 0x4}, {0x7fffffff, 0x8, 0x2ed9}, 0x70bd2b, 0x2502, 0xa, 0x0, 0x1}, 0x3, 0xffff}, [@etimer_thresh={0x8, 0x22, 0x9}, @algo_aead={0x4c, 0x12, {{'aegis256\x00'}, 0x0, 0x180}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 19.141030002s ago: executing program 6 (id=3286): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010001, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x7d, &(0x7f00000002c0)={r4, 0x81}, 0x8) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000100)=@riscv64_v={0x8030000009000017, 0x0}) eventfd2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0x7) read$dsp(r5, &(0x7f0000000280)=""/79, 0x4f) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 17.985936023s ago: executing program 6 (id=3287): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = mq_open(&(0x7f0000000080)='\xef\x00', 0x40, 0x0, 0x0) mq_getsetattr(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, 0x0, 0x814) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000040)={0xffff, 0x34324948, 0x780, 0x438, 0x3, @discrete={0x311, 0x24000}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10) sendmmsg$alg(r6, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}], 0x1, 0x4004011) recvmsg(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)=""/4095, 0xfff}], 0x1}, 0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000001100)=@multiplanar_overlay={0x1, 0x1, 0x4, 0x100, 0x1, {}, {0x2, 0x1, 0x7, 0x2, 0x8, 0x8, "a5471ff1"}, 0x8, 0x3, {&(0x7f0000001080)=[{0x6, 0x7655, {0xc03f}, 0xffffffff}, {0x6, 0x5, {0x4}, 0x1}]}, 0x2, 0x0, r2}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 16.100118712s ago: executing program 3 (id=3293): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x103000) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xce}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = dup(0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000940)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={r8, 0x3, r6, 0x7, 0x80000}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000500)={0x0, 0xa5, "577168bd6444cde6b225c3bb0a21ebfdfd8ee29031a633312ece2d8b8e2b9004a1806d064cc4f211f3b43895572f59ccb42d61c689da5fb910a0e31997209e664ae9eed25229b8bdf4c37e634e37f5a4a2716a8d08a9da1c8b1052ded824e832a741ea530da46d922df5f762c3faa24eaccf4164e6aa8706386a798380a33182cc9498bf61ccf795a64f331557cd0ef3ee1ffbaacbafe8124aaf151ecc7587d18bc27f9b85"}, &(0x7f0000000280)=0xad) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000002c0)={r9, 0x0, 0x0}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="f00000001a0001000000000000000000fc0200000000000000000000000000000001071c4e2300050a00a0203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000100000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000"], 0xf0}}, 0x844) 14.819985515s ago: executing program 3 (id=3296): ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) eventfd(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="35f9f7fd3ade877adc201ea6595baa51893b3d8d80454698572d70a1f5fc7b4a7472ced195919ee0199deb9e1ea0f9f78bc28927c5dca1de79aee8cda6d62da0d47bb58d6e4be0cb6538682d5822c957092a960a4d746882465f3df021a84b", 0x5f, r5) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@allocspi={0x14c, 0x16, 0x61bb1f11be440ab3, 0x70bd26, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@empty, 0x4e23, 0x8, 0x4e20, 0x2, 0xa, 0xa0, 0x1a0, 0x76}, {@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4d5, 0x33}, @in=@local, {0x0, 0x6, 0xfffffffffffffff9, 0x3, 0x2, 0x35, 0x9, 0x4}, {0xfffffffffffffffb, 0x860d, 0x310, 0x4}, {0x7fffffff, 0x8, 0x2ed9}, 0x70bd2b, 0x2502, 0xa, 0x0, 0x1}, 0x3, 0xffff}, [@etimer_thresh={0x8, 0x22, 0x9}, @algo_aead={0x4c, 0x12, {{'aegis256\x00'}, 0x0, 0x180}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 13.287536399s ago: executing program 7 (id=3299): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000280), 0x4) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$dmmidi(0x0, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0245720, &(0x7f0000000040)={0x1}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000014c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r8, @ANYBLOB="010000000000fcdbdf250100000008000100000000000400048008000c8004000b800800020001000000200108801c000780080005000000000008000000000000000800050000000000240007800800050000000000080005000000000008000500000000000800050000000000040007808000078008000600000000000800050000000000080006"], 0x150}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x439, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010102}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x21}]}}}]}, 0x50}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) socket(0x10, 0x803, 0x0) 12.297349359s ago: executing program 7 (id=3300): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_open_dev$dri(0x0, 0x3, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, 0x0) process_vm_readv(0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8004) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_DATA={0x10, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x5, 0x1, ','}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r11, 0x1, 0x4800, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 10.694733044s ago: executing program 7 (id=3303): ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) eventfd(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="35f9f7fd3ade877adc201ea6595baa51893b3d8d80454698572d70a1f5fc7b4a7472ced195919ee0199deb9e1ea0f9f78bc28927c5dca1de79aee8cda6d62da0d47bb58d6e4be0cb6538682d5822c957092a960a4d746882465f3df021a84b", 0x5f, r5) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@allocspi={0x14c, 0x16, 0x61bb1f11be440ab3, 0x70bd26, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@empty, 0x4e23, 0x8, 0x4e20, 0x2, 0xa, 0xa0, 0x1a0, 0x76}, {@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4d5, 0x33}, @in=@local, {0x0, 0x6, 0xfffffffffffffff9, 0x3, 0x2, 0x35, 0x9, 0x4}, {0xfffffffffffffffb, 0x860d, 0x310, 0x4}, {0x7fffffff, 0x8, 0x2ed9}, 0x70bd2b, 0x2502, 0xa, 0x0, 0x1}, 0x3, 0xffff}, [@etimer_thresh={0x8, 0x22, 0x9}, @algo_aead={0x4c, 0x12, {{'aegis256\x00'}, 0x0, 0x180}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 9.753124509s ago: executing program 4 (id=3304): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005140)={0x2020}, 0xfffffffffffffea8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000380)={{0xd9, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x6, 0x24, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) 9.502875847s ago: executing program 5 (id=3305): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x180}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r5, 0x400, 0x1) fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1409, 0x1, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000340), 0x1ff, 0x0) io_uring_setup(0x2655, &(0x7f0000000080)={0x0, 0xdf4, 0x1000, 0x5, 0x286, 0x0, r0}) 9.028815189s ago: executing program 3 (id=3306): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800e80010000d0428bd7000f4dbff2500008000", @ANYRESOCT=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900680000000c001e"], 0x48}}, 0x4084) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket(0x1e, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = io_uring_setup(0x56a2, &(0x7f0000000000)={0x0, 0xfca1, 0x8, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x13, &(0x7f0000001bc0), 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf25020000040000000008000a0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={r8, @in6={{0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, [0x1200000000000, 0x1, 0x7, 0x3, 0xec, 0x2, 0x5, 0x1578, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x3, 0x4492]}, &(0x7f0000000440)=0x100) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={r8, 0x7}, 0x8) shutdown(r9, 0x1) 8.203567947s ago: executing program 5 (id=3307): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, 0x0, 0xa000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000180002801400018008"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a3000000000"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000"], 0x122}}, 0x0) 7.941844869s ago: executing program 3 (id=3308): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000001c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB]) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x30000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa1}]}}}]}, 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20048010) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GET(r7, 0x40189206, 0x0) recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xd7, 0x9b, 0xb0, 0x8, 0x557, 0x7820, 0x49d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x4, 0xa0, 0x7, "", [{{0x9, 0x4, 0xee, 0x6b, 0x0, 0x40, 0x21, 0x22, 0xf5}}]}}]}}, 0x0) 7.439497394s ago: executing program 7 (id=3309): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xb02, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)=0x1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)) bind$nfc_llcp(r4, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r6, 0x0, 0x0) close(r5) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 7.071138486s ago: executing program 5 (id=3310): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x4, 0x0, {{@in=@multicast2, @in6=@private0, 0x10, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0xfffffffffffffffe, 0x0, 0x4000000000000001, 0xffffffffffffffff}, {0x8000000000000, 0xa00, 0x40800000000000, 0x800000000000002}, 0x400, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(0x0) chroot(&(0x7f0000000040)='./file0\x00') geteuid() r4 = socket(0x10, 0x3, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) getsockopt(r2, 0x401, 0x7, &(0x7f0000000340)=""/73, &(0x7f0000000480)=0x49) socket$igmp(0x2, 0x3, 0x2) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 6.221026137s ago: executing program 7 (id=3311): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0x3, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000000)={r8, &(0x7f0000000400), &(0x7f0000000100)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000280)={r9, 0x0, &(0x7f0000000080)}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000cc0)={0x0, 0x4, 0x0, &(0x7f0000000880)=[{}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000a00)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x8, 0x0, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000380)={{0x80000000, 0x0, 0xf, [0x4, 0x77df1a8d]}, {r9, r10, 0x2, [0xf5, 0xeb7f]}, 0x0, [0x1]}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x3, 0x0, {0x0, 0x0, 0x0, r5, {0xc00, 0xf}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r12 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r12, 0x0, 0x0) 6.076950231s ago: executing program 4 (id=3312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0xc, 0x0, 0x0) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x1, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r6, 0x8b2c, &(0x7f0000000040)) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x20080, 0x3, 0xf, 0xd, 0xf6, 0x4, 0x10, 0x9d, 0x4, [0x1, 0x4, 0x1, 0x468, 0x80, 0x3, 0x9, 0x80]}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000840)={0x5, @output={0x0, 0x1, {0x9, 0xfffffff9}, 0x101, 0x2}}) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180)={0x2}, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r4}, &(0x7f0000000a80), &(0x7f0000000ac0)=r5}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000000400080018200000", @ANYRES32=r4, @ANYBLOB="00000092411a8d3b5e9e2600100100009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x69}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x18, 0x17, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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"], 0x0, 0xb, 0x1000, &(0x7f0000001640)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x14, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b80)=[{0x4, 0x2, 0xe, 0x9}], 0x10, 0x5}, 0x94) mount(0x0, 0x0, &(0x7f0000000700)='erofs\x00', 0x2319034, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 5.990510919s ago: executing program 5 (id=3313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0x80, 0x3, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e5, 0xc488, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) pipe2(&(0x7f00000000c0), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r3, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, &(0x7f0000001dc0)={0x8c, 0x0, 0x20000}, 0x20) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) mount(0x0, 0x0, 0x0, 0x2186a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20008080) 4.20216335s ago: executing program 4 (id=3314): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f00)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044000}, 0x8080) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x44014) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd29, 0xfffffffc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r9, 0x4) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008"], 0x50}}, 0x4000850) 3.709127026s ago: executing program 5 (id=3315): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x9, 0x1000006, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)=0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r2, &(0x7f00000002c0), 0x5005) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) socket$xdp(0x2c, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.362786935s ago: executing program 6 (id=3316): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x9, 0x1000006, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)=0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r2, &(0x7f00000002c0), 0x5005) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) socket$xdp(0x2c, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.176781428s ago: executing program 4 (id=3317): socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000002f40)=@base={0x5, 0x4, 0xc, 0xc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) sendmmsg$unix(r1, &(0x7f0000000840)=[{{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000005c0)="9bfb0c1a77311bfadb0092a6f952831bf4acbc95b1c017e6b6e0e8a29ea4b70e487e39b83fa428cd76487e825e5842936f5659f91a738639c610837be862bb42e70b368a24a2e337f089de554e927edd64f513a986d74d75919b3e5b5267484678a7d0f8e14bea7d", 0x68}, {&(0x7f0000000640)="1751fa457e7829c2492622eb331d6536a4be07ff03290c81fa46bf2565a58a12b78dc384d57ff6126204250f6ee94bd4444715fd723cb94021dfe5e41a4abbc021ac8fd4682b809b62b869db0a30b3ce7b8405a2", 0x54}, {&(0x7f0000000780)="e66afd48a28a22f8757e577f204ee861cdf255f03e43df9481c3f0fe6fb09c77315753395bcb6c60ed68458941e9bcbbc975a12cd6830b06967ffa94ce5c17db11908dfc037164e63b2d59904cfcb6d3778f756b746930f0c2e8c53cdcde89222fba5ca3bc14cf0a6292dc1867ae8574923c598714e420ea968d82a806a94ffce681f7d5b19eef0755ea19833f93c30d68817f17", 0x94}], 0x3, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x58}}], 0x1, 0x20040041) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000fdffffffffffffff03"], 0x50) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700000000000000", 0x90, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 2.652296957s ago: executing program 3 (id=3318): timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x3, 0x1, 0x50, 0xfffffffb, 0xffffffff}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb}}, @TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x48}}, 0x24040084) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x1003, r0}, 0x38) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000240), 0x4) ioctl$FE_SET_FRONTEND(r5, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0x2, 0xa}}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) ioctl$OCFS2_IOC_UNRESVSP64(r5, 0x4030582b, &(0x7f0000000140)={0x0, 0x2, 0x1, 0x7, 0xb, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x2, r9, 0x2, &(0x7f0000000100)) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fac0)=[@text64={0x40, &(0x7f00000001c0)="48b800200000000000000f23c80f21f835080040000f23f80f20d835080000000f22d866400f38801266baf80cb80acc0681ef66bafc0cecc4e24508f9b805000000b96cb300000f01c1430f7933f30f0966baf80cb8b2c82b8fef66bafc0c66b8000066ef66ba200066b8006066ef"}], 0x1, 0x48, 0x0, 0x40) 2.152800475s ago: executing program 7 (id=3319): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet(0x2b, 0xa, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000000)=0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000029500000000000000"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101302, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 1.803049961s ago: executing program 4 (id=3320): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, 0x0, 0xa000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000180002801400018008"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a3000000000"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000"], 0x122}}, 0x0) 759.73965ms ago: executing program 4 (id=3321): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xb02, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)=0x1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)) bind$nfc_llcp(r4, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r6, 0x0, 0x0) close(r5) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 599.610863ms ago: executing program 6 (id=3322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000080)=0xffff, 0x4) sendto$packet(r3, 0x0, 0x0, 0x8004, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x48) sendmsg(0xffffffffffffffff, 0x0, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x400040d1) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r6, 0x0, '\x00', 0x0, r5, 0x0, 0x5}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x137b}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x2000c0d0) 408.786128ms ago: executing program 3 (id=3323): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_socket_connect_nvme_tcp() mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) set_mempolicy(0x8000, &(0x7f0000000300)=0xe, 0x1) ioctl$int_in(r6, 0x5421, &(0x7f0000000000)=0x100000001) waitid$P_PIDFD(0x3, r6, 0x0, 0x8, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 5 (id=3324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, 0x0, &(0x7f0000cab000)) close(r0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): ino=58674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1333.427592][ T30] audit: type=1400 audit(2000000355.810:3401): avc: denied { connect } for pid=18779 comm="syz.4.