last executing test programs: 7m28.648398366s ago: executing program 32 (id=5767): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x408cd, 0x3) 5m15.274904518s ago: executing program 33 (id=11406): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m25.820228119s ago: executing program 34 (id=14156): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000240)={0x0, 0x0, 0x30, 0xa5f, 0x1}, &(0x7f0000000080)=0x18) 2m47.206388158s ago: executing program 35 (id=15101): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x6, 0x6, 0x2, 0x3, 0x1, 0x6, 0x7ffffff7}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 2m31.67458s ago: executing program 3 (id=15460): socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0x2, 0xa, 0x2) socket(0x200000000000011, 0x2, 0xd) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 2m31.595355892s ago: executing program 3 (id=15461): mkdir(0x0, 0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ftruncate(r0, 0x5) fcntl$lock(r0, 0x26, &(0x7f0000000380)={0x1, 0x2, 0x5, 0x7}) 2m31.475373685s ago: executing program 3 (id=15463): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m31.430408402s ago: executing program 3 (id=15465): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x4f}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x20051a9, 0x1c080, 0x4000a, 0x2ea}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='io_uring_link\x00', r1}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m31.332651536s ago: executing program 3 (id=15468): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x2, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, [0x0], [0xffffffff], [], [0xfffffffffffffffc]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r4}) 2m31.272399931s ago: executing program 3 (id=15469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='ext4_sync_fs\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='ext4_sync_fs\x00', r2}, 0x10) sync() 2m15.225140939s ago: executing program 36 (id=15469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='ext4_sync_fs\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='ext4_sync_fs\x00', r2}, 0x10) sync() 2m4.48486047s ago: executing program 8 (id=15971): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2m3.497414505s ago: executing program 8 (id=15991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x4b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) 2m3.423740295s ago: executing program 8 (id=15994): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/61, 0x0, 0xfec00000}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) 2m3.339578149s ago: executing program 8 (id=15997): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x815000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 2m3.276453741s ago: executing program 8 (id=15999): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000380)="44c394f305916c4516999da286dd268469adad3378024431ab62e99b69396a721e355e6f0a10777b8525ffaa230bf4c7d2af12fd7601", 0x36, 0x0, &(0x7f0000000340)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m2.972334045s ago: executing program 8 (id=16013): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) socket$nl_route(0x10, 0x3, 0x0) 2m2.857501971s ago: executing program 37 (id=16013): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) socket$nl_route(0x10, 0x3, 0x0) 2m1.343220906s ago: executing program 7 (id=16035): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x20008000) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x2004c800) 2m0.131800302s ago: executing program 7 (id=16041): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x480}, 0x0, 0x50, 0x1}) r0 = syz_io_uring_setup(0x266d, &(0x7f0000000100)={0x0, 0xb53b, 0x800, 0x2, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x11, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1m59.493455849s ago: executing program 7 (id=16052): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(0x0, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 1m59.370427587s ago: executing program 7 (id=16054): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 1m59.295638769s ago: executing program 7 (id=16055): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(r2, 0x0, 0x80000000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x5e) 1m58.610281764s ago: executing program 7 (id=16068): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3549, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x8]}]}}]}]}]}}]}, 0x74}}, 0x0) 1m58.484779354s ago: executing program 38 (id=16068): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3549, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x8]}]}}]}]}]}}]}, 0x74}}, 0x0) 1m57.029284046s ago: executing program 1 (id=16085): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1m56.742763197s ago: executing program 1 (id=16092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$packet(r2, &(0x7f0000000280)="0f", 0x1, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x88) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x58, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6}, {0x2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x70, 0x62, "0d000000200000006c13b53148a3a206"}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xe7}]}}, @filter_kind_options=@f_u32={{}, {0x0, 0x2, [@TCA_U32_FLAGS={0x0, 0xb, 0x2}, @TCA_U32_LINK, @TCA_U32_POLICE={0x0, 0x6, [@TCA_POLICE_RATE={0x0, 0x2, [0x1c0000, 0x4, 0x81, 0x6, 0x11, 0x1, 0x7, 0x4, 0xc0000, 0xffff, 0x9, 0x3, 0x4, 0x1, 0x8, 0x0, 0x81, 0x7, 0xfffffffd, 0x4, 0x8, 0x100, 0xd385, 0x7, 0xd0000000, 0x0, 0x4, 0x9, 0x3, 0xfff, 0x4740ec5, 0x7, 0x1000, 0x3, 0x1, 0x1000, 0x400, 0x2, 0x400, 0x2, 0x10, 0x3, 0xffff, 0x9, 0x7, 0x9, 0x7, 0x5, 0x7fff, 0xb, 0x81, 0x1, 0x4, 0x82, 0x5, 0x101, 0x2, 0x76, 0x6, 0x56, 0x5, 0x46, 0x7, 0x6, 0x3, 0xe, 0x4140, 0x7, 0x5, 0x7fff, 0x1, 0x7fffffff, 0x5, 0x0, 0x5, 0x3, 0x4, 0x2, 0x8c, 0x4, 0x9c, 0x3b2, 0x7f, 0x1, 0x6, 0xed4d, 0x3cf, 0x6, 0x3, 0x8, 0x4, 0x9, 0xffffffff, 0x258000, 0x9, 0x2, 0x8, 0x4, 0xb16, 0x80000000, 0xfc, 0x89aa, 0x2, 0x40, 0x1, 0x2, 0x9, 0x7ff, 0x5, 0xffffffff, 0x8, 0x8, 0x5, 0x3, 0x0, 0x3, 0x5e4, 0x3, 0xffff, 0x0, 0x4, 0x80000000, 0x8000, 0x9, 0x101, 0xa, 0x8001, 0x9, 0x8, 0x7f, 0x4, 0x3, 0x7, 0x0, 0x4, 0xff, 0xa, 0x6, 0x16, 0x4, 0x9, 0x2, 0x80000000, 0x3, 0x80, 0x9686, 0x8879, 0x8, 0x81, 0x200, 0x6, 0x7db1eaac, 0x7, 0x0, 0xae8, 0x3, 0x4349, 0x0, 0xffffffff, 0x7, 0xfffeffff, 0xe22a, 0x7, 0xff, 0x800, 0x401, 0xffffff3f, 0x1000, 0x0, 0x4, 0x10, 0x6, 0x1ff, 0x4, 0x8, 0x400, 0x482, 0x401, 0x9, 0x7, 0x2, 0x2c0, 0x81, 0x2, 0x7fff, 0x3, 0x400, 0x3, 0x6, 0x4, 0x1ff, 0x0, 0x200, 0xff, 0x8d52, 0x4, 0x8001, 0x4, 0xfffffe39, 0x5, 0x2, 0x4c55, 0xc, 0x9, 0xe, 0x7fff, 0xd, 0x4, 0x10001, 0x5, 0x8ade, 0x4, 0x94, 0x1d8e, 0x400, 0x4, 0x3, 0x4, 0x0, 0x4ac3, 0xa, 0x3, 0x3ff, 0x1, 0x1, 0xfffffff7, 0x4, 0x8, 0x4, 0x7, 0x9, 0xfffffff7, 0x9, 0x5, 0x4, 0x1, 0x4, 0x9, 0x3, 0xd66, 0x2, 0x4, 0x6, 0x2, 0x9, 0x7fff, 0x3, 0x3, 0x2b, 0xcac, 0xc7, 0x9, 0x1, 0x8, 0x1, 0x8]}]}, @TCA_U32_DIVISOR={0x0, 0x4, 0xef}, @TCA_U32_CLASSID={0x0, 0x1, {0xfff2, 0xd}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040880}, 0x14) 1m55.570279089s ago: executing program 1 (id=16096): syz_open_dev$I2C(0x0, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)={0xfffff800, 0x8, 0x2, 0xbffffffe, 0x16, "cb2192e67000005ca25ee2ffff000000bb0500"}) syz_open_dev$ptys(0xc, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m55.487254375s ago: executing program 1 (id=16098): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0xfffffffffffffffc, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r2, 0x935, 0x200000000005) 1m55.41593703s ago: executing program 1 (id=16100): r0 = socket(0x15, 0x5, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r2, 0xffff) close(0x3) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000001c0)={r2, 0x1, 0x0, 0x8000}) lseek(r0, 0x9, 0x1) 1m55.362455388s ago: executing program 1 (id=16103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1e5800, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1m39.220103097s ago: executing program 39 (id=16103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1e5800, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1m32.885284573s ago: executing program 2 (id=16425): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x4, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x10248ca4, 0x40, 0x53, 0x0, 0x1, 0x0, 0x0, 0x10, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r4, 0x80044d0d, 0x200000000005) 1m32.783903573s ago: executing program 2 (id=16426): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) poll(&(0x7f0000000000), 0x20000000000000ea, 0x7) 1m32.729883318s ago: executing program 2 (id=16427): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m32.585141865s ago: executing program 2 (id=16428): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000046}, 0x24000444) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m32.438566464s ago: executing program 2 (id=16431): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c39cc, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) 1m32.350456978s ago: executing program 2 (id=16432): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x7, 0x8, 0x1, 0x2020, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m16.234001209s ago: executing program 40 (id=16432): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x7, 0x8, 0x1, 0x2020, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 38.348859672s ago: executing program 5 (id=17193): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 38.215964791s ago: executing program 5 (id=17198): ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x1}]}) read$char_usb(r2, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 34.946030177s ago: executing program 5 (id=17230): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, r1, 0x2a1cf000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 34.681974655s ago: executing program 5 (id=17236): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mkdir(0x0, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x4) listen(r0, 0x5) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 34.589280475s ago: executing program 5 (id=17238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x78, 0x2802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) mount(0x0, 0x0, 0x0, 0x410, &(0x7f0000000100)='barrier') ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x7, 0xfc, 0xe1, 0x0, 0x6, 0x70, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x2, 0x0, 0x40, 0x0, 0x5}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x7, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 34.320954468s ago: executing program 5 (id=17242): fsopen(0x0, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 34.284073927s ago: executing program 41 (id=17242): fsopen(0x0, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.075377012s ago: executing program 9 (id=17651): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x3, 0xc9, 0x1, 0xc, "4f53bfeb43e390df"}}}, 0x10) 4.073395559s ago: executing program 9 (id=17659): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) 1.947678269s ago: executing program 9 (id=17653): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1.882400971s ago: executing program 9 (id=17655): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3", 0x17f}], 0x3}, 0x0) 1.184795194s ago: executing program 9 (id=17663): ioprio_set$pid(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x10) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6b063422f5"}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c801}, 0x18045) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x10001) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r7 = dup(r6) unshare(0x28000600) ftruncate(r6, 0xdcb) copy_file_range(r6, &(0x7f0000000100)=0xb76, r7, 0x0, 0x2aad109b, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x224}, 0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, 0x0, 0x0, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r11 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r12 = syz_kvm_add_vcpu$x86(r10, &(0x7f0000000300)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x485, 0x0, 0x1000000005}]}) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, 0x0, &(0x7f00000002c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r11, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x0, 0xee01}}, './file0\x00'}) io_uring_enter(r8, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1.102196656s ago: executing program 0 (id=17665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 1.087565652s ago: executing program 9 (id=17666): r0 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xff92, 0x0, 0x2, 0x4}) 799.171541ms ago: executing program 0 (id=17669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000090601080000000000000000050000000900020073797a3100000000050001000700000020000780060004404e21050005000700ff0000000c000180080001400a"], 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 790.246334ms ago: executing program 6 (id=17670): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 789.990817ms ago: executing program 0 (id=17672): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10304}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000001900040003"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 735.174336ms ago: executing program 6 (id=17674): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 717.542167ms ago: executing program 6 (id=17676): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="04010000100001002bbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200140003006e657464657673696d300000000000000a000100aaaaaaaaaaaa0000c4001680c000018010000600070080008d8700000800000077000c80140001"], 0x104}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) 663.342652ms ago: executing program 0 (id=17678): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x31, 0x7d, 0x55}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRES32=r0], 0x2) 663.044713ms ago: executing program 6 (id=17679): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) 632.332616ms ago: executing program 6 (id=17681): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x10, 0x0, 0x0, 0x2b, @empty, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 565.841637ms ago: executing program 6 (id=17683): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi1\x00', 0x60000, 0x0) ioctl$COMEDI_CANCEL(r0, 0x6407) 182.145545ms ago: executing program 4 (id=17692): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x10, 0x0, 0x0, 0x2b, @empty, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 178.693315ms ago: executing program 4 (id=17693): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8008af26, &(0x7f0000000180)={0x1}) 137.735495ms ago: executing program 4 (id=17694): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x42701, 0x192) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000840)={0x2d, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x8, 0x56f6, {"b2c40f03a5fd88f643fd134c488c0798"}, 0x5, 0x6, 0xfffffffffffffffc}}}, 0xa0) 62.804931ms ago: executing program 0 (id=17695): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 62.493989ms ago: executing program 4 (id=17696): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0xf0, 0xf0, 0xffffffff, 0x390, 0xf0, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@local, @ipv6=@mcast1, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) 62.126266ms ago: executing program 0 (id=17697): syz_io_uring_setup(0x121d, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0x3, 0x346}, &(0x7f0000000980)=0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffff9c, &(0x7f0000000000), 0x200080, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0xa, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 