last executing test programs: 17m44.680341145s ago: executing program 3 (id=1647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4fe, 0x0) io_submit(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, 0x0, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x14}, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r6, &(0x7f0000000bc0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f00001d1000/0x4000)=nil, 0x4000, 0x9) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) 17m43.210671722s ago: executing program 3 (id=1651): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x201c}, 0x4000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) r4 = syz_open_dev$video4linux(0x0, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000001c0)={0x0, 0x0, {0x1, 0x0, 0x3012, 0x0, 0xd, 0x2, 0x2}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r5, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_emit_ethernet(0x6c, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0x8) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) epoll_create1(0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80387, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x29) 17m32.009679444s ago: executing program 3 (id=1664): socket$netlink(0x10, 0x3, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0xc0000008}) signalfd4(r2, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r3 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SYNC(r3, 0xffffffff80000101, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17m29.297622661s ago: executing program 3 (id=1668): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x201c}, 0x4000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000001c0)={0x0, 0x0, {0x1, 0x0, 0x3012, 0x0, 0xd, 0x2, 0x2}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r5, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_emit_ethernet(0x6c, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0x8) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) epoll_create1(0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80387, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x29) 17m28.815563899s ago: executing program 3 (id=1672): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100feffffff0000000001000000040007800c00020068fff829c0dd5d87"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r5 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000480)={0x5, 0x0, [{0xa, 0xffffffff, 0x1, 0xffffff89, 0x800, 0x6, 0x48d4}, {0x8000000e, 0x8, 0x1, 0x3ff, 0x7ffffdff, 0x8005, 0xffff}, {0x80000019, 0x2, 0x1, 0x7, 0xdf1, 0x2, 0x80000001}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0x2, 0xb, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r8, 0x0) write$char_usb(r7, &(0x7f00000001c0)="64e9", 0x2) 17m26.513440616s ago: executing program 3 (id=1678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4fe, 0x0) io_submit(0x0, 0x0, &(0x7f0000000400)) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x14}, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000000bc0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f00001d1000/0x4000)=nil, 0x4000, 0x9) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) 17m11.442280741s ago: executing program 32 (id=1678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4fe, 0x0) io_submit(0x0, 0x0, &(0x7f0000000400)) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x14}, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000000bc0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f00001d1000/0x4000)=nil, 0x4000, 0x9) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) 15m25.229000027s ago: executing program 2 (id=1882): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e", 0x2c}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15m24.012113556s ago: executing program 2 (id=1886): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4fe, 0x0) io_submit(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r3, 0x0, 0x1f00) socket$packet(0x11, 0x2, 0x300) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000000bc0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f00001d1000/0x4000)=nil, 0x4000, 0x9) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) 15m21.854479575s ago: executing program 2 (id=1891): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @rose}, [@netrom, @remote, @null, @rose, @bcast, @remote, @default, @netrom]}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f0000000440)=""/3, 0x3}, {&(0x7f0000000480)=""/182, 0xb6}, {&(0x7f0000000540)=""/99, 0x63}], 0x4, &(0x7f0000000600)=""/114, 0x72}, 0x1}, {{&(0x7f0000000680)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)=""/110, 0x6e}], 0x1, &(0x7f0000000800)=""/121, 0x79}, 0x400}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/126, 0x7e}], 0x1, &(0x7f0000000980)=""/196, 0xc4}, 0xdbec}, {{&(0x7f0000000a80)=@xdp, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000b00)=""/211, 0xd3}, {&(0x7f0000000c00)=""/55, 0x37}, {&(0x7f0000000c40)=""/209, 0xd1}, {&(0x7f0000000d40)=""/126, 0x7e}], 0x4, &(0x7f0000000e00)=""/1, 0x1}, 0xd}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000e40)=""/134, 0x86}, {&(0x7f0000000f00)=""/67, 0x43}, {&(0x7f0000000f80)=""/99, 0x63}, {&(0x7f0000001000)}, {&(0x7f0000001040)=""/58, 0x3a}, {&(0x7f0000001080)=""/88, 0x58}, {0x0}], 0x7, &(0x7f0000001280)=""/175, 0xaf}}, {{&(0x7f0000001340)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1}, 0x8}, {{&(0x7f0000002400)=@pppoe, 0x80, &(0x7f0000003940)=[{&(0x7f0000002480)=""/134, 0x86}, {&(0x7f0000002540)=""/16, 0x10}, {&(0x7f0000002580)=""/228, 0xe4}, {&(0x7f0000002680)=""/157, 0x9d}, {&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f00000027c0)=""/101, 0x65}, {&(0x7f0000002840)=""/212, 0xd4}, {&(0x7f0000002940)=""/4096, 0x1000}], 0x8, &(0x7f00000039c0)=""/213, 0xd5}, 0x4}], 0x7, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(&(0x7f0000000140)='securityfs\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00400300000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00100000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r5, 0x40047459, &(0x7f0000000180)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = fsopen(&(0x7f0000000340)='overlay\x00', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000000c0)='workdir', 0x0, r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 15m21.046535064s ago: executing program 2 (id=1893): socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001500010324bd7002fadbdf"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = socket$inet6(0xa, 0x80002, 0x4) write$sysctl(r0, &(0x7f0000000180)='7\x00', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$getown(r1, 0x9) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0xfe4d}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xa}, {}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}]}}]}, 0x3c}}, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 15m17.381410154s ago: executing program 2 (id=1900): socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100feffffff0000000001000000040007800c00020068fff829c0dd5d87"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r5 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000480)={0x5, 0x0, [{0xa, 0xffffffff, 0x1, 0xffffff89, 0x800, 0x6, 0x48d4}, {0x8000000e, 0x8, 0x1, 0x3ff, 0x7ffffdff, 0x8005, 0xffff}, {0x80000019, 0x2, 0x1, 0x7, 0xdf1, 0x2, 0x80000001}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0x2, 0xb, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r8, 0x0) write$char_usb(r7, &(0x7f00000001c0)="64e9", 0x2) 15m15.025188952s ago: executing program 2 (id=1904): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4fe, 0x0) io_submit(0x0, 0x0, &(0x7f0000000400)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, 0x0, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x14}, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r6, &(0x7f0000000bc0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f00001d1000/0x4000)=nil, 0x4000, 0x9) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) 14m59.744437279s ago: executing program 33 (id=1904): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4fe, 0x0) io_submit(0x0, 0x0, &(0x7f0000000400)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, 0x0, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x14}, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r6, &(0x7f0000000bc0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f00001d1000/0x4000)=nil, 0x4000, 0x9) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) 4m47.645172799s ago: executing program 0 (id=3171): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x890) bind$xdp(r0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000440)="79be71", 0x3}], 0x1, 0xffffffff, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0x180000000) 4m45.613061855s ago: executing program 0 (id=3178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 4m44.430115221s ago: executing program 0 (id=3182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 4m42.000947182s ago: executing program 0 (id=3186): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r3, 0x100000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000140), 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvmmsg(r4, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x10100, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x8000000004) 4m40.532281983s ago: executing program 0 (id=3189): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xaf9ba000) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$peekuser(0x3, r0, 0x1) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r5, 0x9) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r6, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r4, &(0x7f0000000b40)=[{&(0x7f0000000cc0)=""/154, 0x9a}, {0x0}], 0x2) 4m37.937035735s ago: executing program 0 (id=3196): socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000440)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYRES8=r0], 0x30}], 0x1}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 4m37.124969048s ago: executing program 34 (id=3196): socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000440)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYRES8=r0], 0x30}], 0x1}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 24.834079227s ago: executing program 6 (id=4842): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f00000008c0)={0x0, "c66c09d190ee24b2fc114c5d265c39446ca6ff340157b90bb67de32586bc664dc4622ba44683f6fd0146d50e1d7620f4f56420a478e23c88ace495e9e27d3770", 0x34}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x39]}, &(0x7f0000000600)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00020000000000000099aabbccddeeff00112233445566778899aabbccddeef7", 0x3d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x38, 0x32, 0x35, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000680)={'fscrypt:', @auto=[0x39, 0x0, 0x30, 0x33, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x36, 0x37, 0x35, 0x30, 0x37, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x66, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x62, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) 24.717232306s ago: executing program 6 (id=4843): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000dc91257727a929de2c783b5c80b44540e1a1d0fae76a30ee8f987a49d2c90bdf156040a1fc70589b388ae4113de30aed7343c329cdb39aebc034a8b083c75c9eb76be42ebf15458d53b5a28d4ae63c03545c90742fc8e175c9b28fec61ed2046132f1af1ab7504b22b17c89420bae380d590cfe5b0e1ab6b3c5989cd84ba2fba3cfc297550ffd6d0408630ca6b478ab90ef4ee5b49f2098603b678493ef97a1436bc9a3b87eacc8d3548f276fe8db27d2093cb64a0422ba0caadb1ba5147440a601ed2f", 0xc5) 24.216904431s ago: executing program 6 (id=4845): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x5, 0x40, 0x0, 0x0) 24.107424298s ago: executing program 6 (id=4847): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r3, 0x100000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000140), 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvmmsg(r4, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x10100, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x8000000004) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 23.04984859s ago: executing program 6 (id=4851): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64b6365de974de7a040000000000000000000000496e9000", 0x0, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000a, 0x200000005c831, 0xffffffffffffffff, 0x0) 9.828371601s ago: executing program 5 (id=4925): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x880) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 9.655142392s ago: executing program 5 (id=4930): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x5, 0x4, 0x8, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) 9.489705308s ago: executing program 5 (id=4931): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r3, 0x100000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000140), 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvmmsg(r4, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x10100, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x8000000004) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 8.48429046s ago: executing program 5 (id=4932): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c150000410007012cbd7000fadbdf25037c00000400c280341501802d15108004000b"], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 8.228908565s ago: executing program 5 (id=4935): syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x277}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x97c, 0x100, 0x4, 0x34424752, [0x80101, 0x9], [0x200, 0x101], 0x1}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x1, 0x1, "ee4f6d8e0000000600", 0x36314d4e}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001040), 0x4000000210a82, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000600, 0x0, 0xff, 0x1, 0x400, 0xfffc}, 0x20) ioctl$BLKBSZSET(r2, 0x40041271, &(0x7f0000000300)=0x300) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x44) syz_usb_disconnect(r0) mount(&(0x7f0000000400)=@sr0, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000000c0)='xfs\x00', 0x2a1800d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000600)={0xc, &(0x7f0000000500)={0x20, 0xe, 0xa9, {0xa9, 0xb, "1d29ac45a2327b6573215665eb2fe4cfe9983c13e7cc0d5a65a962afef0f294681bf1eece26c54819f89176b52985a37b179998946237b144c40d6cfc34c29ee427d4303906e34fd197103eb244bad31feae01f538007138c9f77030a1f2e8c0935e180c52988e800f97509c769b582c8c2e1905dca983e1d980c5092cc65994c02f9a8b839adb68eb582a4cad59a359b317864cb47c9c48a5d58f096c0dc1899adc24f494481d"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000940)=""/169, &(0x7f0000000a00)=0xa9) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r6 = syz_open_dev$I2C(&(0x7f00000001c0), 0xcda, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000180)={0x1, 0xae, 0x6, &(0x7f0000000100)={0x3, "3122d8073600db6519200b0836d2538fab6b3e90d98edd82f27327084265958d2c"}}) 7.737935737s ago: executing program 7 (id=4939): modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) syz_socket_connect_nvme_tcp() r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) fdatasync(r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20005000}, 0x0) writev(r1, &(0x7f00000030c0)=[{&(0x7f0000000dc0)="835170544ea9e0aed3b7d1616b996a0ed904d30492796feef8cadd3fec5155ad89eb37381c", 0x25}, {&(0x7f0000000e00)="5701c518df8fd1a67f0f0cfc203d1fdf12cc59894259dcd9589f84da09dd13168ab9d2acc5e983d3359752d6a4eb6aa4fed9a0af88a0f5554133fcd482d509b50cdb6866062b4ab99dd598", 0x4b}, {&(0x7f0000000ec0)="05011a6b1102e8c6dbc8341797959424121ba20eafab1d76af8ed49d19fdff6ca6979963d9a77894cf9eda667d771c1e0bbe49e32610e78ff675ef5e901eb2739c342248f5c0c36813269405dc44559ea496bee54b33e0b56f4ab9b187e9a718595034cc4b95d569e7ddd0e818148fbf4c88510b7d49ef8551537738214e136a8b8e8c7715f335f49d03005259e0b0a2faa9e2e8cd3673462a6b8047508538ec713d75365d9b721ddea4394eeb3ac98a8ee786ead859e19565d405972f6c4203251a0a5c12c167ab5c358cbb", 0xcc}, {&(0x7f0000000fc0)="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", 0x67b}], 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x80040, 0x54) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x100) flock(r4, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x60500, 0x0) flock(r5, 0x2) 7.576449833s ago: executing program 1 (id=4940): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$FIONREAD(r4, 0x541b, 0x0) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 6.706259882s ago: executing program 7 (id=4943): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee00) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffb, {0x0, 0x0, 0x0, 0x0, 0x640b1}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, &(0x7f0000000440), 