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1333.774117][ T30] audit: type=1400 audit(2000000355.820:3402): avc: denied { write } for pid=18779 comm="syz.4.2663" path="socket:[57966]" dev="sockfs" ino=57966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1333.800152][ T30] audit: type=1400 audit(2000000355.850:3403): avc: denied { write } for pid=18779 comm="syz.4.2663" path="socket:[58690]" dev="sockfs" ino=58690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1333.865186][T18786] siw: device registration error -23 [ 1334.049995][T18785] overlayfs: failed to clone upperpath [ 1334.146806][T18785] netlink: 'syz.7.2661': attribute type 39 has an invalid length. [ 1334.810023][T18798] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1335.511046][T18807] netlink: 'syz.4.2666': attribute type 39 has an invalid length. [ 1336.535501][T18816] program syz.5.2668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1336.562104][T18816] program syz.5.2668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1336.577316][T18816] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1336.890524][ T30] audit: type=1400 audit(2000000359.000:3404): avc: denied { ioctl } for pid=18811 comm="syz.5.2668" path="/dev/sg0" dev="devtmpfs" ino=794 ioctlcmd=0x5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1337.005714][T18814] Can't find ip_set type hash:ma [ 1337.135628][T18823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2669'. [ 1337.252665][T18826] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2671'. [ 1337.538740][T17050] udevd[17050]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1337.560428][T18568] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1337.811507][T13874] block nbd0: Possible stuck request ffff8880279b0000: control (read@0,1024B). Runtime 120 seconds [ 1337.822406][T13874] block nbd0: Possible stuck request ffff8880279b0200: control (read@1024,1024B). Runtime 120 seconds [ 1337.840711][T13874] block nbd0: Possible stuck request ffff8880279b0400: control (read@2048,1024B). Runtime 120 seconds [ 1337.851754][T13874] block nbd0: Possible stuck request ffff8880279b0600: control (read@3072,1024B). Runtime 120 seconds [ 1337.930842][T18839] siw: device registration error -23 [ 1338.083575][ T30] audit: type=1400 audit(2000000360.510:3405): avc: denied { accept } for pid=18833 comm="syz.4.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1338.318929][T18840] netlink: 'syz.6.2673': attribute type 39 has an invalid length. [ 1338.341048][T18568] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 1338.350709][T18568] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.394913][T18568] usb 6-1: config 0 has no interfaces? [ 1338.441520][T18568] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1338.456785][T18568] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.608270][T18568] usb 6-1: config 0 descriptor?? [ 1342.155819][T18866] overlayfs: failed to clone upperpath [ 1342.272299][T18871] macvtap2: entered promiscuous mode [ 1342.840873][ T30] audit: type=1400 audit(2000000365.190:3406): avc: denied { mount } for pid=18875 comm="syz.7.2683" name="/" dev="ramfs" ino=58190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1342.884450][T18887] netlink: 'syz.6.2682': attribute type 39 has an invalid length. [ 1342.941269][T18888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2684'. [ 1343.579951][T18568] usb 6-1: string descriptor 0 read error: -71 [ 1343.655550][T18894] autofs: Unknown parameter './cgroup.net/syz0' [ 1343.665645][T18894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2685'. [ 1343.674646][T18894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2685'. [ 1343.728417][T18568] usb 6-1: USB disconnect, device number 23 [ 1343.816927][T18902] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2688'. [ 1344.374847][T18907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2686'. [ 1345.029139][T18491] udevd[18491]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1345.108715][T18922] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2690'. [ 1345.313462][T18905] udevd[18905]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1346.473115][T18935] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2694'. [ 1347.460740][T18955] autofs: Unknown parameter 'fdcgroup.net/syz0' [ 1347.477616][T18955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2698'. [ 1347.486901][T18955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2698'. [ 1347.741667][T18957] overlayfs: failed to clone upperpath [ 1347.774408][T18957] netlink: 'syz.7.2692': attribute type 39 has an invalid length. [ 1348.878087][T18971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2699'. [ 1349.766542][T17050] udevd[17050]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1349.816144][T18983] netlink: 'syz.4.2701': attribute type 39 has an invalid length. [ 1351.522620][T19009] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2706'. [ 1352.326473][T19016] autofs: Unknown parameter 'fdcgroup.net/syz0' [ 1352.414313][T19021] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=19021 comm=syz.4.2708 [ 1352.815192][T19016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2709'. [ 1352.824168][T19016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2709'. [ 1352.926192][ T30] audit: type=1800 audit(2000000375.360:3407): pid=19017 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2705" name="bus" dev="ramfs" ino=59249 res=0 errno=0 [ 1353.859541][T19043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2711'. [ 1354.239450][ T30] audit: type=1400 audit(2000000376.670:3408): avc: denied { mounton } for pid=19045 comm="syz.7.2714" path="/267/file1/file0" dev="tmpfs" ino=1514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1354.267187][T19048] netlink: 'syz.4.2712': attribute type 39 has an invalid length. [ 1354.358650][T19056] overlayfs: failed to clone upperpath [ 1354.394347][T19055] netlink: 'syz.7.2714': attribute type 39 has an invalid length. [ 1354.403890][ T30] audit: type=1400 audit(2000000376.670:3409): avc: denied { create } for pid=19034 comm="syz.4.2712" name="#d3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1354.550880][ T30] audit: type=1400 audit(2000000376.670:3410): avc: denied { link } for pid=19034 comm="syz.4.2712" name="#d3" dev="tmpfs" ino=2871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1354.690838][ T30] audit: type=1400 audit(2000000376.670:3411): avc: denied { unlink } for pid=19034 comm="syz.4.2712" name="#d4" dev="tmpfs" ino=2871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1354.720816][ T30] audit: type=1400 audit(2000000376.670:3412): avc: denied { rename } for pid=19034 comm="syz.4.2712" name="#d4" dev="tmpfs" ino=2871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1355.542559][ T30] audit: type=1400 audit(2000000376.700:3413): avc: denied { create } for pid=19034 comm="syz.4.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1355.565895][ T30] audit: type=1400 audit(2000000376.700:3414): avc: denied { create } for pid=19034 comm="syz.4.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1355.687554][ T30] audit: type=1400 audit(2000000376.810:3415): avc: denied { search } for pid=19054 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1355.791516][ T30] audit: type=1400 audit(2000000376.810:3416): avc: denied { read } for pid=19054 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1357.156063][T19079] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2719'. [ 1358.132206][T19086] autofs: Unknown parameter 'fdcgroup.net/syz0' [ 1358.157644][T19086] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2721'. [ 1358.167200][T19086] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2721'. [ 1358.660132][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1358.660152][ T30] audit: type=1400 audit(2000000380.844:3463): avc: denied { read } for pid=19087 comm="syz.5.2722" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1359.029349][ T30] audit: type=1400 audit(2000000380.844:3464): avc: denied { open } for pid=19087 comm="syz.5.2722" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1359.261693][ T30] audit: type=1400 audit(2000000380.844:3465): avc: denied { ioctl } for pid=19087 comm="syz.5.2722" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1359.289422][ T30] audit: type=1400 audit(2000000380.956:3466): avc: denied { write } for pid=19089 comm="syz.7.2724" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1359.314970][ T30] audit: type=1400 audit(2000000381.199:3467): avc: denied { create } for pid=19091 comm="syz.4.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1359.339141][ T30] audit: type=1400 audit(2000000381.199:3468): avc: denied { write } for pid=19091 comm="syz.4.2725" name="virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1359.504597][T19103] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1359.581057][ T30] audit: type=1400 audit(2000000381.256:3469): avc: denied { bind } for pid=19091 comm="syz.4.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1360.170664][T19120] macvtap1: left promiscuous mode [ 1360.179723][T19120] macvtap2: left promiscuous mode [ 1360.912477][ T30] audit: type=1400 audit(2000000382.884:3470): avc: denied { read write } for pid=19114 comm="syz.6.2728" name="video6" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1361.843577][T19121] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2728'. [ 1361.979500][ T30] audit: type=1400 audit(2000000382.884:3471): avc: denied { open } for pid=19114 comm="syz.6.2728" path="/dev/video6" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1362.012950][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.028266][T19122] kernel profiling enabled (shift: 15) [ 1362.262285][ T30] audit: type=1400 audit(2000000383.071:3472): avc: denied { create } for pid=19114 comm="syz.6.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1363.302110][ T5180] udevd[5180]: worker [17003] /devices/virtual/block/nbd0 is taking a long time [ 1363.710656][T19133] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2731'. [ 1364.437710][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1364.437750][ T30] audit: type=1400 audit(2000000386.253:3478): avc: denied { read } for pid=19134 comm="syz.6.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1364.894871][ T30] audit: type=1400 audit(2000000386.253:3479): avc: denied { getopt } for pid=19134 comm="syz.6.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1365.059606][ T30] audit: type=1400 audit(2000000386.253:3480): avc: denied { create } for pid=19134 comm="syz.6.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1365.447064][ T30] audit: type=1400 audit(2000000386.262:3481): avc: denied { getopt } for pid=19134 comm="syz.6.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1367.230509][ T30] audit: type=1400 audit(2000000388.854:3482): avc: denied { execute } for pid=19153 comm="syz.5.2740" name="file1" dev="tmpfs" ino=2661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1367.667897][ T30] audit: type=1400 audit(2000000388.854:3483): avc: denied { execute_no_trans } for pid=19153 comm="syz.5.2740" path="/476/file1" dev="tmpfs" ino=2661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1368.940761][T18512] block nbd0: Possible stuck request ffff8880279b0000: control (read@0,1024B). Runtime 150 seconds [ 1368.951634][T18512] block nbd0: Possible stuck request ffff8880279b0200: control (read@1024,1024B). Runtime 150 seconds [ 1368.980928][ T30] audit: type=1400 audit(2000000390.089:3484): avc: denied { ioctl } for pid=19158 comm="syz.6.2741" path="/dev/video7" dev="devtmpfs" ino=951 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1369.411008][T18512] block nbd0: Possible stuck request ffff8880279b0400: control (read@2048,1024B). Runtime 150 seconds [ 1369.477375][T18512] block nbd0: Possible stuck request ffff8880279b0600: control (read@3072,1024B). Runtime 150 seconds [ 1369.962000][T19178] autofs: Unknown parameter '00000000000000000000' [ 1369.970243][T19178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2736'. [ 1369.979397][T19178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2736'. [ 1370.140240][ T30] audit: type=1400 audit(2000000391.615:3485): avc: denied { bind } for pid=19180 comm="syz.4.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1370.230433][T19185] autofs: Unknown parameter '00000000000000000000' [ 1370.258604][T19185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2745'. [ 1370.267560][T19185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2745'. [ 1370.426485][ T30] audit: type=1400 audit(2000000391.634:3486): avc: denied { setopt } for pid=19180 comm="syz.4.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1370.509510][ T30] audit: type=1400 audit(2000000391.755:3487): avc: denied { nlmsg_write } for pid=19180 comm="syz.4.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1371.745965][T19200] netlink: 'syz.4.2747': attribute type 39 has an invalid length. [ 1371.754804][ T30] audit: type=1400 audit(2000000393.112:3488): avc: denied { mount } for pid=19197 comm="syz.4.2747" name="/" dev="overlay" ino=2914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1372.930231][T12212] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1373.208391][T12212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1373.263962][T19211] macvtap3: entered promiscuous mode [ 1373.272820][T12212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1373.312556][ T30] audit: type=1400 audit(2000000394.553:3489): avc: denied { ioctl } for pid=19210 comm="syz.7.2753" path="socket:[60680]" dev="sockfs" ino=60680 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1373.319927][T12212] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1373.429349][T12212] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1373.498984][T12212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.587212][ T30] audit: type=1400 audit(2000000394.666:3490): avc: denied { create } for pid=19212 comm="syz.6.