592.953µs ago: executing program 4 (id=17698): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="c4010000", @ANYBLOB], 0x1c4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000500)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) pipe2$9p(&(0x7f0000000280), 0x84000) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 0s ago: executing program 4 (id=17699): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000045000900000000000200000002000000080002"], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): p0 maxpacket: 8 [ 531.482748][ T4580] usb 9-1: config 0 has no interfaces? [ 531.485796][ T4580] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 531.489636][ T4580] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.497231][ T4580] usb 9-1: config 0 descriptor?? [ 531.540975][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16529'. [ 531.546777][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16529'. [ 531.946620][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.950637][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.959177][ T6035] usb 9-1: USB disconnect, device number 9 [ 532.057840][ T40] kauditd_printk_skb: 145 callbacks suppressed [ 532.057897][ T40] audit: type=1400 audit(2000000850.350:49242): avc: denied { bpf } for pid=10360 comm="syz.9.16535" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 532.067113][ T40] audit: type=1400 audit(2000000850.350:49243): avc: denied { map_read map_write } for pid=10360 comm="syz.9.16535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 532.074394][ T40] audit: type=1400 audit(2000000850.350:49244): avc: denied { perfmon } for pid=10360 comm="syz.9.16535" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 532.215959][ T40] audit: type=1400 audit(2000000850.500:49245): avc: denied { ioctl } for pid=10365 comm="syz.9.16537" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=159311 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 532.341182][ T40] audit: type=1400 audit(2000000850.603:49246): avc: denied { read write } for pid=8894 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 532.362286][ T40] audit: type=1400 audit(2000000850.612:49247): avc: denied { open } for pid=8894 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 532.374361][ T40] audit: type=1400 audit(2000000850.612:49248): avc: denied { ioctl } for pid=8894 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 532.470949][ T40] audit: type=1400 audit(2000000850.724:49249): avc: denied { mounton } for pid=10375 comm="syz.0.16541" path="/4451/file0" dev="tmpfs" ino=22770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 532.483035][ T40] audit: type=1400 audit(2000000850.752:49250): avc: denied { map } for pid=10373 comm="syz.9.16540" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=161305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 532.492973][ T40] audit: type=1400 audit(2000000850.752:49251): avc: denied { read } for pid=10373 comm="syz.9.16540" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=161305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 533.046332][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16553'. [ 533.050491][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16553'. [ 533.365585][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16558'. [ 533.892025][ T4472] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 535.162421][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16577'. [ 535.167133][T10466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16577'. [ 535.368054][T10475] sd 0:0:0:0: PR command failed: 1026 [ 535.369897][T10475] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 535.372314][T10475] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 535.395010][T10478] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 535.426241][T10478] kvm: pic: single mode not supported [ 535.426899][T10478] kvm: pic: non byte read [ 535.437006][T10478] kvm: pic: non byte read [ 535.441966][T10478] kvm: pic: non byte read [ 535.743509][T10503] lo speed is unknown, defaulting to 1000 [ 536.625961][T10538] overlayfs: failed to clone upperpath [ 536.701305][T10542] overlayfs: failed to clone upperpath [ 536.782154][T10546] overlayfs: failed to clone upperpath [ 536.968405][T10563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16618'. [ 537.004116][T10563] 8021q: adding VLAN 0 to HW filter on device bond9 [ 537.029767][T10563] macsec2: entered allmulticast mode [ 537.032242][T10563] bond9: entered allmulticast mode [ 537.036659][T10563] bond9: left allmulticast mode [ 538.112753][ T40] kauditd_printk_skb: 105 callbacks suppressed [ 538.112769][ T40] audit: type=1400 audit(2000000856.007:49357): avc: denied { unmount } for pid=9831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 538.145285][ T40] audit: type=1400 audit(2000000856.035:49358): avc: denied { read write } for pid=10582 comm="syz.4.16624" name="video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 538.153192][ T40] audit: type=1400 audit(2000000856.035:49359): avc: denied { open } for pid=10582 comm="syz.4.16624" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 538.162779][ T40] audit: type=1400 audit(2000000856.045:49360): avc: denied { ioctl } for pid=10582 comm="syz.4.16624" path="/dev/video0" dev="devtmpfs" ino=955 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 538.472184][ T40] audit: type=1400 audit(2000000856.344:49361): avc: denied { read } for pid=10595 comm="syz.4.16628" dev="nsfs" ino=4026535773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 538.480846][ T40] audit: type=1400 audit(2000000856.344:49362): avc: denied { open } for pid=10595 comm="syz.4.16628" path="net:[4026535773]" dev="nsfs" ino=4026535773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 538.488951][ T40] audit: type=1400 audit(2000000856.344:49363): avc: denied { create } for pid=10595 comm="syz.4.16628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 538.497685][ T40] audit: type=1400 audit(2000000856.344:49364): avc: denied { write } for pid=10595 comm="syz.4.16628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 538.507398][ T40] audit: type=1400 audit(2000000856.344:49365): avc: denied { read } for pid=10595 comm="syz.4.16628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 538.514479][ T40] audit: type=1400 audit(2000000856.372:49366): avc: denied { prog_load } for pid=10604 comm="syz.0.16630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 538.592594][T10596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.927115][T10622] lo speed is unknown, defaulting to 1000 [ 539.724892][T10638] input: syz1 as /devices/virtual/input/input55 [ 539.782196][ T5946] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 540.053484][ T4689] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 541.006267][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16663'. [ 541.355505][T10716] binder: 10715:10716 ioctl c0306201 2000000001c0 returned -14 [ 541.509944][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 541.514683][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 541.518224][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 541.523019][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 541.526296][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 541.556385][T10724] lo speed is unknown, defaulting to 1000 [ 541.654272][T10724] chnl_net:caif_netlink_parms(): no params data found [ 541.778121][T10724] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.780692][T10724] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.783266][T10724] bridge_slave_0: entered allmulticast mode [ 541.788093][T10724] bridge_slave_0: entered promiscuous mode [ 541.792141][T10724] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.794673][T10724] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.797689][T10724] bridge_slave_1: entered allmulticast mode [ 541.801222][T10724] bridge_slave_1: entered promiscuous mode [ 541.831101][T10724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.837457][T10724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.858749][T10724] team0: Port device team_slave_0 added [ 541.863310][T10724] team0: Port device team_slave_1 added [ 541.883371][T10724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.886315][T10724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.896797][T10724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.902688][T10724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.910576][T10724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.921005][T10724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.952059][T10724] hsr_slave_0: entered promiscuous mode [ 541.955274][T10724] hsr_slave_1: entered promiscuous mode [ 541.958335][T10724] debugfs: 'hsr0' already exists in 'hsr' [ 541.960248][T10724] Cannot create hsr debugfs directory [ 542.087605][T10724] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.159923][T10724] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.229090][T10724] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.296140][T10724] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.431168][T10724] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 542.440739][T10724] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 542.445456][T10724] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 542.450121][T10724] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 542.470895][T10724] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.473326][T10724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.475803][T10724] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.478303][T10724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.507549][T10724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.515966][ T4689] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.519199][ T4689] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.529276][T10724] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.535974][ T4774] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.538937][ T4774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.544687][ T4472] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.547629][ T4472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.687369][T10724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.799117][T10756] overlayfs: failed to clone upperpath [ 542.869574][T10724] veth0_vlan: entered promiscuous mode [ 542.879629][T10724] veth1_vlan: entered promiscuous mode [ 542.900096][T10724] veth0_macvtap: entered promiscuous mode [ 542.904874][T10724] veth1_macvtap: entered promiscuous mode [ 542.914381][T10724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.922673][T10724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.930256][ T1183] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.935045][ T1183] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.942644][ T1183] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.946692][ T1183] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.022387][ T4774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.026291][ T4774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.058955][ T4774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.061549][ T4774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.731196][ T5946] Bluetooth: hci3: command tx timeout [ 544.266806][ T40] kauditd_printk_skb: 146 callbacks suppressed [ 544.266818][ T40] audit: type=1400 audit(2000000861.767:49513): avc: denied { unmount } for pid=10724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 544.373492][ T40] audit: type=1400 audit(2000000861.870:49514): avc: denied { execmem } for pid=10782 comm="syz.5.16690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 544.386697][ T40] audit: type=1400 audit(2000000861.870:49515): avc: denied { execute } for pid=10782 comm="syz.5.16690" path="/3/file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 544.413146][ T40] audit: type=1804 audit(2000000861.870:49516): pid=10783 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.16690" name="/newroot/3/file0" dev="tmpfs" ino=34 res=1 errno=0 [ 544.432775][ T40] audit: type=1400 audit(2000000861.916:49517): avc: denied { setopt } for pid=10786 comm="syz.5.16691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 544.444312][ T40] audit: type=1400 audit(2000000861.926:49518): avc: denied { bind } for pid=10786 comm="syz.5.16691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 544.453060][ T40] audit: type=1400 audit(2000000861.926:49519): avc: denied { name_bind } for pid=10786 comm="syz.5.16691" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 544.462563][ T40] audit: type=1400 audit(2000000861.926:49520): avc: denied { node_bind } for pid=10786 comm="syz.5.16691" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 544.472751][ T40] audit: type=1400 audit(2000000861.935:49521): avc: denied { write } for pid=10786 comm="syz.5.16691" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 544.481771][ T40] audit: type=1400 audit(2000000861.935:49522): avc: denied { connect } for pid=10786 comm="syz.5.16691" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 544.728056][T10797] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 544.731081][T10797] overlayfs: failed to set xattr on upper [ 544.734491][T10797] overlayfs: ...falling back to redirect_dir=nofollow. [ 544.738486][T10797] overlayfs: ...falling back to index=off. [ 544.741367][T10797] overlayfs: ...falling back to uuid=null. [ 544.989858][T10812] overlayfs: failed to clone upperpath [ 545.034304][T10815] overlayfs: failed to clone upperpath [ 545.199688][T10822] netlink: 96 bytes leftover after parsing attributes in process `syz.9.16705'. [ 545.429152][T10832] netlink: 'syz.0.16710': attribute type 9 has an invalid length. [ 545.563869][T10845] netlink: 'syz.5.16715': attribute type 1 has an invalid length. [ 545.595667][T10845] bond1 (unregistering): Released all slaves [ 545.693652][T10845] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16715'. [ 545.865549][T10865] binder: 10864:10865 ioctl c0306201 200000000080 returned -14 [ 545.909462][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16722'. [ 545.921273][T10867] bond2: entered promiscuous mode [ 545.923186][T10867] bond2: entered allmulticast mode [ 545.925673][T10867] 8021q: adding VLAN 0 to HW filter on device bond2 [ 545.956234][ T5946] Bluetooth: hci3: command tx timeout [ 546.106559][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16726'. [ 546.223287][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 546.915499][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16732'. [ 546.960585][T10899] tipc: Started in network mode [ 546.962928][T10899] tipc: Node identity 46baa86baec1, cluster identity 4711 [ 546.965584][T10899] tipc: Enabled bearer , priority 0 [ 547.001284][T10899] syzkaller0: entered promiscuous mode [ 547.003455][T10899] syzkaller0: entered allmulticast mode [ 547.006513][T10899] tipc: Resetting bearer [ 547.038900][T10898] tipc: Resetting bearer [ 547.512121][T10905] binder_alloc: 10904: binder_alloc_buf size 8 failed, no address space [ 547.535163][T10905] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 548.021180][T10916] overlayfs: failed to clone upperpath [ 548.184227][ T5946] Bluetooth: hci3: command tx timeout [ 549.486525][T10898] tipc: Disabling bearer [ 549.492093][ T4580] tipc: Node number set to 3900418155 [ 549.510486][T10921] lo speed is unknown, defaulting to 1000 [ 549.582162][T10937] netlink: 52 bytes leftover after parsing attributes in process `syz.0.16746'. [ 549.591518][T10937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10937 comm=syz.0.16746 [ 549.596307][T10937] netlink: 76 bytes leftover after parsing