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000e0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d46c00000000000000000000000000ffffac1e0001000000000000000092010000000000003affffffffffffff00000000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e000000000900"/117], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d0}, 0x1000) socket$nl_xfrm(0x10, 0x3, 0x6) 5.67494336s ago: executing program 5 (id=4945): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) r0 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3) epoll_create1(0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 4.779393773s ago: executing program 6 (id=4858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) syz_usb_connect(0x0, 0x39, 0x0, 0x0) 4.301714739s ago: executing program 7 (id=4948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x800) 4.233901257s ago: executing program 4 (id=4949): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000200)={0x1, 0x7, 0x1, &(0x7f0000000040)={0x5, "810556c721393f4084c89ea7f77d040b00"}}) 4.233562705s ago: executing program 7 (id=4950): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'lo\x00', 0x9}) 4.093831107s ago: executing program 7 (id=4951): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x1d, 0x6, 0x0) 4.092861147s ago: executing program 4 (id=4952): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x290, 0x168, 0x10, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x1, 0xb6, 0x0, 0x20}, 0x6000000, 0x228, 0x290, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xffffff00, 0xffffffff, 0xffffffff], @ipv4=@multicast1, [0xffffffff, 0xffff00, 0xffffff00], 0x4d2, 0x0, 0x1, 0x1, 0x0, 0x5}, {@ipv6=@loopback, [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], @ipv4=@local, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 0x4d6, 0x3507, 0x29, 0x1, 0x4, 0x16}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1}, [0xff000000, 0x0, 0xffffffff, 0xffffffff], 0x4d5, 0x3507, 0x0, 0x0, 0x4, 0x4}, {@ipv4=@multicast1, [0xffffffff, 0x0, 0xff, 0xff], @ipv6=@loopback, [0xff000000, 0x0, 0xff000000, 0xffffffff], 0x4d5, 0x3502, 0x21, 0x1, 0x11, 0x14}], 0x1, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x3a) 3.992260328s ago: executing program 1 (id=4953): r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x5) accept4$vsock_stream(r0, 0x0, 0x0, 0x80800) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.813799119s ago: executing program 7 (id=4954): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xe8}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.037259295s ago: executing program 4 (id=4956): sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000001c00)=ANY=[], 0x0) 2.937738788s ago: executing program 1 (id=4957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080) r2 = syz_pidfd_open(r1, 0x0) process_mrelease(r2, 0x700000000000000) 2.700571434s ago: executing program 4 (id=4958): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee00) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffb, {0x0, 0x0, 0x0, 0x0, 0x640b1}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, &(0x7f0000000440), 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000e0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d46c00000000000000000000000000ffffac1e0001000000000000000092010000000000003affffffffffffff00000000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e000000000900"/117], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d0}, 0x1000) socket$nl_xfrm(0x10, 0x3, 0x6) 1.867722772s ago: executing program 1 (id=4959): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$FIONREAD(r4, 0x541b, 0x0) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0}, 0x1}, 0x18) 657.919954ms ago: executing program 4 (id=4960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a4000"], 0xf0}}, 0x0) 455.185598ms ago: executing program 4 (id=4961): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='/dev/null', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='rdma', 0x4) write(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='127.0.0.1\x00', 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r6, &(0x7f0000000580)='4420', 0x4) symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00') r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write(r7, &(0x7f0000000680)='nqn=testnqn,transport=rdma,traddr=127.0.0.1,trsvcid=4420\x00', 0x38) 278.582349ms ago: executing program 1 (id=4962): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 0s ago: executing program 1 (id=4963): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xaf9ba000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$peekuser(0x3, r1, 0x1) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r6, 0x9) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r7, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r5, &(0x7f0000000b40)=[{&(0x7f0000000cc0)=""/154, 0x9a}, {0x0}], 0x2) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896) close(0x3) kernel console output (not intermixed with test programs): ystem_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1741.475870][ T30] audit: type=1400 audit(1785903392.049:6336): avc: denied { open } for pid=20720 comm="syz.1.3083" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1741.501555][ T30] audit: type=1400 audit(1785903392.049:6337): avc: denied { ioctl } for pid=20720 comm="syz.1.3083" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1741.545457][T20571] bridge0: port 1(bridge_slave_0) entered blocking state [ 1741.563573][ T30] audit: type=1400 audit(1785903392.169:6338): avc: denied { execute } for pid=20722 comm="syz.1.3084" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=112461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1741.592134][T20571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.616185][T20571] bridge_slave_0: entered allmulticast mode [ 1741.624496][T20571] bridge_slave_0: entered promiscuous mode [ 1741.700851][T20571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1741.716773][T20571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.752038][T20571] bridge_slave_1: entered allmulticast mode [ 1741.760689][ T5626] Bluetooth: hci3: command tx timeout [ 1741.779509][T20571] bridge_slave_1: entered promiscuous mode [ 1741.850021][ T147] hsr_slave_0: left promiscuous mode [ 1741.872073][ T147] hsr_slave_1: left promiscuous mode [ 1741.886391][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1741.902461][ T147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1741.917761][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1741.942414][ T147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1741.988358][ T147] veth1_macvtap: left promiscuous mode [ 1741.997847][ T30] audit: type=1400 audit(1785903392.629:6339): avc: denied { mount } for pid=20726 comm="syz.1.3085" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1742.027891][ T147] veth1_vlan: left promiscuous mode [ 1742.033645][T20728] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1742.046777][ T147] veth0_vlan: left promiscuous mode [ 1742.204800][ T30] audit: type=1400 audit(1785903392.829:6340): avc: denied { unmount } for pid=19652 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1743.170530][ T30] audit: type=1400 audit(1785903393.789:6341): avc: denied { write } for pid=20727 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1743.898744][ T30] audit: type=1400 audit(1785903394.519:6342): avc: denied { write } for pid=20757 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1744.059039][T20760] ======================================================= [ 1744.059039][T20760] WARNING: The mand mount option has been deprecated and [ 1744.059039][T20760] and is ignored by this kernel. Remove the mand [ 1744.059039][T20760] option from the mount to silence this warning. [ 1744.059039][T20760] ======================================================= [ 1744.161913][ T147] team_slave_1 (unregistering): left promiscuous mode [ 1744.179424][ T30] audit: type=1400 audit(1785903394.799:6343): avc: denied { create } for pid=20759 comm="syz.4.3090" name="#225" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1744.202123][ T147] team_slave_1 (unregistering): left allmulticast mode [ 1744.218318][ T30] audit: type=1400 audit(1785903394.839:6344): avc: denied { link } for pid=20759 comm="syz.4.3090" name="#225" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1744.243320][ T147] team0 (unregistering): Port device team_slave_1 removed [ 1744.263741][ T147] team_slave_0 (unregistering): left promiscuous mode [ 1744.270783][ T147] team_slave_0 (unregistering): left allmulticast mode [ 1744.280031][ T147] team0 (unregistering): Port device team_slave_0 removed [ 1744.575157][T20571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1744.616910][ T5274] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1744.649962][T20571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1744.671689][T10110] kernel read not supported for file /vga_arbiter (pid: 10110 comm: kworker/1:2) [ 1744.780435][T20571] team0: Port device team_slave_0 added [ 1744.803789][T20571] team0: Port device team_slave_1 added [ 1744.918549][T20571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1744.950362][T20571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1745.012531][T20571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1745.136831][T20773] bond0: entered allmulticast mode [ 1745.153026][T20773] bond_slave_0: entered allmulticast mode [ 1745.172624][T20773] bond_slave_1: entered allmulticast mode [ 1745.185251][T20773] bond_slave_0: entered promiscuous mode [ 1745.185394][T20774] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1745.191553][T20773] bond_slave_1: entered promiscuous mode [ 1745.224226][T20774] block device autoloading is deprecated and will be removed. [ 1745.241510][T20773] bond0: entered promiscuous mode [ 1745.255186][T20773] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1745.275996][T20571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1745.302267][T20571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1745.367955][T20571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1745.647004][T20571] hsr_slave_0: entered promiscuous mode [ 1745.672210][T20571] hsr_slave_1: entered promiscuous mode [ 1745.706360][T20571] debugfs: 'hsr0' already exists in 'hsr' [ 1745.716826][T20571] Cannot create hsr debugfs directory [ 1747.030106][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1747.030117][ T30] audit: type=1400 audit(1785903397.649:6355): avc: denied { write } for pid=20787 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1747.302501][T20810] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1747.335894][T20810] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1747.366992][ T30] audit: type=1400 audit(1785903397.929:6356): avc: denied { mounton } for pid=20808 comm="syz.1.3103" path="/46/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1747.505154][T20810] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1747.537102][T20810] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 1747.563004][T20810] overlayfs: d_ino too big (46, ino=9223372036854776076, xinobits=3) [ 1747.614002][T20810] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 1747.745154][ T30] audit: type=1400 audit(1785903398.359:6357): avc: denied { write } for pid=20809 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1747.921967][T20810] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 1748.035049][T20810] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 1748.062999][T20810] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 1748.099595][T20810] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 1748.157978][T20810] overlayfs: d_ino too big (dev, ino=4611686018427387923, xinobits=3) [ 1748.234416][T20810] overlayfs: d_ino too big (kernel, ino=4611686018427387911, xinobits=3) [ 1748.940906][ T30] audit: type=1400 audit(1785903399.559:6358): avc: denied { name_bind } for pid=20817 comm="syz.1.3106" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1750.387722][T20571] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1750.441666][T20571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1750.471606][T20571] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1750.544315][T20571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1750.573734][T20571] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1750.606672][T20571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1750.618318][ T30] audit: type=1400 audit(1785903401.249:6359): avc: denied { read } for pid=20844 comm="syz.1.3110" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1750.651299][T20571] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1750.699296][T20571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1750.722856][ T30] audit: type=1400 audit(1785903401.249:6360): avc: denied { open } for pid=20844 comm="syz.1.3110" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1750.797908][ T30] audit: type=1400 audit(1785903401.249:6361): avc: denied { write } for pid=20827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1750.822291][T20852] netlink: 'syz.4.3111': attribute type 29 has an invalid length. [ 1750.867950][ T30] audit: type=1400 audit(1785903401.269:6362): avc: denied { ioctl } for pid=20844 comm="syz.1.3110" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1750.877800][T20852] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3111'. [ 1750.935170][T20852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3111'. [ 1750.952971][ T30] audit: type=1400 audit(1785903401.299:6363): avc: denied { connect } for pid=20844 comm="syz.1.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1750.959587][T20852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3111'. [ 1751.048984][ T30] audit: type=1400 audit(1785903401.419:6364): avc: denied { write } for pid=20849 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1751.225245][T20571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1751.287731][T20571] 8021q: adding VLAN 0 to HW filter on device team0 [ 1751.319520][ T3270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1751.326679][ T3270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1752.416575][T13801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1752.423757][T13801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1752.826678][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1752.826694][ T30] audit: type=1400 audit(1785903403.449:6367): avc: denied { write } for pid=20864 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1752.948990][ T30] audit: type=1400 audit(1785903403.569:6368): avc: denied { search } for pid=20898 comm="syz.6.3122" name="/" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1753.036090][ T30] audit: type=1400 audit(1785903403.569:6369): avc: denied { search } for pid=20898 comm="syz.6.3122" name="usb_gadget" dev="configfs" ino=3112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1753.122288][ T30] audit: type=1400 audit(1785903403.569:6370): avc: denied { write search } for pid=20898 comm="syz.6.3122" name="usb_gadget" dev="configfs" ino=3112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1753.181758][ T30] audit: type=1400 audit(1785903403.569:6371): avc: denied { add_name } for pid=20898 comm="syz.6.3122" name="g_uac2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1753.269593][ T30] audit: type=1400 audit(1785903403.569:6372): avc: denied { create } for pid=20898 comm="syz.6.3122" name="g_uac2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 1753.338500][ T30] audit: type=1400 audit(1785903403.739:6373): avc: denied { write } for pid=20904 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1753.662663][T20571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1753.793259][T20571] veth0_vlan: entered promiscuous mode [ 1753.848144][T20571] veth1_vlan: entered promiscuous mode [ 1753.989215][T20571] veth0_macvtap: entered promiscuous mode [ 1754.027267][T20571] veth1_macvtap: entered promiscuous mode [ 1754.073553][T20571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1754.146920][T20571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1754.222879][T13801] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.236698][ T30] audit: type=1400 audit(1785903404.869:6374): avc: denied { write } for pid=20912 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1754.652330][T13801] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.793746][T20939] overlayfs: failed to resolve './file2': -2 [ 1755.154679][T13801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.203349][T11514] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.574277][ T30] audit: type=1400 audit(1785903406.189:6375): avc: denied { write } for pid=20941 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1755.655132][T13560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1755.713330][T13560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1755.796220][T13560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1755.829933][T13560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1756.958600][ T30] audit: type=1400 audit(1785903407.579:6376): avc: denied { mounton } for pid=20571 comm="syz-executor" path="/root/syzkaller.9CF23S/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=113200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1757.570305][T20968] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1758.349170][T20979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3137'. [ 1758.359671][ T30] audit: type=1400 audit(1785903408.969:6377): avc: denied { setopt } for pid=20977 comm="syz.0.3137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1758.531806][ T30] audit: type=1400 audit(1785903409.149:6378): avc: denied { write } for pid=20952 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1758.780313][ T30] audit: type=1400 audit(1785903409.399:6379): avc: denied { unmount } for pid=19652 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1758.869850][T20993] netlink: 'syz.4.3141': attribute type 9 has an invalid length. [ 1758.878015][ T30] audit: type=1400 audit(1785903409.429:6380): avc: denied { write } for pid=20988 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1759.326323][T21005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1759.681336][T21008] syzkaller0: entered promiscuous mode [ 1759.686920][T21008] syzkaller0: entered allmulticast mode [ 1759.889684][ T30] audit: type=1400 audit(1785903410.509:6381): avc: denied { read } for pid=21009 comm="syz.6.3145" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1760.406266][ T30] audit: type=1400 audit(1785903410.509:6382): avc: denied { open } for pid=21009 comm="syz.6.3145" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1760.497277][ T30] audit: type=1400 audit(1785903410.509:6383): avc: denied { ioctl } for pid=21009 comm="syz.6.3145" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1760.861123][T21031] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1761.860633][ T30] audit: type=1400 audit(1785903412.479:6384): avc: denied { create } for pid=21037 comm="syz.0.