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1373.640055][T12212] usb 6-1: config 0 descriptor?? [ 1374.678152][T12212] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1375.536206][ T30] audit: type=1400 audit(2000000396.649:3491): avc: denied { write } for pid=19212 comm="syz.6.2754" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1375.626814][ T30] audit: type=1400 audit(2000000396.649:3492): avc: denied { open } for pid=19212 comm="syz.6.2754" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1375.753286][T19235] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2757'. [ 1376.298017][ T30] audit: type=1400 audit(2000000396.687:3493): avc: denied { ioctl } for pid=19212 comm="syz.6.2754" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1376.450118][T16840] usb 6-1: reset high-speed USB device number 24 using dummy_hcd [ 1377.505728][ T30] audit: type=1400 audit(2000000398.502:3494): avc: denied { read write } for pid=19242 comm="syz.4.2761" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1377.508663][T19248] fuse: blksize only supported for fuseblk [ 1377.538100][ T30] audit: type=1400 audit(2000000398.502:3495): avc: denied { open } for pid=19242 comm="syz.4.2761" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1378.007461][ T30] audit: type=1400 audit(2000000398.502:3496): avc: denied { mounton } for pid=19242 comm="syz.4.2761" path="/520/file0" dev="tmpfs" ino=2933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1378.069120][ T30] audit: type=1400 audit(2000000399.026:3497): avc: denied { mount } for pid=19242 comm="syz.4.2761" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1378.122953][T19254] netlink: 'syz.5.2762': attribute type 39 has an invalid length. [ 1378.491415][ T30] audit: type=1400 audit(2000000399.316:3498): avc: denied { ioctl } for pid=19261 comm="syz.3.2765" path="socket:[60767]" dev="sockfs" ino=60767 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1378.981807][ T9] usb 6-1: USB disconnect, device number 24 [ 1379.055879][ T30] audit: type=1400 audit(2000000399.532:3499): avc: denied { view } for pid=19261 comm="syz.3.2765" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1379.203797][T19266] macvtap4: entered promiscuous mode [ 1379.264539][ T30] audit: type=1400 audit(2000000400.140:3500): avc: denied { create } for pid=19267 comm="syz.6.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1379.668122][T15667] Bluetooth: hci3: Unknown advertising packet type: 0x73 [ 1379.668260][T15667] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1379.778878][T19276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1380.490600][T19273] fuse: Unknown parameter '0x0000000000000004' [ 1380.911168][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1380.911187][ T30] audit: type=1400 audit(2000000401.684:3505): avc: denied { mount } for pid=19272 comm="syz.3.2769" name="/" dev="configfs" ino=1099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1381.042349][ T30] audit: type=1400 audit(2000000401.796:3506): avc: denied { search } for pid=19272 comm="syz.3.2769" name="/" dev="configfs" ino=1099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1381.071503][T19286] macvtap5: entered promiscuous mode [ 1382.499753][ T30] audit: type=1400 audit(2000000402.929:3507): avc: denied { create } for pid=19291 comm="syz.3.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1382.543506][ T30] audit: type=1400 audit(2000000403.116:3508): avc: denied { bind } for pid=19291 comm="syz.3.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1382.563045][ T30] audit: type=1400 audit(2000000403.116:3509): avc: denied { write } for pid=19291 comm="syz.3.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1382.595049][ T30] audit: type=1400 audit(2000000403.153:3510): avc: denied { setopt } for pid=19291 comm="syz.3.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1383.533499][ T30] audit: type=1400 audit(2000000404.145:3511): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1383.851710][ T30] audit: type=1400 audit(2000000404.435:3512): avc: denied { module_request } for pid=19313 comm="syz.4.2778" kmod="netdev-netdevsim0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1384.081176][ T30] audit: type=1400 audit(2000000404.651:3513): avc: denied { sys_module } for pid=19313 comm="syz.4.2778" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1384.745747][ T30] audit: type=1400 audit(2000000404.772:3514): avc: denied { ioctl } for pid=19321 comm="syz.6.2780" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=60299 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1385.056689][T19320] macvtap3: entered promiscuous mode [ 1385.151945][T19333] Failed to initialize the IGMP autojoin socket (err -2) [ 1385.177288][ T9] Process accounting resumed [ 1386.489509][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1386.489541][ T30] audit: type=1400 audit(2000000406.400:3519): avc: denied { mounton } for pid=19340 comm="syz.4.2785" path="/522/file0" dev="tmpfs" ino=2945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1386.816028][T19349] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1387.817587][T19358] overlayfs: failed to clone upperpath [ 1387.852667][T19358] netlink: 'syz.3.2788': attribute type 39 has an invalid length. [ 1388.025169][ T30] audit: type=1400 audit(2000000408.263:3520): avc: denied { create } for pid=19355 comm="syz.5.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1388.331958][ T30] audit: type=1400 audit(2000000408.272:3521): avc: denied { mount } for pid=19355 comm="syz.5.2789" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1388.354505][ T30] audit: type=1400 audit(2000000408.281:3522): avc: denied { write } for pid=19355 comm="syz.5.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1389.292374][ T30] audit: type=1400 audit(2000000409.170:3523): avc: denied { write } for pid=19360 comm="syz.3.2790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1389.323339][ T30] audit: type=1400 audit(2000000409.180:3524): avc: denied { mount } for pid=19360 comm="syz.3.2790" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1390.674023][T19378] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1391.271092][ T30] audit: type=1400 audit(2000000410.181:3525): avc: denied { create } for pid=19371 comm="syz.4.2787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1391.468676][ T30] audit: type=1400 audit(2000000410.312:3526): avc: denied { write } for pid=19371 comm="syz.4.2787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1391.687396][T19391] Failed to initialize the IGMP autojoin socket (err -2) [ 1392.018764][ T30] audit: type=1400 audit(2000000410.817:3527): avc: denied { read open } for pid=19370 comm="syz.7.2792" path="/" dev="configfs" ino=1099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1392.049373][ T30] audit: type=1400 audit(2000000410.817:3528): avc: denied { create } for pid=19370 comm="syz.7.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1392.734361][ T30] audit: type=1400 audit(2000000410.817:3529): avc: denied { setopt } for pid=19370 comm="syz.7.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1393.062344][ T30] audit: type=1400 audit(2000000410.817:3530): avc: denied { accept } for pid=19370 comm="syz.7.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1393.095419][ T30] audit: type=1400 audit(2000000410.846:3531): avc: denied { mount } for pid=19371 comm="syz.4.2787" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1393.628584][ T30] audit: type=1400 audit(2000000411.398:3532): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1393.648730][ T30] audit: type=1400 audit(2000000411.669:3533): avc: denied { ioctl } for pid=19382 comm="syz.6.2793" path="socket:[61116]" dev="sockfs" ino=61116 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1393.675078][ T30] audit: type=1400 audit(2000000413.026:3534): avc: denied { mount } for pid=19387 comm="syz.3.2796" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1393.794423][T19390] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1394.820498][ T30] audit: type=1400 audit(2000000414.701:3535): avc: denied { read } for pid=19416 comm="syz.5.2801" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1395.075003][ T30] audit: type=1400 audit(2000000414.710:3536): avc: denied { open } for pid=19416 comm="syz.5.2801" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1395.102641][T19421] overlayfs: failed to clone upperpath [ 1395.125412][T19421] netlink: 'syz.7.2800': attribute type 39 has an invalid length. [ 1395.167349][T19423] rdma_op ffff88802bec51f0 conn xmit_rdma 0000000000000000 [ 1396.325779][T19432] mkiss: ax0: crc mode is auto. [ 1396.719467][T19433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2803'. [ 1397.812060][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 1397.812077][ T30] audit: type=1400 audit(2000000417.499:3575): avc: denied { read } for pid=19425 comm="syz.5.2803" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1398.395406][ T30] audit: type=1400 audit(2000000417.518:3576): avc: denied { read } for pid=19442 comm="syz.6.2808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1398.483648][T19449] syz_tun: entered promiscuous mode [ 1398.490320][T19449] macvtap1: entered promiscuous mode [ 1398.750884][ T30] audit: type=1400 audit(2000000417.518:3577): avc: denied { create } for pid=19443 comm="syz.7.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1398.852575][T19456] autofs: Unknown parameter 'f00000000000000000000' [ 1398.880717][T19456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2810'. [ 1398.889836][T19456] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2810'. [ 1399.203245][ T30] audit: type=1400 audit(2000000417.518:3578): avc: denied { create } for pid=19443 comm="syz.7.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1399.223050][ T30] audit: type=1400 audit(2000000417.686:3579): avc: denied { create } for pid=19439 comm="syz.3.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1399.249329][ T30] audit: type=1400 audit(2000000417.733:3580): avc: denied { create } for pid=19443 comm="syz.7.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1399.873799][ T30] audit: type=1400 audit(2000000417.742:3581): avc: denied { create } for pid=19439 comm="syz.3.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1399.971696][ T30] audit: type=1400 audit(2000000417.761:3582): avc: denied { mount } for pid=19439 comm="syz.3.2806" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1400.076810][ T30] audit: type=1400 audit(2000000417.920:3583): avc: denied { read } for pid=19442 comm="syz.6.2808" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1400.125205][ T30] audit: type=1400 audit(2000000417.920:3584): avc: denied { open } for pid=19442 comm="syz.6.2808" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1400.200880][T19476] netlink: 'syz.5.2813': attribute type 39 has an invalid length. [ 1400.335959][T19482] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2812'. [ 1400.346580][T19482] nbd: must specify at least one socket [ 1400.372536][T19480] macvtap6: entered promiscuous mode [ 1400.488403][T19485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2814'. [ 1401.767108][T13874] block nbd0: Possible stuck request ffff8880279b0000: control (read@0,1024B). Runtime 180 seconds [ 1401.777978][T13874] block nbd0: Possible stuck request ffff8880279b0200: control (read@1024,1024B). Runtime 180 seconds [ 1401.797331][T13874] block nbd0: Possible stuck request ffff8880279b0400: control (read@2048,1024B). Runtime 180 seconds [ 1401.808725][T13874] block nbd0: Possible stuck request ffff8880279b0600: control (read@3072,1024B). Runtime 180 seconds [ 1401.870567][T19486] overlayfs: failed to clone upperpath [ 1402.045690][T19486] netlink: 'syz.3.2815': attribute type 39 has an invalid length. [ 1403.402427][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1403.402471][ T30] audit: type=1400 audit(2000000422.262:3616): avc: denied { mount } for pid=19499 comm="syz.7.2821" name="/" dev="autofs" ino=61321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1403.525557][T19500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2820'. [ 1403.534913][T19500] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2820'. [ 1403.733119][T19514] netlink: 'syz.3.2822': attribute type 10 has an invalid length. [ 1403.745403][T19514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1403.754935][T19514] batadv0: entered promiscuous mode [ 1403.761716][T19514] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1404.035979][T19523] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2825'. [ 1404.045225][T19523] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2825'. [ 1404.256949][T19524] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2824'. [ 1404.351620][ T30] audit: type=1400 audit(2000000423.572:3617): avc: denied { allowed } for pid=19513 comm="syz.4.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1404.663667][ T30] audit: type=1400 audit(2000000423.572:3618): avc: denied { create } for pid=19513 comm="syz.4.2823" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1404.872892][ T30] audit: type=1400 audit(2000000423.572:3619): avc: denied { map } for pid=19513 comm="syz.4.2823" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1405.000116][T19534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2826'. [ 1405.009139][T19534] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2826'. [ 1405.018258][T19534] netlink: 'syz.5.2826': attribute type 11 has an invalid length. [ 1405.312156][ T30] audit: type=1400 audit(2000000423.572:3620): avc: denied { read write } for pid=19513 comm="syz.4.2823" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1405.337476][ T30] audit: type=1400 audit(2000000423.610:3621): avc: denied { write } for pid=19513 comm="syz.4.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1405.357280][ T30] audit: type=1400 audit(2000000423.713:3622): avc: denied { read } for pid=19513 comm="syz.4.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1405.409554][ T30] audit: type=1400 audit(2000000424.190:3623): avc: denied { setopt } for pid=19526 comm="syz.5.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1405.444520][T19534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2826'. [ 1405.453467][T19534] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2826'. [ 1405.462393][T19534] netlink: 'syz.5.2826': attribute type 11 has an invalid length. [ 1405.477024][ T30] audit: type=1400 audit(2000000424.218:3624): avc: denied { ioctl } for pid=19526 comm="syz.5.2826" path="socket:[61692]" dev="sockfs" ino=61692 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1405.504463][ T30] audit: type=1400 audit(2000000424.227:3625): avc: denied { bind } for pid=19526 comm="syz.5.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1405.879572][T19537] netlink: 'syz.5.2828': attribute type 39 has an invalid length. [ 1406.394384][T19550] netlink: 'syz.3.2831': attribute type 10 has an invalid length. [ 1406.423412][T19550] netlink: 'syz.3.2831': attribute type 10 has an invalid length. [ 1406.431500][T19550] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2831'. [ 1406.440763][T19550] batadv0: entered allmulticast mode [ 1406.878624][T19550] bond0: (slave batadv0): Releasing backup interface [ 1406.886793][T19550] bridge0: port 4(batadv0) entered blocking state [ 1406.893299][T19550] bridge0: port 4(batadv0) entered disabled state [ 1406.909375][T19548] netlink: 'syz.4.2830': attribute type 39 has an invalid length. [ 1406.926932][ T7863] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1406.936218][ T7863] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1409.168162][T19568] __nla_validate_parse: 1 callbacks suppressed [ 1409.168202][T19568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2836'. [ 1409.184412][T19568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2836'. [ 1409.631642][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1409.631660][ T30] audit: type=1400 audit(2000000428.560:3634): avc: denied { create } for pid=19578 comm="syz.4.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1409.730385][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2839'. [ 1409.808207][T19571] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pid=19571 comm=syz.6.2837 [ 1410.047497][T19585] bridge2: entered promiscuous mode [ 1410.052971][T19585] bridge2: entered allmulticast mode [ 1410.247475][ T30] audit: type=1400 audit(2000000429.056:3635): avc: denied { bind } for pid=19578 comm="syz.4.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1410.368671][T19571] 9p: Could not find request transport: fd0xffffffffffffffff [ 1410.382700][T19589] IPVS: Error during creation of socket; terminating [ 1412.425372][ T30] audit: type=1400 audit(2000000429.056:3636): avc: denied { setopt } for pid=19578 comm="syz.4.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1412.449222][ T30] audit: type=1400 audit(2000000429.056:3637): avc: denied { connect } for pid=19578 comm="syz.4.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1412.474813][ T30] audit: type=1400 audit(2000000429.243:3638): avc: denied { write } for pid=19582 comm="syz.5.2841" name="route" dev="proc" ino=4026533969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1412.498729][ T30] audit: type=1400 audit(2000000431.199:3639): avc: denied { create } for pid=19598 comm="syz.4.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1412.915812][ T30] audit: type=1400 audit(2000000431.330:3640): avc: denied { read } for pid=19598 comm="syz.4.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1412.935761][ T30] audit: type=1400 audit(2000000431.358:3641): avc: denied { sqpoll } for pid=19598 comm="syz.4.