attributes in process `syz.0.16746'. [ 549.600531][T10937] netlink: 52 bytes leftover after parsing attributes in process `syz.0.16746'. [ 549.695858][ T40] kauditd_printk_skb: 120 callbacks suppressed [ 549.695869][ T40] audit: type=1400 audit(2000000866.834:49643): avc: denied { prog_run } for pid=10942 comm="syz.0.16749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 549.728902][ T40] audit: type=1400 audit(2000000866.862:49644): avc: denied { map_create } for pid=10943 comm="syz.5.16750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 549.741966][ T40] audit: type=1400 audit(2000000866.891:49645): avc: denied { map_read map_write } for pid=10943 comm="syz.5.16750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 549.782657][ T40] audit: type=1400 audit(2000000866.919:49646): avc: denied { execute } for pid=10946 comm="syz.4.16751" name="file0" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 549.795862][ T40] audit: type=1400 audit(2000000866.928:49647): avc: denied { execute_no_trans } for pid=10946 comm="syz.4.16751" path="/59/file0" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 549.852531][ T40] audit: type=1400 audit(2000000866.984:49648): avc: denied { unlink } for pid=10954 comm="syz.5.16754" name="#4e" dev="tmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 549.864707][ T40] audit: type=1400 audit(2000000866.984:49649): avc: denied { mount } for pid=10954 comm="syz.5.16754" name="/" dev="overlay" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 549.875048][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16753'. [ 549.895036][ T40] audit: type=1400 audit(2000000867.012:49650): avc: denied { unmount } for pid=10724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 549.928268][ T40] audit: type=1400 audit(2000000867.040:49651): avc: denied { recv } for pid=5900 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=45222 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 549.973229][ T40] audit: type=1400 audit(2000000867.096:49652): avc: denied { create } for pid=10964 comm="syz.0.16758" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 550.002140][T10967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16759'. [ 550.344190][T10990] kvm: pic: single mode not supported [ 550.404957][ T5946] Bluetooth: hci3: command tx timeout [ 550.555383][T11003] __nla_validate_parse: 2 callbacks suppressed [ 550.555398][T11003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16771'. [ 550.756572][T11010] tipc: Started in network mode [ 550.759216][T11010] tipc: Node identity 027cfa58f2d1, cluster identity 4711 [ 550.762388][T11010] tipc: Enabled bearer , priority 0 [ 550.767024][T11009] tipc: Resetting bearer [ 550.842768][T11012] loop6: detected capacity change from 0 to 2640 [ 550.848977][T32125] buffer_io_error: 27 callbacks suppressed [ 550.848992][T32125] Buffer I/O error on dev loop6, logical block 0, async page read [ 550.855768][T32125] Buffer I/O error on dev loop6, logical block 0, async page read [ 550.860720][T32125] Buffer I/O error on dev loop6, logical block 0, async page read [ 550.864401][T32125] Buffer I/O error on dev loop6, logical block 0, async page read [ 550.867965][T32125] Buffer I/O error on dev loop6, logical block 0, async page read [ 550.871550][T32125] Buffer I/O error on dev loop6, logical block 0, async page read [ 550.875254][T32125] Buffer I/O error on dev loop6, logical block 0, async page read [ 550.880700][T32125] Buffer I/O error on dev loop6, logical block 0, async page read [ 550.884324][T32125] ldm_validate_partition_table(): Disk read failed. [ 550.887713][T32125] Buffer I/O error on dev loop6, logical block 0, async page read [ 550.891326][T32125] Buffer I/O error on dev loop6, logical block 0, async page read [ 550.895127][T32125] Dev loop6: unable to read RDB block 0 [ 550.898486][T32125] loop6: unable to read partition table [ 550.902765][T11012] ldm_validate_partition_table(): Disk read failed. [ 550.907212][T11012] Dev loop6: unable to read RDB block 0 [ 550.916493][T11012] loop6: unable to read partition table [ 550.926967][T11012] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 551.008961][T11016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16775'. [ 551.594607][T11032] overlayfs: failed to clone upperpath [ 552.838320][T11009] tipc: Disabling bearer [ 552.858250][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16775'. [ 552.868209][ T24] tipc: Node number set to 4037933656 [ 553.126541][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16786'. [ 553.150692][T11056] net_ratelimit: 16 callbacks suppressed [ 553.150700][T11056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 553.197689][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055f04000: rx timeout, send abort [ 553.732520][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880356cc000: rx timeout, send abort [ 553.736123][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055f04000: abort rx timeout. Force session deactivation [ 554.181052][T11074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16796'. [ 554.270853][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880356cc000: abort rx timeout. Force session deactivation [ 554.555769][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a89f000: rx timeout, send abort [ 554.558805][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a89e800: rx timeout, send abort [ 554.561761][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a89f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 554.566523][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a89e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 554.608125][T11090] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 554.611807][T11090] ref_ctr increment failed for inode: 0x18b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802ae8e0c0 [ 554.616285][T11089] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 554.619831][T11089] ref_ctr decrement failed for inode: 0x18b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802ae8e0c0 [ 554.623635][T11089] uprobe: syz.4.16803:11089 failed to unregister, leaking uprobe [ 555.069485][ T40] kauditd_printk_skb: 133 callbacks suppressed [ 555.069496][ T40] audit: type=1400 audit(2000000871.865:49786): avc: denied { read write } for pid=10724 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 555.086369][ T40] audit: type=1400 audit(2000000871.874:49787): avc: denied { open } for pid=10724 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 555.097556][ T40] audit: type=1400 audit(2000000871.874:49788): avc: denied { ioctl } for pid=10724 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 555.109469][ T40] audit: type=1400 audit(2000000871.893:49789): avc: denied { mount } for pid=11123 comm="syz.4.16815" name="/" dev="ramfs" ino=167133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 555.120125][ T40] audit: type=1400 audit(2000000871.893:49790): avc: denied { mounton } for pid=11123 comm="syz.4.16815" path="/file0" dev="ramfs" ino=167134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 555.146826][ T40] audit: type=1400 audit(2000000871.940:49791): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=36272 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 555.158349][ T40] audit: type=1400 audit(2000000871.949:49792): avc: denied { recv } for pid=5898 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=45222 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 555.165178][T11131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16818'. [ 555.172400][ T40] audit: type=1400 audit(2000000871.949:49793): avc: denied { create } for pid=11130 comm="syz.4.16818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 555.185617][ T40] audit: type=1400 audit(2000000871.949:49794): avc: denied { setopt } for pid=11130 comm="syz.4.16818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 555.229681][ T40] audit: type=1400 audit(2000000872.014:49795): avc: denied { bind } for pid=11130 comm="syz.4.16818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 555.355811][T11140] binder: 11139:11140 unknown command 0 [ 555.359486][T11140] binder: 11139:11140 ioctl c0306201 200000000080 returned -22 [ 555.366811][T11140] binder: 11139:11140 ioctl c0306201 2000000003c0 returned -14 [ 555.564346][T11155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16826'. [ 555.599997][T11155] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 555.604078][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 555.605710][T11155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16826'. [ 555.607135][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 555.607158][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 555.607176][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 555.627424][T11155] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 555.636732][T11155] bond1 (unregistering): Released all slaves [ 555.656409][ T2640] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 555.660480][ T2640] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 555.664610][ T2640] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 555.669337][ T2640] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 555.975810][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16830'. [ 556.489829][ T5950] Bluetooth: hci5: command 0x0406 tx timeout [ 556.489973][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 556.803106][T11194] sctp: [Deprecated]: syz.5.16842 (pid 11194) Use of struct sctp_assoc_value in delayed_ack socket option. [ 556.803106][T11194] Use struct sctp_sack_info instead [ 556.859029][T11202] overlayfs: failed to clone upperpath [ 556.906997][T11209] fuse: Bad value for 'fd' [ 557.007804][T11218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16851'. [ 557.115017][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16854'. [ 557.285592][T11239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16859'. [ 557.866096][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16872'. [ 557.913461][T11266] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 558.149295][T11292] < [ 558.419817][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16893'. [ 558.426623][T11322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16893'. [ 558.449162][T11322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16893'. [ 558.678566][T11346] tipc: Enabling of bearer rejected, failed to enable media [ 558.793965][T11356] netlink: 'syz.5.16904': attribute type 1 has an invalid length. [ 558.798141][T11356] netlink: 'syz.5.16904': attribute type 1 has an invalid length. [ 558.887643][T11364] overlayfs: failed to clone upperpath [ 558.965524][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16912'. [ 559.038434][T11376] lo speed is unknown, defaulting to 1000 [ 559.588956][T11401] binder_alloc: 11400: binder_alloc_buf size 4294966960 failed, no address space [ 559.592481][T11401] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 560.141946][T11412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16927'. [ 560.565847][ T40] kauditd_printk_skb: 165 callbacks suppressed [ 560.565862][ T40] audit: type=1400 audit(2000000877.007:49961): avc: denied { unmount } for pid=10724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 560.595843][ T40] audit: type=1400 audit(2000000877.026:49962): avc: denied { read } for pid=11429 comm="syz.5.16933" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 560.603834][ T40] audit: type=1400 audit(2000000877.035:49963): avc: denied { open } for pid=11429 comm="syz.5.16933" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 560.612644][ T40] audit: type=1400 audit(2000000877.035:49964): avc: denied { ioctl } for pid=11429 comm="syz.5.16933" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 560.621805][ T40] audit: type=1400 audit(2000000877.054:49965): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=45222 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 560.633335][ T40] audit: type=1400 audit(2000000877.054:49966): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=45222 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 560.645020][ T40] audit: type=1400 audit(2000000877.073:49967): avc: denied { map_create } for pid=11432 comm="syz.4.16935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 560.653432][ T40] audit: type=1400 audit(2000000877.082:49968): avc: denied { bpf } for pid=11432 comm="syz.4.16935" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 560.662042][ T40] audit: type=1400 audit(2000000877.082:49969): avc: denied { map_read map_write } for pid=11432 comm="syz.4.16935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 560.668950][ T40] audit: type=1400 audit(2000000877.082:49970): avc: denied { prog_load } for pid=11432 comm="syz.4.16935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 561.298966][ T30] block nbd1: Possible stuck request ffff888028167000: control (read@0,1024B). Runtime 300 seconds [ 561.303716][ T30] block nbd1: Possible stuck request ffff8880281671c0: control (read@1024,1024B). Runtime 300 seconds [ 561.307568][ T30] block nbd1: Possible stuck request ffff888028167380: control (read@2048,1024B). Runtime 300 seconds [ 561.311458][ T30] block nbd1: Possible stuck request ffff888028167540: control (read@3072,1024B). Runtime 300 seconds [ 561.358200][T11459] veth0_vlan: entered allmulticast mode [ 561.400549][T11465] __nla_validate_parse: 1 callbacks suppressed [ 561.400568][T11465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16949'. [ 561.415882][ T1149] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.415974][T11465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16949'. [ 561.423158][ T1149] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.424307][ T1149] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.431453][ T1149] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.660888][T11483] binder: 11482:11483 ioctl c0306201 200000001640 returned -14 [ 561.773162][T11491] block device autoloading is deprecated and will be removed. [ 561.872002][ T2640] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 561.939688][T11515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16969'. [ 562.867536][T11552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16983'. [ 562.906903][T11552] macvlan2: entered promiscuous mode [ 562.909757][T11552] macvlan2: entered allmulticast mode [ 562.913161][T11552] bond1: entered promiscuous mode [ 562.916460][T11552] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 562.922741][T11552] bond1: left promiscuous mode [ 563.110961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 563.115094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 563.189874][T11568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16990'. [ 563.228705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 563.231113][T11568] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11568 comm=syz.0.16990 [ 563.232642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 563.241644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 563.247609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 563.252319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 563.256589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 563.367951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 563.734542][T11587] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 564.319083][T11617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17007'. [ 564.393615][T11617] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11617 comm=syz.4.17007 [ 564.609316][T11633] netlink: 'syz.4.17015': attribute type 1 has an invalid length. [ 564.633377][T11633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 564.644210][T11633] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 