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1762.207009][ T30] audit: type=1400 audit(1785903412.829:6385): avc: denied { ioctl } for pid=21037 comm="syz.0.3152" path="socket:[114133]" dev="sockfs" ino=114133 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1763.956597][ T30] audit: type=1400 audit(1785903414.579:6386): avc: denied { map } for pid=21040 comm="syz.1.3153" path="socket:[114150]" dev="sockfs" ino=114150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1764.026913][ T30] audit: type=1400 audit(1785903414.579:6387): avc: denied { read } for pid=21040 comm="syz.1.3153" path="socket:[114150]" dev="sockfs" ino=114150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1764.214051][ T30] audit: type=1400 audit(1785903414.839:6388): avc: denied { watch watch_reads } for pid=21055 comm="syz.0.3159" path="/proc/30/task" dev="proc" ino=114162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1764.366950][T21064] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1764.456681][ T30] audit: type=1400 audit(1785903415.079:6389): avc: denied { ioctl } for pid=21068 comm="syz.0.3163" path="socket:[113462]" dev="sockfs" ino=113462 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1764.520505][ T30] audit: type=1400 audit(1785903415.119:6390): avc: denied { bind } for pid=21068 comm="syz.0.3163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1764.544883][T21069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3163'. [ 1764.659780][ T30] audit: type=1400 audit(1785903415.279:6391): avc: denied { read } for pid=21068 comm="syz.0.3163" path="socket:[113462]" dev="sockfs" ino=113462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1764.746596][T21074] binder: 21067:21074 ioctl c0046209 0 returned -22 [ 1765.141340][ T30] audit: type=1400 audit(1785903415.389:6392): avc: denied { ioctl } for pid=21067 comm="syz.1.3162" path="socket:[113471]" dev="sockfs" ino=113471 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1765.420243][T21080] sit0: entered promiscuous mode [ 1765.468502][T21080] netlink: 'syz.0.3166': attribute type 1 has an invalid length. [ 1765.470875][ T30] audit: type=1400 audit(1785903416.089:6393): avc: denied { getopt } for pid=21083 comm="syz.5.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1765.513653][T21080] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3166'. [ 1765.889487][ T30] audit: type=1400 audit(1785903416.449:6394): avc: denied { write } for pid=21083 comm="syz.5.3168" name="usb_gadget" dev="configfs" ino=3112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1765.928088][T21091] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3168'. [ 1766.171179][ T30] audit: type=1400 audit(1785903416.489:6395): avc: denied { write } for pid=21083 comm="syz.5.3168" name="strings" dev="configfs" ino=114280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1766.722373][T21107] binder: 21101:21107 ioctl c0306201 0 returned -14 [ 1767.135176][T21097] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3171'. [ 1768.332436][T11830] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1768.550804][T11830] usb 6-1: Using ep0 maxpacket: 8 [ 1768.576630][T11830] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1768.597586][T11830] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1768.627357][T11830] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1768.660281][T11830] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1768.660337][T11830] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1768.660364][T11830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.107048][T11830] usb 6-1: GET_CAPABILITIES returned 0 [ 1769.107092][T11830] usbtmc 6-1:16.0: can't read capabilities [ 1769.540200][T11830] usb 6-1: USB disconnect, device number 18 [ 1770.721259][T21126] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1770.728020][T21126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1770.736278][T21126] vhci_hcd vhci_hcd.0: Device attached [ 1770.830550][T21144] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 1771.085092][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1771.085133][ T30] audit: type=1400 audit(1785903421.469:6405): avc: denied { map } for pid=21138 comm="syz.5.3183" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1771.372865][ T30] audit: type=1400 audit(1785903421.469:6406): avc: denied { execute } for pid=21138 comm="syz.5.3183" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1771.570332][T17107] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1771.677134][T21132] vhci_hcd: connection closed [ 1771.707034][T21140] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1771.890041][T13560] vhci_hcd vhci_hcd.6: stop threads [ 1771.966514][ T30] audit: type=1400 audit(1785903422.529:6407): avc: denied { mount } for pid=21145 comm="syz.4.3184" name="/" dev="pstore" ino=3400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1772.019004][T13560] vhci_hcd vhci_hcd.6: release socket [ 1772.139001][T13560] vhci_hcd vhci_hcd.6: disconnect device [ 1772.240794][ T30] audit: type=1400 audit(1785903422.689:6408): avc: denied { audit_write } for pid=21145 comm="syz.4.3184" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1772.320916][ T30] audit: type=1400 audit(1785903422.839:6409): avc: denied { watch watch_reads } for pid=21145 comm="syz.4.3184" path="/29" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1772.836933][ T30] audit: type=1400 audit(1785903423.209:6410): avc: denied { append } for pid=21151 comm="syz.0.3186" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1772.870730][ T30] audit: type=1400 audit(1785903423.219:6411): avc: denied { write } for pid=21151 comm="syz.0.3186" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1773.733833][T21166] binder: 21162:21166 ioctl c0306201 0 returned -14 [ 1776.759352][ T7680] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.791156][T17107] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1776.835669][ T7680] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.972028][ T7680] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.119042][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1777.140044][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1777.153475][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1777.165970][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1777.178836][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1777.215862][ T7680] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.294184][ T10] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1777.407778][T21219] binder: 21214:21219 ioctl c0306201 0 returned -14 [ 1778.582764][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1778.762208][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1778.790747][ T10] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1778.808592][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.856735][ T10] usb 6-1: config 0 descriptor?? [ 1778.920701][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1778.964356][T21233] NILFS (nullb0): couldn't find nilfs on the device [ 1779.085973][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1779.411635][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1779.437611][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1779.460001][ T10] usb 6-1: media controller created [ 1779.483183][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1779.548259][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 1779.566056][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1779.599446][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input6 [ 1779.785725][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 1779.820060][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1779.897841][ T10] usb 6-1: USB disconnect, device number 19 [ 1779.973263][ T5728] dvb-usb: bulk message failed: -22 (1/0) [ 1779.996927][ T5728] dvb-usb: error while querying for an remote control event. [ 1780.105778][ T7680] bridge_slave_1: left allmulticast mode [ 1780.128845][ T7680] bridge_slave_1: left promiscuous mode [ 1780.404229][ T5613] Bluetooth: hci2: command tx timeout [ 1780.412815][ T7680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.606319][ T7680] bridge_slave_0: left allmulticast mode [ 1780.624594][ T7680] bridge_slave_0: left promiscuous mode [ 1780.650910][ T7680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.711065][ T5728] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1780.742709][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1780.892757][ T30] audit: type=1400 audit(1785903431.499:6412): avc: denied { bind } for pid=21277 comm="syz.4.3222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1780.940662][ T5728] usb 2-1: Using ep0 maxpacket: 16 [ 1780.993771][ T5728] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1781.029899][ T5728] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1781.047115][T21285] netlink: 'syz.5.3224': attribute type 9 has an invalid length. [ 1781.058286][ T5728] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1781.104271][ T5728] usb 2-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1781.133208][ T30] audit: type=1400 audit(1785903431.749:6413): avc: denied { write } for pid=21256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.140642][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.193761][ T5728] usb 2-1: Product: syz [ 1781.257080][ T30] audit: type=1400 audit(1785903431.879:6414): avc: denied { sqpoll } for pid=21293 comm="syz.4.3227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1781.350457][ T5728] usb 2-1: Manufacturer: syz [ 1781.356110][ T5728] usb 2-1: SerialNumber: syz [ 1781.403763][ T30] audit: type=1400 audit(1785903431.999:6415): avc: denied { write } for pid=21296 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.466511][ T30] audit: type=1400 audit(1785903432.019:6416): avc: denied { append } for pid=21291 comm="syz.6.3226" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1781.518833][ T30] audit: type=1400 audit(1785903432.029:6417): avc: denied { nlmsg_read } for pid=21291 comm="syz.6.3226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1781.578610][ T7680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1781.613916][ T30] audit: type=1400 audit(1785903432.219:6418): avc: denied { write } for pid=21259 comm="syz.1.3218" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1781.658662][ T7680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1781.676117][ T7680] bond0 (unregistering): Released all slaves [ 1781.758561][T21304] binder: 21299:21304 ioctl c0306201 0 returned -14 [ 1782.031210][ T5728] usb 2-1: unit 2 not found! [ 1782.036362][ T5728] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1782.053475][ T5728] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1782.179046][ T5728] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1782.195913][ T5728] usb 2-1: USB disconnect, device number 25 [ 1782.230095][ T5274] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1782.258936][T11834] udevd[11834]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1782.542347][ T5613] Bluetooth: hci2: command tx timeout [ 1783.503733][ T7680] hsr_slave_0: left promiscuous mode [ 1783.731820][ T7680] hsr_slave_1: left promiscuous mode [ 1783.852583][ T7680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1783.962488][ T7680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1783.973136][ T7680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1783.990651][ T7680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1784.016771][ T7680] veth1_macvtap: left promiscuous mode [ 1784.031826][ T7680] veth0_macvtap: left promiscuous mode [ 1784.054362][ T7680] veth1_vlan: left promiscuous mode [ 1784.066321][ T7680] veth0_vlan: left promiscuous mode [ 1784.357539][ T30] audit: type=1400 audit(1785903434.979:6419): avc: denied { create } for pid=21344 comm="syz.5.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1784.422493][ T30] audit: type=1400 audit(1785903434.979:6420): avc: denied { setopt } for pid=21344 comm="syz.5.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1784.453554][ T30] audit: type=1400 audit(1785903435.079:6421): avc: denied { ioctl } for pid=21344 comm="syz.5.3241" path="socket:[115141]" dev="sockfs" ino=115141 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1784.561674][ T5613] Bluetooth: hci2: command tx timeout [ 1784.677588][T21357] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1784.916433][ T7680] team0 (unregistering): Port device team_slave_1 removed [ 1784.951107][ T7680] team0 (unregistering): Port device team_slave_0 removed [ 1785.167810][ T5274] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1785.322853][T21382] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1785.353601][T21382] input: syz0 as /devices/virtual/input/input7 [ 1785.986034][T21388] macvlan2: left promiscuous mode [ 1785.991309][T21388] bond0: left promiscuous mode [ 1785.996578][T21388] macvlan2: left allmulticast mode [ 1786.001826][T21388] bond0: left allmulticast mode [ 1786.006764][T21388] bond_slave_0: left allmulticast mode [ 1786.030682][T21388] bond_slave_1: left allmulticast mode [ 1786.472233][T21212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.502715][T21212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.525914][T21212] bridge_slave_0: entered allmulticast mode [ 1786.597249][T21212] bridge_slave_0: entered promiscuous mode [ 1786.905459][ T5613] Bluetooth: hci2: command tx timeout [ 1786.918989][T21212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.964476][T21212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.984713][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1786.984729][ T30] audit: type=1400 audit(1785903437.609:6431): avc: denied { firmware_load } for pid=21400 comm="syz.6.3252" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1787.045549][T21212] bridge_slave_1: entered allmulticast mode [ 1787.068068][T21212] bridge_slave_1: entered promiscuous mode [ 1787.162942][ T30] audit: type=1400 audit(1785903437.609:6432): avc: denied { write } for pid=21389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1787.196254][T21414] syz.6.3252 (21414) used greatest stack depth: 18784 bytes left [ 1787.332698][ T30] audit: type=1400 audit(1785903437.749:6433): avc: denied { write } for pid=21421 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1787.395333][ T5274] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1787.401206][T21428] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3257'. [ 1787.423848][T21212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1787.555467][T21212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1788.078704][T21212] team0: Port device team_slave_0 added [ 1788.087142][T21212] team0: Port device team_slave_1 added [ 1788.103112][ T30] audit: type=1400 