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1413.169323][T19609] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2843'. [ 1413.178811][ T30] audit: type=1400 audit(2000000431.873:3642): avc: denied { read write } for pid=19600 comm="syz.5.2843" name="video6" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1413.627726][ T30] audit: type=1400 audit(2000000431.873:3643): avc: denied { open } for pid=19600 comm="syz.5.2843" path="/dev/video6" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1414.384320][T19620] No control pipe specified [ 1414.391456][T19620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2849'. [ 1414.400439][T19620] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2849'. [ 1414.767380][T19630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2851'. [ 1415.252276][T19630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2851'. [ 1415.480578][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1415.480595][ T30] audit: type=1400 audit(2000000434.044:3648): avc: denied { read } for pid=19638 comm="syz.4.2853" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1415.709065][ T30] audit: type=1400 audit(2000000434.044:3649): avc: denied { open } for pid=19638 comm="syz.4.2853" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1416.345938][ T30] audit: type=1400 audit(2000000434.138:3650): avc: denied { prog_load } for pid=19643 comm="syz.3.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1416.379183][ T30] audit: type=1400 audit(2000000434.138:3651): avc: denied { bpf } for pid=19643 comm="syz.3.2855" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1416.405606][ T30] audit: type=1400 audit(2000000434.156:3652): avc: denied { execmem } for pid=19643 comm="syz.3.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1416.439711][ T30] audit: type=1400 audit(2000000434.278:3653): avc: denied { create } for pid=19640 comm="syz.5.2854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1416.517163][ T30] audit: type=1400 audit(2000000434.278:3654): avc: denied { read write } for pid=19640 comm="syz.5.2854" name="video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1416.726687][ T30] audit: type=1400 audit(2000000434.278:3655): avc: denied { ioctl open } for pid=19640 comm="syz.5.2854" path="/dev/video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1417.142455][ T30] audit: type=1400 audit(2000000434.297:3656): avc: denied { read } for pid=19640 comm="syz.5.2854" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1417.499928][ T30] audit: type=1400 audit(2000000434.297:3657): avc: denied { open } for pid=19640 comm="syz.5.2854" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1417.557257][T19658] macvtap2: entered promiscuous mode [ 1417.814173][T19667] No control pipe specified [ 1417.819749][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2861'. [ 1417.828706][T19667] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2861'. [ 1418.127600][T19673] netlink: 'syz.7.2860': attribute type 2 has an invalid length. [ 1418.187132][T19677] netlink: 'syz.6.2859': attribute type 1 has an invalid length. [ 1418.262124][T19678] netlink: 'syz.7.2860': attribute type 2 has an invalid length. [ 1418.553223][T19686] RGB/YUV Input: ================= START STATUS ================= [ 1418.561420][T19686] RGB/YUV Input: Test Pattern: 75% Colorbar [ 1418.567987][T19686] RGB/YUV Input: Show Information: All [ 1418.573573][T19686] RGB/YUV Input: Vertical Flip: false [ 1418.579091][T19686] RGB/YUV Input: Horizontal Flip: false [ 1418.584747][T19686] RGB/YUV Input: Brightness: 128 [ 1418.589910][T19686] RGB/YUV Input: Contrast: 128 [ 1418.624974][T19686] RGB/YUV Input: Hue: 0 [ 1418.629395][T19686] RGB/YUV Input: Saturation: 128 [ 1418.634518][T19686] RGB/YUV Input: ================== END STATUS ================== [ 1418.884879][T19677] bond1: entered promiscuous mode [ 1418.901524][T19677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1418.924314][T19673] !: entered promiscuous mode [ 1419.098042][T19678] !: left promiscuous mode [ 1420.102574][T19709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2869'. [ 1421.108127][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 1421.108148][ T30] audit: type=1400 audit(2000000439.238:3735): avc: denied { create } for pid=19698 comm="syz.5.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1421.827617][ T30] audit: type=1400 audit(2000000439.238:3736): avc: denied { prog_run } for pid=19698 comm="syz.5.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1421.861656][ T30] audit: type=1400 audit(2000000439.238:3737): avc: denied { read write } for pid=19698 comm="syz.5.2868" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1421.885291][ T30] audit: type=1400 audit(2000000439.238:3738): avc: denied { open } for pid=19698 comm="syz.5.2868" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1421.923234][T19720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2872'. [ 1421.934337][ T30] audit: type=1400 audit(2000000439.238:3739): avc: denied { ioctl } for pid=19698 comm="syz.5.2868" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1422.016906][ T30] audit: type=1400 audit(2000000439.275:3740): avc: denied { create } for pid=19723 comm="syz.3.2873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1422.037868][ T30] audit: type=1400 audit(2000000439.425:3741): avc: denied { map_create } for pid=19698 comm="syz.5.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1422.065324][ T30] audit: type=1400 audit(2000000439.425:3742): avc: denied { map_read map_write } for pid=19698 comm="syz.5.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1422.097855][ T30] audit: type=1400 audit(2000000439.490:3743): avc: denied { write } for pid=19723 comm="syz.3.2873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1422.120067][ T30] audit: type=1400 audit(2000000440.005:3744): avc: denied { create } for pid=19716 comm="syz.4.2872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1423.772747][T19747] netlink: 'syz.6.2877': attribute type 10 has an invalid length. [ 1424.053799][T19752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2878'. [ 1424.334376][T19747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1424.343698][T19747] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1425.008652][T12212] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1425.640258][T12212] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1425.653351][T12212] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1425.836444][T12212] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1425.882204][T12212] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1425.896503][T19771] ªªªªªª: renamed from vlan0 [ 1425.912127][T19771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2883'. [ 1425.923691][T19771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2883'. [ 1425.932814][T19771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2883'. [ 1425.942778][T19771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2883'. [ 1425.951739][T19771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2883'. [ 1425.995948][T12212] usb 5-1: Product: syz [ 1426.006729][T12212] usb 5-1: Manufacturer: syz [ 1426.158040][T12212] usb 5-1: SerialNumber: syz [ 1426.586162][T12212] usb 5-1: config 0 descriptor?? [ 1426.599714][T12212] usb 5-1: selecting invalid altsetting 0 [ 1426.897815][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1426.897832][ T30] audit: type=1400 audit(2000000444.721:3765): avc: denied { write } for pid=19757 comm="syz.4.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1427.466161][ T30] audit: type=1400 audit(2000000444.834:3766): avc: denied { read } for pid=19757 comm="syz.4.2880" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1427.564800][T19790] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2887'. [ 1427.945862][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.966872][T19788] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2888'. [ 1427.975883][T19788] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2888'. [ 1428.013812][ T30] audit: type=1400 audit(2000000444.834:3767): avc: denied { open } for pid=19757 comm="syz.4.2880" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1428.038862][ T30] audit: type=1400 audit(2000000445.339:3768): avc: denied { read } for pid=19784 comm="syz.6.2887" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1428.067634][ T30] audit: type=1400 audit(2000000445.348:3769): avc: denied { open } for pid=19784 comm="syz.6.2887" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1428.091858][ T30] audit: type=1400 audit(2000000445.348:3770): avc: denied { ioctl } for pid=19784 comm="syz.6.2887" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1428.130490][T12212] usb 5-1: USB disconnect, device number 18 [ 1428.188053][ T30] audit: type=1400 audit(2000000445.348:3771): avc: denied { create } for pid=19784 comm="syz.6.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1428.406678][ T30] audit: type=1400 audit(2000000445.348:3772): avc: denied { write } for pid=19784 comm="syz.6.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1428.428247][ T30] audit: type=1400 audit(2000000445.348:3773): avc: denied { nlmsg_read } for pid=19784 comm="syz.6.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1428.532296][ T30] audit: type=1400 audit(2000000446.228:3774): avc: denied { create } for pid=19791 comm="syz.7.2889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1429.985043][T19810] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2892'. [ 1430.075250][T19815] netlink: 'syz.5.2893': attribute type 39 has an invalid length. [ 1430.452931][T19819] netlink: 'syz.6.2896': attribute type 39 has an invalid length. [ 1430.928386][T12523] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1431.233870][T12523] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 1431.264460][T12523] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.902672][T12523] usb 5-1: config 0 has no interfaces? [ 1431.919299][T12523] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1431.931667][T12523] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.933333][T12523] usb 5-1: config 0 descriptor?? [ 1433.005581][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1433.005599][ T30] audit: type=1400 audit(2000000449.457:3790): avc: denied { create } for pid=19834 comm="syz.3.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1433.659771][T12523] usb 5-1: can't set config #0, error -71 [ 1433.676158][T12523] usb 5-1: USB disconnect, device number 19 [ 1433.897491][ T30] audit: type=1400 audit(2000000449.457:3791): avc: denied { write } for pid=19834 comm="syz.3.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1434.022389][ T30] audit: type=1400 audit(2000000449.681:3792): avc: denied { read write } for pid=19831 comm="syz.6.2899" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1434.349574][ T30] audit: type=1400 audit(2000000449.681:3793): avc: denied { open } for pid=19831 comm="syz.6.2899" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1434.421012][T13874] block nbd0: Possible stuck request ffff8880279b0000: control (read@0,1024B). Runtime 210 seconds [ 1434.431936][T13874] block nbd0: Possible stuck request ffff8880279b0200: control (read@1024,1024B). Runtime 210 seconds [ 1434.443324][T13874] block nbd0: Possible stuck request ffff8880279b0400: control (read@2048,1024B). Runtime 210 seconds [ 1434.455247][T13874] block nbd0: Possible stuck request ffff8880279b0600: control (read@3072,1024B). Runtime 210 seconds [ 1434.467382][ T30] audit: type=1400 audit(2000000451.085:3794): avc: denied { append } for pid=19844 comm="syz.6.2904" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1434.491416][ T30] audit: type=1400 audit(2000000451.291:3795): avc: denied { setopt } for pid=19838 comm="syz.5.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1434.513955][ T30] audit: type=1400 audit(2000000451.300:3796): avc: denied { accept } for pid=19838 comm="syz.5.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1434.534498][ T30] audit: type=1400 audit(2000000451.300:3797): avc: denied { write } for pid=19838 comm="syz.5.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1434.554102][ T30] audit: type=1400 audit(2000000451.300:3798): avc: denied { read } for pid=19838 comm="syz.5.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1434.616608][T19858] netlink: 'syz.6.2906': attribute type 39 has an invalid length. [ 1435.237690][T19867] netlink: 'syz.6.2907': attribute type 39 has an invalid length. [ 1436.320061][T19875] overlayfs: failed to clone upperpath [ 1436.500167][T19875] netlink: 'syz.3.2909': attribute type 39 has an invalid length. [ 1437.803617][ T30] audit: type=1400 audit(2000000454.875:3799): avc: denied { create } for pid=19887 comm="syz.4.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1437.935656][T19894] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2914'. [ 1439.551047][T19910] No control pipe specified [ 1439.709531][T19910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2918'. [ 1439.719208][T19910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2918'. [ 1442.501531][T15667] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1444.060606][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1444.060625][ T30] audit: type=1400 audit(2000000460.518:3801): avc: denied { write } for pid=19947 comm="syz.4.2929" name="mcfilter" dev="proc" ino=4026532992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1444.122987][T19955] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2930'. [ 1444.184518][T19960] overlayfs: failed to clone upperpath [ 1444.190240][ T30] audit: type=1400 audit(2000000460.658:3802): avc: denied { read } for pid=19950 comm="syz.5.2930" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1444.294452][T19960] netlink: 'syz.7.2931': attribute type 39 has an invalid length. [ 1444.318211][ T30] audit: type=1400 audit(2000000460.658:3803): avc: denied { open } for pid=19950 comm="syz.5.2930" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1444.465208][ T30] audit: type=1400 audit(2000000460.864:3804): avc: denied { read } for pid=19950 comm="syz.5.2930" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1444.745703][ T30] audit: type=1400 audit(2000000460.864:3805): avc: denied { open } for pid=19950 comm="syz.5.2930" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1444.838251][ T30] audit: type=1400 audit(2000000460.864:3806): avc: denied { ioctl } for pid=19950 comm="syz.5.2930" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1445.055374][ T30] audit: type=1400 audit(2000000460.864:3807): avc: denied { read } for pid=19950 comm="syz.5.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1445.250195][ T30] audit: type=1400 audit(2000000460.986:3808): avc: denied { read } for pid=19947 comm="syz.4.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1445.270458][ T30] audit: type=1400 audit(2000000461.304:3809): avc: denied { create } for pid=19963 comm="syz.7.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1445.291154][ T30] audit: type=1400 audit(2000000461.304:3810): avc: denied { bind } for pid=19963 comm="syz.7.