564.651957][T11633] bond1: entered allmulticast mode [ 564.667688][T11633] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 564.865485][ T46] bond0: (slave bond_slave_0): interface is now down [ 564.868288][ T46] bond0: (slave bond_slave_1): interface is now down [ 564.873881][ T46] bond0: now running without any active interface! [ 564.878445][T11648] netlink: 'syz.4.17020': attribute type 10 has an invalid length. [ 564.884953][T11648] syz_tun: entered promiscuous mode [ 564.904535][T11648] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 564.930011][T10598] bond0: (slave syz_tun): interface is now down [ 564.936071][T10598] bond0: now running without any active interface! [ 564.966619][T11652] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17022'. [ 565.007413][T11652] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11652 comm=syz.4.17022 [ 565.196037][T11665] netlink: 'syz.4.17026': attribute type 4 has an invalid length. [ 565.257325][T11668] overlayfs: failed to clone upperpath [ 565.306754][T11671] batman_adv: batadv0: Adding interface: dummy0 [ 565.309470][T11671] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.319355][T11671] batman_adv: batadv0: Interface activated: dummy0 [ 565.334859][T11671] batadv0: mtu less than device minimum [ 565.340126][T11671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 565.345451][T11671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 565.350039][T11671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 565.354510][T11671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 565.359300][T11671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 565.364009][T11671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 565.368924][T11671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 565.373618][T11671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 565.378201][T11671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 565.398086][T11674] syzkaller0: entered promiscuous mode [ 565.401667][T11674] syzkaller0: entered allmulticast mode [ 565.988403][T11692] ref_ctr increment failed for inode: 0x3aa offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802c646b80 [ 566.226435][T11696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17037'. [ 566.264966][T11696] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11696 comm=syz.4.17037 [ 566.305468][ T40] kauditd_printk_skb: 168 callbacks suppressed [ 566.305481][ T40] audit: type=1400 audit(2000000882.365:50139): avc: denied { create } for pid=11697 comm="syz.4.17038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 566.387809][ T40] audit: type=1400 audit(2000000882.449:50140): avc: denied { mounton } for pid=11701 comm="syz.4.17040" path="/171/file0" dev="tmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 566.437267][ T40] audit: type=1400 audit(2000000882.486:50141): avc: denied { mounton } for pid=11703 comm="syz.4.17041" path="/file0" dev="rootfs" ino=169357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 566.446516][ T40] audit: type=1400 audit(2000000882.496:50142): avc: denied { mounton } for pid=11703 comm="syz.4.17041" path="/file0" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 566.471970][ T40] audit: type=1400 audit(2000000882.505:50143): avc: denied { create } for pid=11703 comm="syz.4.17041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 566.494324][ T40] audit: type=1400 audit(2000000882.524:50144): avc: denied { sys_admin } for pid=11703 comm="syz.4.17041" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 566.517933][ T40] audit: type=1400 audit(2000000882.570:50145): avc: denied { name_bind } for pid=11706 comm="syz.9.17043" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 566.525777][ T40] audit: type=1400 audit(2000000882.570:50146): avc: denied { node_bind } for pid=11706 comm="syz.9.17043" saddr=224.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 566.531241][T11709] binder: BINDER_SET_CONTEXT_MGR already set [ 566.534617][ T40] audit: type=1400 audit(2000000882.580:50147): avc: denied { read } for pid=11708 comm="syz.5.17042" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 566.536257][T11709] binder: 11708:11709 ioctl 4018620d 2000000000c0 returned -16 [ 566.553583][ T40] audit: type=1400 audit(2000000882.580:50148): avc: denied { open } for pid=11708 comm="syz.5.17042" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 566.556818][T11709] binder: 11708:11709 unknown command 0 [ 566.567168][T11709] binder: 11708:11709 ioctl c0306201 200000000080 returned -22 [ 566.577776][T11709] binder: BINDER_SET_CONTEXT_MGR already set [ 566.580247][T11709] binder: 11708:11709 ioctl 4018620d 200000000040 returned -16 [ 567.112900][T11738] syzkaller0: entered promiscuous mode [ 567.115479][T11738] syzkaller0: entered allmulticast mode [ 567.343143][T11746] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17058'. [ 567.387407][T11746] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11746 comm=syz.4.17058 [ 567.528008][ T984] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 567.699062][ T984] usb 14-1: Using ep0 maxpacket: 16 [ 567.703393][ T984] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 567.709359][ T984] usb 14-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 567.718436][ T984] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.721877][ T984] usb 14-1: Product: syz [ 567.723312][ T984] usb 14-1: Manufacturer: syz [ 567.724890][ T984] usb 14-1: SerialNumber: syz [ 567.729071][ T984] usb 14-1: config 0 descriptor?? [ 567.736643][ T984] em28xx 14-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 567.740617][ T984] em28xx 14-1:0.0: DVB interface 0 found: bulk [ 567.844268][T11767] netlink: 'syz.4.17067': attribute type 1 has an invalid length. [ 567.882553][T11767] 8021q: adding VLAN 0 to HW filter on device bond2 [ 567.925532][T11767] veth15: entered promiscuous mode [ 567.929848][T11767] bond2: (slave veth15): Enslaving as an active interface with a down link [ 567.959716][T11767] bond2: entered allmulticast mode [ 568.252839][T11782] syz_tun: entered allmulticast mode [ 568.260889][T11782] pimreg: entered allmulticast mode [ 568.267827][T11782] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 568.273468][T11781] pimreg: left allmulticast mode [ 568.382156][ T984] em28xx 14-1:0.0: unknown em28xx chip ID (0) [ 568.837934][ T984] em28xx 14-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 568.841767][ T984] em28xx 14-1:0.0: board has no eeprom [ 568.918637][ T984] em28xx 14-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 568.922159][ T984] em28xx 14-1:0.0: dvb set to bulk mode. [ 568.926730][ T4580] em28xx 14-1:0.0: Binding DVB extension [ 568.945844][ T984] usb 14-1: USB disconnect, device number 4 [ 568.954289][ T984] em28xx 14-1:0.0: Disconnecting em28xx [ 569.052045][ T4580] em28xx 14-1:0.0: Registering input extension [ 569.074294][ T984] em28xx 14-1:0.0: Closing input extension [ 569.115339][ T984] em28xx 14-1:0.0: Freeing device [ 569.416106][T11793] netem: incorrect gi model size [ 569.478612][T11795] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 569.756387][T11798] sit0: left promiscuous mode [ 569.762089][T11798] macvtap0: left allmulticast mode [ 569.764524][T11798] macsec0: left promiscuous mode [ 569.766268][T11798] macsec0: left allmulticast mode [ 569.768944][T11798] geneve2: left promiscuous mode [ 569.770973][T11798] geneve2: left allmulticast mode [ 569.773216][T11798] erspan1: left promiscuous mode [ 569.775379][T11798] xfrm1: left allmulticast mode [ 569.777321][T11798] erspan2: left promiscuous mode [ 569.779194][T11798] macvlan0: left promiscuous mode [ 569.782150][T11798] bond7: left promiscuous mode [ 569.783753][T11798] vetè0_virt_wif: left promiscuous mode [ 569.786846][T11798] bond8: left promiscuous mode [ 569.788481][T11798] erspan3: left promiscuous mode [ 569.790299][T11798] bond8: left allmulticast mode [ 569.792252][T11798] erspan3: left allmulticast mode [ 569.831505][ T5946] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 569.835553][ T5946] Bluetooth: hci4: Injecting HCI hardware error event [ 569.841918][ T5946] Bluetooth: hci4: hardware error 0x00 [ 570.260608][T11802] syzkaller0: entered promiscuous mode [ 570.263143][T11802] syzkaller0: entered allmulticast mode [ 572.062947][ T5946] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 572.229350][ T40] kauditd_printk_skb: 107 callbacks suppressed [ 572.229362][ T40] audit: type=1400 audit(2000000887.909:50256): avc: denied { egress } for pid=5946 comm="kworker/u33:4" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 572.453819][T11838] tipc: Started in network mode [ 572.456065][T11838] tipc: Node identity 7f000001, cluster identity 4711 [ 572.459387][T11838] tipc: Enabling of bearer rejected, failed to enable media [ 572.499211][ T40] audit: type=1400 audit(2000000888.152:50257): avc: denied { bpf } for pid=11843 comm="syz.0.17094" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 572.515798][ T40] audit: type=1400 audit(2000000888.152:50258): avc: denied { perfmon } for pid=11843 comm="syz.0.17094" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 572.534523][ T40] audit: type=1400 audit(2000000888.162:50259): avc: denied { prog_run } for pid=11843 comm="syz.0.17094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 572.545969][ T40] audit: type=1400 audit(2000000888.162:50260): avc: denied { map_create } for pid=11843 comm="syz.0.17094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 572.549818][T11844] 8021q: adding VLAN 0 to HW filter on device bond3 [ 572.562210][ T40] audit: type=1400 audit(2000000888.162:50261): avc: denied { map_read map_write } for pid=11843 comm="syz.0.17094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 572.577753][ T40] audit: type=1400 audit(2000000888.190:50262): avc: denied { read } for pid=11847 comm="syz.5.17096" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 572.590251][ T40] audit: type=1400 audit(2000000888.190:50263): avc: denied { open } for pid=11847 comm="syz.5.17096" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 572.600470][T11849] bond3: (slave ip6gretap2): making interface the new active one [ 572.605412][T11849] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 572.606898][T11852] netlink: 'syz.0.17097': attribute type 1 has an invalid length. [ 572.615990][ T40] audit: type=1400 audit(2000000888.190:50264): avc: denied { ioctl } for pid=11847 comm="syz.5.17096" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 572.641269][ T40] audit: type=1400 audit(2000000888.218:50265): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=45222 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 572.657700][T11852] bond10: entered promiscuous mode [ 572.661881][T11852] 8021q: adding VLAN 0 to HW filter on device bond10 [ 572.909281][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 573.844771][T11909] syzkaller0: entered promiscuous mode [ 573.847221][T11909] syzkaller0: entered allmulticast mode [ 573.988186][T11912] syzkaller0: entered promiscuous mode [ 573.990714][T11912] syzkaller0: entered allmulticast mode [ 574.228772][T11924] bond7: (slave vetè0_virt_wif): Removing an active aggregator [ 574.233969][T11924] bond7: (slave vetè0_virt_wif): Releasing backup interface [ 574.237428][T11924] bond7: (slave vetè0_virt_wif): last VLAN challenged slave left bond - VLAN blocking is removed [ 574.247234][T11924] .`: (slave bridge_slave_1): Releasing backup interface [ 574.258320][T11924] .`: (slave bond_slave_0): Releasing backup interface [ 574.263242][T11924] .`: (slave bond_slave_1): Releasing backup interface [ 574.268378][T11924] net_ratelimit: 12 callbacks suppressed [ 574.268388][T11924] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 574.299671][T11918] netlink: 'syz.0.17119': attribute type 10 has an invalid length. [ 574.529249][T11939] netlink: 'syz.9.17127': attribute type 1 has an invalid length. [ 574.564529][T11939] netlink: 32 bytes leftover after parsing attributes in process `syz.9.17127'. [ 574.576463][T11939] bond3: (slave bridge1): making interface the new active one [ 574.579667][T11939] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 574.600816][T11939] netlink: 28 bytes leftover after parsing attributes in process `syz.9.17127'. [ 574.617268][T11939] 8021q: adding VLAN 0 to HW filter on device bond3 [ 574.853008][T11964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17137'. [ 574.963855][T11961] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17136'. [ 575.049826][T11978] syzkaller0: entered promiscuous mode [ 575.053434][T11978] syzkaller0: entered allmulticast mode [ 575.141702][T11986] syzkaller0: entered promiscuous mode [ 575.144871][T11986] syzkaller0: entered allmulticast mode [ 575.262194][T11989] netlink: 'syz.9.17145': attribute type 1 has an invalid length. [ 575.303798][T11989] bond4: (slave gretap1): making interface the new active one [ 575.306952][T11989] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 575.315370][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17145'. [ 575.323257][T11989] bond4 (unregistering): (slave gretap1): Releasing active interface [ 575.331837][T11989] bond4 (unregistering): Released all slaves [ 575.366032][T11992] lo speed is unknown, defaulting to 1000 [ 575.467691][T11992] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17146'. [ 575.471988][T11992] netlink: 'syz.5.17146': attribute type 2 has an invalid length. [ 575.965496][T12035] syzkaller0: entered promiscuous mode [ 575.977784][T12035] syzkaller0: entered allmulticast mode [ 576.109818][T12048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17163'. [ 576.150693][T12048] bridge7: port 1(gretap0) entered blocking state [ 576.153639][T12048] bridge7: port 1(gretap0) entered disabled state [ 576.156978][T12048] gretap0: entered allmulticast mode [ 576.162499][T12048] gretap0: entered promiscuous mode [ 576.179808][T12048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17163'. [ 576.189040][T12048] bridge7: port 2(veth0_to_bond) entered blocking state [ 576.192763][T12048] bridge7: port 2(veth0_to_bond) entered disabled state [ 576.196271][T12048] veth0_to_bond: entered allmulticast mode [ 576.200717][T12048] veth0_to_bond: entered promiscuous mode [ 576.264458][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17165'. [ 576.679027][T12089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17176'. [ 576.910135][ T46] syzkaller0: tun_net_xmit 76 [ 576.912925][ T46] syzkaller0: tun_net_xmit 48 [ 576.913369][T12097] syzkaller0: create flow: hash 4143488829 index 1 [ 576.940399][ T984] syzkaller0: tun_net_xmit 76 [ 576.984851][T12097] syzkaller0: delete flow: hash 4143488829 index 1 [ 577.589957][ T40] kauditd_printk_skb: 144 callbacks suppressed [ 577.589974][ T40] audit: type=1400 audit(2000000892.921:50410): avc: denied { read write } for pid=12117 comm="syz.9.17187" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 577.604868][ T40] audit: type=1400 audit(2000000892.921:50411): avc: denied { open } for pid=12117 comm="syz.9.17187" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 577.625661][ T40] audit: type=1400 audit(2000000892.958:50412): avc: denied { ioctl } for pid=12115 comm="syz.4.17186" path="socket:[172505]" dev="sockfs" ino=172505 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 577.786216][ T40] audit: type=1400 audit(2000000893.099:50413): avc: denied { create } for pid=12121 comm="syz.9.17188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 577.804785][ T40] audit: type=1400 audit(2000000893.108:50414): avc: denied { create } for pid=12121 comm="syz.9.17188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 577.854358][ T40] audit: type=1400 audit(2000000893.164:50415): avc: denied { accept } for pid=12121 comm="syz.9.17188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 578.394338][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.079246][ T2640] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 579.087204][ T40] audit: type=1400 audit(2000000894.314:50416): avc: denied { write } for pid=12124 comm="syz.9.17189" path="socket:[169752]" dev="sockfs" ino=169752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 579.110871][ T40] audit: type=1400 audit(2000000894.323:50417): avc: denied { create } for pid=12126 comm="syz.4.17190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 579.171582][ T40] audit: type=1400 audit(2000000894.398:50418): avc: denied { execute } for pid=12134 comm="syz.5.17193" path="/112/file0" dev="tmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 579.172549][T12135] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 579.182419][ T40] audit: type=1804 audit(2000000894.398:50419): pid=12135 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.17193" name="/newroot/112/file0" dev="tmpfs" ino=635 res=1 errno=0 [ 579.185706][T12135] ref_ctr increment failed for inode: 0x27b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802ae8d600 [ 579.222464][T12139] binder: 12138:12139 ioctl c0306201 200000000180 returned -14 [ 579.232479][T12135] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 579.236105][T12135] ref_ctr decrement failed for inode: 0x27b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802ae8d600 [ 579.243286][T12135] uprobe: syz.5.17193:12135 failed to unregister, leaking uprobe [ 579.283547][T12141] bridge: RTM_NEWNEIGH with invalid ether address [ 579.585087][T12156] lo speed is unknown, defaulting to 1000 [ 579.603308][ T6021] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 579.720481][T10062] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 579.763385][ T6021] usb 10-1: Using ep0 maxpacket: 32 [ 579.767700][ T6021] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 579.771761][ T6021] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 579.776894][ T6021] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 579.781380][ T6021] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 579.785850][ T6021] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 579.790124][ T6021] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 579.795670][ T6021] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 579.799796][ T6021] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.806741][ T6021] usb 10-1: config 0 descriptor?? [ 579.917271][T10062] usb 14-1: Using ep0 maxpacket: 16 [ 579.924974][T10062] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 579.936223][T10062] usb 14-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 579.939507][T10062] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.942206][T10062] usb 14-1: Product: syz [ 579.943639][T10062] usb 14-1: Manufacturer: syz [ 579.945559][T10062] usb 14-1: SerialNumber: syz [ 579.949024][T10062] usb 14-1: config 0 descriptor?? [ 579.953388][T10062] em28xx 14-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 579.957693][T10062] em28xx 14-1:0.0: DVB interface 0 found: bulk [ 580.034406][ T6021] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 580.045420][ T6021] usb 10-1: USB disconnect, device number 15 [ 580.062331][ T6021] usblp0: removed [ 580.129251][T12176] netlink: 'syz.4.17209': attribute type 3 has an invalid length. [ 580.133282][T12176] netlink: 'syz.4.17209': attribute type 3 has an invalid length. [ 580.326817][T12182] overlayfs: failed to clone upperpath [ 580.425577][T12186] netlink: 'syz.0.17214': attribute type 1 has an invalid length. [ 580.456298][T12186] 8021q: adding VLAN 0 to HW filter on device bond11 [ 580.502980][T12186] veth13: entered promiscuous mode [ 580.509113][T12186] bond11: (slave veth13): Enslaving as an active interface with a down link [ 580.522648][ T6021] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 580.557541][T12186] vlan0: entered allmulticast mode [ 580.561847][T12186] bond11: entered allmulticast mode [ 580.565020][T12186] bond11: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 580.578234][T12189] cgroup: fork rejected by pids controller in /syz4 [ 580.618322][T10062] em28xx 14-1:0.0: unknown em28xx chip ID (0) [ 580.683022][ T6021] usb 10-1: Using ep0 maxpacket: 32 [ 580.687896][ T6021] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 580.691751][ T6021] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 580.696690][ T6021] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 580.702174][ T6021] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 580.707526][ T6021] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 580.713061][ T6021] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 580.721968][ T6021] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 580.726874][ T6021] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.737382][ T6021] usb 10-1: config 0 descriptor?? [ 580.808679][T12222] "syz.4.17216" (12222) uses obsolete ecb(arc4) skcipher [ 580.963723][ T6021] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 581.069016][T10062] em28xx 14-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 581.073586][T10062] em28xx 14-1:0.0: board has no eeprom [ 581.142919][T12152] em28xx 14-1:0.0: write to i2c device at 0xfffe failed with unknown error (status=1) [ 581.301550][ T6021] usb 10-1: USB disconnect, device number 16 [ 581.307220][ T6021] usblp0: removed [ 581.613815][T10062] em28xx 14-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 581.617306][T10062] em28xx 14-1:0.0: dvb set to bulk mode. [ 581.620741][T10061] em28xx 14-1:0.0: Binding DVB extension [ 581.629849][T10062] usb 14-1: USB disconnect, device number 5 [ 581.633570][T10062] em28xx 14-1:0.0: Disconnecting em28xx [ 581.666468][T10061] em28xx 14-1:0.0: Registering input extension [ 581.672234][T10062] em28xx 14-1:0.0: Closing input extension [ 581.691142][T10062] em28xx 14-1:0.0: Freeing device [ 582.155354][T12244] netlink: 'syz.9.17224': attribute type 1 has an invalid length. [ 582.168417][T12244] bond4: entered promiscuous mode [ 582.171579][T12244] 8021q: adding VLAN 0 to HW filter on device bond4 [ 582.192345][T12244] __nla_validate_parse: 1 callbacks suppressed [ 582.192356][T12244] netlink: 28 bytes leftover after parsing attributes in process `syz.9.17224'. [ 582.197450][T12244] bond4: entered allmulticast mode [ 582.212886][T12244] bond4: (slave bridge2): making interface the new active one [ 582.215466][T12244] bridge2: entered promiscuous mode [ 582.217398][T12244] bridge2: entered allmulticast mode [ 582.221831][T12244] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 582.431815][T12260] netlink: 'syz.0.17229': attribute type 1 has an invalid length. [ 582.453791][T12260] 8021q: adding VLAN 0 to HW filter on device bond12 [ 582.474017][T12260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17229'. [ 582.477130][T12260] bond12: entered promiscuous mode [ 582.478984][T12260] bond12: entered allmulticast mode [ 582.488080][T12260] bond12: (slave dummy0): Enslaving as an active interface with a down link [ 582.667818][T12260] bond12 (unregistering): (slave dummy0): Releasing active interface [ 582.678513][T12260] bond12 (unregistering): Released all slaves [ 582.738782][ T5946] Bluetooth: Wrong link type (-22) [ 582.821042][T12285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17233'. [ 582.828770][T12285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17233'. [ 582.947495][ T40] kauditd_printk_skb: 113 callbacks suppressed [ 582.947511][ T40] audit: type=1400 audit(2000000897.923:50533): avc: denied { setopt } for pid=12294 comm="syz.4.17239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 582.964340][ T8006] IPVS: starting estimator thread 0... [ 582.985782][T10724] syz_tun (unregistering): left allmulticast mode [ 583.003837][T12295] IPVS: sh: FWM 3 0x00000003 - no destination available [ 583.068933][T12296] IPVS: using max 26 ests per chain, 62400 per kthread [ 583.267543][ T40] audit: type=1400 audit(2000000898.222:50534): avc: denied { execute } for pid=12303 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 583.279434][ T40] audit: type=1400 audit(2000000898.222:50535): avc: denied { execute_no_trans } for pid=12303 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 583.291129][ T40] audit: type=1400 audit(2000000898.250:50536): avc: denied { execmem } for pid=12303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 583.301181][ T40] audit: type=1400 audit(2000000898.260:50537): avc: denied { unmount } for pid=8894 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 583.408838][ T40] audit: type=1400 audit(2000000898.353:50538): avc: denied { create } for pid=12306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 583.427700][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 583.434749][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 583.438718][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 583.444961][ T40] audit: type=1400 audit(2000000898.353:50539): avc: denied { read write } for pid=12306 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 583.453467][ T40] audit: type=1400 audit(2000000898.353:50540): avc: denied { open } for pid=12306 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 583.462871][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 583.463265][ T40] audit: type=1400 audit(2000000898.363:50541): avc: denied { ioctl } for pid=12306 comm="syz-executor" path="socket:[172705]" dev="sockfs" ino=172705 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 583.466319][T12310] lo speed is unknown, defaulting to 1000 [ 583.474117][ T40] audit: type=1400 audit(2000000898.400:50542): avc: denied { read } for pid=12308 comm="syz.9.17245" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 583.481981][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 583.522197][T12306] lo speed is unknown, defaulting to 1000 [ 583.522448][T12311] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 583.552458][T12311] kvm: pic: non byte read [ 583.555658][T12311] kvm: pic: non byte read [ 583.558525][T12311] kvm: pic: non byte read [ 583.566166][T12311] kvm: pic: non byte read [ 583.658484][T12306] chnl_net:caif_netlink_parms(): no params data found [ 583.790309][T12306] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.793670][T12306] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.800058][T12306] bridge_slave_0: entered allmulticast mode [ 583.804628][T12306] bridge_slave_0: entered promiscuous mode [ 583.810423][T12306] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.813746][T12306] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.817747][T12306] bridge_slave_1: entered allmulticast mode [ 583.821907][T12306] bridge_slave_1: entered promiscuous mode [ 583.828697][T12328] overlayfs: failed to clone upperpath [ 583.854420][T12306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.862937][T12306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.881901][T12306] team0: Port device team_slave_0 added [ 583.885575][T12306] team0: Port device team_slave_1 added [ 583.906223][T12306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.908796][T12306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.918198][T12306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.922974][T12306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.925581][T12306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.934700][T12306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.968624][T12306] hsr_slave_0: entered promiscuous mode [ 583.971421][T12306] hsr_slave_1: entered promiscuous mode [ 583.973678][T12306] debugfs: 'hsr0' already exists in 'hsr' [ 583.975558][T12306] Cannot create hsr debugfs directory [ 584.174356][T12306] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.179410][T12306] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.337585][T12306] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.342763][T12306] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.417251][T12306] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.420867][T12306] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.499385][T12306] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.503228][T12306] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.616973][T12351] ipvlan2: entered allmulticast mode [ 584.627332][T12351] team0: entered allmulticast mode [ 584.629180][T12351] team_slave_0: entered allmulticast mode [ 584.632193][T12351] team_slave_1: entered allmulticast mode [ 584.635763][T12351] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 584.732870][T10061] IPVS: starting estimator thread 0... [ 584.739888][T12306] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 584.746028][T12306] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 584.757190][T12306] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 584.764203][T12306] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 584.822206][T12355] IPVS: using max 45 ests per chain, 108000 per kthread [ 584.834971][T12306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.854832][T12306] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.863828][ T4774] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.866318][ T4774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.879201][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.882412][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.981361][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17265'. [ 585.083406][T12306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.105285][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17265'. [ 585.109676][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17265'. [ 585.116800][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17265'. [ 585.121232][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17265'. [ 585.130357][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17265'. [ 585.229713][ T4774] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 585.322290][T12306] veth0_vlan: entered promiscuous mode [ 585.334587][T12306] veth1_vlan: entered promiscuous mode [ 585.354621][T12306] veth0_macvtap: entered promiscuous mode [ 585.362448][T12306] veth1_macvtap: entered promiscuous mode [ 585.379536][T12306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.391223][T12306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.401454][ T7039] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.404624][ T7039] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.408717][ T7039] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.422934][ T7039] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.516522][ T7039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.527839][ T7039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.551232][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.554677][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.645309][T12411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12411 comm=syz.4.17271 [ 585.655494][T12411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12411 comm=syz.4.17271 [ 585.656545][ T5946] Bluetooth: hci3: command tx timeout [ 585.664181][T12411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=12411 comm=syz.4.17271 [ 585.670801][T12411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=12411 comm=syz.4.17271 [ 585.676886][T12411] netlink: 'syz.4.17271': attribute type 27 has an invalid length. [ 585.689148][T12411] netlink: 'syz.4.17271': attribute type 4 has an invalid length. [ 586.166331][T12442] binder: 12439:12442 ioctl c0306201 200000000240 returned -11 [ 586.245165][T12440] Invalid option length (1048180) for dns_resolver key [ 587.511172][T12465] netlink: 