audit(1785903438.309:6434): avc: denied { getopt } for pid=21430 comm="syz.5.3258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1788.305987][T21430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1788.442785][ T30] audit: type=1400 audit(1785903439.039:6435): avc: denied { mount } for pid=21410 comm="syz.4.3255" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1788.856199][T21212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1788.912631][T21212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1789.103103][T21212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1789.648854][T21212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1789.743782][T21212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1790.011813][T21212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1790.022493][ T5613] Bluetooth: hci4: command 0x0405 tx timeout [ 1790.456051][ T30] audit: type=1400 audit(1785903441.079:6437): avc: denied { unmount } for pid=20109 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1790.625235][ T30] audit: type=1400 audit(1785903441.059:6436): avc: denied { execute } for pid=21442 comm="syz.5.3260" name="file0" dev="tmpfs" ino=1709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1791.068082][ T30] audit: type=1400 audit(1785903441.689:6438): avc: denied { connect } for pid=21448 comm="syz.1.3261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1791.362293][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.368827][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.812814][T21212] hsr_slave_0: entered promiscuous mode [ 1791.855945][T21212] hsr_slave_1: entered promiscuous mode [ 1791.964987][T21212] debugfs: 'hsr0' already exists in 'hsr' [ 1791.969850][T21459] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1791.999625][T21212] Cannot create hsr debugfs directory [ 1792.092080][ T30] audit: type=1400 audit(1785903442.709:6439): avc: denied { read } for pid=21463 comm="syz.1.3266" name="usbmon3" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1792.171437][ T5626] Bluetooth: hci4: command 0x0405 tx timeout [ 1792.195407][ T30] audit: type=1400 audit(1785903442.749:6440): avc: denied { open } for pid=21463 comm="syz.1.3266" path="/dev/usbmon3" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1792.295581][T21474] binder: 21460:21474 ioctl c0306201 0 returned -14 [ 1792.933712][ T30] audit: type=1400 audit(1785903443.449:6441): avc: denied { write } for pid=21438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1793.078308][ T30] audit: type=1326 audit(1785903443.699:6442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21490 comm="syz.5.3274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47aa79e019 code=0x7fc00000 [ 1793.177136][ T30] audit: type=1326 audit(1785903443.739:6443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21490 comm="syz.5.3274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f47aa79e019 code=0x7fc00000 [ 1793.332863][ T30] audit: type=1400 audit(1785903443.769:6444): avc: denied { write } for pid=21493 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1793.358872][T21212] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1793.386400][T21212] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1793.409167][T21212] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1793.451493][T21212] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1793.480443][T21212] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1793.523812][T21212] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1793.538620][ T5274] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1793.548695][T21212] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1793.574438][T21212] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1793.865711][T21212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1793.884845][T21212] 8021q: adding VLAN 0 to HW filter on device team0 [ 1793.898207][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 1793.905333][ T6237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1794.391804][T13560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1794.398966][T13560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1795.241067][T21529] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1795.417089][ T30] audit: type=1400 audit(1785903446.039:6445): avc: denied { name_bind } for pid=21532 comm="syz.1.3281" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1795.774897][T21546] binder: 21539:21546 ioctl c0306201 0 returned -14 [ 1796.922460][ T30] audit: type=1326 audit(1785903447.549:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21556 comm="syz.5.3286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47aa79e019 code=0x7fc00000 [ 1797.060001][T21212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1797.110797][ T30] audit: type=1400 audit(1785903447.729:6447): avc: denied { write } for pid=21561 comm="syz.1.3288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1797.248682][ T30] audit: type=1400 audit(1785903447.749:6448): avc: denied { read } for pid=21561 comm="syz.1.3288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1798.640321][ T30] audit: type=1326 audit(1785903449.259:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21556 comm="syz.5.3286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f47aa79e019 code=0x7fc00000 [ 1798.764233][T21212] veth0_vlan: entered promiscuous mode [ 1798.803025][T21212] veth1_vlan: entered promiscuous mode [ 1798.951426][ T30] audit: type=1400 audit(1785903449.559:6450): avc: denied { write } for pid=21585 comm="syz.5.3295" name="functions" dev="configfs" ino=114278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1799.900004][ T30] audit: type=1400 audit(1785903449.609:6451): avc: denied { write } for pid=21585 comm="syz.5.3295" name="functions" dev="configfs" ino=114278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1799.935185][T21212] veth0_macvtap: entered promiscuous mode [ 1799.946877][T21212] veth1_macvtap: entered promiscuous mode [ 1799.969958][T21212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1799.983844][T21212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1800.018711][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.070560][ T30] audit: type=1400 audit(1785903449.609:6452): avc: denied { remove_name } for pid=21585 comm="syz.5.3295" name="obex.usb1" dev="configfs" ino=116844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1800.095369][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.137722][ T30] audit: type=1400 audit(1785903449.619:6453): avc: denied { rmdir } for pid=21585 comm="syz.5.3295" name="obex.usb1" dev="configfs" ino=116844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1800.214273][ T7680] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.686680][ T30] audit: type=1400 audit(1785903451.299:6454): avc: denied { write } for pid=21607 comm="syz.5.3300" name="functions" dev="configfs" ino=114278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1800.772379][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.869722][ T30] audit: type=1400 audit(1785903451.489:6456): avc: denied { write } for pid=21607 comm="syz.5.3300" name="fs" dev="configfs" ino=116883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1800.909250][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1800.930680][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1800.954779][ T30] audit: type=1400 audit(1785903451.529:6457): avc: denied { create } for pid=21607 comm="syz.5.3300" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1801.107488][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1801.116723][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1803.957044][ T5613] Bluetooth: hci5: command 0x0406 tx timeout [ 1804.800302][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1804.800320][ T30] audit: type=1400 audit(1785903455.419:6465): avc: denied { bind } for pid=21658 comm="syz.7.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1804.861295][ T30] audit: type=1400 audit(1785903455.469:6466): avc: denied { listen } for pid=21658 comm="syz.7.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1804.945002][ T30] audit: type=1400 audit(1785903455.469:6467): avc: denied { connect } for pid=21658 comm="syz.7.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1805.022535][ T30] audit: type=1400 audit(1785903455.569:6468): avc: denied { accept } for pid=21658 comm="syz.7.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1806.046843][ T30] audit: type=1400 audit(1785903456.669:6469): avc: denied { write } for pid=21664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1806.349101][ T30] audit: type=1400 audit(1785903456.969:6470): avc: denied { write } for pid=21696 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1808.132956][ T30] audit: type=1326 audit(1785903458.749:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21734 comm="syz.7.3332" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885e19e019 code=0x7fc00000 [ 1808.269125][ T30] audit: type=1400 audit(1785903458.779:6472): avc: denied { write } for pid=21709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1809.489648][T21753] binder: 21739:21753 ioctl c0306201 0 returned -14 [ 1809.935938][ T30] audit: type=1326 audit(1785903460.559:6473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21734 comm="syz.7.3332" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f885e19e019 code=0x7fc00000 [ 1810.033929][ T30] audit: type=1400 audit(1785903460.649:6474): avc: denied { write } for pid=21750 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1811.196402][ T30] audit: type=1400 audit(1785903461.819:6475): avc: denied { write } for pid=21766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1811.611963][ T30] audit: type=1400 audit(1785903462.229:6476): avc: denied { write } for pid=21790 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1812.435983][ T30] audit: type=1400 audit(1785903463.059:6477): avc: denied { create } for pid=21811 comm="syz.1.3351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1812.443974][T21810] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3348'. [ 1812.533780][T21814] No such timeout policy "syz1" [ 1812.897602][ T30] audit: type=1400 audit(1785903463.069:6478): avc: denied { ioctl } for pid=21811 comm="syz.1.3351" path="socket:[117281]" dev="sockfs" ino=117281 ioctlcmd=0x61d9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1812.932447][ T30] audit: type=1326 audit(1785903463.279:6479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21804 comm="syz.7.3350" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885e19e019 code=0x7fc00000 [ 1813.171105][ T30] audit: type=1326 audit(1785903463.709:6480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21804 comm="syz.7.3350" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f885e19e019 code=0x7fc00000 [ 1813.631538][ T30] audit: type=1400 audit(1785903464.249:6481): avc: denied { write } for pid=21807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1813.858444][ T30] audit: type=1400 audit(1785903464.459:6482): avc: denied { write } for pid=21848 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1814.096668][T21860] binder: 21844:21860 ioctl c0046209 0 returned -22 [ 1815.787859][ T30] audit: type=1400 audit(1785903466.409:6483): avc: denied { getopt } for pid=21830 comm="syz.7.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1815.967521][T21874] syz.4.3359 (21874): drop_caches: 2 [ 1816.492094][ T30] audit: type=1326 audit(1785903467.119:6484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21889 comm="syz.6.3363" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32a39e019 code=0x7fc00000 [ 1816.541594][ T30] audit: type=1326 audit(1785903467.119:6485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21889 comm="syz.6.3363" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fd32a39e019 code=0x7fc00000 [ 1816.585692][T21895] binder: 21891:21895 ioctl c0306201 0 returned -14 [ 1816.789091][ T30] audit: type=1326 audit(1785903467.119:6486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21889 comm="syz.6.3363" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32a39e019 code=0x7fc00000 [ 1816.924910][ T30] audit: type=1326 audit(1785903467.119:6487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21889 comm="syz.6.3363" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32a39e019 code=0x7fc00000 [ 1816.952056][ T30] audit: type=1326 audit(1785903467.119:6488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21889 comm="syz.6.3363" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32a39e019 code=0x7fc00000 [ 1817.019736][T21899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3361'. [ 1817.046116][ T30] audit: type=1326 audit(1785903467.119:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21889 comm="syz.6.3363" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32a39e019 code=0x7fc00000 [ 1817.084623][T21903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3361'. [ 1817.217810][T21902] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3364'. [ 1817.219790][ T30] audit: type=1326 audit(1785903467.119:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21889 comm="syz.6.3363" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32a39e019 code=0x7fc00000 [ 1817.313555][T21906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3366'. [ 1817.322312][ T30] audit: type=1326 audit(1785903467.119:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21889 comm="syz.6.3363" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32a39e019 code=0x7fc00000 [ 1817.376134][T21906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3366'. [ 1817.419107][ T30] audit: type=1326 audit(1785903467.119:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21889 comm="syz.6.3363" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32a39e019 code=0x7fc00000 [ 1818.545674][T21921] netlink: 'syz.1.3370': attribute type 1 has an invalid length. [ 1819.095993][T21929] netlink: 'syz.1.3370': attribute type 10 has an invalid length. [ 1819.126476][T21921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1819.140820][T21929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3370'. [ 1819.812829][T21922] bond1: (slave gretap1): making interface the new active one [ 1820.169103][T21922] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1820.277444][T21927] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1820.421213][T21929] dummy0: entered promiscuous mode [ 1820.447176][T21929] bond1: (slave dummy0): Releasing active interface [ 1821.038438][ T30] kauditd_printk_skb: 163 callbacks suppressed [ 1821.038457][ T30] audit: type=1400 audit(1785903471.659:6656): avc: denied { ioctl } for pid=21964 comm="syz.4.3383" path="socket:[118075]" dev="sockfs" ino=118075 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1821.657462][ T30] audit: type=1400 audit(1785903471.879:6657): avc: denied { ioctl } for pid=21964 comm="syz.4.3383" path="socket:[118074]" dev="sockfs" ino=118074 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1821.718211][T21974] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3385'. [ 1821.753575][T21974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1821.798725][T21974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1821.930462][T21979] sit0: entered promiscuous mode [ 1821.957613][T21979] netlink: 'syz.1.3388': attribute type 1 has an invalid length. [ 1821.966436][T21979] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3388'. [ 1821.986231][T21983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.994759][T21983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1822.040128][T21985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1822.047335][T21985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1822.054864][T21985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1822.062014][T21985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1822.341576][T21985] bridge0: entered promiscuous mode [ 1822.402301][T21985] bridge0: entered allmulticast mode [ 1822.897641][ T30] audit: type=1326 audit(1785903473.519:6658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.5.3393" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47aa79e019 code=0x7fc00000 [ 1823.053844][ T30] audit: type=1326 audit(1785903473.519:6659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.5.3393" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f47aa79e019 code=0x7fc00000 [ 1823.199298][ T30] audit: type=1326 audit(1785903473.519:6660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.5.3393" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47aa79e019 code=0x7fc00000 [ 1823.229680][ T30] audit: type=1326 audit(1785903473.519:6661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.5.3393" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47aa79e019 code=0x7fc00000 [ 1823.334753][ T30] audit: type=1326 