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1448.163588][T19998] netlink: 'syz.6.2939': attribute type 10 has an invalid length. [ 1448.746616][T20008] overlayfs: failed to clone upperpath [ 1448.802533][T20009] netlink: 'syz.3.2942': attribute type 39 has an invalid length. [ 1449.158700][T20017] macvtap7: entered promiscuous mode [ 1449.469878][T20026] netlink: 'syz.7.2948': attribute type 2 has an invalid length. [ 1449.864062][T20027] overlayfs: failed to clone upperpath [ 1449.872372][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1449.872397][ T30] audit: type=1326 audit(2000000466.226:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0c39c799 code=0x7ffc0000 [ 1450.059836][ T30] audit: type=1326 audit(2000000466.254:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0c39c799 code=0x7ffc0000 [ 1450.084848][ T30] audit: type=1326 audit(2000000466.254:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f0a0c39c799 code=0x7ffc0000 [ 1450.180770][T20025] netlink: 'syz.3.2947': attribute type 39 has an invalid length. [ 1450.223292][ T30] audit: type=1326 audit(2000000466.254:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0c39c799 code=0x7ffc0000 [ 1450.483255][ T30] audit: type=1326 audit(2000000466.254:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0c39c799 code=0x7ffc0000 [ 1450.538565][ T30] audit: type=1326 audit(2000000466.254:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f0a0c39c799 code=0x7ffc0000 [ 1450.631239][T20038] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2949'. [ 1451.222350][ T30] audit: type=1326 audit(2000000466.254:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0c39c799 code=0x7ffc0000 [ 1451.292094][T20042] overlayfs: failed to clone upperpath [ 1451.428195][ T30] audit: type=1326 audit(2000000466.254:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a0c39c799 code=0x7ffc0000 [ 1451.450608][T20045] netlink: 'syz.7.2952': attribute type 39 has an invalid length. [ 1451.509363][ T30] audit: type=1326 audit(2000000466.254:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0c39c799 code=0x7ffc0000 [ 1451.581859][ T30] audit: type=1326 audit(2000000466.254:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0a0c39c799 code=0x7ffc0000 [ 1451.885024][T20049] netlink: 'syz.6.2953': attribute type 39 has an invalid length. [ 1451.998540][T20051] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2954'. [ 1452.896812][T20062] netlink: 'syz.5.2956': attribute type 39 has an invalid length. [ 1453.377569][T20072] rdma_op ffff888033e6a9f0 conn xmit_rdma 0000000000000000 [ 1453.540608][T20078] netlink: 'syz.4.2960': attribute type 10 has an invalid length. [ 1454.068252][T20078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1454.091211][T20078] batadv0: entered promiscuous mode [ 1454.097459][T20078] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1454.236638][T20077] overlayfs: failed to clone upperpath [ 1454.359675][T20077] netlink: 'syz.3.2961': attribute type 39 has an invalid length. [ 1454.919332][T20089] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2962'. [ 1455.804695][T20094] Failed to initialize the IGMP autojoin socket (err -2) [ 1455.845301][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1455.845313][ T30] audit: type=1400 audit(2000000471.813:3864): avc: denied { mounton } for pid=20093 comm="syz.3.2964" path="/694/file0" dev="tmpfs" ino=3790 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1456.166725][ T30] audit: type=1400 audit(2000000472.112:3865): avc: denied { create } for pid=20100 comm="syz.3.2967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1456.220775][ T30] audit: type=1400 audit(2000000472.140:3866): avc: denied { create } for pid=20100 comm="syz.3.2967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1456.288528][T20101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2967'. [ 1456.512496][T20111] autofs: Unknown parameter 'fd00000000000000000000' [ 1457.096120][ T30] audit: type=1400 audit(2000000472.543:3867): avc: denied { connect } for pid=20107 comm="syz.4.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1457.227912][ T30] audit: type=1400 audit(2000000472.955:3868): avc: denied { unlink } for pid=7156 comm="syz-executor" name="file2" dev="tmpfs" ino=2893 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1457.986023][T20126] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2974'. [ 1458.387904][T20131] netlink: 'syz.5.2976': attribute type 10 has an invalid length. [ 1458.402290][T20131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1458.410547][T20131] batadv0: entered promiscuous mode [ 1458.418206][T20131] .`: (slave batadv0): Enslaving as an active interface with an up link [ 1459.035880][ T30] audit: type=1400 audit(2000000474.714:3869): avc: denied { setopt } for pid=20136 comm="syz.6.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1459.381719][T20148] netlink: 'syz.7.2980': attribute type 10 has an invalid length. [ 1459.389668][ T30] audit: type=1400 audit(2000000474.723:3870): avc: denied { write } for pid=20136 comm="syz.6.2977" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1459.389716][ T30] audit: type=1400 audit(2000000474.742:3871): avc: denied { ioctl } for pid=20136 comm="syz.6.2977" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1459.496099][T20147] sit1: entered allmulticast mode [ 1459.663305][T15667] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1459.796891][T20148] bridge0: port 4(batadv0) entered disabled state [ 1459.867867][T20148] batadv0: left allmulticast mode [ 1459.872984][T20148] batadv0: left promiscuous mode [ 1459.965345][T20148] bridge0: port 4(batadv0) entered disabled state [ 1460.649276][T20148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1460.738855][T20148] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1461.220246][ T30] audit: type=1400 audit(2000000476.829:3872): avc: denied { read } for pid=20164 comm="syz.4.2983" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1461.397640][ T30] audit: type=1400 audit(2000000476.829:3873): avc: denied { open } for pid=20164 comm="syz.4.2983" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1461.584269][T20169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2983'. [ 1462.442201][ T30] audit: type=1400 audit(2000000477.194:3874): avc: denied { write } for pid=20164 comm="syz.4.2983" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1462.466318][ T30] audit: type=1400 audit(2000000477.203:3875): avc: denied { ioctl } for pid=20164 comm="syz.4.2983" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x450a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1463.693976][T20171] Failed to initialize the IGMP autojoin socket (err -2) [ 1464.524794][ T5180] udevd[5180]: worker [17003] /devices/virtual/block/nbd0 timeout; kill it [ 1464.680268][ T5180] udevd[5180]: seq 17413 '/devices/virtual/block/nbd0' killed [ 1465.131613][T20182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1465.155785][ T30] audit: type=1400 audit(2000000480.506:3876): avc: denied { setattr } for pid=20174 comm="syz.5.2986" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1465.399053][ T30] audit: type=1400 audit(2000000480.750:3877): avc: denied { getopt } for pid=20174 comm="syz.5.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1465.408035][T20188] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2988'. [ 1465.492751][T20190] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2989'. [ 1466.200975][T20188] nbd: must specify at least one socket [ 1466.545764][T13874] block nbd0: Possible stuck request ffff8880279b0000: control (read@0,1024B). Runtime 240 seconds [ 1466.997270][T13874] block nbd0: Possible stuck request ffff8880279b0200: control (read@1024,1024B). Runtime 240 seconds [ 1467.008844][T13874] block nbd0: Possible stuck request ffff8880279b0400: control (read@2048,1024B). Runtime 240 seconds [ 1467.020287][T13874] block nbd0: Possible stuck request ffff8880279b0600: control (read@3072,1024B). Runtime 240 seconds [ 1467.603235][T20214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2993'. [ 1467.612183][T20214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2993'. [ 1467.621324][T20214] netlink: 'syz.3.2993': attribute type 11 has an invalid length. [ 1467.891678][ T30] audit: type=1400 audit(2000000482.780:3878): avc: denied { setopt } for pid=20201 comm="syz.3.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1467.895154][T20214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2993'. [ 1467.922902][T20214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2993'. [ 1467.932200][T20214] netlink: 'syz.3.2993': attribute type 11 has an invalid length. [ 1468.057693][T20215] autofs: Unknown parameter 'fd00000000000000000000' [ 1468.478585][ T30] audit: type=1400 audit(2000000482.809:3879): avc: denied { ioctl } for pid=20201 comm="syz.3.2993" path="socket:[64968]" dev="sockfs" ino=64968 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1468.621757][T20217] overlayfs: failed to clone upperpath [ 1468.629068][T20217] netlink: 'syz.7.2995': attribute type 39 has an invalid length. [ 1468.677991][ T30] audit: type=1400 audit(2000000482.809:3880): avc: denied { bind } for pid=20201 comm="syz.3.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1471.938494][T20255] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3004'. [ 1471.947850][T20255] nbd: must specify at least one socket [ 1473.471860][ T30] audit: type=1400 audit(2000000488.152:3881): avc: denied { read write } for pid=20262 comm="syz.4.3007" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1473.473548][T20271] fuse: Bad value for 'fd' [ 1473.667002][T20274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3008'. [ 1473.676007][T20274] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3008'. [ 1473.685006][T20274] netlink: 'syz.6.3008': attribute type 11 has an invalid length. [ 1474.281183][ T30] audit: type=1400 audit(2000000488.189:3882): avc: denied { open } for pid=20262 comm="syz.4.3007" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1474.308662][ T30] audit: type=1400 audit(2000000488.536:3883): avc: denied { create } for pid=20260 comm="syz.3.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1474.335208][ T30] audit: type=1400 audit(2000000488.545:3884): avc: denied { sys_admin } for pid=20260 comm="syz.3.3006" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1474.389163][T20280] overlayfs: failed to clone upperpath [ 1474.433453][T20274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3008'. [ 1474.442355][T20274] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3008'. [ 1474.451314][T20274] netlink: 'syz.6.3008': attribute type 11 has an invalid length. [ 1474.738739][T20277] netlink: 'syz.5.3009': attribute type 39 has an invalid length. [ 1474.769319][T20280] netlink: 'syz.3.3010': attribute type 39 has an invalid length. [ 1475.148216][T20300] netlink: 'syz.6.3012': attribute type 10 has an invalid length. [ 1475.168098][T20300] netlink: 'syz.6.3012': attribute type 10 has an invalid length. [ 1475.176016][T20300] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3012'. [ 1475.747633][T20300] batadv0: entered promiscuous mode [ 1475.755814][T20300] batadv0: entered allmulticast mode [ 1475.782735][ T30] audit: type=1400 audit(2000000489.864:3885): avc: denied { read } for pid=20289 comm="syz.6.3012" name="binder0" dev="binder" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1476.226734][ T30] audit: type=1400 audit(2000000489.864:3886): avc: denied { open } for pid=20289 comm="syz.6.3012" path="/dev/binderfs/binder0" dev="binder" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1476.351564][T20300] bond0: (slave batadv0): Releasing backup interface [ 1476.376252][T20300] bridge0: port 3(batadv0) entered blocking state [ 1476.382750][T20300] bridge0: port 3(batadv0) entered disabled state [ 1476.910413][ T30] audit: type=1400 audit(2000000489.874:3887): avc: denied { ioctl } for pid=20289 comm="syz.6.3012" path="/dev/binderfs/binder0" dev="binder" ino=15 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1476.936253][ T30] audit: type=1400 audit(2000000491.109:3888): avc: denied { read write } for pid=20292 comm="syz.4.3014" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1476.937469][T13004] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1476.970187][T13004] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1477.131183][ T30] audit: type=1400 audit(2000000491.109:3889): avc: denied { open } for pid=20292 comm="syz.4.3014" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1477.342513][ T30] audit: type=1400 audit(2000000491.118:3890): avc: denied { ioctl } for pid=20292 comm="syz.4.3014" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1477.440869][T20315] netlink: 'syz.6.3016': attribute type 39 has an invalid length. [ 1479.173989][ T30] audit: type=1400 audit(2000000493.271:3891): avc: denied { listen } for pid=20318 comm="syz.3.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1479.197310][T20330] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3019'. [ 1479.206569][T20330] nbd: must specify at least one socket [ 1481.729831][T12523] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1481.802456][T20354] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3024'. [ 1481.885324][ T30] audit: type=1400 audit(2000000496.181:3892): avc: denied { connect } for pid=20337 comm="syz.4.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1481.939126][T20338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3023'. [ 1481.967102][ T30] audit: type=1400 audit(2000000496.209:3893): avc: denied { shutdown } for pid=20337 comm="syz.4.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1481.976931][T12523] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1482.209842][T20360] sit2: entered allmulticast mode [ 1482.369806][T12523] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1482.602104][ T30] audit: type=1400 audit(2000000496.855:3894): avc: denied { read } for pid=20364 comm="syz.4.3028" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1482.797609][T12523] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.809661][ T30] audit: type=1400 audit(2000000496.855:3895): avc: denied { open } for pid=20364 comm="syz.4.3028" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1482.903957][ T30] audit: type=1400 audit(2000000497.023:3896): avc: denied { create } for pid=20364 comm="syz.4.3028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1483.107552][T20372] bridge0: port 4(syz_tun) entered blocking state [ 1483.114479][T20372] bridge0: port 4(syz_tun) entered disabled state [ 1483.121817][T20372] syz_tun: entered allmulticast mode [ 1483.136412][T20372] syz_tun: left allmulticast mode [ 1483.164719][T20372] netlink: 'syz.6.3029': attribute type 10 has an invalid length. [ 1483.532700][T12523] usb 6-1: config 0 descriptor?? [ 1483.564044][T20372] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1483.573637][ T30] audit: type=1400 audit(2000000497.033:3897): avc: denied { listen } for pid=20364 comm="syz.4.3028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1483.599862][ T30] audit: type=1400 audit(2000000497.033:3898): avc: denied { ioctl } for pid=20364 comm="syz.4.3028" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1483.697742][ T30] audit: type=1400 audit(2000000497.136:3899): avc: denied { setopt } for pid=20364 comm="syz.4.3028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1483.920546][ T30] audit: type=1400 audit(2000000497.248:3900): avc: denied { read } for pid=20369 comm="syz.6.3029" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1484.712144][T20381] sit2: entered allmulticast mode [ 1485.025533][T20385] tmpfs: Bad value for 'mpol' [ 1485.215031][T20388] macvtap8: entered promiscuous mode [ 1485.329764][T20391] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3034'. [ 1485.338864][T20391] nbd: must specify at least one socket [ 1485.673304][T12523] usbhid 6-1:0.0: can't add hid device: -71 [ 1485.683721][T12523] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1485.717147][T12523] usb 6-1: USB disconnect, device number 25 [ 1485.935262][T20395] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1486.080592][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1486.080610][ T30] audit: type=1400 audit(2000000500.102:3903): avc: denied { read } for pid=20392 comm="syz.5.3035" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1486.126934][ T30] audit: type=1400 audit(2000000500.102:3904): avc: denied { open } for pid=20392 comm="syz.5.3035" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1486.363800][T20407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3039'. [ 1487.830371][T20426] netlink: 'syz.3.3041': attribute type 2 has an invalid length. [ 1487.868733][ T30] audit: type=1400 audit(2000000501.740:3905): avc: denied { mount } for pid=20420 comm="syz.3.3041" name="/" dev="hugetlbfs" ino=65879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1487.922049][T20428] netlink: 'syz.4.3042': attribute type 2 has an invalid length. [ 1488.129810][ T30] audit: type=1400 audit(2000000501.908:3906): avc: denied { write } for pid=20422 comm="syz.4.3042" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1488.325110][T20432] overlayfs: failed to clone upperpath [ 1488.382210][T20432] netlink: 'syz.3.3044': attribute type 39 has an invalid length. [ 1488.700765][ T30] audit: type=1400 audit(2000000502.545:3907): avc: denied { ioctl } for pid=20437 comm="syz.6.3045" path="socket:[65441]" dev="sockfs" ino=65441 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1489.099541][ T30] audit: type=1400 audit(2000000502.563:3908): avc: denied { mount } for pid=20437 comm="syz.6.3045" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1489.137412][T20436] sit1: entered allmulticast mode [ 1489.144372][T20443] autofs: Unknown parameter 'fd00000000000000000000' [ 1489.670958][ T30] audit: type=1400 audit(2000000503.462:3909): avc: denied { unmount } for pid=7787 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1489.694919][T20452] fuse: Unknown parameter 'fl' [ 1489.890097][T20454] autofs: Unknown parameter 'fd00000000000000000000' [ 1490.386201][T20461] netlink: 'syz.4.3050': attribute type 10 has an invalid length. [ 1490.589664][T20464] netlink: 'syz.4.3050': attribute type 10 has an invalid length. [ 1490.597573][T20464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3050'. [ 1490.621162][T20464] batadv0: entered allmulticast mode [ 1490.980178][T20464] bond0: (slave batadv0): Releasing backup interface [ 1491.059661][T20464] bridge0: port 3(batadv0) entered blocking state [ 1491.066148][T20464] bridge0: port 3(batadv0) entered disabled state [ 1491.884799][ T30] audit: type=1400 audit(2000000505.399:3910): avc: denied { connect } for pid=20465 comm="syz.3.3052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1492.584251][T18226] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1492.593617][T18226] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1492.812589][ T30] audit: type=1400 audit(2000000506.400:3911): avc: denied { create } for pid=20475 comm="syz.4.3055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1493.263751][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1493.311370][ T30] audit: type=1400 audit(2000000506.400:3912): avc: denied { write } for pid=20475 comm="syz.4.3055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1493.786379][T20487] netlink: 'syz.6.3058': attribute type 39 has an invalid length. [ 1493.971291][T20490] autofs: Unknown parameter 'fd00000000000000000000' [ 1495.325307][ T30] audit: type=1400 audit(2000000508.412:3913): avc: denied { create } for pid=20492 comm="syz.6.