'syz.9.17291': attribute type 1 has an invalid length. [ 587.524909][T12465] bond5: entered promiscuous mode [ 587.528677][T12465] 8021q: adding VLAN 0 to HW filter on device bond5 [ 587.584450][T12465] 8021q: adding VLAN 0 to HW filter on device bond6 [ 587.595525][T12465] bond5: (slave bond6): making interface the new active one [ 587.600731][T12465] bond6: entered promiscuous mode [ 587.607384][T12465] bond5: (slave bond6): Enslaving as an active interface with an up link [ 587.621663][T12475] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 587.629913][T12475] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 587.805044][T12482] __nla_validate_parse: 3 callbacks suppressed [ 587.805060][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz.9.17295'. [ 587.841070][T12487] bridge13: entered allmulticast mode [ 587.892561][ T5946] Bluetooth: hci3: command tx timeout [ 588.089353][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17304'. [ 588.091730][T12510] netlink: 'syz.0.17303': attribute type 39 has an invalid length. [ 588.094026][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.9.17304'. [ 588.286468][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17312'. [ 588.324097][ T40] kauditd_printk_skb: 142 callbacks suppressed [ 588.324114][ T40] audit: type=1400 audit(2000000902.953:50685): avc: denied { sys_module } for pid=12527 comm="syz.0.17312" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 588.347687][ T40] audit: type=1400 audit(2000000902.972:50686): avc: denied { ioctl } for pid=12525 comm="syz.9.17311" path="socket:[175417]" dev="sockfs" ino=175417 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 588.356367][ T40] audit: type=1400 audit(2000000902.972:50687): avc: denied { bind } for pid=12525 comm="syz.9.17311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 588.400195][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17312'. [ 588.404425][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17312'. [ 588.417695][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17312'. [ 588.429010][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17312'. [ 588.434245][ T40] audit: type=1400 audit(2000000903.056:50688): avc: denied { ioctl } for pid=12534 comm="syz.9.17313" path="socket:[176140]" dev="sockfs" ino=176140 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 588.434562][T12535] syzkaller0: entered promiscuous mode [ 588.445065][T12535] syzkaller0: entered allmulticast mode [ 588.449145][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17312'. [ 588.461243][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17312'. [ 588.476420][ T40] audit: type=1400 audit(2000000903.094:50689): avc: denied { name_bind } for pid=12536 comm="syz.6.17314" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 588.487169][ T40] audit: type=1400 audit(2000000903.103:50690): avc: denied { node_bind } for pid=12536 comm="syz.6.17314" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 588.499411][ T40] audit: type=1400 audit(2000000903.112:50691): avc: denied { create } for pid=12536 comm="syz.6.17314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 588.508869][ T40] audit: type=1400 audit(2000000903.122:50692): avc: denied { bind } for pid=12536 comm="syz.6.17314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 588.518743][ T40] audit: type=1400 audit(2000000903.140:50693): avc: denied { setopt } for pid=12536 comm="syz.6.17314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 588.525158][T12539] netlink: 'syz.0.17315': attribute type 1 has an invalid length. [ 588.527920][ T40] audit: type=1400 audit(2000000903.150:50694): avc: denied { accept } for pid=12536 comm="syz.6.17314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 588.558914][T12539] 8021q: adding VLAN 0 to HW filter on device bond12 [ 588.588171][T12539] 8021q: adding VLAN 0 to HW filter on device bond12 [ 588.592231][T12539] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address [ 588.599024][T12539] bond12: (slave vxcan1): Error -95 calling set_mac_address [ 588.657415][T12544] veth15: entered promiscuous mode [ 588.674633][T12544] bond12: (slave veth15): Enslaving as an active interface with a down link [ 588.683720][T12543] lo: entered allmulticast mode [ 588.691232][T12539] 8021q: adding VLAN 0 to HW filter on device bond12 [ 588.702945][T12543] dvmrp8: entered allmulticast mode [ 588.714070][T12546] syzkaller0: entered promiscuous mode [ 588.717266][T12546] syzkaller0: entered allmulticast mode [ 588.722591][T12542] lo: left allmulticast mode [ 588.893864][T12562] bridge5: entered allmulticast mode [ 589.815980][T12605] netlink: 'syz.0.17333': attribute type 1 has an invalid length. [ 589.849634][T12605] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address [ 589.854776][T12605] bond13: (slave vxcan1): Error -95 calling set_mac_address [ 589.861500][ T8006] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 589.898008][T12609] macvlan1: entered promiscuous mode [ 589.899977][T12609] macvlan1: entered allmulticast mode [ 589.902505][T12609] bond13: entered promiscuous mode [ 589.904820][T12609] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 589.911321][T12609] bond13: left promiscuous mode [ 590.052121][ T8006] usb 11-1: Using ep0 maxpacket: 32 [ 590.056611][ T8006] usb 11-1: config 0 has an invalid interface number: 247 but max is 0 [ 590.060372][ T8006] usb 11-1: config 0 has no interface number 0 [ 590.063638][ T8006] usb 11-1: config 0 interface 247 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 590.067952][ T8006] usb 11-1: config 0 interface 247 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 590.075365][ T8006] usb 11-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 590.079038][ T8006] usb 11-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 590.082530][ T8006] usb 11-1: Product: syz [ 590.084713][ T8006] usb 11-1: Manufacturer: syz [ 590.088760][ T8006] usb 11-1: config 0 descriptor?? [ 590.116293][ T5946] Bluetooth: hci3: command tx timeout [ 590.344112][ T6021] usb 11-1: USB disconnect, device number 10 [ 590.705615][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 590.983524][T12623] ref_ctr increment failed for inode: 0x6d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88803b405600 [ 591.134831][T12632] syzkaller0: entered promiscuous mode [ 591.137155][T12632] syzkaller0: entered allmulticast mode [ 591.254778][T12639] tipc: Enabling of bearer rejected, failed to enable media [ 591.264891][T12639] tipc: Enabled bearer , priority 10 [ 591.533744][T12662] gre0: entered allmulticast mode [ 591.542741][T12662] pimreg: entered allmulticast mode [ 591.549584][T12659] pimreg: left allmulticast mode [ 592.330528][ T5946] Bluetooth: hci3: command tx timeout [ 592.493589][T12679] vlan2: entered promiscuous mode [ 592.495410][T12679] vlan2: entered allmulticast mode [ 592.497079][T12679] hsr_slave_1: entered allmulticast mode [ 592.889014][T12700] syzkaller0: entered promiscuous mode [ 592.891706][T12700] syzkaller0: entered allmulticast mode [ 593.269626][T12710] __nla_validate_parse: 3 callbacks suppressed [ 593.269638][T12710] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17365'. [ 593.368819][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17366'. [ 593.430338][T12713] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12713 comm=syz.6.17366 [ 593.440782][T12715] syzkaller0: entered promiscuous mode [ 593.443112][T12715] syzkaller0: entered allmulticast mode [ 593.470137][ T30] block nbd1: Possible stuck request ffff888028167000: control (read@0,1024B). Runtime 330 seconds [ 593.474782][ T30] block nbd1: Possible stuck request ffff8880281671c0: control (read@1024,1024B). Runtime 330 seconds [ 593.479254][ T30] block nbd1: Possible stuck request ffff888028167380: control (read@2048,1024B). Runtime 330 seconds [ 593.483372][ T30] block nbd1: Possible stuck request ffff888028167540: control (read@3072,1024B). Runtime 330 seconds [ 593.579971][T12723] tipc: Enabling of bearer rejected, failed to enable media [ 593.703635][T12729] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.802506][T12729] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.815055][ T40] kauditd_printk_skb: 166 callbacks suppressed [ 593.815066][ T40] audit: type=1400 audit(2000000908.087:50861): avc: denied { module_request } for pid=12737 comm="syz.0.17376" kmod="netdev-lo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 593.890589][T12729] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.947949][ T40] audit: type=1400 audit(2000000908.218:50862): avc: denied { create } for pid=12742 comm="syz.0.17377" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 593.959510][ T40] audit: type=1400 audit(2000000908.227:50863): avc: denied { mounton } for pid=12742 comm="syz.0.17377" path="/4740/file0" dev="tmpfs" ino=24335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 593.971632][ T40] audit: type=1400 audit(2000000908.236:50864): avc: denied { read write } for pid=12742 comm="syz.0.17377" name="file0" dev="tmpfs" ino=24335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 593.986434][ T40] audit: type=1400 audit(2000000908.236:50865): avc: denied { open } for pid=12742 comm="syz.0.17377" path="/4740/file0" dev="tmpfs" ino=24335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 593.994917][ T40] audit: type=1400 audit(2000000908.236:50866): avc: denied { map } for pid=12742 comm="syz.0.17377" path="/4740/file0" dev="tmpfs" ino=24335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 593.995488][T12729] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.143360][ T40] audit: type=1400 audit(2000000908.395:50867): avc: denied { create } for pid=12746 comm="syz.4.17379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 594.154460][T12711] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.167115][T12711] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.176923][ T4689] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.183172][ T40] audit: type=1400 audit(2000000908.433:50868): avc: denied { unlink } for pid=5937 comm="syz-executor" name="file0" dev="tmpfs" ino=24335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 594.193158][ T4472] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.213205][ T40] audit: type=1400 audit(2000000908.461:50869): avc: denied { mounton } for pid=12748 comm="syz.4.17380" path="/281/file0" dev="tmpfs" ino=1543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 594.272803][ T40] audit: type=1400 audit(2000000908.517:50870): avc: denied { create } for pid=12752 comm="syz.0.17384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 594.286246][T12756] netlink: 'syz.6.17382': attribute type 1 has an invalid length. [ 594.383826][T12756] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 594.392118][T12761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 594.395240][ T2640] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 594.522601][ T2640] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 594.836612][ T5946] Bluetooth: min 16105 > max 7 [ 595.095137][T12797] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.098763][T12797] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.629115][T12819] tipc: Enabling of bearer rejected, failed to enable media [ 595.796081][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17401'. [ 595.867332][T12835] bridge_slave_0: left allmulticast mode [ 595.869266][T12835] bridge_slave_0: left promiscuous mode [ 595.871688][T12835] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.876276][T12835] bridge_slave_1: left allmulticast mode [ 595.878744][T12835] bridge_slave_1: left promiscuous mode [ 595.880825][T12835] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.888639][T12835] bond0: (slave bond_slave_0): Releasing backup interface [ 595.900399][T12835] bond0: (slave bond_slave_1): Releasing backup interface [ 595.914587][T12835] team0: Port device team_slave_0 removed [ 595.920437][T12835] team0: Port device team_slave_1 removed [ 595.924766][T12835] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 595.955920][T12837] team0: Mode changed to "loadbalance" [ 595.959157][T12826] syz.6.17402 (12826): drop_caches: 2 [ 595.963853][T12839] tipc: Enabling of bearer rejected, failed to enable media [ 596.012036][T12835] vlan0: entered promiscuous mode [ 596.014060][T12835] vlan0: entered allmulticast mode [ 596.015778][T12835] veth0_vlan: entered allmulticast mode [ 596.026124][T12835] team0: Port device vlan0 added [ 596.037082][T12835] tipc: Enabled bearer , priority 0 [ 596.121586][T12853] netlink: 'syz.4.17413': attribute type 10 has an invalid length. [ 596.125970][T12853] batman_adv: batadv0: Interface deactivated: dummy0 [ 596.148473][T12853] batman_adv: batadv0: Removing interface: dummy0 [ 596.158964][T12853] dummy0: entered allmulticast mode [ 596.162625][T12853] team0: Port device dummy0 added [ 596.182998][T12853] netlink: 'syz.4.17413': attribute type 10 has an invalid length. [ 596.189768][T12853] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 596.199240][T12853] dummy0: left allmulticast mode [ 596.202649][T12853] team0: Failed to send options change via netlink (err -105) [ 596.206086][T12853] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 596.216018][T12853] team0: Port device dummy0 removed [ 596.302494][T12863] tipc: Started in network mode [ 596.304725][T12863] tipc: Node identity ce5f29137c1c, cluster identity 4711 [ 596.307938][T12863] tipc: Enabled bearer , priority 0 [ 596.318391][T12863] syzkaller0: entered promiscuous mode [ 596.321445][T12863] syzkaller0: entered allmulticast mode [ 596.328351][T12863] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 596.347369][T12863] tipc: Resetting bearer [ 596.352910][T12862] tipc: Resetting bearer [ 596.367837][T12867] syz.9.17418 (12867): drop_caches: 2 [ 596.370758][T12862] tipc: Disabling bearer [ 596.502128][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17421'. [ 596.878570][ T4689] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 596.908004][ T6039] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 596.918998][T12890] netlink: 'syz.0.17425': attribute type 10 has an invalid length. [ 596.923618][T12890] team0: Port device dummy0 added [ 596.927866][T12890] netlink: 'syz.0.17425': attribute type 10 has an invalid length. [ 596.934020][T12890] team0: Failed to send options change via netlink (err -105) [ 596.936757][T12890] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 596.940095][T12890] team0: Port device dummy0 removed [ 597.046899][ T5946] Bluetooth: hci3: command tx timeout [ 597.080830][ T6039] usb 14-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 597.086068][ T6039] usb 14-1: config 0 interface 0 has no altsetting 0 [ 597.091782][ T6039] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 597.095638][ T6039] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 597.098371][ T6039] usb 14-1: Product: syz [ 597.099922][ T6039] usb 14-1: Manufacturer: syz [ 597.102575][ T6039] usb 14-1: SerialNumber: syz [ 597.106645][ T6039] usb 14-1: config 0 descriptor?? [ 597.115749][ T6039] usb 14-1: selecting invalid altsetting 0 [ 597.343306][ T8006] usb 14-1: USB disconnect, device number 6 [ 597.435316][T12905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.724866][ T5508] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.727907][ T5508] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.734180][ T5508] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.737638][ T5508] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.740812][ T5508] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.744458][ T5508] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.747658][ T5508] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.750834][ T5508] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.327836][T12915] netlink: 'syz.4.17434': attribute type 10 has an invalid length. [ 598.565393][T28216] usb 14-1: new full-speed USB device number 7 using dummy_hcd [ 598.704412][T28216] usb 14-1: device descriptor read/64, error -71 [ 598.961877][T28216] usb 14-1: new full-speed USB device number 8 using dummy_hcd [ 598.977542][T12935] bond10: left promiscuous mode [ 598.989792][T12935] veth13: left promiscuous mode [ 599.003529][T12935] bridge13: left allmulticast mode [ 599.019496][T12935] veth15: left promiscuous mode [ 599.100052][T28216] usb 14-1: device descriptor read/64, error -71 [ 599.206211][ T40] kauditd_printk_skb: 188 callbacks suppressed [ 599.206338][ T40] audit: type=1400 audit(2000000913.126:51059): avc: denied { firmware_load } for pid=12938 comm="syz.6.17441" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 599.218121][T28216] usb usb14-port1: attempt power cycle [ 599.346309][ T40] audit: type=1400 audit(2000000913.257:51060): avc: denied { recv } for pid=5900 comm="syz-executor" saddr=127.0.0.1 src=45222 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 599.356343][ T40] audit: type=1400 audit(2000000913.267:51061): avc: denied { recv } for pid=5898 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=45222 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 599.410964][T12946] syzkaller0: entered promiscuous mode [ 599.412853][T12946] syzkaller0: entered allmulticast mode [ 599.417841][ T40] audit: type=1400 audit(2000000913.323:51062): avc: denied { write } for pid=12945 comm="syz.6.17444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 599.429111][ T40] audit: type=1400 audit(2000000913.332:51063): avc: denied { setopt } for pid=12947 comm="syz.4.17445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 599.438509][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17445'. [ 599.473788][ T40] audit: type=1400 audit(2000000913.379:51064): avc: denied { bind } for pid=12947 comm="syz.4.17445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 599.483516][T12948] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12948 comm=syz.4.17445 [ 599.542183][ T40] audit: type=1400 audit(2000000913.444:51065): avc: denied { read } for pid=12951 comm="syz.6.17447" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 599.571668][ T40] audit: type=1400 audit(2000000913.454:51066): avc: denied { open } for pid=12951 comm="syz.6.17447" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 599.579281][ T40] audit: type=1400 audit(2000000913.454:51067): avc: denied { ioctl } for pid=12951 comm="syz.6.17447" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 599.581395][T28216] usb 14-1: new full-speed USB device number 9 using dummy_hcd [ 599.597846][ T40] audit: type=1400 audit(2000000913.454:51068): avc: denied { create } for pid=12951 comm="syz.6.17447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 599.624537][T28216] usb 14-1: device descriptor read/8, error -71 [ 599.891650][T28216] usb 14-1: new full-speed USB device number 10 using dummy_hcd [ 599.918685][T28216] usb 14-1: device descriptor read/8, error -71 [ 600.018099][T10062] IPVS: starting estimator thread 0... [ 600.045810][T28216] usb usb14-port1: unable to enumerate USB device [ 600.137826][T12967] IPVS: using max 45 ests per chain, 108000 per kthread [ 600.151559][T12971] geneve3: entered promiscuous mode [ 600.154984][ T5508] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.159212][ T5508] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.160125][T12971] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12971 comm=syz.4.17453 [ 600.163496][ T5508] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.176594][ T5508] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.402156][T12984] syz_tun: left promiscuous mode [ 600.413276][T12984] bond1: left allmulticast mode [ 600.417101][T12984] bond2: left allmulticast mode [ 600.419963][T12984] veth15: left promiscuous mode [ 600.423144][T12984] ipvlan2: left allmulticast mode [ 600.425458][T12984] team0: left allmulticast mode [ 600.427992][T12984] team_slave_0: left allmulticast mode [ 600.430453][T12984] team_slave_1: left allmulticast mode [ 600.440525][T12984] geneve3: left promiscuous mode [ 600.448315][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.457689][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.468726][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.474524][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.676981][T12959] orangefs_mount: mount request failed with -4 [ 600.985119][T12999] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 601.032377][T13001] team0: Mode changed to "loadbalance" [ 601.038006][T13001] tipc: Enabling of bearer rejected, already enabled [ 601.085075][T13003] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 601.101571][T13003] team0: Unable to change to the same mode the team is in [ 601.598668][T13028] netlink: 'syz.0.17470': attribute type 10 has an invalid length. [ 601.693438][T13041] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 601.755158][T13047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17476'. [ 601.865500][T13041] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.869051][T13041] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.026752][T13041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.046284][T13041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.301095][ T7039] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.304710][ T7039] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.324798][ T7039] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.327670][ T7039] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.391816][T13076] geneve4: entered promiscuous mode [ 602.395909][ T4472] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.404296][ T4472] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.408882][T13076] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13076 comm=syz.0.17483 [ 602.414846][ T4472] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.433049][ T4472] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.481672][T13080] lo speed is unknown, defaulting to 1000 [ 602.500566][T13087] IPVS: sh: FWM 3 0x00000003 - no destination available [ 602.505212][T13087] IPVS: sh: FWM 3 0x00000003 - no destination available [ 602.547258][T13094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17491'. [ 602.733627][ T5946] Bluetooth: hci5: adv larger than maximum supported [ 602.733686][ T5946] Bluetooth: hci5: Malformed LE Event: 0x0d [ 602.841559][T13117] geneve2: entered promiscuous mode [ 602.844439][ T4472] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.849809][T13117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13117 comm=syz.6.17501 [ 602.896813][ T4472] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.899963][ T4472] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.902998][ T4472] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.911914][T13120] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17504'. [ 603.025938][ T7039] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 603.091961][T13138] tipc: Enabling of bearer rejected, failed to enable media [ 603.194849][T13147] syzkaller0: entered promiscuous mode [ 603.197528][T13147] syzkaller0: entered allmulticast mode [ 603.438088][ T5946] Bluetooth: min 16105 > max 7 [ 603.764285][T13156] tipc: Enabled bearer , priority 0 [ 603.775772][T13156] syzkaller0: entered promiscuous mode [ 603.777630][T13156] syzkaller0: entered allmulticast mode [ 603.787342][T13156] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 603.813469][T13156] tipc: Resetting bearer [ 603.816462][T13156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.824810][T13155] tipc: Resetting bearer [ 603.836491][T13158] netlink: 'syz.0.17518': attribute type 1 has an invalid length. [ 603.840715][T13155] tipc: Disabling bearer [ 603.863608][T13158] bond14: entered promiscuous mode [ 603.866543][T13158] 8021q: adding VLAN 0 to HW filter on device bond14 [ 603.884654][T13158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17518'. [ 603.887768][T13158] bond14: entered allmulticast mode [ 603.901444][T13158] bond14: (slave bridge14): making interface the new active one [ 603.904853][T13158] bridge14: entered promiscuous mode [ 603.906682][T13158] bridge14: entered allmulticast mode [ 603.909281][T13158] bond14: (slave bridge14): Enslaving as an active interface with an up link [ 603.969309][T13161] syzkaller0: entered promiscuous mode [ 603.971470][T13161] syzkaller0: entered allmulticast mode [ 604.517633][T13185] netlink: 36 bytes leftover after parsing attributes in process `syz.9.17523'. [ 604.520558][T13185] netlink: 16 bytes leftover after parsing attributes in process `syz.9.17523'. [ 604.524080][T13185] netlink: 36 bytes leftover after parsing attributes in process `syz.9.17523'. [ 604.527327][T13185] netlink: 36 bytes leftover after parsing attributes in process `syz.9.17523'. [ 604.896134][ T40] kauditd_printk_skb: 165 callbacks suppressed [ 604.896151][ T40] audit: type=1400 audit(2000000918.446:51234): avc: denied { create } for pid=13192 comm="syz.0.17533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 604.909421][ T40] audit: type=1400 audit(2000000918.456:51235): avc: denied { create } for pid=13192 comm="syz.0.17533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 604.974309][ T40] audit: type=1326 audit(2000000918.531:51236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.0.17534" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f620ab8f7c9 code=0x0 [ 605.232872][ T40] audit: type=1400 audit(2000000918.764:51237): avc: denied { read write } for pid=13198 comm="syz.6.17535" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 605.243094][ T40] audit: type=1400 audit(2000000918.764:51238): avc: denied { open } for pid=13198 comm="syz.6.17535" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 605.252216][ T40] audit: type=1400 audit(2000000918.764:51239): avc: denied { ioctl } for pid=13198 comm="syz.6.17535" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 605.339767][ T40] audit: type=1400 audit(2000000918.867:51240): avc: denied { read } for pid=13204 comm="syz.9.17537" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 605.360915][ T40] audit: type=1400 audit(2000000918.867:51241): avc: denied { open } for pid=13204 comm="syz.9.17537" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 605.370437][ T40] audit: type=1400 audit(2000000918.867:51242): avc: denied { ioctl } for pid=13204 comm="syz.9.17537" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 605.372075][T13209] bridge_slave_0: left allmulticast mode [ 605.382550][ T5946] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 605.383838][T13209] bridge_slave_0: left promiscuous mode [ 605.390352][T13209] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.396521][T13209] bridge_slave_1: left allmulticast mode [ 605.398420][ T40] audit: type=1400 audit(2000000918.914:51243): avc: denied { read } for pid=13204 comm="syz.9.17537" dev="nsfs" ino=4026535227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 605.399191][T13209] bridge_slave_1: left promiscuous mode [ 605.411858][T13209] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.419168][T13209] bond0: (slave bond_slave_0): Releasing backup interface [ 605.426582][T13209] bond0: (slave bond_slave_1): Releasing backup interface [ 605.438290][T13209] team0: Port device team_slave_0 removed [ 605.441360][T13209] team0: Port device team_slave_1 removed [ 605.444163][T13209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.447224][T13209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.450178][T13209] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 605.459762][T13212] team0: Mode changed to "loadbalance" [ 605.465454][T13209] vlan0: entered promiscuous mode [ 605.468242][T13209] vlan0: entered allmulticast mode [ 605.470489][T13209] veth0_vlan: entered allmulticast mode [ 605.592057][ T5950] Bluetooth: hci5: command 0x0406 tx timeout [ 605.740250][T13226] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17546'. [ 605.745014][T13226] netlink: 'syz.6.17546': attribute type 7 has an invalid length. [ 605.748548][T13226] netlink: 'syz.6.17546': attribute type 8 has an invalid length. [ 605.752163][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17546'. [ 605.760324][T13226] ip6gretap0: entered promiscuous mode [ 605.763825][T13226] syz_tun: entered promiscuous mode [ 605.766194][T13226] gretap0: entered promiscuous mode [ 605.768627][T13226] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 605.772031][T13226] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 605.776138][T13226] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 605.967957][T13239] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 605.979612][T13239] team0: No ports can be present during mode change [ 605.985667][ T5499] tipc: Resetting bearer [ 606.576858][T13268] tipc: Resetting bearer [ 606.583299][T13268] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 606.594738][T13268] team0: No ports can be present during mode change [ 606.602242][T13268] tipc: Enabling of bearer rejected, already enabled [ 607.314360][T13291] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.367147][T13316] IPVS: sh: FWM 3 0x00000003 - no destination available [ 607.371690][T13316] IPVS: sh: FWM 3 0x00000003 - no destination available [ 607.544182][T13330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17581'. [ 607.579527][T13330] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13330 comm=syz.0.17581 [ 607.817823][ T5946] Bluetooth: hci5: command 0x0406 tx timeout [ 607.951119][T13358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17592'. [ 607.981307][T13358] netlink: 100 bytes leftover after parsing attributes in process `syz.0.17592'. [ 608.080822][T13362] bond3: option mode: unable to set because the bond device has slaves [ 608.093084][T13362] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 608.099452][T13362] bond3: (slave macvlan2): Enslaving as an active interface with a down link [ 608.111790][T13362] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aaaa error=-28 [ 608.267894][T13362] infiniband syz0: set down [ 608.269986][T13362] infiniband syz0: added bond0 [ 608.301189][T13362] RDS/IB: syz0: added [ 608.303032][T13362] smc: adding ib device syz0 with port count 1 [ 608.305816][T13362] smc: ib device syz0 port 1 has no pnetid [ 608.632739][T13376] lo speed is unknown, defaulting to 1000 [ 608.854712][T13383] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17597'. [ 608.867790][T13383] loop4: detected capacity change from 0 to 7 [ 608.879869][T13383] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 608.882407][T13383] loop4: partition table partially beyond EOD, truncated [ 608.885737][T13383] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 608.945008][T32125] udevd[32125]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 609.189063][ T5499] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 609.286484][T13391] netlink: 12 bytes leftover after parsing attributes in process `syz.9.17600'. [ 609.321214][T13391] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13391 comm=syz.9.17600 [ 609.907049][ T5946] Bluetooth: to_multiplier 54284 > 3200 [ 610.290898][T13410] 0: reclassify loop, rule prio 0, protocol 800 [ 610.322956][ T40] kauditd_printk_skb: 168 callbacks suppressed [ 610.322973][ T40] audit: type=1400 audit(2000000923.523:51412): avc: denied { read write } for pid=13411 comm="syz.6.17608" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 610.337111][ T40] audit: type=1400 