audit(1785903473.519:6662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.5.3393" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47aa79e019 code=0x7fc00000 [ 1823.371991][ T30] audit: type=1326 audit(1785903473.519:6663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.5.3393" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47aa79e019 code=0x7fc00000 [ 1823.404867][ T30] audit: type=1326 audit(1785903473.519:6664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.5.3393" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47aa79e019 code=0x7fc00000 [ 1823.475699][ T30] audit: type=1326 audit(1785903473.519:6665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.5.3393" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47aa79e019 code=0x7fc00000 [ 1823.812239][T22052] sit0: entered promiscuous mode [ 1824.072708][T22052] netlink: 'syz.6.3401': attribute type 1 has an invalid length. [ 1824.080458][T22052] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3401'. [ 1824.477322][T22073] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3405'. [ 1824.538524][T22073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1824.594210][T22074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1824.606145][T22073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1826.405090][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1826.405107][ T30] audit: type=1400 audit(1785903477.029:6725): avc: denied { read } for pid=22112 comm="syz.7.3414" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1826.503179][T22140] wlan0 speed is unknown, defaulting to 1000 [ 1826.509687][T22140] wlan0 speed is unknown, defaulting to 1000 [ 1826.532120][T22140] wlan0 speed is unknown, defaulting to 1000 [ 1826.567258][T22140] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1826.582647][T22140] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1826.599630][T22140] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1826.632698][T22140] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1826.699540][T22140] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1826.749792][T22140] wlan0 speed is unknown, defaulting to 1000 [ 1826.757492][T22140] wlan0 speed is unknown, defaulting to 1000 [ 1826.765147][T22140] wlan0 speed is unknown, defaulting to 1000 [ 1826.772604][T22140] wlan0 speed is unknown, defaulting to 1000 [ 1826.780064][T22140] wlan0 speed is unknown, defaulting to 1000 [ 1826.789452][ T30] audit: type=1400 audit(1785903477.119:6726): avc: denied { create } for pid=22133 comm="syz.5.3420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1826.810037][ T30] audit: type=1400 audit(1785903477.119:6727): avc: denied { write } for pid=22133 comm="syz.5.3420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1826.842365][ T30] audit: type=1400 audit(1785903477.459:6728): avc: denied { write } for pid=22131 comm="syz.4.3419" name="functions" dev="configfs" ino=114278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1826.872057][ T30] audit: type=1400 audit(1785903477.469:6729): avc: denied { create } for pid=22131 comm="syz.4.3419" name="ncm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 1827.333461][ T30] audit: type=1400 audit(1785903477.959:6730): avc: denied { connect } for pid=22143 comm="syz.1.3422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1827.376279][T22149] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1827.515867][ T30] audit: type=1400 audit(1785903478.139:6731): avc: denied { write } for pid=22131 comm="syz.4.3419" name="c.1" dev="configfs" ino=116886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1827.563052][ T30] audit: type=1400 audit(1785903478.139:6732): avc: denied { write } for pid=22131 comm="syz.4.3419" name="c.1" dev="configfs" ino=116886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1827.586938][ T30] audit: type=1400 audit(1785903478.139:6733): avc: denied { write } for pid=22131 comm="syz.4.3419" name="os_desc" dev="configfs" ino=114281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1827.610123][ T30] audit: type=1400 audit(1785903478.139:6734): avc: denied { write } for pid=22131 comm="syz.4.3419" name="os_desc" dev="configfs" ino=114281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1831.906675][T22213] siw: device registration error -23 [ 1833.348965][T22237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3452'. [ 1833.369632][T22237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1833.771545][T22237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1834.409625][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 1836.751643][T22302] fuse: Bad value for 'fd' [ 1836.940379][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1836.940396][ T30] audit: type=1400 audit(1785903487.559:6736): avc: denied { name_connect } for pid=22314 comm="syz.1.3472" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1837.263639][ T30] audit: type=1400 audit(1785903487.889:6737): avc: denied { mount } for pid=22325 comm="syz.4.3477" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1837.700157][ T30] audit: type=1400 audit(1785903488.079:6738): avc: denied { search } for pid=22325 comm="syz.4.3477" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1837.776789][ T30] audit: type=1400 audit(1785903488.089:6739): avc: denied { write } for pid=22325 comm="syz.4.3477" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1837.884147][ T30] audit: type=1400 audit(1785903488.109:6740): avc: denied { open } for pid=22325 comm="syz.4.3477" path="/98/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1838.288068][ T30] audit: type=1400 audit(1785903488.459:6741): avc: denied { search } for pid=22325 comm="syz.4.3477" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1838.322993][ T30] audit: type=1400 audit(1785903488.939:6742): avc: denied { unmount } for pid=20109 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1838.973836][T22340] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3478'. [ 1840.783560][T22384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1840.921522][T22385] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1841.825285][ T30] audit: type=1400 audit(1785903492.449:6743): avc: denied { mounton } for pid=22401 comm="syz.6.3494" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1842.031941][T22408] fuse: Bad value for 'fd' [ 1844.287596][T22450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3507'. [ 1844.296693][T22450] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3507'. [ 1845.032021][T22458] No such timeout policy "syz1" [ 1845.930721][ T5626] Bluetooth: Unexpected continuation frame (len 4) [ 1847.413788][ T30] audit: type=1400 audit(1785903498.039:6744): avc: denied { mount } for pid=22501 comm="syz.4.3527" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1847.450540][T22502] i8042 kbd 00:00: in use; can't configure [ 1848.796204][T22528] capability: warning: `syz.1.3538' uses deprecated v2 capabilities in a way that may be insecure [ 1849.578030][T22553] 9pnet_virtio: no channels available for device syz [ 1849.586644][T22552] sit0: entered promiscuous mode [ 1849.599184][T22553] overlayfs: failed to clone lowerpath [ 1849.616730][T22552] netlink: 'syz.5.3546': attribute type 1 has an invalid length. [ 1849.660168][T22552] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3546'. [ 1850.955097][T22594] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1851.185705][ T30] audit: type=1400 audit(1785903501.789:6745): avc: denied { write } for pid=22588 comm="syz.6.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1852.210122][T22616] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1852.804470][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.812785][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1852.821801][T22627] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1853.403873][ T30] audit: type=1400 audit(1785903504.029:6746): avc: denied { bind } for pid=22651 comm="syz.4.3587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1853.507110][ T30] audit: type=1400 audit(1785903504.129:6747): avc: denied { write } for pid=22651 comm="syz.4.3587" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1854.241424][T22652] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1855.389329][T22695] netlink: 'syz.6.3603': attribute type 1 has an invalid length. [ 1855.425671][T22695] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3603'. [ 1855.523491][ T5626] Bluetooth: hci0: command 0x0406 tx timeout [ 1856.616148][T22732] sit0: entered promiscuous mode [ 1856.636342][T22732] netlink: 'syz.4.3617': attribute type 1 has an invalid length. [ 1856.654791][T22732] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3617'. [ 1857.872736][T22758] netlink: 'syz.4.3630': attribute type 1 has an invalid length. [ 1857.880704][T22758] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3630'. [ 1860.069620][T22807] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1861.877106][ T5626] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1861.896043][T22842] input: syz0 as /devices/virtual/input/input8 [ 1862.149658][T22845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1862.332101][T22851] 9pnet_virtio: no channels available for device syz [ 1862.523190][T22854] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1862.648670][T22854] overlayfs: missing 'lowerdir' [ 1863.268038][ T5626] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1865.950957][T22938] fuse: fd is not a fuse device [ 1866.184704][T22949] smbdirect: ib_dev[syz1] renamed to [syz0] [ 1868.276519][T22984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3713'. [ 1868.471521][T22964] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1869.583026][T22996] fuse: Bad value for 'fd' [ 1869.685173][ T5626] Bluetooth: hci0: command 0x0406 tx timeout [ 1870.106703][T23006] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1870.128980][ T30] audit: type=1326 audit(1785903520.749:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23007 comm="syz.6.3724" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd32a39e019 code=0x0 [ 1871.909478][T23026] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 1872.529001][T23046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1873.139667][ T5626] Bluetooth: hci2: Malformed Event: 0x02 [ 1874.540052][T23068] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1875.361141][T23087] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3750'. [ 1878.352633][ T30] audit: type=1400 audit(1785903528.979:6749): avc: denied { name_bind } for pid=23114 comm="syz.6.3753" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1878.795471][ T30] audit: type=1400 audit(1785903529.419:6750): avc: denied { listen } for pid=23123 comm="syz.6.3762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1878.842069][ T30] audit: type=1400 audit(1785903529.419:6751): avc: denied { read } for pid=23123 comm="syz.6.3762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1879.183087][T23131] CIFS mount error: No usable UNC path provided in device string! [ 1879.183087][T23131] [ 1879.208273][T23131] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1879.528032][ T30] audit: type=1400 audit(1785903530.149:6752): avc: denied { read } for pid=23139 comm="syz.1.3769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1880.308060][ T30] audit: type=1326 audit(1785903530.929:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23150 comm="syz.4.3771" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f28d899e019 code=0x0 [ 1882.228279][ T30] audit: type=1400 audit(1785903532.849:6754): avc: denied { cmd } for pid=23188 comm="iou-wrk-23190" path="socket:[120701]" dev="sockfs" ino=120701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1883.276876][ T30] audit: type=1400 audit(1785903533.899:6755): avc: denied { connect } for pid=23221 comm="syz.5.3794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1885.385260][T23256] fuse: Bad value for 'fd' [ 1885.984659][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880338c9800: rx timeout, send abort [ 1885.996069][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880338c9800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1886.067252][ T30] audit: type=1400 audit(1785903536.689:6756): avc: denied { read } for pid=4961 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1886.090256][ T30] audit: type=1400 audit(1785903536.689:6757): avc: denied { search } for pid=4961 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1886.130960][ T30] audit: type=1400 audit(1785903536.689:6758): avc: denied { write search } for pid=4961 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1886.380363][ T30] audit: type=1400 audit(1785903536.689:6759): avc: denied { add_name } for pid=4961 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1886.536666][ T30] audit: type=1400 audit(1785903536.689:6760): avc: denied { create } for pid=4961 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1887.167348][ T30] audit: type=1400 audit(1785903536.689:6761): avc: denied { append open } for pid=4961 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1887.263283][T23287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3813'. [ 1887.294950][ T30] audit: type=1400 audit(1785903536.689:6762): avc: denied { getattr } for pid=4961 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1887.400968][ T30] audit: type=1400 audit(1785903538.019:6763): avc: denied { write } for pid=23288 comm="syz.4.3814" name="header" dev="configfs" ino=116867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1887.520611][ T30] audit: type=1400 audit(1785903538.029:6764): avc: denied { write } for pid=23288 comm="syz.4.3814" name="fs" dev="configfs" ino=116876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1887.645270][ T30] audit: type=1400 audit(1785903538.029:6765): avc: denied { write } for pid=23288 comm="syz.4.3814" name="fs" dev="configfs" ino=116876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1888.875161][T23321] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3824'. [ 1889.021096][T16894] IPVS: starting estimator thread 0... [ 1889.042080][T23323] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1889.150646][T23324] IPVS: using max 34 ests per chain, 81600 per kthread [ 1889.166934][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880335cbc00: rx timeout, send abort [ 1889.175624][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880335cbc00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1889.613372][T23333] binder: 23327:23333 ioctl c0306201 0 returned -14 [ 1890.032267][T23341] random: crng reseeded on system resumption [ 1891.680621][T21269] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1891.858225][T21269] usb 5-1: Using ep0 maxpacket: 16 [ 1891.876758][T21269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1891.906494][T21269] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1891.927189][T21269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.947306][T21269] usb 5-1: Product: syz [ 1891.968136][T21269] usb 5-1: Manufacturer: syz [ 1891.990400][T21269] usb 5-1: SerialNumber: syz [ 1892.012824][T21269] usb 5-1: config 0 descriptor?? [ 1892.033247][T21269] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1892.054293][T21269] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1892.750349][T21269] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1893.882675][T21269] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1893.917575][T21269] em28xx 5-1:0.0: board has no eeprom [ 1894.419531][T21269] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1894.467608][T21269] em28xx 5-1:0.0: dvb set to bulk mode. [ 1894.579099][ T10] em28xx 5-1:0.0: Binding DVB extension [ 1895.479567][T23436] warning: `syz.5.3861' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1895.534395][T23357] em28xx 5-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 1895.586882][T10110] usb 5-1: USB disconnect, device number 60 [ 1895.614304][T10110] em28xx 5-1:0.0: Disconnecting em28xx [ 1895.703456][ T10] em28xx 5-1:0.0: Registering input extension [ 1895.711402][T10110] em28xx 5-1:0.0: Closing input extension [ 1896.386184][T10110] em28xx 5-1:0.0: Freeing device [ 1896.898513][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1896.898540][ T30] audit: type=1400 audit(1785903547.299:6776): avc: denied { write } for pid=23452 comm="syz.5.3867" name="functions" dev="configfs" ino=114278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1897.359065][ T30] audit: type=1400 audit(1785903547.589:6777): avc: denied { write } for pid=23452 comm="syz.5.3867" name="functions" dev="configfs" ino=114278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1899.250021][T23494] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1899.302985][ T30] audit: type=1400 audit(1785903549.919:6778): avc: denied { write } for pid=23493 comm="syz.4.3879" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1899.385576][ T30] audit: type=1400 audit(1785903549.929:6779): avc: denied { open } for pid=23493 comm="syz.4.3879" path="/164/debug/tracing/events/kvm/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1899.415262][T23502] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1899.425434][ T5626] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1899.440919][ T30] audit: type=1400 audit(1785903550.009:6780): avc: denied { getopt } for pid=23496 comm="syz.7.3880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1900.081632][T23532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3892'. [ 1900.793086][T23544] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1900.800483][ C0] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1901.690666][T16894] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1901.700414][ T30] audit: type=1400 audit(1785903552.319:6781): avc: denied { read } for pid=23562 comm="syz.6.3904" path="socket:[122122]" dev="sockfs" ino=122122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1901.930613][T16894] usb 5-1: Using ep0 maxpacket: 32 [ 1901.937305][T16894] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 1901.950646][T16894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1901.972364][T16894] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1901.996547][T16894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.026469][T16894] usb 5-1: Product: syz [ 1902.037867][T16894] usb 5-1: Manufacturer: syz [ 1902.050623][T16894] usb 5-1: SerialNumber: syz [ 1902.308175][T16894] usb 5-1: config 0 descriptor?? [ 1902.424747][T16894] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1902.595146][ T5626] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1902.604951][T23589] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1903.612054][T23601] pim6reg: entered allmulticast mode [ 1903.625977][T23601] pim6reg: left allmulticast mode [ 1904.217237][T23617] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1904.560100][ T30] audit: type=1400 audit(1785903555.179:6782): avc: denied { mount } for pid=23623 comm="syz.7.3926" name="/" dev="autofs" ino=122215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1904.964295][ T10] usb 5-1: USB disconnect, device number 61 [ 1906.375437][ T30] audit: type=1326 audit(1785903556.999:6783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23665 comm="syz.5.3934" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47aa79e019 code=0x0 [ 1906.564206][T23677] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1907.370461][T23685] fuse: Bad value for 'fd' [ 1907.716943][T23693] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3943'. [ 1909.046896][ T30] audit: type=1326 audit(1785903559.669:6784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23719 comm="syz.1.3952" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb94299e019 code=0x0 [ 1909.385467][T23725] fuse: Bad value for 'fd' [ 1910.603698][T23756] fuse: Bad value for 'fd' [ 1910.917991][ T30] audit: type=1326 audit(1785903561.539:6785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23767 comm="syz.7.3972" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f885e19e019 code=0x0 [ 1911.995398][T23796] fuse: fd is not a fuse device [ 1912.753601][ T8811] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1912.769100][ C0] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1913.490622][ T30] audit: type=1400 audit(1785903563.699:6786): avc: denied { create } for pid=23808 comm="syz.4.3983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1913.526236][ T30] audit: type=1400 audit(1785903563.699:6787): avc: denied { write } for pid=23808 comm="syz.4.3983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1914.281459][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.287941][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.580067][ T30] audit: type=1326 audit(1785903565.199:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23835 comm="syz.6.3989" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd32a39e019 code=0x0 [ 1914.915048][T23839] fuse: fd is not a fuse device [ 1915.075188][T23847] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3992'. [ 1916.176028][T23871] fuse: fd is not a fuse device [ 1916.230107][T23874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4005'. [ 1916.768696][ T30] audit: type=1326 audit(1785903567.379:6789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23877 comm="syz.7.4006" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f885e19e019 code=0x0 [ 1917.202440][T23887] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4008'. [ 1917.865710][T23904] fuse: fd is not a fuse device [ 1917.877256][ T5626] Bluetooth: hci1: unexpected cc 0x0c05 length: 4 > 1 [ 1917.881487][T23905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4017'. [ 1917.884121][ T5626] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 1918.468055][T23921] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1918.689895][ T30] audit: type=1326 audit(1785903569.309:6790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23922 comm="syz.7.4023" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f885e19e019 code=0x0 [ 1919.462932][T23946] binder: 23939:23946 ioctl c0306201 0 returned -14 [ 1919.609352][T23948] fuse: Bad value for 'fd' [ 1920.328701][T23963] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1922.197434][ T30] audit: type=1326 audit(1785903572.819:6791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23977 comm="syz.1.4043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb94299e019 code=0x0 [ 1922.251671][T23980] fuse: fd is not a fuse device [ 1922.573150][T23984] syz_tun: entered allmulticast mode [ 1922.617759][ T8811] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1922.679120][ T30] audit: type=1400 audit(1785903573.299:6792): avc: denied { mount } for pid=23983 comm="syz.7.4045" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1922.702735][T23983] syz_tun: left allmulticast mode [ 1923.960629][T21269] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1924.214692][T21269] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1924.231895][T21269] usb 5-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1924.260632][T21269] usb 5-1: string descriptor 0 read error: -22 [ 1924.280059][T21269] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1924.289900][T24027] No such timeout policy "syz1" [ 1924.326707][T21269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.527649][T24045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1926.012609][T24066] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4075'. [ 1926.800809][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1926.979429][T24083] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4081'. [ 1927.331646][T24097] tipc: Enabling of bearer rejected, failed to enable media [ 1928.600500][T24111] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4088'. [ 1928.955782][T24113] fuse: Bad value for 'fd' [ 1930.050392][T24128] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4095'. [ 1930.780475][T24006] usb 5-1: 1:1: usb_set_interface failed (-110) [ 1930.923932][T24006] snd-usb-audio 5-1:1.0: Runtime PM usage count underflow! [ 1930.931423][T24006] snd-usb-audio 5-1:1.2: Runtime PM usage count underflow! [ 1930.939634][T11830] usb 5-1: USB disconnect, device number 62 [ 1931.598733][T24151] fuse: fd is not a fuse device [ 1931.645014][T24155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4102'. [ 1931.733777][T24155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1931.747289][T24157] macvlan2: entered promiscuous mode [ 1931.752744][T24157] macvlan2: entered allmulticast mode [ 1931.808024][T24157] bond1: entered promiscuous mode [ 1931.822138][T24157] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1932.375294][T24157] bond1: left promiscuous mode [ 1933.025537][T24176] sit0: left promiscuous mode [ 1933.172631][T24176] bridge0: left promiscuous mode [ 1933.177723][T24176] bridge0: left allmulticast mode [ 1933.223020][T24176] wg0: left promiscuous mode [ 1933.227751][T24176] wg0: left allmulticast mode [ 1934.681937][T10110] wlan0 speed is unknown, defaulting to 1000 [ 1935.116305][T24193] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4112'. [ 1935.360722][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1935.559622][ T30] audit: type=1400 audit(1785903586.169:6793): avc: denied { write } for pid=24182 comm="syz.4.4111" name="functions" dev="configfs" ino=114278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1936.459982][ T30] audit: type=1400 audit(1785903586.279:6794): avc: denied { write } for pid=24182 comm="syz.4.4111" name="functions" dev="configfs" ino=114278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1936.689284][T24204] fuse: Bad value for 'fd' [ 1936.811810][T24210] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4120'. [ 1936.821424][T24206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1938.756344][T24253] fuse: Bad value for 'fd' [ 1938.984509][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880542c4800: rx timeout, send abort [ 1938.993084][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880542c4800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1940.713506][T24283] binder: 24250:24283 ioctl c0306201 0 returned -14 [ 1940.766083][T24272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1943.698374][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888078f88c00: rx timeout, send abort [ 1943.707084][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888078f88c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1945.458150][T24344] fuse: Bad value for 'fd' [ 1945.913578][T24351] fuse: Bad value for 'fd' [ 1946.144762][T24356] sit0: left promiscuous mode [ 1946.429154][T24371] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4170'. [ 1946.703071][T24356] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 1947.448194][T24385] fuse: Bad value for 'fd' [ 1947.511374][T13801] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1947.533295][T13801] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1947.541437][T17107] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1947.780346][ T30] audit: type=1400 audit(1785903598.399:6795): avc: denied { setopt } for pid=24393 comm="syz.1.4179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1947.890653][T24380] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1947.942998][ T5626] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1947.949322][T24397] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1948.010736][T17107] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1948.116409][T24400] fuse: Bad value for 'user_id' [ 1948.122154][T24400] fuse: Bad value for 'user_id' [ 1948.959437][T17107] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1949.120797][ T5626] Bluetooth: hci0: command 0x0406 tx timeout [ 1949.318474][ T5626] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1949.331720][T24426] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1951.090758][ T5626] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1951.091031][T24471] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1951.441688][ T5626] Bluetooth: hci1: command 0x0405 tx timeout [ 1951.610884][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1952.638456][ T30] audit: type=1400 audit(1785903603.249:6796): avc: denied { mount } for pid=24490 comm="syz.1.4214" name="/" dev="ramfs" ino=125432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1952.779910][ T30] audit: type=1400 audit(1785903603.399:6797): avc: denied { watch watch_reads } for pid=24490 comm="syz.1.4214" path="/" dev="ramfs" ino=125432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1952.951425][T24512] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4219'. [ 1954.462564][ T30] audit: type=1800 audit(1785903605.089:6798): pid=24503 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4214" name="bus" dev="ramfs" ino=125437 res=0 errno=0 [ 1954.665177][T24542] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4229'. [ 1955.921032][ T30] audit: type=1400 audit(1785903605.909:6799): avc: denied { watch } for pid=24546 comm="syz.5.4231" path="/461/file0" dev="tmpfs" ino=2639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1956.037356][ T30] audit: type=1400 audit(1785903605.909:6800): avc: denied { watch_sb watch_reads } for pid=24546 comm="syz.5.4231" path="/461/file0" dev="tmpfs" ino=2639 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1956.076627][T24553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4232'. [ 1956.296938][ T5626] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 1958.088650][T24584] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4246'. [ 1958.152742][ T5626] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 1958.425072][T24595] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4248'. [ 1959.316461][T24606] netlink: 'syz.4.4255': attribute type 1 has an invalid length. [ 1959.680753][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1960.365086][ T5626] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1960.379718][ T5626] Bluetooth: hci4: Injecting HCI hardware error event [ 1960.393395][ T5613] Bluetooth: hci4: hardware error 0x00 [ 1960.555777][T24626] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4262'. [ 1961.378735][T24639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4261'. [ 1961.452328][ T30] audit: type=1800 audit(1785903612.069:6801): pid=24641 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.4266" name="nullb0" dev="tmpfs" ino=1121 res=0 errno=0 [ 1962.246181][T24659] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4273'. [ 1962.519546][T24672] fuse: Bad value for 'fd' [ 1962.632843][ T5613] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1963.958318][T24690] fuse: fd is not a fuse device [ 1964.406258][T24690] fuse: fd is not a fuse device [ 1964.508499][T24699] kAFS: unable to lookup cell '' [ 1964.585007][T24701] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4289'. [ 1964.707050][T24709] fuse: fd is not a fuse device [ 1964.812925][T24715] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4293'. [ 1966.047963][T24733] fuse: fd is not a fuse device [ 1967.077941][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888054849000: rx timeout, send abort [ 1967.086558][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888054849000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1967.610933][T24751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1970.649416][T24794] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4318'. [ 1971.643611][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888061d73800: rx timeout, send abort [ 1971.652271][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888061d73800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1973.793925][ T30] audit: type=1400 audit(1785903624.389:6802): avc: denied { create } for pid=24857 comm="syz.1.4341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1973.895963][ T30] audit: type=1400 audit(1785903624.389:6803): avc: denied { bind } for pid=24857 comm="syz.1.4341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1973.933247][ T30] audit: type=1400 audit(1785903624.559:6804): avc: denied { create } for pid=24863 comm="syz.7.4340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1973.973040][ T30] audit: type=1400 audit(1785903624.579:6805): avc: denied { setopt } for pid=24863 comm="syz.7.4340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1974.031548][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888055c52800: rx timeout, send abort [ 1974.040047][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888055c52800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1974.414844][ T30] audit: type=1400 audit(1785903625.039:6806): avc: denied { write } for pid=24879 comm="syz.5.4346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1975.040746][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1975.224910][T24902] sit0: left promiscuous mode [ 1975.693504][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.754770][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.152368][T24919] 9p: Bad value for 'rfdno' [ 1976.254287][T24925] Cannot find del_set index 0 as target [ 1976.268977][ T30] audit: type=1400 audit(1785903626.889:6807): avc: denied { nlmsg_tty_audit } for pid=24924 comm="syz.1.4363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1976.303799][T24925] netlink: 'syz.7.4360': attribute type 10 has an invalid length. [ 1976.344324][T24925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1976.364579][T24925] team0: Port device bond0 added [ 1977.640086][T24958] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4372'. [ 1978.003810][T24949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1978.038921][T24949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1978.285311][T24974] fuse: Bad value for 'fd' [ 1979.027278][T24982] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4381'. [ 1979.956389][T25003] fuse: fd is not a fuse device [ 1980.166301][ T30] audit: type=1400 audit(1785903630.709:6808): avc: denied { read } for pid=25011 comm="syz.4.4393" name="/" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1980.191027][ T30] audit: type=1400 audit(1785903630.709:6809): avc: denied { read open } for pid=25011 comm="syz.4.4393" path="/" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1980.214344][ T30] audit: type=1400 audit(1785903630.729:6810): avc: denied { read } for pid=25011 comm="syz.4.4393" name="/" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1980.319382][T25019] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1980.387505][T25021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4398'. [ 1983.158469][T25083] fuse: fd is not a fuse device [ 1983.167805][ T30] audit: type=1400 audit(1785903633.779:6811): avc: denied { mounton } for pid=25082 comm="syz.7.4418" path="/227/file0" dev="tmpfs" ino=1223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1985.852098][T25123] No such timeout policy "syz1" [ 1986.279054][ T30] audit: type=1400 audit(1785903636.899:6812): avc: denied { ioctl } for pid=25137 comm="syz.4.4438" path="socket:[127736]" dev="sockfs" ino=127736 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1986.280086][T25138] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4438'. [ 1986.558096][T25152] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4442'. [ 1986.810264][T25168] jffs2: notice: (25168) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1988.000710][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 1988.309921][T25204] bridge0: port 3(syz_tun) entered blocking state [ 1988.333167][T25204] bridge0: port 3(syz_tun) entered disabled state [ 1988.356828][T25204] syz_tun: entered allmulticast mode [ 1988.383614][T25204] syz_tun: entered promiscuous mode [ 1988.408568][T25204] bridge0: port 3(syz_tun) entered blocking state [ 1988.415214][T25204] bridge0: port 3(syz_tun) entered forwarding state [ 1990.369787][T25246] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1990.664189][ T30] audit: type=1400 audit(1785903641.239:6813): avc: denied { read write } for pid=25250 comm="syz.1.4481" name="loop0" dev="tmpfs" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1990.708218][T25255] block device autoloading is deprecated and will be removed. [ 1990.759922][ T30] audit: type=1400 audit(1785903641.239:6814): avc: denied { open } for pid=25250 comm="syz.1.4481" path="/362/loop0" dev="tmpfs" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1990.787790][T25255] loop0: detected capacity change from 0 to 2048 [ 1990.833399][ T30] audit: type=1400 audit(1785903641.369:6815): avc: denied { ioctl } for pid=25250 comm="syz.1.4481" path="/362/loop0" dev="tmpfs" ino=1956 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1992.476187][T25285] bridge0: port 3(syz_tun) entered blocking state [ 1992.523309][T25285] bridge0: port 3(syz_tun) entered disabled state [ 1992.582157][T25285] syz_tun: entered allmulticast mode [ 1992.841966][T25285] syz_tun: entered promiscuous mode [ 1993.050311][T25297] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4494'. [ 1993.789045][T25315] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4501'. [ 1995.584100][T25350] netlink: 'syz.4.4517': attribute type 39 has an invalid length. [ 1995.675178][T25354] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1995.888690][T25356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1996.025160][T25358] bond1: (slave geneve2): making interface the new active one [ 1996.141719][T25358] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1996.181100][ T5613] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1996.201181][T25365] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1996.477038][T25376] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4524'. [ 1998.122163][ T30] audit: type=1400 audit(1785903648.749:6816): avc: denied { read } for pid=25415 comm="syz.6.4539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1998.281584][T25419] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4538'. [ 1999.683571][T25449] ip_tables: iptables: counters copy to user failed while replacing table [ 2001.117458][T25470] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4557'. [ 2001.649610][T25480] netlink: 'syz.7.4563': attribute type 39 has an invalid length. [ 2001.989663][T25489] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2002.632111][T25522] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4576'. [ 2003.100365][T25532] jffs2: notice: (25532) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2003.318236][T25537] overlayfs: failed to clone upperpath [ 2003.329195][T25536] No such timeout policy "syz1" [ 2004.490756][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2004.729285][T25563] ip_tables: iptables: counters copy to user failed while replacing table [ 2004.822269][ T30] audit: type=1400 audit(1785903655.429:6817): avc: denied { write } for pid=25565 comm="syz.1.4596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2004.886698][ T30] audit: type=1400 audit(1785903655.489:6818): avc: denied { accept } for pid=25565 comm="syz.1.4596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2005.102211][T25577] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4599'. [ 2005.658110][T25592] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 2006.211648][T25619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2006.669390][T25629] fuse: Bad value for 'fd' [ 2006.682841][T25626] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4621'. [ 2007.129341][T25645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2007.224015][T25656] bond1: (slave geneve2): making interface the new active one [ 2007.258803][T25656] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 2009.792733][T25755] jffs2: notice: (25755) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2012.415061][T25832] MTD: Couldn't look up './dev/mtdblock0': -2 [ 2013.361124][T25846] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 2013.854895][T25860] No source specified [ 2013.876424][T25862] ip_tables: iptables: counters copy to user failed while replacing table [ 2014.030641][ T5613] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2014.269588][T25872] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 2014.508147][T25879] ip_tables: iptables: counters copy to user failed while replacing table [ 2015.103448][ T30] audit: type=1400 audit(1785903665.729:6819): avc: denied { write } for pid=25900 comm="syz.4.4729" path="socket:[129412]" dev="sockfs" ino=129412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2016.638142][T25937] fuse: Bad value for 'fd' [ 2016.794461][T25945] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4749'. [ 2017.925965][T25971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4758'. [ 2018.499482][T25976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2018.508782][T25976] IPv6: NLM_F_CREATE should be set when creating new route [ 2018.516107][T25976] IPv6: NLM_F_CREATE should be set when creating new route [ 2018.523340][T25976] IPv6: NLM_F_CREATE should be set when creating new route [ 2018.665112][T25976] sit0: entered allmulticast mode [ 2019.376569][T25986] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4763'. [ 2019.879655][T26007] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4773'. [ 2019.896745][ T30] audit: type=1400 audit(1785903670.519:6820): avc: denied { setopt } for pid=26011 comm="syz.4.4775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2021.281192][T26043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2021.373124][T26044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2021.556074][T26045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2023.382585][T26085] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4802'. [ 2023.391791][T26085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2023.947702][T26085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2026.402650][T26155] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4824'. [ 2027.119513][T26165] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4827'. [ 2027.533204][T26179] ip_tables: iptables: counters copy to user failed while replacing table [ 2031.968127][ T6237] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2032.261851][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2032.275977][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2032.284132][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2032.303694][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2032.312281][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2032.573441][T24975] bridge0: port 3(syz_tun) entered disabled state [ 2032.594064][T26265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4862'. [ 2032.631485][T24975] syz_tun (unregistering): left allmulticast mode [ 2032.638031][T24975] syz_tun (unregistering): left promiscuous mode [ 2032.644772][T24975] bridge0: port 3(syz_tun) entered disabled state [ 2034.035124][T26287] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4865'. [ 2034.064119][ T6237] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2034.223484][ T6237] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2034.346409][ T6237] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2034.430736][T26249] wlan0 speed is unknown, defaulting to 1000 [ 2034.547938][ T6237] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2034.560869][ T5613] Bluetooth: hci3: command tx timeout [ 2035.467680][T26316] ip_tables: iptables: counters copy to user failed while replacing table [ 2035.680671][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2035.745755][ T6237] bridge_slave_1: left allmulticast mode [ 2035.780742][ T6237] bridge_slave_1: left promiscuous mode [ 2035.799536][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 2035.835833][ T6237] bridge_slave_0: left allmulticast mode [ 2035.859672][ T6237] bridge_slave_0: left promiscuous mode [ 2035.877725][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 2036.008657][T26336] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4879'. [ 2036.170022][T26343] ip_tables: iptables: counters copy to user failed while replacing table [ 2036.221153][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888055641400: rx timeout, send abort [ 2036.229913][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888055641400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 2036.334377][ T30] audit: type=1400 audit(1785903686.959:6821): avc: denied { write } for pid=26323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2036.481703][ T6237] bond1 (unregistering): (slave geneve2): Releasing active interface [ 2036.502210][ T30] audit: type=1400 audit(1785903687.129:6822): avc: denied { write } for pid=26350 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2036.640758][ T5613] Bluetooth: hci3: command tx timeout [ 2036.725476][ T6237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2036.738925][ T6237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2036.752291][ T6237] bond0 (unregistering): Released all slaves [ 2036.765292][ T6237] bond1 (unregistering): Released all slaves [ 2036.785167][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2037.045127][ T5613] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2037.045530][T26370] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2037.148209][T26249] bridge0: port 1(bridge_slave_0) entered blocking state [ 2037.160202][T26249] bridge0: port 1(bridge_slave_0) entered disabled state [ 2037.167811][T26249] bridge_slave_0: entered allmulticast mode [ 2037.201062][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.207453][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.238288][T26249] bridge_slave_0: entered promiscuous mode [ 2037.295045][T26249] bridge0: port 2(bridge_slave_1) entered blocking state [ 2037.309479][T26249] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.324953][T26249] bridge_slave_1: entered allmulticast mode [ 2037.336440][T26249] bridge_slave_1: entered promiscuous mode [ 2037.698946][T26249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2037.735128][T26249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2038.034865][T26391] netlink: 'syz.5.4892': attribute type 39 has an invalid length. [ 2038.045981][T26249] team0: Port device team_slave_0 added [ 2038.112784][ T6237] hsr_slave_0: left promiscuous mode [ 2038.133184][ T6237] hsr_slave_1: left promiscuous mode [ 2038.150038][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2038.176514][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2038.214059][ T6237] veth1_macvtap: left promiscuous mode [ 2038.219603][ T6237] veth0_macvtap: left promiscuous mode [ 2038.225347][ T6237] veth1_vlan: left promiscuous mode [ 2038.231317][ T6237] veth0_vlan: left promiscuous mode [ 2038.279749][ T30] audit: type=1400 audit(1785903688.899:6823): avc: denied { write } for pid=26368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2038.452156][ T30] audit: type=1400 audit(1785903689.079:6824): avc: denied { write } for pid=26410 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2038.498676][T26411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4894'. [ 2038.702556][ T6237] team0 (unregistering): Port device team_slave_1 removed [ 2038.720530][ T5613] Bluetooth: hci3: command tx timeout [ 2038.727109][ T6237] team0 (unregistering): Port device team_slave_0 removed [ 2039.197529][T26249] team0: Port device team_slave_1 added [ 2039.223557][ T5274] 8021q: adding VLAN 0 to HW filter on device eth14 [ 2039.397400][T26249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2039.554203][T26249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2039.584429][T26249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2039.596857][T26249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2039.608880][T26249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2039.648271][T26249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2039.744916][ T5613] Bluetooth: hci5: unexpected Set CIG Parameters response data [ 2039.831093][T26249] hsr_slave_0: entered promiscuous mode [ 2039.849353][T26249] hsr_slave_1: entered promiscuous mode [ 2039.867052][T26249] debugfs: 'hsr0' already exists in 'hsr' [ 2039.880341][T26249] Cannot create hsr debugfs directory [ 2040.380944][ T30] audit: type=1400 audit(1785903690.999:6825): avc: denied { write } for pid=26436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2040.590340][ T30] audit: type=1400 audit(1785903691.209:6826): avc: denied { write } for pid=26457 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2040.820641][ T5613] Bluetooth: hci3: command tx timeout [ 2041.992274][ T30] audit: type=1400 audit(1785903692.609:6827): avc: denied { lock } for pid=26467 comm="syz.5.4909" path="socket:[130413]" dev="sockfs" ino=130413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2042.490537][ T30] audit: type=1400 audit(1785903692.609:6828): avc: denied { bind } for pid=26467 comm="syz.5.4909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2042.510291][ T30] audit: type=1400 audit(1785903693.069:6829): avc: denied { accept } for pid=26467 comm="syz.5.4909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2042.717858][T26249] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2042.790263][T26249] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2042.880733][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2042.974741][T26249] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2042.981497][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888054862000: rx timeout, send abort [ 2042.990114][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888054862000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 2043.365577][T26249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2043.400836][T26249] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2043.431956][T26249] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2043.448871][T26249] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2043.473396][T26249] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2043.523567][ T30] audit: type=1400 audit(1785903694.149:6830): avc: denied { write } for pid=26479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2043.727760][T26249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2043.758333][T26249] 8021q: adding VLAN 0 to HW filter on device team0 [ 2043.772753][ T5613] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2043.788887][ T5613] Bluetooth: hci5: Injecting HCI hardware error event [ 2043.798264][ T5626] Bluetooth: hci5: hardware error 0x00 [ 2043.816322][ T7680] bridge0: port 1(bridge_slave_0) entered blocking state [ 2043.823475][ T7680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2043.876146][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state [ 2043.883331][ T6237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2043.897251][ T30] audit: type=1400 audit(1785903694.519:6831): avc: denied { write } for pid=26525 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2044.064687][ T30] audit: type=1400 audit(1785903694.689:6832): avc: denied { map } for pid=26526 comm="syz.5.4922" path="socket:[130614]" dev="sockfs" ino=130614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 2044.228392][T26543] netlink: 'syz.5.4925': attribute type 39 has an invalid length. [ 2045.586868][ T30] audit: type=1400 audit(1785903696.209:6833): avc: denied { write } for pid=26537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2045.649044][T26574] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 2045.687353][ T5968] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2045.725463][ T5968] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2045.726898][T11830] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2045.808001][ T30] audit: type=1400 audit(1785903696.429:6834): avc: denied { write } for pid=26576 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2045.936537][ T30] audit: type=1400 audit(1785903696.559:6835): avc: denied { listen } for pid=26584 comm="syz.4.4937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2045.957048][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2045.969143][ T5626] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2046.243782][T17499] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2046.338797][T17499] IPVS: starting estimator thread 0... [ 2046.365486][T26607] overlayfs: failed to resolve './file1': -2 [ 2046.426492][T26249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2046.449963][ T5626] Bluetooth: hci0: unexpected subevent 0x05 length: 10 < 12 [ 2046.473133][T26608] IPVS: using max 41 ests per chain, 98400 per kthread [ 2047.310461][ T30] audit: type=1400 audit(1785903697.929:6836): avc: denied { write } for pid=26586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2047.584252][T26635] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4943'. [ 2047.729129][T26249] veth0_vlan: entered promiscuous mode [ 2048.199850][T26249] veth1_vlan: entered promiscuous mode [ 2048.253964][ T30] audit: type=1400 audit(1785903698.879:6837): avc: denied { write } for pid=26639 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2048.301843][T26249] veth0_macvtap: entered promiscuous mode [ 2048.337336][T26249] veth1_macvtap: entered promiscuous mode [ 2048.396248][T26249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2048.519793][T26249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2048.580877][ T181] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.589613][ T181] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.667528][ T1164] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.726121][ T1164] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.858404][ T6237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2048.896643][ T6237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2048.920747][T26658] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4947'. [ 2049.007692][ T181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2049.038914][ T181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2049.196948][ T30] audit: type=1400 audit(1785903699.819:6838): avc: denied { write } for pid=26643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2049.495766][ T30] audit: type=1400 audit(1785903700.119:6839): avc: denied { write } for pid=26669 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2049.680827][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2050.256353][T26687] No such timeout policy "syz1" [ 2051.211224][T25243] bridge0: port 3(syz_tun) entered disabled state [ 2051.235456][T25243] syz_tun (unregistering): left allmulticast mode [ 2051.242812][T25243] syz_tun (unregistering): left promiscuous mode [ 2051.249197][T25243] bridge0: port 3(syz_tun) entered disabled state [ 2051.439063][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2051.451295][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2051.459798][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2051.468003][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2051.475741][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2051.671100][T26703] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4958'. [ 2052.129390][ T181] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2052.528307][ T181] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2052.834895][ T181] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.079530][ T181] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.147037][T26696] wlan0 speed is unknown, defaulting to 1000 [ 2053.389743][T26716] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4960'. [ 2053.521454][ T5626] Bluetooth: hci1: command tx timeout [ 2053.767534][T26719] lo speed is unknown, defaulting to 1000 [ 2053.821036][ T181] bridge_slave_1: left allmulticast mode [ 2053.834333][ T181] bridge_slave_1: left promiscuous mode [ 2053.855733][ T181] bridge0: port 2(bridge_slave_1) entered disabled state [ 2053.903855][ T181] bridge_slave_0: left allmulticast mode [ 2053.929587][ T181] bridge_slave_0: left promiscuous mode [ 2053.955955][ T181] bridge0: port 1(bridge_slave_0) entered disabled state [ 2055.084247][ T181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2055.119602][ T181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2055.166078][ T181] bond0 (unregistering): Released all slaves [ 2055.203407][ T30] audit: type=1400 audit(1785903705.809:6840): avc: denied { write } for pid=26725 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2055.284257][ T181] team0: Port device bond1 removed [ 2055.291467][ T181] bond1 (unregistering): Released all slaves [ 2055.346831][T26719] lo speed is unknown, defaulting to 1000 [ 2055.443349][T26719] lo speed is unknown, defaulting to 1000 [ 2055.468154][T26719] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 2055.589437][ T30] audit: type=1400 audit(1785903706.199:6841): avc: denied { write } for pid=26741 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2055.594628][T26719] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 2055.624473][ T5626] Bluetooth: hci1: command tx timeout [ 2055.646612][T26719] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 2055.692447][T26719] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 2055.760094][ T181] rxrpc: Leaked peer 1cf {1} 127.0.0.1:7003 [ 2055.790920][ T181] ================================================================== [ 2055.791037][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2055.798987][ T181] BUG: KASAN: slab-use-after-free in rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 2055.799020][ T181] Read of size 8 at addr ffff888027a5a020 by task kworker/u8:6/181 [ 2055.799037][ T181] [ 2055.799052][ T181] CPU: 1 UID: 0 PID: 181 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 2055.799081][ T181] Tainted: [L]=SOFTLOCKUP [ 2055.799089][ T181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2055.799105][ T181] Workqueue: netns cleanup_net [ 2055.799135][ T181] Call Trace: [ 2055.799142][ T181] [ 2055.799149][ T181] dump_stack_lvl+0x100/0x190 [ 2055.799175][ T181] print_report+0x13d/0x4b0 [ 2055.799204][ T181] ? __virt_addr_valid+0x239/0x430 [ 2055.799232][ T181] ? rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 2055.799257][ T181] kasan_report+0xdf/0x1c0 [ 2055.799285][ T181] ? rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 2055.799314][ T181] rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 2055.799343][ T181] rxrpc_exit_net+0x83/0xc0 [ 2055.799363][ T181] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 2055.799381][ T181] ops_undo_list+0x2ee/0xab0 [ 2055.799410][ T181] ? __pfx_ops_undo_list+0x10/0x10 [ 2055.799436][ T181] ? cleanup_net+0x332/0x920 [ 2055.799463][ T181] ? idr_destroy+0x62/0x2e0 [ 2055.799485][ T181] cleanup_net+0x499/0x920 [ 2055.799515][ T181] ? __pfx_cleanup_net+0x10/0x10 [ 2055.799545][ T181] ? rcu_is_watching+0x12/0xc0 [ 2055.799578][ T181] process_one_work+0xa23/0x1940 [ 2055.799606][ T181] ? __pfx_process_one_work+0x10/0x10 [ 2055.799631][ T181] ? __pfx_cleanup_net+0x10/0x10 [ 2055.799661][ T181] worker_thread+0x5ef/0xe50 [ 2055.799686][ T181] ? __pfx_worker_thread+0x10/0x10 [ 2055.799714][ T181] ? kthread+0x13a/0x450 [ 2055.799732][ T181] ? __pfx_worker_thread+0x10/0x10 [ 2055.799753][ T181] kthread+0x370/0x450 [ 2055.799771][ T181] ? __pfx_kthread+0x10/0x10 [ 2055.799791][ T181] ret_from_fork+0x72b/0xd50 [ 2055.799818][ T181] ? __pfx_ret_from_fork+0x10/0x10 [ 2055.799846][ T181] ? __switch_to+0x800/0x10f0 [ 2055.799866][ T181] ? __pfx_kthread+0x10/0x10 [ 2055.799886][ T181] ret_from_fork_asm+0x1a/0x30 [ 2055.799922][ T181] [ 2055.799929][ T181] [ 2056.009527][ T181] Allocated by task 22636: [ 2056.013936][ T181] kasan_save_stack+0x30/0x50 [ 2056.018605][ T181] kasan_save_track+0x14/0x30 [ 2056.023269][ T181] __kasan_kmalloc+0xaa/0xb0 [ 2056.027844][ T181] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 2056.033210][ T181] rxrpc_alloc_peer+0xa7/0x400 [ 2056.037965][ T181] rxrpc_lookup_peer+0x168/0x680 [ 2056.042891][ T181] rxrpc_kernel_lookup_peer+0xa8/0xe0 [ 2056.048248][ T181] afs_merge_fs_addr4+0x1cd/0x4c0 [ 2056.053261][ T181] afs_parse_text_addrs+0x655/0xa10 [ 2056.058447][ T181] afs_lookup_cell+0xbb6/0x1940 [ 2056.063287][ T181] afs_proc_cells_write+0x2a3/0x3a0 [ 2056.068474][ T181] proc_simple_write+0x10e/0x1a0 [ 2056.073399][ T181] proc_reg_write+0x240/0x330 [ 2056.078062][ T181] vfs_write+0x2aa/0x1050 [ 2056.082383][ T181] ksys_write+0x12a/0x250 [ 2056.086691][ T181] do_syscall_64+0x115/0x870 [ 2056.091269][ T181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2056.097146][ T181] [ 2056.099449][ T181] Freed by task 3: [ 2056.103147][ T181] kasan_save_stack+0x30/0x50 [ 2056.107816][ T181] kasan_save_track+0x14/0x30 [ 2056.112477][ T181] kasan_save_free_info+0x3b/0x70 [ 2056.117492][ T181] __kasan_slab_free+0x5f/0x80 [ 2056.122242][ T181] __rcu_free_sheaf_prepare+0x5d/0x2f0 [ 2056.127690][ T181] rcu_free_sheaf+0x1a/0xe0 [ 2056.132176][ T181] rcu_core+0x5a2/0x10d0 [ 2056.136410][ T181] handle_softirqs+0x1ea/0x9b0 [ 2056.141159][ T181] __irq_exit_rcu+0x162/0x210 [ 2056.145823][ T181] irq_exit_rcu+0x9/0x30 [ 2056.150052][ T181] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 2056.155672][ T181] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2056.161635][ T181] [ 2056.163937][ T181] The buggy address belongs to the object at ffff888027a5a000 [ 2056.163937][ T181] which belongs to the cache kmalloc-512 of size 512 [ 2056.177967][ T181] The buggy address is located 32 bytes inside of [ 2056.177967][ T181] freed 512-byte region [ffff888027a5a000, ffff888027a5a200) [ 2056.191657][ T181] [ 2056.193966][ T181] The buggy address belongs to the physical page: [ 2056.200365][ T181] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027a5ac00 pfn:0x27a58 [ 2056.210410][ T181] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2056.218887][ T181] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 2056.227366][ T181] page_type: f5(slab) [ 2056.231330][ T181] raw: 00fff00000000240 ffff88813fe23c80 ffffea0000b10410 ffffea0000b40310 [ 2056.239905][ T181] raw: ffff888027a5ac00 000000080010000f 00000000f5000000 0000000000000000 [ 2056.248473][ T181] head: 00fff00000000240 ffff88813fe23c80 ffffea0000b10410 ffffea0000b40310 [ 2056.257125][ T181] head: ffff888027a5ac00 000000080010000f 00000000f5000000 0000000000000000 [ 2056.265775][ T181] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 2056.274426][ T181] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 2056.283074][ T181] page dumped because: kasan: bad access detected [ 2056.289471][ T181] page_owner tracks the page as allocated [ 2056.295161][ T181] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5014089488, free_ts 5013023549 [ 2056.313984][ T181] post_alloc_hook+0xfd/0x120 [ 2056.318661][ T181] get_page_from_freelist+0xf48/0x3530 [ 2056.324106][ T181] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 2056.329986][ T181] new_slab+0xa2/0x640 [ 2056.334035][ T181] refill_objects+0xe3/0x410 [ 2056.338608][ T181] __pcs_replace_empty_main+0x376/0x680 [ 2056.344146][ T181] __kmalloc_cache_noprof+0x479/0x6c0 [ 2056.349509][ T181] device_add+0xd3f/0x1970 [ 2056.353915][ T181] __add_disk+0x518/0xe40 [ 2056.358231][ T181] add_disk_fwnode+0x118/0x480 [ 2056.362978][ T181] nbd_dev_add+0x77a/0xb10 [ 2056.367383][ T181] nbd_init+0x291/0x2b0 [ 2056.371527][ T181] do_one_initcall+0x11d/0x700 [ 2056.376281][ T181] kernel_init_freeable+0x6ea/0x7b0 [ 2056.381468][ T181] kernel_init+0x1f/0x1e0 [ 2056.385790][ T181] ret_from_fork+0x72b/0xd50 [ 2056.390369][ T181] page last free pid 1 tgid 1 stack trace: [ 2056.396151][ T181] __free_frozen_pages+0x79f/0x1090 [ 2056.401340][ T181] stack_depot_save_flags+0x435/0x9d0 [ 2056.406702][ T181] kasan_save_stack+0x3f/0x50 [ 2056.411365][ T181] kasan_save_track+0x14/0x30 [ 2056.416031][ T181] __kasan_slab_alloc+0x89/0x90 [ 2056.420868][ T181] kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 2056.426744][ T181] blk_alloc_queue+0x31/0x790 [ 2056.431412][ T181] blk_mq_alloc_queue+0x174/0x290 [ 2056.436418][ T181] __blk_mq_alloc_disk+0x29/0x120 [ 2056.441427][ T181] nbd_dev_add+0x492/0xb10 [ 2056.445833][ T181] nbd_init+0x291/0x2b0 [ 2056.449979][ T181] do_one_initcall+0x11d/0x700 [ 2056.454732][ T181] kernel_init_freeable+0x6ea/0x7b0 [ 2056.459921][ T181] kernel_init+0x1f/0x1e0 [ 2056.464242][ T181] ret_from_fork+0x72b/0xd50 [ 2056.468820][ T181] ret_from_fork_asm+0x1a/0x30 [ 2056.473577][ T181] [ 2056.475881][ T181] Memory state around the buggy address: [ 2056.481500][ T181] ffff888027a59f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2056.489545][ T181] ffff888027a59f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2056.497587][ T181] >ffff888027a5a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2056.505626][ T181] ^ [ 2056.510719][ T181] ffff888027a5a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2056.518769][ T181] ffff888027a5a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2056.526805][ T181] ================================================================== [ 2056.552663][ T181] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2056.559873][ T181] CPU: 0 UID: 0 PID: 181 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 2056.570793][ T181] Tainted: [L]=SOFTLOCKUP [ 2056.575095][ T181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2056.585137][ T181] Workqueue: netns cleanup_net [ 2056.589899][ T181] Call Trace: [ 2056.593164][ T181] [ 2056.596076][ T181] dump_stack_lvl+0x100/0x190 [ 2056.600746][ T181] vpanic+0x552/0x970 [ 2056.604712][ T181] ? __pfx_vpanic+0x10/0x10 [ 2056.609197][ T181] ? mark_held_locks+0x40/0x70 [ 2056.613951][ T181] ? rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 2056.619576][ T181] panic+0xd1/0xe0 [ 2056.623281][ T181] ? __pfx_panic+0x10/0x10 [ 2056.627687][ T181] ? rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 2056.633310][ T181] ? preempt_schedule_common+0x42/0xc0 [ 2056.638759][ T181] ? check_panic_on_warn+0x1f/0x90 [ 2056.643855][ T181] check_panic_on_warn.cold+0x19/0x34 [ 2056.649214][ T181] end_report.part.0+0x3a/0x90 [ 2056.653974][ T181] kasan_report.cold+0xe/0x18 [ 2056.658644][ T181] ? rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 2056.664280][ T181] rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 2056.669731][ T181] rxrpc_exit_net+0x83/0xc0 [ 2056.674219][ T181] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 2056.679400][ T181] ops_undo_list+0x2ee/0xab0 [ 2056.683983][ T181] ? __pfx_ops_undo_list+0x10/0x10 [ 2056.689083][ T181] ? cleanup_net+0x332/0x920 [ 2056.693667][ T181] ? idr_destroy+0x62/0x2e0 [ 2056.698156][ T181] cleanup_net+0x499/0x920 [ 2056.702566][ T181] ? __pfx_cleanup_net+0x10/0x10 [ 2056.707498][ T181] ? rcu_is_watching+0x12/0xc0 [ 2056.712258][ T181] process_one_work+0xa23/0x1940 [ 2056.717189][ T181] ? __pfx_process_one_work+0x10/0x10 [ 2056.722552][ T181] ? __pfx_cleanup_net+0x10/0x10 [ 2056.727485][ T181] worker_thread+0x5ef/0xe50 [ 2056.732065][ T181] ? __pfx_worker_thread+0x10/0x10 [ 2056.737160][ T181] ? kthread+0x13a/0x450 [ 2056.741384][ T181] ? __pfx_worker_thread+0x10/0x10 [ 2056.746481][ T181] kthread+0x370/0x450 [ 2056.750537][ T181] ? __pfx_kthread+0x10/0x10 [ 2056.755117][ T181] ret_from_fork+0x72b/0xd50 [ 2056.759697][ T181] ? __pfx_ret_from_fork+0x10/0x10 [ 2056.764798][ T181] ? __switch_to+0x800/0x10f0 [ 2056.769462][ T181] ? __pfx_kthread+0x10/0x10 [ 2056.774037][ T181] ret_from_fork_asm+0x1a/0x30 [ 2056.778798][ T181] [ 2056.782106][ T181] Kernel Offset: disabled [ 2056.786430][ T181] Rebooting in 86400 seconds..