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1495.429325][ T30] audit: type=1400 audit(2000000508.421:3914): avc: denied { ioctl } for pid=20492 comm="syz.6.3062" path="socket:[66584]" dev="sockfs" ino=66584 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1495.601877][ T30] audit: type=1400 audit(2000000508.431:3915): avc: denied { bind } for pid=20492 comm="syz.6.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1495.716396][T20506] autofs: Unknown parameter 'fd00000000000000000000' [ 1496.041262][T20508] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3064'. [ 1496.057220][T20508] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3064'. [ 1496.247295][T20512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3065'. [ 1497.278856][T20529] kAFS: No cell specified [ 1497.956082][T20536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3068'. [ 1498.438021][ T30] audit: type=1400 audit(2000000511.238:3916): avc: denied { bind } for pid=20525 comm="syz.5.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1499.661809][T18491] udevd[18491]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1499.675519][T17050] udevd[17050]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1500.115631][T13874] block nbd0: Possible stuck request ffff8880279b0000: control (read@0,1024B). Runtime 270 seconds [ 1500.129524][T13874] block nbd0: Possible stuck request ffff8880279b0200: control (read@1024,1024B). Runtime 270 seconds [ 1500.143007][T13874] block nbd0: Possible stuck request ffff8880279b0400: control (read@2048,1024B). Runtime 270 seconds [ 1500.154137][T13874] block nbd0: Possible stuck request ffff8880279b0600: control (read@3072,1024B). Runtime 270 seconds [ 1500.639791][T20553] autofs: Unknown parameter 'fd00000000000000000000' [ 1501.543332][T20560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3073'. [ 1503.226513][T20568] overlayfs: failed to clone upperpath [ 1503.908196][ T30] audit: type=1400 audit(2000000516.432:3917): avc: denied { create } for pid=20569 comm="syz.4.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1503.937638][ T30] audit: type=1400 audit(2000000516.441:3918): avc: denied { setopt } for pid=20569 comm="syz.4.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1503.941006][T20568] netlink: 'syz.3.3076': attribute type 39 has an invalid length. [ 1503.963100][ T30] audit: type=1400 audit(2000000516.460:3919): avc: denied { create } for pid=20569 comm="syz.4.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1506.209700][T20587] kAFS: No cell specified [ 1508.577143][T20601] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1509.107184][ T30] audit: type=1400 audit(2000000521.420:3920): avc: denied { ioctl } for pid=20607 comm="syz.5.3085" path="socket:[66287]" dev="sockfs" ino=66287 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1509.273648][T20617] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.3088'. [ 1511.377470][T20620] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 1511.637650][ T30] audit: type=1400 audit(2000000523.769:3921): avc: denied { bind } for pid=20607 comm="syz.5.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1511.741087][ T30] audit: type=1400 audit(2000000523.778:3922): avc: denied { read } for pid=20607 comm="syz.5.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1511.760948][ T30] audit: type=1400 audit(2000000523.778:3923): avc: denied { write } for pid=20607 comm="syz.5.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1511.782711][ T30] audit: type=1400 audit(2000000524.115:3924): avc: denied { getopt } for pid=20622 comm="syz.4.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1513.089318][T20639] netlink: 'syz.3.3093': attribute type 10 has an invalid length. [ 1513.098248][T20639] batadv0: left allmulticast mode [ 1513.103294][T20639] batadv0: left promiscuous mode [ 1513.925193][T20641] ubi: mtd0 is already attached to ubi31 [ 1513.969847][ T30] audit: type=1400 audit(2000000526.164:3925): avc: denied { append } for pid=20631 comm="syz.6.3094" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1514.382957][T20639] bridge0: port 4(batadv0) entered disabled state [ 1514.912121][ T30] audit: type=1400 audit(2000000527.053:3926): avc: denied { sqpoll } for pid=20647 comm="syz.4.3095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1515.580053][T20639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1515.597715][T20639] batadv0: entered promiscuous mode [ 1515.603564][T20639] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1516.759085][T20671] openvswitch: netlink: Unknown nsh attribute 0 [ 1518.525908][ T30] audit: type=1400 audit(2000000530.431:3927): avc: denied { block_suspend } for pid=20663 comm="syz.7.3098" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1519.365862][T20692] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1520.222545][T20698] netlink: 'syz.6.3104': attribute type 39 has an invalid length. [ 1520.517882][T20708] netlink: 'syz.5.3105': attribute type 39 has an invalid length. [ 1523.051628][T20731] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3112'. [ 1523.060828][T20731] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3112'. [ 1523.737989][T20735] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3113'. [ 1523.827079][ T30] audit: type=1400 audit(2000000535.363:3928): avc: denied { unmount } for pid=20730 comm="syz.7.3113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1525.616956][ T30] audit: type=1400 audit(2000000536.654:3929): avc: denied { mount } for pid=20738 comm="syz.7.3115" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1527.384071][T20771] overlayfs: failed to clone upperpath [ 1527.426772][T20771] netlink: 'syz.7.3121': attribute type 39 has an invalid length. [ 1527.663087][T20777] macvtap2: entered promiscuous mode [ 1528.286223][ T30] audit: type=1326 audit(2000000539.602:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20782 comm="syz.5.3123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2af3f9c799 code=0x0 [ 1528.312176][T20786] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3124'. [ 1528.321301][T20786] nbd: must specify at least one socket [ 1530.431262][ T30] audit: type=1400 audit(2000000541.324:3931): avc: denied { bind } for pid=20809 comm="syz.6.3130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1530.854588][ T30] audit: type=1400 audit(2000000541.324:3932): avc: denied { connect } for pid=20809 comm="syz.6.3130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1532.509889][T13874] block nbd0: Possible stuck request ffff8880279b0000: control (read@0,1024B). Runtime 300 seconds [ 1532.520674][T13874] block nbd0: Possible stuck request ffff8880279b0200: control (read@1024,1024B). Runtime 300 seconds [ 1532.531835][T13874] block nbd0: Possible stuck request ffff8880279b0400: control (read@2048,1024B). Runtime 300 seconds [ 1532.542974][T13874] block nbd0: Possible stuck request ffff8880279b0600: control (read@3072,1024B). Runtime 300 seconds [ 1532.554126][ T30] audit: type=1400 audit(2000000542.709:3933): avc: denied { create } for pid=20819 comm="syz.6.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1532.951020][T20830] macvtap1: left promiscuous mode [ 1532.959897][T20830] macvtap2: left promiscuous mode [ 1532.968465][T20830] macvtap3: left promiscuous mode [ 1532.973700][T20830] syz_tun: left promiscuous mode [ 1533.061899][T20830] Failed to initialize the IGMP autojoin socket (err -2) [ 1534.873513][T20839] overlayfs: failed to clone upperpath [ 1534.901177][T20839] netlink: 'syz.7.3135': attribute type 39 has an invalid length. [ 1535.232524][T20848] netlink: 'syz.3.3137': attribute type 10 has an invalid length. [ 1535.468898][T20854] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3138'. [ 1535.478121][T20854] nbd: must specify at least one socket [ 1536.152787][ T30] audit: type=1400 audit(2000000546.958:3934): avc: denied { write } for pid=20861 comm="syz.4.3140" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1536.611821][ T30] audit: type=1400 audit(2000000547.313:3935): avc: denied { write } for pid=20861 comm="syz.4.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1536.950598][ T30] audit: type=1400 audit(2000000547.641:3936): avc: denied { write } for pid=20873 comm="syz.6.3144" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1537.228904][T20883] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3145'. [ 1538.057480][ T30] audit: type=1400 audit(2000000548.745:3937): avc: denied { create } for pid=20884 comm="syz.7.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1538.185939][ T30] audit: type=1400 audit(2000000548.876:3938): avc: denied { write } for pid=20884 comm="syz.7.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1538.355988][T20889] netlink: 'syz.5.3147': attribute type 39 has an invalid length. [ 1539.482312][T20902] siw: device registration error -23 [ 1539.910613][T20906] netlink: 'syz.6.3151': attribute type 39 has an invalid length. [ 1541.505726][T20915] syz.5.3152 (20915): drop_caches: 2 [ 1541.683379][T20918] netlink: 'syz.4.3154': attribute type 4 has an invalid length. [ 1541.692291][T20918] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3154'. [ 1542.022296][T20918] .`: renamed from bond0 (while UP) [ 1542.298451][T18568] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1542.501647][T18568] usb 5-1: device descriptor read/64, error -71 [ 1543.218595][ T30] audit: type=1400 audit(2000000553.256:3939): avc: denied { accept } for pid=20928 comm="syz.6.3158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1543.270786][T18568] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1544.079874][ T30] audit: type=1400 audit(2000000554.379:3940): avc: denied { setopt } for pid=20936 comm="syz.4.3160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1544.213764][ T30] audit: type=1400 audit(2000000554.472:3941): avc: denied { create } for pid=20934 comm="syz.3.3159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1546.481642][T20971] netlink: 'syz.7.3164': attribute type 10 has an invalid length. [ 1547.060563][T15667] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1548.969508][T20997] netlink: 'syz.7.3170': attribute type 2 has an invalid length. [ 1548.985377][T20997] !: entered promiscuous mode [ 1549.000298][T20997] netlink: 'syz.7.3170': attribute type 2 has an invalid length. [ 1549.785682][T21007] netlink: 'syz.5.3172': attribute type 30 has an invalid length. [ 1549.942176][T21009] netlink: 'syz.5.3172': attribute type 30 has an invalid length. [ 1550.291058][T21014] Failed to initialize the IGMP autojoin socket (err -2) [ 1550.320019][ T30] audit: type=1400 audit(2000000560.190:3942): avc: denied { setcurrent } for pid=21011 comm="syz.6.3174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1550.390305][ T30] audit: type=1401 audit(2000000560.190:3943): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1550.852963][ T30] audit: type=1400 audit(2000000560.190:3944): avc: denied { bind } for pid=21011 comm="syz.6.3174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1551.940235][T21044] netlink: 'syz.7.3180': attribute type 10 has an invalid length. [ 1552.537644][T15667] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1553.371213][T21056] netlink: 'syz.5.3184': attribute type 39 has an invalid length. [ 1553.387360][T21057] netlink: 'syz.6.3183': attribute type 39 has an invalid length. [ 1555.003156][T21070] netlink: 'syz.7.3187': attribute type 10 has an invalid length. [ 1555.075948][T15667] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1555.758780][ T30] audit: type=1400 audit(2000000565.309:3945): avc: denied { create } for pid=21075 comm="syz.4.3190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1555.812100][T21077] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3190'. [ 1555.823377][T21077] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21077 comm=syz.4.3190 [ 1555.838325][T21077] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21077 comm=syz.4.3190 [ 1555.875128][ T30] audit: type=1400 audit(2000000565.309:3946): avc: denied { ioctl } for pid=21075 comm="syz.4.3190" path="socket:[68321]" dev="sockfs" ino=68321 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1556.129447][ T30] audit: type=1400 audit(2000000565.552:3947): avc: denied { write } for pid=21079 comm="syz.5.3191" path="socket:[68760]" dev="sockfs" ino=68760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1556.461057][T21089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3193'. [ 1557.902717][T21101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1558.874862][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1559.941898][T21105] netlink: 'syz.6.3195': attribute type 10 has an invalid length. [ 1559.965800][T21105] batadv0: left allmulticast mode [ 1559.970890][T21105] batadv0: left promiscuous mode [ 1560.012846][T21105] bridge0: port 3(batadv0) entered disabled state [ 1560.804048][ T30] audit: type=1400 audit(2000000570.025:3948): avc: denied { mount } for pid=21107 comm="syz.7.3197" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1561.331755][T21105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1561.362810][T21105] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1561.624032][T21128] overlayfs: failed to clone upperpath [ 1561.818546][T21129] sp0: Synchronizing with TNC [ 1561.917151][T21129] hsr2: left promiscuous mode [ 1561.924317][T21129] geneve2: left promiscuous mode [ 1561.934885][T21129] geneve3: left promiscuous mode [ 1562.230271][T21129] bridge2: left promiscuous mode [ 1562.604983][T21129] Failed to initialize the IGMP autojoin socket (err -2) [ 1562.663712][ T30] audit: type=1400 audit(2000000571.204:3949): avc: denied { write } for pid=21124 comm="syz.7.3201" name="file0" dev="tmpfs" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1562.700157][ T30] audit: type=1400 audit(2000000571.232:3950): avc: denied { open } for pid=21124 comm="syz.7.3201" path="/367/file0" dev="tmpfs" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1563.110906][ T30] audit: type=1400 audit(2000000571.812:3951): avc: denied { read } for pid=5475 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1563.603429][T21128] netlink: 'syz.3.3198': attribute type 39 has an invalid length. [ 1563.620714][ T30] audit: type=1400 audit(2000000572.599:3952): avc: denied { search } for pid=5475 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1563.642333][ T30] audit: type=1400 audit(2000000572.599:3953): avc: denied { search } for pid=5475 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1563.669922][ T30] audit: type=1400 audit(2000000572.599:3954): avc: denied { search } for pid=5475 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1563.692644][ T30] audit: type=1400 audit(2000000572.599:3955): avc: denied { read } for pid=5475 comm="dhcpcd" name="n126" dev="tmpfs" ino=12435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1563.819580][ T30] audit: type=1400 audit(2000000572.599:3956): avc: denied { open } for pid=5475 comm="dhcpcd" path="/run/udev/data/n126" dev="tmpfs" ino=12435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1563.848144][ T30] audit: type=1400 audit(2000000572.599:3957): avc: denied { getattr } for pid=5475 comm="dhcpcd" path="/run/udev/data/n126" dev="tmpfs" ino=12435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1564.829986][ T30] audit: type=1400 audit(2000000573.656:3958): avc: denied { recv } for pid=21145 comm="syz.6.3204" saddr=10.128.0.169 src=34484 daddr=10.128.0.103 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1565.070467][T13874] block nbd0: Possible stuck request ffff8880279b0000: control (read@0,1024B). Runtime 330 seconds [ 1565.084174][T13874] block