audit(2000000923.523:51413): avc: denied { open } for pid=13411 comm="syz.6.17608" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 610.349686][ T40] audit: type=1400 audit(2000000923.523:51414): avc: denied { ioctl } for pid=13411 comm="syz.6.17608" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 610.363786][ T40] audit: type=1400 audit(2000000923.542:51415): avc: denied { write } for pid=13411 comm="syz.6.17608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 610.373174][ T40] audit: type=1400 audit(2000000923.542:51416): avc: denied { read } for pid=13411 comm="syz.6.17608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 610.382824][ T40] audit: type=1400 audit(2000000923.542:51417): avc: denied { firmware_load } for pid=13411 comm="syz.6.17608" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 610.414693][ T40] audit: type=1400 audit(2000000923.598:51418): avc: denied { read write } for pid=12306 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 610.429818][ T40] audit: type=1400 audit(2000000923.598:51419): avc: denied { open } for pid=12306 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 610.441183][ T40] audit: type=1400 audit(2000000923.598:51420): avc: denied { ioctl } for pid=12306 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 610.447982][T13415] team0: Unable to change to the same mode the team is in [ 610.483582][ T40] audit: type=1400 audit(2000000923.673:51421): avc: denied { read write } for pid=13416 comm="syz.9.17610" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 610.848511][T13427] lo speed is unknown, defaulting to 1000 [ 611.524119][T13455] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 611.550969][T13455] team0: Unable to change to the same mode the team is in [ 611.735477][T13457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=13457 comm=syz.0.17621 [ 611.741247][T13457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=13457 comm=syz.0.17621 [ 611.747205][T13457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=13457 comm=syz.0.17621 [ 611.753302][T13457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=13457 comm=syz.0.17621 [ 611.759883][T13457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13457 comm=syz.0.17621 [ 611.941589][T13461] xt_CT: No such helper "snmp_trap" [ 611.952702][T13461] rdma_rxe: rxe_newlink: failed to add veth0 [ 612.029856][T13466] loop6: detected capacity change from 0 to 524279808 [ 612.092171][T13472] IPVS: set_ctl: invalid protocol: 44 172.20.20.12:21 [ 612.095667][ T5946] Bluetooth: hci3: command tx timeout [ 612.105747][T13466] loop6: detected capacity change from 524279808 to 1 [ 612.118634][T13466] Dev loop6: unable to read RDB block 1 [ 612.121613][T13466] loop6: unable to read partition table [ 612.124371][T13466] loop6: partition table beyond EOD, truncated [ 612.148211][T13466] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï ) failed (rc=-5) [ 612.230210][T13480] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 612.343221][T13484] tipc: Resetting bearer [ 612.466090][T13484] vlan0: left promiscuous mode [ 612.468532][T13484] vlan0: left allmulticast mode [ 612.472872][T13484] veth0_vlan: left allmulticast mode [ 612.504265][T13484] netdevsim netdevsim9 netdevsim0: left promiscuous mode [ 612.552027][T13484] bond2: left promiscuous mode [ 612.554202][T13484] bond2: left allmulticast mode [ 612.567087][T13484] bond4: left promiscuous mode [ 612.569164][T13484] bridge2: left promiscuous mode [ 612.571331][T13484] bond4: left allmulticast mode [ 612.573434][T13484] bridge2: left allmulticast mode [ 612.579294][T13484] bond5: left promiscuous mode [ 612.581319][T13484] bond6: left promiscuous mode [ 612.590728][T13484] bridge5: left allmulticast mode [ 612.613942][T13490] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 612.621125][T13491] team0: Unable to change to the same mode the team is in [ 612.623804][ T4689] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.634549][ T4689] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.637793][ T4689] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.642529][ T4689] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.738948][T13502] team0: No ports can be present during mode change [ 612.742964][T13502] tipc: Enabled bearer , priority 0 [ 612.860506][T13510] gretap0: left allmulticast mode [ 612.862900][T13510] gretap0: left promiscuous mode [ 612.865539][T13510] bridge7: port 1(gretap0) entered disabled state [ 612.885273][T13510] bond0: (slave syz_tun): Releasing backup interface [ 612.890557][T13510] bridge_slave_0: left allmulticast mode [ 612.892505][T13510] bridge_slave_0: left promiscuous mode [ 612.894470][T13510] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.898776][T13510] bridge_slave_1: left allmulticast mode [ 612.900734][T13510] bridge_slave_1: left promiscuous mode [ 612.902729][T13510] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.919918][T13510] veth0_to_bond: left allmulticast mode [ 612.922446][T13510] veth0_to_bond: left promiscuous mode [ 612.925158][T13510] bridge7: port 2(veth0_to_bond) entered disabled state [ 612.940371][T13510] bond0: (slave bond_slave_0): Releasing backup interface [ 612.948693][T13510] bond0: (slave bond_slave_1): Releasing backup interface [ 612.965865][T13510] team0: Port device team_slave_0 removed [ 612.970490][T13510] team0: Port device team_slave_1 removed [ 612.975098][T13510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.979558][T13510] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 613.038674][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17640'. [ 613.145053][T13517] team0: Unable to change to the same mode the team is in [ 613.153970][T13519] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 613.156590][T13520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17641'. [ 613.166525][T13519] team0: No ports can be present during mode change [ 613.170493][T13519] vlan0: entered promiscuous mode [ 613.172752][T13519] vlan0: entered allmulticast mode [ 613.175211][T13519] veth0_vlan: entered allmulticast mode [ 613.337113][T13531] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 613.348069][T13531] team0: Unable to change to the same mode the team is in [ 613.934469][T28216] tipc: Node number set to 2130706433 [ 615.347656][ T7039] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 615.604555][T13544] team0: No ports can be present during mode change [ 615.641417][T13552] syzkaller0: entered promiscuous mode [ 615.643621][T13552] syzkaller0: entered allmulticast mode [ 615.723446][T13554] vlan0: left promiscuous mode [ 615.726236][T13554] vlan0: left allmulticast mode [ 615.727961][T13554] veth0_vlan: left allmulticast mode [ 615.730868][T13554] vlan2: left promiscuous mode [ 615.733259][T13554] vlan2: left allmulticast mode [ 615.735435][T13554] hsr_slave_1: left allmulticast mode [ 615.740068][T13554] geneve2: left promiscuous mode [ 615.759987][T13557] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 615.763403][ T40] kauditd_printk_skb: 140 callbacks suppressed [ 615.763418][ T40] audit: type=1400 audit(2000000928.619:51562): avc: denied { accept } for pid=13562 comm="syz.4.17660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 615.777472][ T5508] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.780972][ T5508] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.785504][T13561] team0: Unable to change to the same mode the team is in [ 615.787936][ T5508] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.794255][ T5508] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.801072][T13557] tipc: Enabling of bearer rejected, already enabled [ 615.838203][ T40] audit: type=1400 audit(2000000928.685:51563): avc: denied { map } for pid=13565 comm="syz.0.17662" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=181397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 615.846523][ T40] audit: type=1400 audit(2000000928.685:51564): avc: denied { read write } for pid=13565 comm="syz.0.17662" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=181397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 616.336604][ T40] audit: type=1400 audit(2000000929.143:51565): avc: denied { read } for pid=13567 comm="syz.9.17663" dev="nsfs" ino=4026535227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 616.346765][ T40] audit: type=1400 audit(2000000929.143:51566): avc: denied { open } for pid=13567 comm="syz.9.17663" path="net:[4026535227]" dev="nsfs" ino=4026535227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 616.358765][ T40] audit: type=1400 audit(2000000929.143:51567): avc: denied { create } for pid=13567 comm="syz.9.17663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 616.366251][ T40] audit: type=1400 audit(2000000929.162:51568): avc: denied { ioctl } for pid=13567 comm="syz.9.17663" path="socket:[181400]" dev="sockfs" ino=181400 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 616.375941][ T40] audit: type=1400 audit(2000000929.162:51569): avc: denied { create } for pid=13567 comm="syz.9.17663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 616.385736][ T40] audit: type=1400 audit(2000000929.171:51570): avc: denied { allowed } for pid=13567 comm="syz.9.17663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 616.423721][ T40] audit: type=1400 audit(2000000929.227:51571): avc: denied { kexec_image_load } for pid=13569 comm="syz.0.17664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 616.440287][T13568] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 616.788214][T13592] team0: Unable to change to the same mode the team is in [ 616.793166][T13591] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 616.811899][T13591] team0: Unable to change to the same mode the team is in [ 616.817125][T13594] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 616.959257][ T5946] Bluetooth: hci5: unexpected event for opcode 0x200c [ 616.994785][T13612] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 617.005859][T13612] team0: Mode changed to "loadbalance" [ 617.008474][T13612] vlan0: entered promiscuous mode [ 617.010393][T13612] vlan0: entered allmulticast mode [ 617.012221][T13612] veth0_vlan: entered allmulticast mode [ 617.016486][T13612] tipc: Enabling of bearer rejected, already enabled [ 617.045792][T13615] team0: Unable to change to the same mode the team is in [ 617.073232][T13617] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 617.082219][T13617] team0: Unable to change to the same mode the team is in [ 617.440715][T13635] team0: Unable to change to the same mode the team is in [ 617.483868][T13639] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 617.519330][T13641] IPVS: sh: FWM 3 0x00000003 - no destination available [ 617.548817][T13643] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN NOPTI [ 617.553359][T13643] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 617.556917][T13643] CPU: 1 UID: 0 PID: 13643 Comm: syz.4.17699 Not tainted syzkaller #0 PREEMPT(full) [ 617.560943][T13643] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 617.565369][T13643] RIP: 0010:handshake_complete+0x31/0x390 [ 617.567798][T13643] Code: 56 41 55 49 89 d5 41 54 41 89 f4 55 53 48 89 fb e8 34 e9 6d f6 48 8d 7b 28 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 0f 03 00 00 48 8b 6b 28 e8 5c 22 0e 00 48 b8 00 [ 617.574264][T13643] RSP: 0018:ffffc9000c44f4f8 EFLAGS: 00010206 [ 617.576273][T13643] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90031c03000 [ 617.578862][T13643] RDX: 0000000000000005 RSI: ffffffff8b4fc5dc RDI: 0000000000000028 [ 617.581571][T13643] RBP: ffffc9000c44f5c0 R08: 0000000000000000 R09: ffffed10049e3240 [ 617.584408][T13643] R10: ffff888024f19203 R11: 0000000000000001 R12: 00000000fffffffb [ 617.587282][T13643] R13: 0000000000000000 R14: ffff88803a289d40 R15: ffff8880590c2500 [ 617.590133][T13643] FS: 00007f76915f56c0(0000) GS:ffff8880d6aa3000(0000) knlGS:0000000000000000 [ 617.593490][T13643] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 617.596184][T13643] CR2: 00007f76915f4f98 CR3: 000000002f862000 CR4: 0000000000352ef0 [ 617.599081][T13643] Call Trace: [ 617.600309][T13643] [ 617.601389][T13643] handshake_nl_accept_doit+0x2dc/0x910 [ 617.603358][T13643] genl_family_rcv_msg_doit+0x209/0x2f0 [ 617.605349][T13643] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 617.607579][T13643] ? bpf_lsm_capable+0x9/0x10 [ 617.609292][T13643] ? security_capable+0x7e/0x260 [ 617.611110][T13643] genl_rcv_msg+0x55c/0x800 [ 617.612793][T13643] ? __pfx_genl_rcv_msg+0x10/0x10 [ 617.614620][T13643] ? __pfx_handshake_nl_accept_doit+0x10/0x10 [ 617.616822][T13643] ? __lock_acquire+0x433/0x22f0 [ 617.618557][T13643] netlink_rcv_skb+0x158/0x420 [ 617.620204][T13643] ? __pfx_genl_rcv_msg+0x10/0x10 [ 617.621901][T13643] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 617.623689][T13643] ? netlink_deliver_tap+0x1ae/0xd30 [ 617.625477][T13643] genl_rcv+0x28/0x40 [ 617.626837][T13643] netlink_unicast+0x5aa/0x870 [ 617.628474][T13643] ? __pfx_netlink_unicast+0x10/0x10 [ 617.630451][T13643] netlink_sendmsg+0x8c8/0xdd0 [ 617.632528][T13643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.634459][T13643] ____sys_sendmsg+0xa5d/0xc30 [ 617.636129][T13643] ? copy_msghdr_from_user+0x10a/0x160 [ 617.638253][T13643] ? __pfx_____sys_sendmsg+0x10/0x10 [ 617.640109][T13643] ? __pfx_futex_wake_mark+0x10/0x10 [ 617.642004][T13643] ___sys_sendmsg+0x134/0x1d0 [ 617.643910][T13643] ? find_held_lock+0x2b/0x80 [ 617.645850][T13643] ? __pfx____sys_sendmsg+0x10/0x10 [ 617.647617][T13643] ? __lock_acquire+0x433/0x22f0 [ 617.649283][T13643] __sys_sendmsg+0x16d/0x220 [ 617.650840][T13643] ? __pfx___sys_sendmsg+0x10/0x10 [ 617.652538][T13643] ? __x64_sys_futex+0x1e0/0x4c0 [ 617.654026][T13643] do_syscall_64+0xcd/0xf80 [ 617.655560][T13643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.657655][T13643] RIP: 0033:0x7f769078f7c9 [ 617.659188][T13643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.665585][T13643] RSP: 002b:00007f76915f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 617.668494][T13643] RAX: ffffffffffffffda RBX: 00007f76909e5fa0 RCX: 00007f769078f7c9 [ 617.671194][T13643] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 617.674063][T13643] RBP: 00007f7690813f91 R08: 0000000000000000 R09: 0000000000000000 [ 617.676771][T13643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.679508][T13643] R13: 00007f76909e6038 R14: 00007f76909e5fa0 R15: 00007ffe93a40fe8 [ 617.682129][T13643] [ 617.683216][T13643] Modules linked in: [ 617.685428][T13643] ---[ end trace 0000000000000000 ]--- [ 617.689696][T13643] RIP: 0010:handshake_complete+0x31/0x390 [ 617.692543][T13643] Code: 56 41 55 49 89 d5 41 54 41 89 f4 55 53 48 89 fb e8 34 e9 6d f6 48 8d 7b 28 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 0f 03 00 00 48 8b 6b 28 e8 5c 22 0e 00 48 b8 00 [ 617.700802][T13643] RSP: 0018:ffffc9000c44f4f8 EFLAGS: 00010206 [ 617.702907][T13643] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90031c03000 [ 617.705582][T13643] RDX: 0000000000000005 RSI: ffffffff8b4fc5dc RDI: 0000000000000028 [ 617.708251][T13643] RBP: ffffc9000c44f5c0 R08: 0000000000000000 R09: ffffed10049e3240 [ 617.711378][T13643] R10: ffff888024f19203 R11: 0000000000000001 R12: 00000000fffffffb [ 617.714119][T13643] R13: 0000000000000000 R14: ffff88803a289d40 R15: ffff8880590c2500 [ 617.716804][T13643] FS: 00007f76915f56c0(0000) GS:ffff8880d6aa3000(0000) knlGS:0000000000000000 [ 617.720015][T13643] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 617.722624][T13643] CR2: 00007f76915f4f98 CR3: 000000002f862000 CR4: 0000000000352ef0 [ 617.725620][T13643] Kernel panic - not syncing: Fatal exception [ 617.728509][T13643] Kernel Offset: disabled [ 617.730228][T13643] Rebooting in 86400 seconds..