nbd0: Possible stuck request ffff8880279b0200: control (read@1024,1024B). Runtime 330 seconds [ 1565.106220][T13874] block nbd0: Possible stuck request ffff8880279b0400: control (read@2048,1024B). Runtime 330 seconds [ 1565.117668][T13874] block nbd0: Possible stuck request ffff8880279b0600: control (read@3072,1024B). Runtime 330 seconds [ 1566.703583][T21169] netlink: 'syz.7.3208': attribute type 2 has an invalid length. [ 1568.035261][T21177] sit1: entered allmulticast mode [ 1568.389469][T21184] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3212'. [ 1568.411482][T21184] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3212'. [ 1569.326626][T21196] netlink: 'syz.5.3215': attribute type 10 has an invalid length. [ 1570.560367][T21207] overlayfs: failed to clone upperpath [ 1570.600969][T21207] netlink: 'syz.3.3217': attribute type 39 has an invalid length. [ 1570.786606][T21209] autofs: Unknown parameter 'fd00000000000000000000' [ 1570.797027][T21209] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3218'. [ 1570.828229][T21213] lo: entered promiscuous mode [ 1570.835512][T21213] lo: entered allmulticast mode [ 1570.904204][T21216] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3220'. [ 1571.373412][T21213] tunl0: entered promiscuous mode [ 1571.378749][T21213] tunl0: entered allmulticast mode [ 1571.484053][T21213] gre0: entered promiscuous mode [ 1571.489184][T21213] gre0: entered allmulticast mode [ 1571.830716][T21223] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3223'. [ 1572.034371][T21213] gretap0: entered promiscuous mode [ 1572.221625][T21213] gretap0: entered allmulticast mode [ 1572.351883][T21219] netlink: 'syz.6.3219': attribute type 8 has an invalid length. [ 1572.417968][T21213] erspan0: entered promiscuous mode [ 1572.452146][T21213] erspan0: entered allmulticast mode [ 1572.551655][ T30] audit: type=1400 audit(2000000581.011:3959): avc: denied { map } for pid=21210 comm="syz.6.3219" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1572.606263][T21213] ip_vti0: entered promiscuous mode [ 1572.611556][T21213] ip_vti0: entered allmulticast mode [ 1572.659633][T21213] ip6_vti0: entered promiscuous mode [ 1572.665006][T21213] ip6_vti0: entered allmulticast mode [ 1572.684326][T21213] sit0: entered promiscuous mode [ 1572.691328][T21213] sit0: entered allmulticast mode [ 1572.728517][T21213] ip6tnl0: entered promiscuous mode [ 1572.789069][T21213] ip6tnl0: entered allmulticast mode [ 1572.930446][T21213] ip6gre0: entered promiscuous mode [ 1573.011416][T21213] ip6gre0: entered allmulticast mode [ 1573.083700][T21213] syz_tun: entered allmulticast mode [ 1573.409496][T21213] ip6gretap0: entered promiscuous mode [ 1573.433870][T21213] ip6gretap0: entered allmulticast mode [ 1573.483973][T21213] bridge0: entered promiscuous mode [ 1573.538196][T21213] bridge0: entered allmulticast mode [ 1573.564225][T21213] vcan0: entered promiscuous mode [ 1573.573298][T21213] vcan0: entered allmulticast mode [ 1573.977252][T21213] bond0: entered promiscuous mode [ 1573.982623][T21213] bond_slave_0: entered promiscuous mode [ 1573.990811][T21213] bond_slave_1: entered promiscuous mode [ 1574.016579][T21213] batadv0: entered promiscuous mode [ 1574.021902][T21213] bond0: entered allmulticast mode [ 1574.030435][T21213] bond_slave_0: entered allmulticast mode [ 1574.036974][T21213] bond_slave_1: entered allmulticast mode [ 1574.042708][T21213] batadv0: entered allmulticast mode [ 1574.051214][T21213] team0: entered promiscuous mode [ 1574.056277][T21213] team_slave_0: entered promiscuous mode [ 1574.063695][T21213] team_slave_1: entered promiscuous mode [ 1574.330901][T21246] netlink: 'syz.5.3226': attribute type 10 has an invalid length. [ 1574.593970][T21213] team0: entered allmulticast mode [ 1574.628014][T21213] team_slave_0: entered allmulticast mode [ 1574.635790][T21213] team_slave_1: entered allmulticast mode [ 1574.648295][T21213] nlmon0: entered promiscuous mode [ 1574.653605][T21213] nlmon0: entered allmulticast mode [ 1574.661306][T21213] caif0: entered promiscuous mode [ 1574.667509][T21213] caif0: entered allmulticast mode [ 1574.673990][T21213] vxcan0: entered promiscuous mode [ 1574.679386][T21213] vxcan0: entered allmulticast mode [ 1574.684778][T21213] vxcan1: entered promiscuous mode [ 1574.690069][T21213] vxcan1: entered allmulticast mode [ 1574.695676][T21213] veth0: entered promiscuous mode [ 1574.700909][T21213] veth0: entered allmulticast mode [ 1574.706184][T21213] veth1: entered promiscuous mode [ 1574.711608][T21213] veth1: entered allmulticast mode [ 1574.717020][T21213] wg1: entered promiscuous mode [ 1574.722153][T21213] wg1: entered allmulticast mode [ 1574.727228][T21213] wg2: entered promiscuous mode [ 1574.733912][T21213] wg2: entered allmulticast mode [ 1574.739212][T21213] veth0_to_bridge: entered promiscuous mode [ 1574.745344][T21213] veth0_to_bridge: entered allmulticast mode [ 1574.752779][T21213] veth1_to_bridge: entered promiscuous mode [ 1574.758678][T21213] veth1_to_bridge: entered allmulticast mode [ 1574.764916][T21213] veth0_to_bond: entered promiscuous mode [ 1574.770635][T21213] veth0_to_bond: entered allmulticast mode [ 1574.776875][T21213] veth1_to_bond: entered promiscuous mode [ 1574.782600][T21213] veth1_to_bond: entered allmulticast mode [ 1574.788751][T21213] veth0_to_team: entered promiscuous mode [ 1574.794590][T21213] veth0_to_team: entered allmulticast mode [ 1574.800595][T21213] veth1_to_team: entered promiscuous mode [ 1574.806527][T21213] veth1_to_team: entered allmulticast mode [ 1574.812525][T21213] veth0_to_batadv: entered promiscuous mode [ 1574.819836][T21213] veth0_to_batadv: entered allmulticast mode [ 1574.825923][T21213] batadv_slave_0: entered promiscuous mode [ 1574.832286][T21213] batadv_slave_0: entered allmulticast mode [ 1574.838575][T21213] veth1_to_batadv: entered promiscuous mode [ 1574.844465][T21213] veth1_to_batadv: entered allmulticast mode [ 1574.851716][T21213] batadv_slave_1: entered promiscuous mode [ 1574.857869][T21213] batadv_slave_1: entered allmulticast mode [ 1574.864116][T21213] xfrm0: entered promiscuous mode [ 1574.869143][T21213] xfrm0: entered allmulticast mode [ 1574.874544][T21213] veth0_to_hsr: entered promiscuous mode [ 1574.880209][T21213] veth0_to_hsr: entered allmulticast mode [ 1574.886024][T21213] hsr_slave_0: entered allmulticast mode [ 1574.914136][T21213] veth1_to_hsr: entered promiscuous mode [ 1574.919798][T21213] veth1_to_hsr: entered allmulticast mode [ 1574.928838][T21213] hsr_slave_1: entered allmulticast mode [ 1574.934673][T21213] hsr0: entered promiscuous mode [ 1574.939634][T21213] hsr0: entered allmulticast mode [ 1574.945621][T21213] veth1_virt_wifi: entered promiscuous mode [ 1574.951674][T21213] veth1_virt_wifi: entered allmulticast mode [ 1574.957837][T21213] veth0_virt_wifi: entered promiscuous mode [ 1574.963726][T21213] veth0_virt_wifi: entered allmulticast mode [ 1574.970950][T21213] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1574.979453][T21213] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1574.987007][T21213] veth1_vlan: entered allmulticast mode [ 1574.992970][T21213] veth0_vlan: entered allmulticast mode [ 1574.998746][T21213] vlan0: entered promiscuous mode [ 1575.003867][T21213] vlan0: entered allmulticast mode [ 1575.009431][T21213] vlan1: entered promiscuous mode [ 1575.014548][T21213] vlan1: entered allmulticast mode [ 1575.020221][T21213] macvlan0: entered promiscuous mode [ 1575.025512][T21213] macvlan0: entered allmulticast mode [ 1575.031225][T21213] ipvlan0: entered promiscuous mode [ 1575.036417][T21213] ipvlan0: entered allmulticast mode [ 1575.041973][T21213] ipvlan1: entered promiscuous mode [ 1575.047276][T21213] ipvlan1: entered allmulticast mode [ 1575.052713][T21213] veth1_macvtap: entered allmulticast mode [ 1575.058630][T21213] veth0_macvtap: entered allmulticast mode [ 1575.064765][T21213] macvtap0: entered promiscuous mode [ 1575.070042][T21213] macvtap0: entered allmulticast mode [ 1575.075732][T21213] macsec0: entered promiscuous mode [ 1575.080926][T21213] macsec0: entered allmulticast mode [ 1575.086373][T21213] geneve0: entered promiscuous mode [ 1575.091569][T21213] geneve0: entered allmulticast mode [ 1575.099007][T21213] geneve1: entered promiscuous mode [ 1575.104209][T21213] geneve1: entered allmulticast mode [ 1575.109861][T21213] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 1575.119543][T21213] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 1575.127242][T21213] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 1575.134523][T21213] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 1575.142200][T21213] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 1575.149523][T21213] netdevsim netdevsim6 netdevsim3: entered allmulticast mode [ 1575.157003][T21213] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 1575.164413][T21213] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode [ 1575.171824][T21213] bridge1: entered promiscuous mode [ 1575.177021][T21213] bridge1: entered allmulticast mode [ 1575.182634][T21213] : entered allmulticast mode [ 1575.187599][T21213] hsr1: entered promiscuous mode [ 1575.194371][T21213] mac80211_hwsim hwsim19 wlan2: entered promiscuous mode [ 1575.201488][T21213] mac80211_hwsim hwsim19 wlan2: entered allmulticast mode [ 1575.208685][T21213] erspan0.1: entered promiscuous mode [ 1575.215535][T21213] erspan0.1: entered allmulticast mode [ 1575.221435][T21213] geneve2: entered promiscuous mode [ 1575.228284][T21213] bridge2: entered promiscuous mode [ 1575.233851][T21213] bridge2: entered allmulticast mode [ 1575.239219][T21213] ip6gre1: entered promiscuous mode [ 1575.245954][T21213] ip6gre1: entered allmulticast mode [ 1575.251468][T21213] gre1: entered promiscuous mode [ 1575.256465][T21213] gre1: entered allmulticast mode [ 1575.262681][T21213] !: entered allmulticast mode [ 1575.268372][T21213] geneve3: entered promiscuous mode [ 1575.275370][T21213] vxlan0: entered promiscuous mode [ 1575.282986][T21213] vxlan0: entered allmulticast mode [ 1575.290581][T21213] veth2: entered promiscuous mode [ 1575.295604][T21213] veth2: entered allmulticast mode [ 1575.301114][T21213] veth3: entered promiscuous mode [ 1575.306137][T21213] veth3: entered allmulticast mode [ 1575.312147][T21213] sit1: entered promiscuous mode [ 1575.317082][T21213] sit1: entered allmulticast mode [ 1575.323393][T21213] syztnl2: entered promiscuous mode [ 1575.328622][T21213] syztnl2: entered allmulticast mode [ 1575.335624][T21213] macvtap1: entered allmulticast mode [ 1575.343621][T21213] macvtap2: entered allmulticast mode [ 1575.351405][T21213] bond1: entered allmulticast mode [ 1575.357247][T21213] sit2: entered promiscuous mode [ 1575.420812][ T30] audit: type=1400 audit(2000000583.716:3960): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1575.460793][T21245] bridge0: port 1(syz_tun) entered blocking state [ 1575.467296][T21245] bridge0: port 1(syz_tun) entered disabled state [ 1575.473963][T21245] syz_tun: entered allmulticast mode [ 1575.480492][T21245] syz_tun: left allmulticast mode [ 1575.486585][ T7863] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1575.501613][ T7863] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.512149][ T7863] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1575.521045][ T7863] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.530455][ T7863] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1575.574692][ T7863] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.716033][ T7863] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1575.725485][ T7863] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.741876][ T30] audit: type=1400 audit(2000000584.015:3961): avc: denied { watch watch_reads } for pid=21252 comm="syz.5.3230" path="/563/file1" dev="tmpfs" ino=3199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1575.840484][T21257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3228'. [ 1576.381382][T21259] netlink: 'syz.6.3227': attribute type 39 has an invalid length. [ 1576.468596][T21263] netlink: 'syz.5.3230': attribute type 32 has an invalid length. [ 1577.340531][T21269] autofs: Unknown parameter 'fd00000000000000000000' [ 1577.348653][T21269] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3232'. [ 1577.690197][T21278] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3233'. [ 1578.134021][T21280] overlayfs: failed to clone upperpath [ 1578.205047][T21281] netlink: 'syz.7.3235': attribute type 39 has an invalid length. [ 1580.849489][T21296] overlayfs: failed to clone upperpath [ 1580.861494][ T30] audit: type=1400 audit(2000000588.807:3962): avc: denied { write } for pid=21295 comm="syz.3.3239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1581.104981][T21301] autofs: Unknown parameter 'fd00000000000000000000' [ 1583.890316][T21322] overlayfs: failed to resolve './file1/file0': -2 [ 1584.146098][T21322] netlink: 'syz.5.3243': attribute type 39 has an invalid length. [ 1584.239106][T21332] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3246'. [ 1586.646793][T21355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3250'. [ 1586.655754][T21355] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3250'. [ 1586.664973][T21355] netlink: 'syz.6.3250': attribute type 11 has an invalid length. [ 1587.020042][T21355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3250'. [ 1587.028967][T21355] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3250'. [ 1587.037987][T21355] netlink: 'syz.6.3250': attribute type 11 has an invalid length. [ 1587.842342][T12523] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1588.695749][T12523] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1588.723965][T12523] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1588.758723][T12523] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1588.783210][T12523] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.784868][T21369] overlayfs: failed to resolve './file1/file0': -2 [ 1588.801236][T12523] usb 5-1: config 0 descriptor?? [ 1588.821254][T21369] netlink: 'syz.3.3254': attribute type 39 has an invalid length. [ 1589.065455][T21373] netlink: 'syz.5.3255': attribute type 39 has an invalid length. [ 1589.551492][ T30] audit: type=1400 audit(2000000596.845:3963): avc: denied { connect } for pid=21374 comm="syz.7.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1589.699754][ T30] audit: type=1400 audit(2000000596.845:3964): avc: denied { ioctl } for pid=21374 comm="syz.7.3256" path="socket:[69585]" dev="sockfs" ino=69585 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1590.226731][T12523] hid-led 0003:27B8:01ED.0004: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 1590.375928][T21384] netlink: 'syz.7.3257': attribute type 10 has an invalid length. [ 1590.415049][T15667] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1590.469042][ T30] audit: type=1400 audit(2000000597.790:3965): avc: denied { ioctl } for pid=21354 comm="syz.4.3251" path="socket:[69604]" dev="sockfs" ino=69604 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1590.470578][T12523] hid-led 0003:27B8:01ED.0004: ThingM blink(1) initialized [ 1590.787489][T12523] usb 5-1: USB disconnect, device number 22 [ 1591.425635][T21396] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3259'. [ 1592.433402][T21389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3258'. [ 1592.443419][T21389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3258'. [ 1594.103933][T21421] autofs: Unknown parameter 'fd00000000000000000000' [ 1594.118373][T21421] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3264'. [ 1594.302141][T21429] overlayfs: failed to resolve './file1/file0': -2 [ 1594.468583][T21432] netlink: 'syz.3.3266': attribute type 10 has an invalid length. [ 1594.600696][T21429] netlink: 'syz.6.3265': attribute type 39 has an invalid length. [ 1595.643292][T21444] netlink: 'syz.5.3270': attribute type 39 has an invalid length. [ 1596.354954][ T30] audit: type=1400 audit(2000000603.302:3966): avc: denied { mount } for pid=21446 comm="syz.3.3271" name="/" dev="configfs" ino=1099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1597.077512][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3272'. [ 1597.086550][T21452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3272'. [ 1597.095556][T21452] netlink: 'syz.4.3272': attribute type 11 has an invalid length. [ 1597.878754][ T30] audit: type=1400 audit(2000000604.032:3967): avc: denied { getopt } for pid=21454 comm="syz.6.3273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1597.946789][T13874] block nbd0: Possible stuck request ffff8880279b0000: control (read@0,1024B). Runtime 360 seconds [ 1597.957572][T13874] block nbd0: Possible stuck request ffff8880279b0200: control (read@1024,1024B). Runtime 360 seconds [ 1597.968602][T13874] block nbd0: Possible stuck request ffff8880279b0400: control (read@2048,1024B). Runtime 360 seconds [ 1597.979625][T13874] block nbd0: Possible stuck request ffff8880279b0600: control (read@3072,1024B). Runtime 360 seconds [ 1598.061792][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3272'. [ 1598.070819][T21452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3272'. [ 1598.079811][T21452] netlink: 'syz.4.3272': attribute type 11 has an invalid length. [ 1598.135857][T21463] netlink: 'syz.3.3276': attribute type 1 has an invalid length. [ 1598.165166][T21463] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1598.415480][T21473] autofs: Unknown parameter 'fd00000000000000000000' [ 1598.449230][T21473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3277'. [ 1598.459063][T21473] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3277'. [ 1598.661595][T21463] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1598.668577][T21463] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1598.679425][T21463] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1598.870507][T21474] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 1598.893726][T21474] bond2: (slave wlan0): Opening slave failed [ 1599.037505][ T30] audit: type=1400 audit(2000000605.810:3968): avc: denied { ioctl } for pid=21482 comm="syz.3.3281" path="socket:[70063]" dev="sockfs" ino=70063 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1599.131043][T21486] netlink: 'syz.7.3278': attribute type 10 has an invalid length. [ 1599.265707][T15667] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1599.400739][T21494] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3282'. [ 1599.765634][T21495] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3282'. [ 1602.407875][T21513] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3285'. [ 1602.772088][ T30] audit: type=1400 audit(2000000609.301:3969): avc: denied { watch } for pid=21519 comm="syz.5.3288" path="/575/control" dev="tmpfs" ino=3285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1603.357188][T21526] macsec1: entered promiscuous mode [ 1603.362567][T21526] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1603.634908][ T30] audit: type=1400 audit(2000000609.740:3970): avc: denied { read } for pid=21522 comm="syz.7.3289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1603.790377][T21529] autofs: Unknown parameter 'fd00000000000000000000' [ 1603.841968][T21529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3291'. [ 1603.851052][T21529] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3291'. [ 1604.074136][T21529] geneve3: entered promiscuous mode [ 1604.079950][T21529] geneve3: entered allmulticast mode [ 1604.410394][T21538] netlink: 'syz.4.3290': attribute type 39 has an invalid length. [ 1605.145377][T21546] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3294'. [ 1606.369466][ T30] audit: type=1400 audit(2000000612.202:3971): avc: denied { setopt } for pid=21550 comm="syz.7.3295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1606.416387][T21559] autofs: Unknown parameter 'fd00000000000000000000' [ 1606.443909][T21559] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3297'. [ 1607.371177][T21570] IPv6: sit3: Disabled Multicast RS [ 1607.751761][T21572] overlayfs: failed to resolve './file1/file0': -2 [ 1607.866446][T21574] netlink: 'syz.5.3298': attribute type 39 has an invalid length. [ 1608.110210][T21578] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3300'. [ 1610.325317][ T30] audit: type=1400 audit(2000000616.020:3972): avc: denied { mount } for pid=21589 comm="syz.4.3302" name="/" dev="autofs" ino=71065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1610.325384][ T30] audit: type=1400 audit(2000000616.029:3973): avc: denied { read } for pid=21589 comm="syz.4.3302" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1610.325426][ T30] audit: type=1400 audit(2000000616.029:3974): avc: denied { open } for pid=21589 comm="syz.4.3302" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1610.325469][ T30] audit: type=1400 audit(2000000616.038:3975): avc: denied { ioctl } for pid=21589 comm="syz.4.3302" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1610.559972][ T30] audit: type=1400 audit(2000000616.591:3976): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1610.900153][T21603] Failed to initialize the IGMP autojoin socket (err -2) [ 1610.962555][T21604] input: syz0 as /devices/virtual/input/input20 [ 1611.145761][ T30] audit: type=1400 audit(2000000617.143:3977): avc: denied { read } for pid=5165 comm="acpid" name="event4" dev="devtmpfs" ino=3345 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1611.145815][ T30] audit: type=1400 audit(2000000617.143:3978): avc: denied { open } for pid=5165 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3345 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1611.145857][ T30] audit: type=1400 audit(2000000617.143:3979): avc: denied { ioctl } for pid=5165 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3345 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1612.454705][T21618] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3307'. [ 1612.861221][T21619] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3307'. [ 1613.172511][T21621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3308'. [ 1613.708979][T21630] syz.5.3310 (21630): drop_caches: 2 [ 1615.341234][ T30] audit: type=1400 audit(2000000621.064:3980): avc: denied { ioctl } for pid=21635 comm="syz.4.3312" path="socket:[71144]" dev="sockfs" ino=71144 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1616.876484][T21654] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3314'. [ 1616.960859][T21657] overlayfs: failed to resolve './file1/file0': -2 [ 1617.016207][T21657] netlink: 'syz.5.3315': attribute type 39 has an invalid length. [ 1617.503386][T21665] netlink: 'syz.6.3316': attribute type 39 has an invalid length. [ 1617.955799][ T30] audit: type=1400 audit(2000000623.525:3981): avc: denied { wake_alarm } for pid=21666 comm="syz.3.3318" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1618.853171][T21679] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3320'. [ 1619.235121][T21680] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3320'. [ 1620.425163][ T31] INFO: task udevd:17003 blocked for more than 144 seconds. [ 1620.455843][ T31] Tainted: G L syzkaller #0 [ 1620.548766][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1620.605616][ T31] task:udevd state:D stack:23512 pid:17003 tgid:17003 ppid:5180 task_flags:0x400140 flags:0x00080002 [ 1621.724203][ T30] audit: type=1400 audit(2000000626.576:3982): avc: denied { read write } for pid=21694 comm="syz.6.3322" name="sg0" dev="devtmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1621.758624][ T31] Call Trace: [ 1621.766722][ T31] [ 1621.866615][ T31] __schedule+0xfee/0x6120 [ 1621.926566][ T30] audit: type=1400 audit(2000000626.604:3983): avc: denied { open } for pid=21694 comm="syz.6.3322" path="/dev/sg0" dev="devtmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1621.938066][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1621.985285][ T31] ? __pfx___schedule+0x10/0x10 [ 1621.998629][ T31] ? find_held_lock+0x2b/0x80 [ 1622.009057][ T31] ? schedule+0x2bf/0x390 [ 1622.017511][ T31] schedule+0xdd/0x390 [ 1622.029719][ T31] io_schedule+0x8a/0xf0 [ 1622.041309][ T31] folio_wait_bit_common+0x414/0xa70 [ 1622.052618][ T31] ? folio_wait_bit_common+0x2a0/0xa70 [ 1622.065621][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1622.078342][ T31] ? filemap_read_folio+0x115/0x3b0 [ 1622.090912][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 1622.102108][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1622.118286][ T31] ? __filemap_get_folio_mpol+0x3ba/0xe70 [ 1622.128135][ T31] do_read_cache_folio+0x3bc/0x6b0 [ 1622.146183][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1622.163438][ T31] read_part_sector+0xd1/0x370 [ 1622.174031][ T31] adfspart_check_POWERTEC+0x8e/0x750 [ 1622.186894][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1622.203074][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1622.214860][ T31] bdev_disk_changed+0x7f8/0xc80 [ 1622.226516][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1622.235718][ T31] blkdev_get_whole+0x187/0x290 [ 1622.245017][ T31] bdev_open+0x2c7/0xe40 [ 1622.251288][ T31] blkdev_open+0x34e/0x4f0 [ 1622.259152][ T31] do_dentry_open+0x6d8/0x1660 [ 1622.266654][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1622.276420][ T31] vfs_open+0x82/0x3f0 [ 1622.283357][ T31] path_openat+0x208c/0x31a0 [ 1622.290258][ T31] ? __pfx_path_openat+0x10/0x10 [ 1622.299546][ T31] do_file_open+0x20e/0x430 [ 1622.304784][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1622.311082][ T31] ? alloc_fd+0x476/0x790 [ 1622.316951][ T31] ? do_getname+0x191/0x390 [ 1622.324919][ T31] do_sys_openat2+0x10d/0x1e0 [ 1622.332140][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1622.341219][ T31] ? __sys_recvmsg+0x18c/0x220 [ 1622.349368][ T31] ? __pfx___sys_recvmsg+0x10/0x10 [ 1622.357088][ T31] __x64_sys_openat+0x12d/0x210 [ 1622.365893][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1622.375536][ T31] do_syscall_64+0x106/0xf80 [ 1622.382608][ T31] ? clear_bhb_loop+0x40/0x90 [ 1622.389736][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.399366][ T31] RIP: 0033:0x7f48810a7407 [ 1622.407558][ T31] RSP: 002b:00007ffd0d748b00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1622.419803][ T31] RAX: ffffffffffffffda RBX: 00007f4881867880 RCX: 00007f48810a7407 [ 1622.434059][ T31] RDX: 00000000000a0800 RSI: 000055af5f7c93b0 RDI: ffffffffffffff9c [ 1622.448084][ T31] RBP: 000055af5f57d2c0 R08: 0000000000000000 R09: 0000000000000000 [ 1622.458668][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055af5f7d0610 [ 1622.478731][ T31] R13: 000055af5f7b88d0 R14: 0000000000000000 R15: 000055af5f7d0610 [ 1622.488296][ T31] [ 1622.492700][ T31] [ 1622.492700][ T31] Showing all locks held in the system: [ 1622.505830][ T31] 2 locks held by ksoftirqd/1/23: [ 1622.516174][ T31] #0: ffff8880b843b220 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1622.537632][ T31] #1: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 1622.548562][ T31] 1 lock held by khungtaskd/31: [ 1622.555298][ T31] #0: ffffffff8e7e7920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1622.571187][ T31] 2 locks held by getty/5566: [ 1622.578251][ T31] #0: ffff8880379e30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1622.588726][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1622.601999][ T31] 1 lock held by udevd/17003: [ 1622.608666][ T31] #0: ffff8880278e2358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1622.625470][ T31] 2 locks held by syz.5.3324/21693: [ 1622.633127][ T31] 2 locks held by syz.6.3322/21694: [ 1622.638648][ T31] #0: ffff888060900d88 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 1622.652460][ T31] #1: ffffffff8e7f3478 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1622.668052][ T31] [ 1622.671625][ T31] ============================================= [ 1622.671625][ T31] [ 1622.681457][ T31] NMI backtrace for cpu 0 [ 1622.681475][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1622.681501][ T31] Tainted: [L]=SOFTLOCKUP [ 1622.681507][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1622.681518][ T31] Call Trace: [ 1622.681524][ T31] [ 1622.681531][ T31] dump_stack_lvl+0x100/0x190 [ 1622.681565][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1622.681586][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1622.681605][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1622.681630][ T31] sys_info+0x141/0x190 [ 1622.681647][ T31] watchdog+0xd25/0x1050 [ 1622.681680][ T31] ? __pfx_watchdog+0x10/0x10 [ 1622.681704][ T31] ? __kthread_parkme+0x18c/0x230 [ 1622.681732][ T31] ? kthread+0x13a/0x450 [ 1622.681748][ T31] ? __pfx_watchdog+0x10/0x10 [ 1622.681770][ T31] kthread+0x370/0x450 [ 1622.681786][ T31] ? __pfx_kthread+0x10/0x10 [ 1622.681805][ T31] ret_from_fork+0x754/0xd80 [ 1622.681824][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1622.681845][ T31] ? __switch_to+0x7b4/0x1120 [ 1622.681866][ T31] ? __pfx_kthread+0x10/0x10 [ 1622.681885][ T31] ret_from_fork_asm+0x1a/0x30 [ 1622.681918][ T31] [ 1622.681925][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1622.807548][ C1] NMI backtrace for cpu 1 [ 1622.807567][ C1] CPU: 1 UID: 0 PID: 34 Comm: kcompactd0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1622.807594][ C1] Tainted: [L]=SOFTLOCKUP [ 1622.807601][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1622.807612][ C1] RIP: 0010:match_held_lock+0x74/0xb0 [ 1622.807644][ C1] Code: 5b 81 e2 ff 1f 00 00 48 39 d0 0f 94 c0 0f b6 c0 c3 cc cc cc cc 90 e8 8b a2 62 f9 85 c0 74 0a 8b 05 31 0c 49 05 85 c0 74 24 90 <31> c0 5b e9 04 2e 03 00 b8 01 00 00 00 5b c3 cc cc cc cc 31 f6 e8 [ 1622.807662][ C1] RSP: 0018:ffffc90000aa79d0 EFLAGS: 00000097 [ 1622.807678][ C1] RAX: 0000000000000000 RBX: ffff888020ed0b80 RCX: 0000000000000001 [ 1622.807690][ C1] RDX: 0000000000000000 RSI: ffffffff8e7e7860 RDI: ffff888020ed0b80 [ 1622.807702][ C1] RBP: ffff888020ed0000 R08: 0000000000000001 R09: 0000000000000000 [ 1622.807714][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 1622.807725][ C1] R13: 0000000000000046 R14: ffff888020ed0b80 R15: 0000000000000001 [ 1622.807737][ C1] FS: 0000000000000000(0000) GS:ffff88812443c000(0000) knlGS:0000000000000000 [ 1622.807755][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1622.807767][ C1] CR2: 0000200000360030 CR3: 000000002236e000 CR4: 00000000003526f0 [ 1622.807779][ C1] Call Trace: [ 1622.807786][ C1] [ 1622.807793][ C1] lock_is_held_type+0x9d/0x140 [ 1622.807821][ C1] rcu_read_lock_sched_held+0x40/0x70 [ 1622.807849][ C1] psi_task_switch+0x777/0xb10 [ 1622.807878][ C1] __schedule+0x2c11/0x6120 [ 1622.807902][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1622.807925][ C1] ? __pfx___schedule+0x10/0x10 [ 1622.807948][ C1] ? find_held_lock+0x2b/0x80 [ 1622.807970][ C1] ? schedule+0x2bf/0x390 [ 1622.807995][ C1] schedule+0xdd/0x390 [ 1622.808018][ C1] schedule_timeout+0x127/0x280 [ 1622.808040][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1622.808062][ C1] ? prepare_to_wait_event+0xbe/0x720 [ 1622.808089][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1622.808114][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1622.808138][ C1] ? prepare_to_wait_event+0xbe/0x720 [ 1622.808167][ C1] kcompactd+0x9e0/0xe00 [ 1622.808198][ C1] ? __pfx_kcompactd+0x10/0x10 [ 1622.808218][ C1] ? __kthread_parkme+0xbb/0x230 [ 1622.808243][ C1] ? rcu_is_watching+0x12/0xc0 [ 1622.808265][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1622.808293][ C1] ? __kthread_parkme+0x18c/0x230 [ 1622.808319][ C1] ? kthread+0x13a/0x450 [ 1622.808335][ C1] ? __pfx_kcompactd+0x10/0x10 [ 1622.808356][ C1] kthread+0x370/0x450 [ 1622.808372][ C1] ? __pfx_kthread+0x10/0x10 [ 1622.808391][ C1] ret_from_fork+0x754/0xd80 [ 1622.808410][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1622.808430][ C1] ? __switch_to+0x7b4/0x1120 [ 1622.808452][ C1] ? __pfx_kthread+0x10/0x10 [ 1622.808471][ C1] ret_from_fork_asm+0x1a/0x30 [ 1622.808499][ C1] [ 1623.220920][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1623.227801][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1623.238479][ T31] Tainted: [L]=SOFTLOCKUP [ 1623.242786][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1623.252827][ T31] Call Trace: [ 1623.256098][ T31] [ 1623.259020][ T31] dump_stack_lvl+0x100/0x190 [ 1623.263724][ T31] vpanic+0x552/0x970 [ 1623.267689][ T31] ? __pfx_vpanic+0x10/0x10 [ 1623.272185][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1623.278330][ T31] panic+0xd1/0xe0 [ 1623.282039][ T31] ? __pfx_panic+0x10/0x10 [ 1623.286445][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1623.292573][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1623.298707][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1623.304848][ T31] ? watchdog.cold+0x198/0x1ca [ 1623.309602][ T31] ? watchdog+0xd35/0x1050 [ 1623.314004][ T31] watchdog.cold+0x1a9/0x1ca [ 1623.318601][ T31] ? __pfx_watchdog+0x10/0x10 [ 1623.323260][ T31] ? __kthread_parkme+0x18c/0x230 [ 1623.328277][ T31] ? kthread+0x13a/0x450 [ 1623.332510][ T31] ? __pfx_watchdog+0x10/0x10 [ 1623.337182][ T31] kthread+0x370/0x450 [ 1623.341260][ T31] ? __pfx_kthread+0x10/0x10 [ 1623.345863][ T31] ret_from_fork+0x754/0xd80 [ 1623.350453][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1623.355544][ T31] ? __switch_to+0x7b4/0x1120 [ 1623.360203][ T31] ? __pfx_kthread+0x10/0x10 [ 1623.364792][ T31] ret_from_fork_asm+0x1a/0x30 [ 1623.369543][ T31] [ 1623.372883][ T31] Kernel Offset: disabled [ 1623.377192][ T31] Rebooting in 86400 seconds..